btmtk.c 36 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499
  1. // SPDX-License-Identifier: ISC
  2. /* Copyright (C) 2021 MediaTek Inc.
  3. *
  4. */
  5. #include <linux/module.h>
  6. #include <linux/firmware.h>
  7. #include <linux/usb.h>
  8. #include <linux/iopoll.h>
  9. #include <linux/unaligned.h>
  10. #include <net/bluetooth/bluetooth.h>
  11. #include <net/bluetooth/hci_core.h>
  12. #include "btmtk.h"
  13. #define VERSION "0.1"
  14. /* It is for mt79xx download rom patch*/
  15. #define MTK_FW_ROM_PATCH_HEADER_SIZE 32
  16. #define MTK_FW_ROM_PATCH_GD_SIZE 64
  17. #define MTK_FW_ROM_PATCH_SEC_MAP_SIZE 64
  18. #define MTK_SEC_MAP_COMMON_SIZE 12
  19. #define MTK_SEC_MAP_NEED_SEND_SIZE 52
  20. /* It is for mt79xx iso data transmission setting */
  21. #define MTK_ISO_THRESHOLD 264
  22. struct btmtk_patch_header {
  23. u8 datetime[16];
  24. u8 platform[4];
  25. __le16 hwver;
  26. __le16 swver;
  27. __le32 magicnum;
  28. } __packed;
  29. struct btmtk_global_desc {
  30. __le32 patch_ver;
  31. __le32 sub_sys;
  32. __le32 feature_opt;
  33. __le32 section_num;
  34. } __packed;
  35. struct btmtk_section_map {
  36. __le32 sectype;
  37. __le32 secoffset;
  38. __le32 secsize;
  39. union {
  40. __le32 u4SecSpec[13];
  41. struct {
  42. __le32 dlAddr;
  43. __le32 dlsize;
  44. __le32 seckeyidx;
  45. __le32 alignlen;
  46. __le32 sectype;
  47. __le32 dlmodecrctype;
  48. __le32 crc;
  49. __le32 reserved[6];
  50. } bin_info_spec;
  51. };
  52. } __packed;
  53. static void btmtk_coredump(struct hci_dev *hdev)
  54. {
  55. int err;
  56. err = __hci_cmd_send(hdev, 0xfd5b, 0, NULL);
  57. if (err < 0)
  58. bt_dev_err(hdev, "Coredump failed (%d)", err);
  59. }
  60. static void btmtk_coredump_hdr(struct hci_dev *hdev, struct sk_buff *skb)
  61. {
  62. struct btmtk_data *data = hci_get_priv(hdev);
  63. char buf[80];
  64. snprintf(buf, sizeof(buf), "Controller Name: 0x%X\n",
  65. data->dev_id);
  66. skb_put_data(skb, buf, strlen(buf));
  67. snprintf(buf, sizeof(buf), "Firmware Version: 0x%X\n",
  68. data->cd_info.fw_version);
  69. skb_put_data(skb, buf, strlen(buf));
  70. snprintf(buf, sizeof(buf), "Driver: %s\n",
  71. data->cd_info.driver_name);
  72. skb_put_data(skb, buf, strlen(buf));
  73. snprintf(buf, sizeof(buf), "Vendor: MediaTek\n");
  74. skb_put_data(skb, buf, strlen(buf));
  75. }
  76. static void btmtk_coredump_notify(struct hci_dev *hdev, int state)
  77. {
  78. struct btmtk_data *data = hci_get_priv(hdev);
  79. switch (state) {
  80. case HCI_DEVCOREDUMP_IDLE:
  81. data->cd_info.state = HCI_DEVCOREDUMP_IDLE;
  82. break;
  83. case HCI_DEVCOREDUMP_ACTIVE:
  84. data->cd_info.state = HCI_DEVCOREDUMP_ACTIVE;
  85. break;
  86. case HCI_DEVCOREDUMP_TIMEOUT:
  87. case HCI_DEVCOREDUMP_ABORT:
  88. case HCI_DEVCOREDUMP_DONE:
  89. data->cd_info.state = HCI_DEVCOREDUMP_IDLE;
