2 * u_ether.c -- Ethernet-over-USB link layer utilities for Gadget stack
4 * Copyright (C) 2003-2005,2008 David Brownell
5 * Copyright (C) 2003-2004 Robert Schwebel, Benedikt Spranger
6 * Copyright (C) 2008 Nokia Corporation
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
23 /* #define VERBOSE_DEBUG */
25 #include <linux/kernel.h>
26 #include <linux/utsname.h>
27 #include <linux/device.h>
28 #include <linux/ctype.h>
29 #include <linux/etherdevice.h>
30 #include <linux/ethtool.h>
36 * This component encapsulates the Ethernet link glue needed to provide
37 * one (!) network link through the USB gadget stack, normally "usb0".
39 * The control and data models are handled by the function driver which
40 * connects to this code; such as CDC Ethernet, "CDC Subset", or RNDIS.
41 * That includes all descriptor and endpoint management.
43 * Link level addressing is handled by this component using module
44 * parameters; if no such parameters are provided, random link level
45 * addresses are used. Each end of the link uses one address. The
46 * host end address is exported in various ways, and is often recorded
47 * in configuration databases.
49 * The driver which assembles each configuration using such a link is
50 * responsible for ensuring that each configuration includes at most one
51 * instance of is network link. (The network layer provides ways for
52 * this single "physical" link to be used by multiple virtual links.)
55 #define UETH__VERSION "29-May-2008"
58 /* lock is held while accessing port_usb
59 * or updating its backlink port_usb->ioport
62 struct gether *port_usb;
64 struct net_device *net;
65 struct usb_gadget *gadget;
67 spinlock_t req_lock; /* guard {rx,tx}_reqs */
68 struct list_head tx_reqs, rx_reqs;
72 struct sk_buff *(*wrap)(struct sk_buff *skb);
73 int (*unwrap)(struct sk_buff *skb);
75 struct work_struct work;
78 #define WORK_RX_MEMORY 0
81 u8 host_mac[ETH_ALEN];
84 /*-------------------------------------------------------------------------*/
86 #define RX_EXTRA 20 /* bytes guarding against rx overflows */
88 #define DEFAULT_QLEN 2 /* double buffering by default */
91 #ifdef CONFIG_USB_GADGET_DUALSPEED
93 static unsigned qmult = 5;
94 module_param(qmult, uint, S_IRUGO|S_IWUSR);
95 MODULE_PARM_DESC(qmult, "queue length multiplier at high speed");
97 #else /* full speed (low speed doesn't do bulk) */
101 /* for dual-speed hardware, use deeper queues at highspeed */
102 static inline int qlen(struct usb_gadget *gadget)
104 if (gadget_is_dualspeed(gadget) && gadget->speed == USB_SPEED_HIGH)
105 return qmult * DEFAULT_QLEN;
110 /*-------------------------------------------------------------------------*/
112 /* REVISIT there must be a better way than having two sets
120 #define xprintk(d, level, fmt, args...) \
121 printk(level "%s: " fmt , (d)->net->name , ## args)
125 #define DBG(dev, fmt, args...) \
126 xprintk(dev , KERN_DEBUG , fmt , ## args)
128 #define DBG(dev, fmt, args...) \
135 #define VDBG(dev, fmt, args...) \
139 #define ERROR(dev, fmt, args...) \
140 xprintk(dev , KERN_ERR , fmt , ## args)
141 #define ETH_INFO(dev, fmt, args...) \
142 xprintk(dev , KERN_INFO , fmt , ## args)
144 /*-------------------------------------------------------------------------*/
146 /* NETWORK DRIVER HOOKUP (to the layer above this driver) */
148 static int eth_change_mtu(struct net_device *net, int new_mtu)
150 struct eth_dev *dev = netdev_priv(net);
154 /* don't change MTU on "live" link (peer won't know) */
155 spin_lock_irqsave(&dev->lock, flags);
158 else if (new_mtu <= ETH_HLEN || new_mtu > ETH_FRAME_LEN)
162 spin_unlock_irqrestore(&dev->lock, flags);
167 static void eth_get_drvinfo(struct net_device *net, struct ethtool_drvinfo *p)
169 struct eth_dev *dev = netdev_priv(net);
