usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
authorRoy Luo <royluo@google.com>
Thu, 22 May 2025 19:09:11 +0000 (19:09 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 19 Jun 2025 10:41:32 +0000 (12:41 +0200)
xhci_reset() currently returns -ENODEV if XHCI_STATE_REMOVING is
set, without completing the xhci handshake, unless the reset completes
exceptionally quickly. This behavior causes a regression on Synopsys
DWC3 USB controllers with dual-role capabilities.

Specifically, when a DWC3 controller exits host mode and removes xhci
while a reset is still in progress, and then attempts to configure its
hardware for device mode, the ongoing, incomplete reset leads to
critical register access issues. All register reads return zero, not
just within the xHCI register space (which might be expected during a
reset), but across the entire DWC3 IP block.

This patch addresses the issue by preventing xhci_reset() from being
called in xhci_resume() and bailing out early in the reinit flow when
XHCI_STATE_REMOVING is set.

Cc: stable <stable@kernel.org>
Fixes: 6ccb83d6c497 ("usb: xhci: Implement xhci_handshake_check_state() helper")
Suggested-by: Mathias Nyman <mathias.nyman@intel.com>
Signed-off-by: Roy Luo <royluo@google.com>
Link: https://lore.kernel.org/r/20250522190912.457583-2-royluo@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/usb/host/xhci.c

index 4e6dbd2375c3fcc057c47108e56f1779d5ad8afa..4637d026716aa35fd225d72cc5ef84dae055fc18 100644 (file)
@@ -1182,7 +1182,10 @@ int xhci_resume(struct xhci_hcd *xhci, bool power_lost, bool is_auto_resume)
                xhci_dbg(xhci, "Stop HCD\n");
                xhci_halt(xhci);
                xhci_zero_64b_regs(xhci);
-               retval = xhci_reset(xhci, XHCI_RESET_LONG_USEC);
+               if (xhci->xhc_state & XHCI_STATE_REMOVING)
+                       retval = -ENODEV;
+               else
+                       retval = xhci_reset(xhci, XHCI_RESET_LONG_USEC);
                spin_unlock_irq(&xhci->lock);
                if (retval)
                        return retval;