  90. btmtk_reset_sync(hdev);
  91. break;
  92. }
  93. }
  94. void btmtk_fw_get_filename(char *buf, size_t size, u32 dev_id, u32 fw_ver,
  95. u32 fw_flavor)
  96. {
  97. if (dev_id == 0x7925)
  98. snprintf(buf, size,
  99. "mediatek/mt%04x/BT_RAM_CODE_MT%04x_1_%x_hdr.bin",
  100. dev_id & 0xffff, dev_id & 0xffff, (fw_ver & 0xff) + 1);
  101. else if (dev_id == 0x7961 && fw_flavor)
  102. snprintf(buf, size,
  103. "mediatek/BT_RAM_CODE_MT%04x_1a_%x_hdr.bin",
  104. dev_id & 0xffff, (fw_ver & 0xff) + 1);
  105. else
  106. snprintf(buf, size,
  107. "mediatek/BT_RAM_CODE_MT%04x_1_%x_hdr.bin",
  108. dev_id & 0xffff, (fw_ver & 0xff) + 1);
  109. }
  110. EXPORT_SYMBOL_GPL(btmtk_fw_get_filename);
  111. int btmtk_setup_firmware_79xx(struct hci_dev *hdev, const char *fwname,
  112. wmt_cmd_sync_func_t wmt_cmd_sync)
  113. {
  114. struct btmtk_hci_wmt_params wmt_params;
  115. struct btmtk_patch_header *hdr;
  116. struct btmtk_global_desc *globaldesc = NULL;
  117. struct btmtk_section_map *sectionmap;
  118. const struct firmware *fw;
  119. const u8 *fw_ptr;
  120. const u8 *fw_bin_ptr;
  121. int err, dlen, i, status;
  122. u8 flag, first_block, retry;
  123. u32 section_num, dl_size, section_offset;
  124. u8 cmd[64];
  125. err = request_firmware(&fw, fwname, &hdev->dev);
  126. if (err < 0) {
  127. bt_dev_err(hdev, "Failed to load firmware file (%d)", err);
  128. return err;
  129. }
  130. fw_ptr = fw->data;
  131. fw_bin_ptr = fw_ptr;
  132. hdr = (struct btmtk_patch_header *)fw_ptr;
  133. globaldesc = (struct btmtk_global_desc *)(fw_ptr + MTK_FW_ROM_PATCH_HEADER_SIZE);
  134. section_num = le32_to_cpu(globaldesc->section_num);
  135. bt_dev_info(hdev, "HW/SW Version: 0x%04x%04x, Build Time: %s",
  136. le16_to_cpu(hdr->hwver), le16_to_cpu(hdr->swver), hdr->datetime);
  137. for (i = 0; i < section_num; i++) {
  138. first_block = 1;
  139. fw_ptr = fw_bin_ptr;
  140. sectionmap = (struct btmtk_section_map *)(fw_ptr + MTK_FW_ROM_PATCH_HEADER_SIZE +
  141. MTK_FW_ROM_PATCH_GD_SIZE + MTK_FW_ROM_PATCH_SEC_MAP_SIZE * i);
  142. section_offset = le32_to_cpu(sectionmap->secoffset);
  143. dl_size = le32_to_cpu(sectionmap->bin_info_spec.dlsize);
  144. if (dl_size > 0) {
  145. retry = 20;
  146. while (retry > 0) {
  147. cmd[0] = 0; /* 0 means legacy dl mode. */
  148. memcpy(cmd + 1,
  149. fw_ptr + MTK_FW_ROM_PATCH_HEADER_SIZE +
  150. MTK_FW_ROM_PATCH_GD_SIZE +
  151. MTK_FW_ROM_PATCH_SEC_MAP_SIZE * i +
  152. MTK_SEC_MAP_COMMON_SIZE,
  153. MTK_SEC_MAP_NEED_SEND_SIZE + 1);
  154. wmt_params.op = BTMTK_WMT_PATCH_DWNLD;
  155. wmt_params.status = &status;
  156. wmt_params.flag = 0;
  157. wmt_params.dlen = MTK_SEC_MAP_NEED_SEND_SIZE + 1;
  158. wmt_params.data = &cmd;
  159. err = wmt_cmd_sync(hdev, &wmt_params);
  160. if (err < 0) {
  161. bt_dev_err(hdev, "Failed to send wmt patch dwnld (%d)",
  162. err);
  163. goto err_release_fw;