171 strlcpy(p->driver, "g_ether", sizeof p->driver);
172 strlcpy(p->version, UETH__VERSION, sizeof p->version);
173 strlcpy(p->fw_version, dev->gadget->name, sizeof p->fw_version);
174 strlcpy(p->bus_info, dev_name(&dev->gadget->dev), sizeof p->bus_info);
177 /* REVISIT can also support:
178 * - WOL (by tracking suspends and issuing remote wakeup)
179 * - msglevel (implies updated messaging)
180 * - ... probably more ethtool ops
183 static struct ethtool_ops ops = {
184 .get_drvinfo = eth_get_drvinfo,
185 .get_link = ethtool_op_get_link,
188 static void defer_kevent(struct eth_dev *dev, int flag)
190 if (test_and_set_bit(flag, &dev->todo))
192 if (!schedule_work(&dev->work))
193 ERROR(dev, "kevent %d may have been dropped\n", flag);
195 DBG(dev, "kevent %d scheduled\n", flag);
198 static void rx_complete(struct usb_ep *ep, struct usb_request *req);
201 rx_submit(struct eth_dev *dev, struct usb_request *req, gfp_t gfp_flags)
204 int retval = -ENOMEM;
209 spin_lock_irqsave(&dev->lock, flags);
211 out = dev->port_usb->out_ep;
214 spin_unlock_irqrestore(&dev->lock, flags);
220 /* Padding up to RX_EXTRA handles minor disagreements with host.
221 * Normally we use the USB "terminate on short read" convention;
222 * so allow up to (N*maxpacket), since that memory is normally
223 * already allocated. Some hardware doesn't deal well with short
224 * reads (e.g. DMA must be N*maxpacket), so for now don't trim a
225 * byte off the end (to force hardware errors on overflow).
227 * RNDIS uses internal framing, and explicitly allows senders to
228 * pad to end-of-packet. That's potentially nice for speed, but
229 * means receivers can't recover lost synch on their own (because
230 * new packets don't only start after a short RX).
232 size += sizeof(struct ethhdr) + dev->net->mtu + RX_EXTRA;
233 size += dev->port_usb->header_len;
234 size += out->maxpacket - 1;
235 size -= size % out->maxpacket;
237 skb = alloc_skb(size + NET_IP_ALIGN, gfp_flags);
239 DBG(dev, "no rx skb\n");
243 /* Some platforms perform better when IP packets are aligned,
244 * but on at least one, checksumming fails otherwise. Note:
245 * RNDIS headers involve variable numbers of LE32 values.
247 skb_reserve(skb, NET_IP_ALIGN);
249 req->buf = skb->data;
251 req->complete = rx_complete;
254 retval = usb_ep_queue(out, req, gfp_flags);
255 if (retval == -ENOMEM)
257 defer_kevent(dev, WORK_RX_MEMORY);
259 DBG(dev, "rx submit --> %d\n", retval);
261 dev_kfree_skb_any(skb);
262 spin_lock_irqsave(&dev->req_lock, flags);
263 list_add(&req->list, &dev->rx_reqs);
264 spin_unlock_irqrestore(&dev->req_lock, flags);
269 static void rx_complete(struct usb_ep *ep, struct usb_request *req)
271 struct sk_buff *skb = req->context;
272 struct eth_dev *dev = ep->driver_data;
273 int status = req->status;
277 /* normal completion */
279 skb_put(skb, req->actual);
281 status = dev->unwrap(skb);
283 || ETH_HLEN > skb->len
284 || skb->len > ETH_FRAME_LEN) {
285 dev->net->stats.rx_errors++;
286 dev->net->stats.rx_length_errors++;
287 DBG(dev, "rx length %d\n", skb->len);
291 skb->protocol = eth_type_trans(skb, dev->net);
292 dev->net->stats.rx_packets++;
293 dev->net->stats.rx_bytes += skb->len;
295 /* no buffer copies needed, unless hardware can't
298 status = netif_rx(skb);
302 /* software-driven interface shutdown */
303 case -ECONNRESET: /* unlink */
304 case -ESHUTDOWN: /* disconnect etc */
305 VDBG(dev, "rx shutdown, code %d\n", status);
308 /* for hardware automagic (such as pxa) */
309 case -ECONNABORTED: /* endpoint reset */
310 DBG(dev, "rx %s reset\n", ep->name);
311 defer_kevent(dev, WORK_RX_MEMORY);
313 dev_kfree_skb_any(skb);
318 dev->net->stats.rx_over_errors++;
322 dev->net->stats.rx_errors++;
