wusb: fix bmRequestType for Abort RPipe request

WUSB 1.0 (Table 8-4) mentions that Abort RPipe requests must have bmRequestType
equal to 0x25, although current implementation sets bmRequestType to 0xa5. This
patch fixes this typo.

Signed-off-by: Anderson Lizardo <anderson.lizardo@indt.org.br>
Signed-off-by: David Vrabel <david.vrabel@csr.com>

drivers/usb/wusbcore/wa-rpipe.c

@@ -548,7 +548,7 @@ void rpipe_ep_disable(struct wahc *wa, struct usb_host_endpoint *ep)
 		result = usb_control_msg(
 			wa->usb_dev, usb_rcvctrlpipe(wa->usb_dev, 0),
 			USB_REQ_RPIPE_ABORT,
-			USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_RPIPE,
+			USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_RPIPE,
 			0, index, NULL, 0, 1000 /* FIXME: arbitrary */);
 		if (result < 0 && result != -ENODEV /* dev is gone */)
 			d_printf(1, dev, "(wa %p rpipe %u): abort failed: %d\n",