  164. }
  165. if (status == BTMTK_WMT_PATCH_UNDONE) {
  166. break;
  167. } else if (status == BTMTK_WMT_PATCH_PROGRESS) {
  168. msleep(100);
  169. retry--;
  170. } else if (status == BTMTK_WMT_PATCH_DONE) {
  171. goto next_section;
  172. } else {
  173. bt_dev_err(hdev, "Failed wmt patch dwnld status (%d)",
  174. status);
  175. err = -EIO;
  176. goto err_release_fw;
  177. }
  178. }
  179. fw_ptr += section_offset;
  180. wmt_params.op = BTMTK_WMT_PATCH_DWNLD;
  181. wmt_params.status = NULL;
  182. while (dl_size > 0) {
  183. dlen = min_t(int, 250, dl_size);
  184. if (first_block == 1) {
  185. flag = 1;
  186. first_block = 0;
  187. } else if (dl_size - dlen <= 0) {
  188. flag = 3;
  189. } else {
  190. flag = 2;
  191. }
  192. wmt_params.flag = flag;
  193. wmt_params.dlen = dlen;
  194. wmt_params.data = fw_ptr;
  195. err = wmt_cmd_sync(hdev, &wmt_params);
  196. if (err < 0) {
  197. bt_dev_err(hdev, "Failed to send wmt patch dwnld (%d)",
  198. err);
  199. goto err_release_fw;
  200. }
  201. dl_size -= dlen;
  202. fw_ptr += dlen;
  203. }
  204. }
  205. next_section:
  206. continue;
  207. }
  208. /* Wait a few moments for firmware activation done */
  209. usleep_range(100000, 120000);
  210. err_release_fw:
  211. release_firmware(fw);
  212. return err;
  213. }
  214. EXPORT_SYMBOL_GPL(btmtk_setup_firmware_79xx);
  215. int btmtk_setup_firmware(struct hci_dev *hdev, const char *fwname,
  216. wmt_cmd_sync_func_t wmt_cmd_sync)
  217. {
  218. struct btmtk_hci_wmt_params wmt_params;
  219. const struct firmware *fw;
  220. const u8 *fw_ptr;
  221. size_t fw_size;
  222. int err, dlen;
  223. u8 flag, param;
  224. err = request_firmware(&fw, fwname, &hdev->dev);
  225. if (err < 0) {
  226. bt_dev_err(hdev, "Failed to load firmware file (%d)", err);
  227. return err;
  228. }
  229. /* Power on data RAM the firmware relies on. */
  230. param = 1;
  231. wmt_params.op = BTMTK_WMT_FUNC_CTRL;
  232. wmt_params.flag = 3;
  233. wmt_params.dlen = sizeof(param);
  234. wmt_params.data = &param;
  235. wmt_params.status = NULL;
  236. err = wmt_cmd_sync(hdev, &wmt_params);
  237. if (err < 0) {
  238. bt_dev_err(hdev, "Failed to power on data RAM (%d)", err);
  239. goto err_release_fw;
  240. }
  241. fw_ptr = fw->data;
  242. fw_size = fw->size;
  243. /* The size of patch header is 30 bytes, should be skip */
  244. if (fw_size < 30) {
  245. err = -EINVAL;
  246. goto err_release_fw;
  247. }
  248. fw_size -= 30;
  249. fw_ptr += 30;
  250. flag = 1;
  251. wmt_params.op = BTMTK_WMT_PATCH_DWNLD;
  252. wmt_params.status = NULL;
  253. while (fw_size > 0) {
  254. dlen = min_t(int, 250, fw_size);
  255. /* Tell device the position in sequence */
  256. if (fw_size - dlen <= 0)
  257. flag = 3;
  258. else if (fw_size < fw->size - 30)
  259. flag = 2;
  260. wmt_params.flag = flag;
  261. wmt_params.dlen = dlen;