323 DBG(dev, "rx status %d\n", status);
328 dev_kfree_skb_any(skb);
329 if (!netif_running(dev->net)) {
331 spin_lock(&dev->req_lock);
332 list_add(&req->list, &dev->rx_reqs);
333 spin_unlock(&dev->req_lock);
337 rx_submit(dev, req, GFP_ATOMIC);
340 static int prealloc(struct list_head *list, struct usb_ep *ep, unsigned n)
343 struct usb_request *req;
348 /* queue/recycle up to N requests */
350 list_for_each_entry(req, list, list) {
355 req = usb_ep_alloc_request(ep, GFP_ATOMIC);
357 return list_empty(list) ? -ENOMEM : 0;
358 list_add(&req->list, list);
365 struct list_head *next;
367 next = req->list.next;
368 list_del(&req->list);
369 usb_ep_free_request(ep, req);
374 req = container_of(next, struct usb_request, list);
379 static int alloc_requests(struct eth_dev *dev, struct gether *link, unsigned n)
383 spin_lock(&dev->req_lock);
384 status = prealloc(&dev->tx_reqs, link->in_ep, n);
387 status = prealloc(&dev->rx_reqs, link->out_ep, n);
392 DBG(dev, "can't alloc requests\n");
394 spin_unlock(&dev->req_lock);
398 static void rx_fill(struct eth_dev *dev, gfp_t gfp_flags)
400 struct usb_request *req;
403 /* fill unused rxq slots with some skb */
404 spin_lock_irqsave(&dev->req_lock, flags);
405 while (!list_empty(&dev->rx_reqs)) {
406 req = container_of(dev->rx_reqs.next,
407 struct usb_request, list);
408 list_del_init(&req->list);
409 spin_unlock_irqrestore(&dev->req_lock, flags);
411 if (rx_submit(dev, req, gfp_flags) < 0) {
412 defer_kevent(dev, WORK_RX_MEMORY);
416 spin_lock_irqsave(&dev->req_lock, flags);
418 spin_unlock_irqrestore(&dev->req_lock, flags);
421 static void eth_work(struct work_struct *work)
423 struct eth_dev *dev = container_of(work, struct eth_dev, work);
425 if (test_and_clear_bit(WORK_RX_MEMORY, &dev->todo)) {
426 if (netif_running(dev->net))
427 rx_fill(dev, GFP_KERNEL);
431 DBG(dev, "work done, flags = 0x%lx\n", dev->todo);
434 static void tx_complete(struct usb_ep *ep, struct usb_request *req)
436 struct sk_buff *skb = req->context;
437 struct eth_dev *dev = ep->driver_data;
439 switch (req->status) {
441 dev->net->stats.tx_errors++;
442 VDBG(dev, "tx err %d\n", req->status);
444 case -ECONNRESET: /* unlink */
445 case -ESHUTDOWN: /* disconnect etc */
448 dev->net->stats.tx_bytes += skb->len;
450 dev->net->stats.tx_packets++;
452 spin_lock(&dev->req_lock);
453 list_add(&req->list, &dev->tx_reqs);
454 spin_unlock(&dev->req_lock);
455 dev_kfree_skb_any(skb);
457 atomic_dec(&dev->tx_qlen);
458 if (netif_carrier_ok(dev->net))
459 netif_wake_queue(dev->net);
462 static inline int is_promisc(u16 cdc_filter)
464 return cdc_filter & USB_CDC_PACKET_TYPE_PROMISCUOUS;
467 static int eth_start_xmit(struct sk_buff *skb, struct net_device *net)
469 struct eth_dev *dev = netdev_priv(net);
470 int length = skb->len;
472 struct usb_request *req = NULL;
477 spin_lock_irqsave(&dev->lock, flags);
479 in = dev->port_usb->in_ep;
480 cdc_filter = dev->port_usb->cdc_filter;
485 spin_unlock_irqrestore(&dev->lock, flags);
488 dev_kfree_skb_any(skb);
492 /* apply outgoing CDC or RNDIS filters */
493 if (!is_promisc(cdc_filter)) {
494 u8 *dest = skb->data;
496 if (is_multicast_ether_addr(dest)) {
499 /* ignores USB_CDC_PACKET_TYPE_MULTICAST and host
500 * SET_ETHERNET_MULTICAST_FILTERS requests
502 if (is_broadcast_ether_addr(dest))
503 type = USB_CDC_PACKET_TYPE_BROADCAST;
505 type = USB_CDC_PACKET_TYPE_ALL_MULTICAST;
506 if (!(cdc_filter & type)) {
507 dev_kfree_skb_any(skb);
511 /* ignores USB_CDC_PACKET_TYPE_DIRECTED */
514 spin_lock_irqsave(&dev->req_lock, flags);
516 * this freelist can be empty if an interrupt triggered disconnect()
517 * and reconfigured the gadget (shutting down this queue) after the
518 * network stack decided to xmit but before we got the spinlock.