  262. wmt_params.data = fw_ptr;
  263. err = wmt_cmd_sync(hdev, &wmt_params);
  264. if (err < 0) {
  265. bt_dev_err(hdev, "Failed to send wmt patch dwnld (%d)",
  266. err);
  267. goto err_release_fw;
  268. }
  269. fw_size -= dlen;
  270. fw_ptr += dlen;
  271. }
  272. wmt_params.op = BTMTK_WMT_RST;
  273. wmt_params.flag = 4;
  274. wmt_params.dlen = 0;
  275. wmt_params.data = NULL;
  276. wmt_params.status = NULL;
  277. /* Activate funciton the firmware providing to */
  278. err = wmt_cmd_sync(hdev, &wmt_params);
  279. if (err < 0) {
  280. bt_dev_err(hdev, "Failed to send wmt rst (%d)", err);
  281. goto err_release_fw;
  282. }
  283. /* Wait a few moments for firmware activation done */
  284. usleep_range(10000, 12000);
  285. err_release_fw:
  286. release_firmware(fw);
  287. return err;
  288. }
  289. EXPORT_SYMBOL_GPL(btmtk_setup_firmware);
  290. int btmtk_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr)
  291. {
  292. struct sk_buff *skb;
  293. long ret;
  294. skb = __hci_cmd_sync(hdev, 0xfc1a, 6, bdaddr, HCI_INIT_TIMEOUT);
  295. if (IS_ERR(skb)) {
  296. ret = PTR_ERR(skb);
  297. bt_dev_err(hdev, "changing Mediatek device address failed (%ld)",
  298. ret);
  299. return ret;
  300. }
  301. kfree_skb(skb);
  302. return 0;
  303. }
  304. EXPORT_SYMBOL_GPL(btmtk_set_bdaddr);
  305. void btmtk_reset_sync(struct hci_dev *hdev)
  306. {
  307. struct btmtk_data *reset_work = hci_get_priv(hdev);
  308. int err;
  309. hci_dev_lock(hdev);
  310. err = hci_cmd_sync_queue(hdev, reset_work->reset_sync, NULL, NULL);
  311. if (err)
  312. bt_dev_err(hdev, "failed to reset (%d)", err);
  313. hci_dev_unlock(hdev);
  314. }
  315. EXPORT_SYMBOL_GPL(btmtk_reset_sync);
  316. int btmtk_register_coredump(struct hci_dev *hdev, const char *name,
  317. u32 fw_version)
  318. {
  319. struct btmtk_data *data = hci_get_priv(hdev);
  320. if (!IS_ENABLED(CONFIG_DEV_COREDUMP))
  321. return -EOPNOTSUPP;
  322. data->cd_info.fw_version = fw_version;
  323. data->cd_info.state = HCI_DEVCOREDUMP_IDLE;
  324. data->cd_info.driver_name = name;
  325. return hci_devcd_register(hdev, btmtk_coredump, btmtk_coredump_hdr,
  326. btmtk_coredump_notify);
  327. }
  328. EXPORT_SYMBOL_GPL(btmtk_register_coredump);
  329. int btmtk_process_coredump(struct hci_dev *hdev, struct sk_buff *skb)
  330. {
  331. struct btmtk_data *data = hci_get_priv(hdev);
  332. int err;
  333. bool complete = false;
  334. if (!IS_ENABLED(CONFIG_DEV_COREDUMP)) {
  335. kfree_skb(skb);
  336. return 0;
  337. }
  338. switch (data->cd_info.state) {
  339. case HCI_DEVCOREDUMP_IDLE:
  340. err = hci_devcd_init(hdev, MTK_COREDUMP_SIZE);
  341. if (err < 0) {
  342. kfree_skb(skb);
  343. break;
  344. }
  345. data->cd_info.cnt = 0;
  346. /* It is supposed coredump can be done within 5 seconds */
  347. schedule_delayed_work(&hdev->dump.dump_timeout,