520 if (list_empty(&dev->tx_reqs)) {
521 spin_unlock_irqrestore(&dev->req_lock, flags);
525 req = container_of(dev->tx_reqs.next, struct usb_request, list);
526 list_del(&req->list);
528 /* temporarily stop TX queue when the freelist empties */
529 if (list_empty(&dev->tx_reqs))
530 netif_stop_queue(net);
531 spin_unlock_irqrestore(&dev->req_lock, flags);
533 /* no buffer copies needed, unless the network stack did it
534 * or the hardware can't use skb buffers.
535 * or there's not enough space for extra headers we need
538 struct sk_buff *skb_new;
540 skb_new = dev->wrap(skb);
544 dev_kfree_skb_any(skb);
548 req->buf = skb->data;
550 req->complete = tx_complete;
552 /* use zlp framing on tx for strict CDC-Ether conformance,
553 * though any robust network rx path ignores extra padding.
554 * and some hardware doesn't like to write zlps.
557 if (!dev->zlp && (length % in->maxpacket) == 0)
560 req->length = length;
562 /* throttle highspeed IRQ rate back slightly */
563 if (gadget_is_dualspeed(dev->gadget))
564 req->no_interrupt = (dev->gadget->speed == USB_SPEED_HIGH)
565 ? ((atomic_read(&dev->tx_qlen) % qmult) != 0)
568 retval = usb_ep_queue(in, req, GFP_ATOMIC);
571 DBG(dev, "tx queue err %d\n", retval);
574 net->trans_start = jiffies;
575 atomic_inc(&dev->tx_qlen);
580 dev->net->stats.tx_dropped++;
581 dev_kfree_skb_any(skb);
582 spin_lock_irqsave(&dev->req_lock, flags);
583 if (list_empty(&dev->tx_reqs))
584 netif_start_queue(net);
585 list_add(&req->list, &dev->tx_reqs);
586 spin_unlock_irqrestore(&dev->req_lock, flags);
591 /*-------------------------------------------------------------------------*/
593 static void eth_start(struct eth_dev *dev, gfp_t gfp_flags)
595 DBG(dev, "%s\n", __func__);
597 /* fill the rx queue */
598 rx_fill(dev, gfp_flags);
600 /* and open the tx floodgates */
601 atomic_set(&dev->tx_qlen, 0);
602 netif_wake_queue(dev->net);
605 static int eth_open(struct net_device *net)
607 struct eth_dev *dev = netdev_priv(net);
610 DBG(dev, "%s\n", __func__);
611 if (netif_carrier_ok(dev->net))
612 eth_start(dev, GFP_KERNEL);
614 spin_lock_irq(&dev->lock);
615 link = dev->port_usb;
616 if (link && link->open)
618 spin_unlock_irq(&dev->lock);
623 static int eth_stop(struct net_device *net)
625 struct eth_dev *dev = netdev_priv(net);
628 VDBG(dev, "%s\n", __func__);
629 netif_stop_queue(net);
631 DBG(dev, "stop stats: rx/tx %ld/%ld, errs %ld/%ld\n",
632 dev->net->stats.rx_packets, dev->net->stats.tx_packets,
633 dev->net->stats.rx_errors, dev->net->stats.tx_errors
636 /* ensure there are no more active requests */
637 spin_lock_irqsave(&dev->lock, flags);
639 struct gether *link = dev->port_usb;
644 /* NOTE: we have no abort-queue primitive we could use
645 * to cancel all pending I/O. Instead, we disable then
646 * reenable the endpoints ... this idiom may leave toggle
647 * wrong, but that's a self-correcting error.