  348. msecs_to_jiffies(5000));
  349. fallthrough;
  350. case HCI_DEVCOREDUMP_ACTIVE:
  351. default:
  352. /* Mediatek coredump data would be more than MTK_COREDUMP_NUM */
  353. if (data->cd_info.cnt >= MTK_COREDUMP_NUM &&
  354. skb->len > MTK_COREDUMP_END_LEN)
  355. if (!memcmp((char *)&skb->data[skb->len - MTK_COREDUMP_END_LEN],
  356. MTK_COREDUMP_END, MTK_COREDUMP_END_LEN - 1))
  357. complete = true;
  358. err = hci_devcd_append(hdev, skb);
  359. if (err < 0)
  360. break;
  361. data->cd_info.cnt++;
  362. if (complete) {
  363. bt_dev_info(hdev, "Mediatek coredump end");
  364. hci_devcd_complete(hdev);
  365. }
  366. break;
  367. }
  368. return err;
  369. }
  370. EXPORT_SYMBOL_GPL(btmtk_process_coredump);
  371. #if IS_ENABLED(CONFIG_BT_HCIBTUSB_MTK)
  372. static void btmtk_usb_wmt_recv(struct urb *urb)
  373. {
  374. struct hci_dev *hdev = urb->context;
  375. struct btmtk_data *data = hci_get_priv(hdev);
  376. struct sk_buff *skb;
  377. int err;
  378. if (urb->status == 0 && urb->actual_length > 0) {
  379. hdev->stat.byte_rx += urb->actual_length;
  380. /* WMT event shouldn't be fragmented and the size should be
  381. * less than HCI_WMT_MAX_EVENT_SIZE.
  382. */
  383. skb = bt_skb_alloc(HCI_WMT_MAX_EVENT_SIZE, GFP_ATOMIC);
  384. if (!skb) {
  385. hdev->stat.err_rx++;
  386. kfree(urb->setup_packet);
  387. return;
  388. }
  389. hci_skb_pkt_type(skb) = HCI_EVENT_PKT;
  390. skb_put_data(skb, urb->transfer_buffer, urb->actual_length);
  391. /* When someone waits for the WMT event, the skb is being cloned
  392. * and being processed the events from there then.
  393. */
  394. if (test_bit(BTMTK_TX_WAIT_VND_EVT, &data->flags)) {
  395. data->evt_skb = skb_clone(skb, GFP_ATOMIC);
  396. if (!data->evt_skb) {
  397. kfree_skb(skb);
  398. kfree(urb->setup_packet);
  399. return;
  400. }
  401. }
  402. err = hci_recv_frame(hdev, skb);
  403. if (err < 0) {
  404. kfree_skb(data->evt_skb);
  405. data->evt_skb = NULL;
  406. kfree(urb->setup_packet);
  407. return;
  408. }
  409. if (test_and_clear_bit(BTMTK_TX_WAIT_VND_EVT,
  410. &data->flags)) {
  411. /* Barrier to sync with other CPUs */
  412. smp_mb__after_atomic();
  413. wake_up_bit(&data->flags,
  414. BTMTK_TX_WAIT_VND_EVT);
  415. }
  416. kfree(urb->setup_packet);
  417. return;
  418. } else if (urb->status == -ENOENT) {
  419. /* Avoid suspend failed when usb_kill_urb */
  420. return;
  421. }
  422. usb_mark_last_busy(data->udev);
  423. /* The URB complete handler is still called with urb->actual_length = 0
  424. * when the event is not available, so we should keep re-submitting
  425. * URB until WMT event returns, Also, It's necessary to wait some time
  426. * between the two consecutive control URBs to relax the target device
  427. * to generate the event. Otherwise, the WMT event cannot return from
  428. * the device successfully.