649 * REVISIT: we *COULD* just let the transfers complete at
650 * their own pace; the network stack can handle old packets.
651 * For the moment we leave this here, since it works.
653 usb_ep_disable(link->in_ep);
654 usb_ep_disable(link->out_ep);
655 if (netif_carrier_ok(net)) {
656 DBG(dev, "host still using in/out endpoints\n");
657 usb_ep_enable(link->in_ep, link->in);
658 usb_ep_enable(link->out_ep, link->out);
661 spin_unlock_irqrestore(&dev->lock, flags);
666 /*-------------------------------------------------------------------------*/
668 /* initial value, changed by "ifconfig usb0 hw ether xx:xx:xx:xx:xx:xx" */
669 static char *dev_addr;
670 module_param(dev_addr, charp, S_IRUGO);
671 MODULE_PARM_DESC(dev_addr, "Device Ethernet Address");
673 /* this address is invisible to ifconfig */
674 static char *host_addr;
675 module_param(host_addr, charp, S_IRUGO);
676 MODULE_PARM_DESC(host_addr, "Host Ethernet Address");
679 static u8 __init nibble(unsigned char c)
689 static int __init get_ether_addr(const char *str, u8 *dev_addr)
694 for (i = 0; i < 6; i++) {
697 if ((*str == '.') || (*str == ':'))
699 num = nibble(*str++) << 4;
700 num |= (nibble(*str++));
703 if (is_valid_ether_addr(dev_addr))
706 random_ether_addr(dev_addr);
710 static struct eth_dev *the_dev;
714 * gether_setup - initialize one ethernet-over-usb link
715 * @g: gadget to associated with these links
716 * @ethaddr: NULL, or a buffer in which the ethernet address of the
717 * host side of the link is recorded
720 * This sets up the single network link that may be exported by a
721 * gadget driver using this framework. The link layer addresses are
722 * set up using module parameters.
724 * Returns negative errno, or zero on success
726 int __init gether_setup(struct usb_gadget *g, u8 ethaddr[ETH_ALEN])
729 struct net_device *net;
735 net = alloc_etherdev(sizeof *dev);
739 dev = netdev_priv(net);
740 spin_lock_init(&dev->lock);
741 spin_lock_init(&dev->req_lock);
742 INIT_WORK(&dev->work, eth_work);
743 INIT_LIST_HEAD(&dev->tx_reqs);
744 INIT_LIST_HEAD(&dev->rx_reqs);
746 /* network device setup */
748 strcpy(net->name, "usb%d");
750 if (get_ether_addr(dev_addr, net->dev_addr))
752 "using random %s ethernet address\n", "self");
753 if (get_ether_addr(host_addr, dev->host_mac))
755 "using random %s ethernet address\n", "host");
758 memcpy(ethaddr, dev->host_mac, ETH_ALEN);
760 net->change_mtu = eth_change_mtu;
761 net->hard_start_xmit = eth_start_xmit;
762 net->open = eth_open;
763 net->stop = eth_stop;
764 /* watchdog_timeo, tx_timeout ... */
765 /* set_multicast_list */
766 SET_ETHTOOL_OPS(net, &ops);
768 /* two kinds of host-initiated state changes:
769 * - iff DATA transfer is active, carrier is "on"
770 * - tx queueing enabled if open *and* carrier is "on"
772 netif_stop_queue(net);
773 netif_carrier_off(net);
776 SET_NETDEV_DEV(net, &g->dev);
778 status = register_netdev(net);
780 dev_dbg(&g->dev, "register_netdev failed, %d\n", status);
783 DECLARE_MAC_BUF(tmp);
785 ETH_INFO(dev, "MAC %s\n", print_mac(tmp, net->dev_addr));
786 ETH_INFO(dev, "HOST MAC %s\n", print_mac(tmp, dev->host_mac));
795 * gether_cleanup - remove Ethernet-over-USB device
798 * This is called to free all resources allocated by @gether_setup().