  429. */
  430. udelay(500);
  431. usb_anchor_urb(urb, data->ctrl_anchor);
  432. err = usb_submit_urb(urb, GFP_ATOMIC);
  433. if (err < 0) {
  434. kfree(urb->setup_packet);
  435. /* -EPERM: urb is being killed;
  436. * -ENODEV: device got disconnected
  437. */
  438. if (err != -EPERM && err != -ENODEV)
  439. bt_dev_err(hdev, "urb %p failed to resubmit (%d)",
  440. urb, -err);
  441. usb_unanchor_urb(urb);
  442. }
  443. }
  444. static int btmtk_usb_submit_wmt_recv_urb(struct hci_dev *hdev)
  445. {
  446. struct btmtk_data *data = hci_get_priv(hdev);
  447. struct usb_ctrlrequest *dr;
  448. unsigned char *buf;
  449. int err, size = 64;
  450. unsigned int pipe;
  451. struct urb *urb;
  452. urb = usb_alloc_urb(0, GFP_KERNEL);
  453. if (!urb)
  454. return -ENOMEM;
  455. dr = kmalloc(sizeof(*dr), GFP_KERNEL);
  456. if (!dr) {
  457. usb_free_urb(urb);
  458. return -ENOMEM;
  459. }
  460. dr->bRequestType = USB_TYPE_VENDOR | USB_DIR_IN;
  461. dr->bRequest = 1;
  462. dr->wIndex = cpu_to_le16(0);
  463. dr->wValue = cpu_to_le16(48);
  464. dr->wLength = cpu_to_le16(size);
  465. buf = kmalloc(size, GFP_KERNEL);
  466. if (!buf) {
  467. kfree(dr);
  468. usb_free_urb(urb);
  469. return -ENOMEM;
  470. }
  471. pipe = usb_rcvctrlpipe(data->udev, 0);
  472. usb_fill_control_urb(urb, data->udev, pipe, (void *)dr,
  473. buf, size, btmtk_usb_wmt_recv, hdev);
  474. urb->transfer_flags |= URB_FREE_BUFFER;
  475. usb_anchor_urb(urb, data->ctrl_anchor);
  476. err = usb_submit_urb(urb, GFP_KERNEL);
  477. if (err < 0) {
  478. if (err != -EPERM && err != -ENODEV)
  479. bt_dev_err(hdev, "urb %p submission failed (%d)",
  480. urb, -err);
  481. usb_unanchor_urb(urb);
  482. }
  483. usb_free_urb(urb);
  484. return err;
  485. }
  486. static int btmtk_usb_hci_wmt_sync(struct hci_dev *hdev,
  487. struct btmtk_hci_wmt_params *wmt_params)
  488. {
  489. struct btmtk_data *data = hci_get_priv(hdev);
  490. struct btmtk_hci_wmt_evt_funcc *wmt_evt_funcc;
  491. u32 hlen, status = BTMTK_WMT_INVALID;
  492. struct btmtk_hci_wmt_evt *wmt_evt;
  493. struct btmtk_hci_wmt_cmd *wc;
  494. struct btmtk_wmt_hdr *hdr;
  495. int err;
  496. /* Send the WMT command and wait until the WMT event returns */
  497. hlen = sizeof(*hdr) + wmt_params->dlen;
  498. if (hlen > 255)
  499. return -EINVAL;
  500. wc = kzalloc(hlen, GFP_KERNEL);
  501. if (!wc)
  502. return -ENOMEM;
  503. hdr = &wc->hdr;
  504. hdr->dir = 1;
  505. hdr->op = wmt_params->op;
  506. hdr->dlen = cpu_to_le16(wmt_params->dlen + 1);
  507. hdr->flag = wmt_params->flag;
  508. memcpy(wc->data, wmt_params->data, wmt_params->dlen);
  509. set_bit(BTMTK_TX_WAIT_VND_EVT, &data->flags);
  510. /* WMT cmd/event doesn't follow up the generic HCI cmd/event handling,
  511. * it needs constantly polling control pipe until the host received the
  512. * WMT event, thus, we should require to specifically acquire PM counter
  513. * on the USB to prevent the interface from entering auto suspended
  514. * while WMT cmd/event in progress.