800 void gether_cleanup(void)
805 netif_stop_queue(the_dev->net);
806 netif_carrier_off(the_dev->net);
807 unregister_netdev(the_dev->net);
808 free_netdev(the_dev->net);
810 /* assuming we used keventd, it must quiesce too */
811 flush_scheduled_work();
818 * gether_connect - notify network layer that USB link is active
819 * @link: the USB link, set up with endpoints, descriptors matching
820 * current device speed, and any framing wrapper(s) set up.
821 * Context: irqs blocked
823 * This is called to activate endpoints and let the network layer know
824 * the connection is active ("carrier detect"). It may cause the I/O
825 * queues to open and start letting network packets flow, but will in
826 * any case activate the endpoints so that they respond properly to the
829 * Verify net_device pointer returned using IS_ERR(). If it doesn't
830 * indicate some error code (negative errno), ep->driver_data values
831 * have been overwritten.
833 struct net_device *gether_connect(struct gether *link)
835 struct eth_dev *dev = the_dev;
839 return ERR_PTR(-EINVAL);
841 link->in_ep->driver_data = dev;
842 result = usb_ep_enable(link->in_ep, link->in);
844 DBG(dev, "enable %s --> %d\n",
845 link->in_ep->name, result);
849 link->out_ep->driver_data = dev;
850 result = usb_ep_enable(link->out_ep, link->out);
852 DBG(dev, "enable %s --> %d\n",
853 link->out_ep->name, result);
858 result = alloc_requests(dev, link, qlen(dev->gadget));
861 dev->zlp = link->is_zlp_ok;
862 DBG(dev, "qlen %d\n", qlen(dev->gadget));
864 dev->header_len = link->header_len;
865 dev->unwrap = link->unwrap;
866 dev->wrap = link->wrap;
868 spin_lock(&dev->lock);
869 dev->port_usb = link;
871 if (netif_running(dev->net)) {
878 spin_unlock(&dev->lock);
880 netif_carrier_on(dev->net);
881 if (netif_running(dev->net))
882 eth_start(dev, GFP_ATOMIC);
884 /* on error, disable any endpoints */
886 (void) usb_ep_disable(link->out_ep);
888 (void) usb_ep_disable(link->in_ep);
891 /* caller is responsible for cleanup on error */
893 return ERR_PTR(result);
898 * gether_disconnect - notify network layer that USB link is inactive
899 * @link: the USB link, on which gether_connect() was called
900 * Context: irqs blocked
902 * This is called to deactivate endpoints and let the network layer know
903 * the connection went inactive ("no carrier").
905 * On return, the state is as if gether_connect() had never been called.
906 * The endpoints are inactive, and accordingly without active USB I/O.
907 * Pointers to endpoint descriptors and endpoint private data are nulled.
909 void gether_disconnect(struct gether *link)
911 struct eth_dev *dev = link->ioport;
912 struct usb_request *req;
918 DBG(dev, "%s\n", __func__);
920 netif_stop_queue(dev->net);
921 netif_carrier_off(dev->net);
923 /* disable endpoints, forcing (synchronous) completion
924 * of all pending i/o. then free the request objects
925 * and forget about the endpoints.
927 usb_ep_disable(link->in_ep);
928 spin_lock(&dev->req_lock);
929 while (!list_empty(&dev->tx_reqs)) {
930 req = container_of(dev->tx_reqs.next,
931 struct usb_request, list);
932 list_del(&req->list);
934 spin_unlock(&dev->req_lock);
935 usb_ep_free_request(link->in_ep, req);
936 spin_lock(&dev->req_lock);
938 spin_unlock(&dev->req_lock);
939 link->in_ep->driver_data = NULL;
942 usb_ep_disable(link->out_ep);
943 spin_lock(&dev->req_lock);
944 while (!list_empty(&dev->rx_reqs)) {
945 req = container_of(dev->rx_reqs.next,
946 struct usb_request, list);
947 list_del(&req->list);
949 spin_unlock(&dev->req_lock);
950 usb_ep_free_request(link->out_ep, req);
951 spin_lock(&dev->req_lock);
953 spin_unlock(&dev->req_lock);
954 link->out_ep->driver_data = NULL;
957 /* finish forgetting about this USB link episode */
962 spin_lock(&dev->lock);
963 dev->port_usb = NULL;
965 spin_unlock(&dev->lock);