  515. */
  516. err = usb_autopm_get_interface(data->intf);
  517. if (err < 0)
  518. goto err_free_wc;
  519. err = __hci_cmd_send(hdev, 0xfc6f, hlen, wc);
  520. if (err < 0) {
  521. clear_bit(BTMTK_TX_WAIT_VND_EVT, &data->flags);
  522. usb_autopm_put_interface(data->intf);
  523. goto err_free_wc;
  524. }
  525. /* Submit control IN URB on demand to process the WMT event */
  526. err = btmtk_usb_submit_wmt_recv_urb(hdev);
  527. usb_autopm_put_interface(data->intf);
  528. if (err < 0)
  529. goto err_free_wc;
  530. /* The vendor specific WMT commands are all answered by a vendor
  531. * specific event and will have the Command Status or Command
  532. * Complete as with usual HCI command flow control.
  533. *
  534. * After sending the command, wait for BTUSB_TX_WAIT_VND_EVT
  535. * state to be cleared. The driver specific event receive routine
  536. * will clear that state and with that indicate completion of the
  537. * WMT command.
  538. */
  539. err = wait_on_bit_timeout(&data->flags, BTMTK_TX_WAIT_VND_EVT,
  540. TASK_UNINTERRUPTIBLE, HCI_INIT_TIMEOUT);
  541. if (err) {
  542. bt_dev_err(hdev, "Execution of wmt command timed out");
  543. clear_bit(BTMTK_TX_WAIT_VND_EVT, &data->flags);
  544. err = -ETIMEDOUT;
  545. goto err_free_wc;
  546. }
  547. if (data->evt_skb == NULL)
  548. goto err_free_wc;
  549. /* Parse and handle the return WMT event */
  550. wmt_evt = (struct btmtk_hci_wmt_evt *)data->evt_skb->data;
  551. if (wmt_evt->whdr.op != hdr->op) {
  552. bt_dev_err(hdev, "Wrong op received %d expected %d",
  553. wmt_evt->whdr.op, hdr->op);
  554. err = -EIO;
  555. goto err_free_skb;
  556. }
  557. switch (wmt_evt->whdr.op) {
  558. case BTMTK_WMT_SEMAPHORE:
  559. if (wmt_evt->whdr.flag == 2)
  560. status = BTMTK_WMT_PATCH_UNDONE;
  561. else
  562. status = BTMTK_WMT_PATCH_DONE;
  563. break;
  564. case BTMTK_WMT_FUNC_CTRL:
  565. wmt_evt_funcc = (struct btmtk_hci_wmt_evt_funcc *)wmt_evt;
  566. if (be16_to_cpu(wmt_evt_funcc->status) == 0x404)
  567. status = BTMTK_WMT_ON_DONE;
  568. else if (be16_to_cpu(wmt_evt_funcc->status) == 0x420)
  569. status = BTMTK_WMT_ON_PROGRESS;
  570. else
  571. status = BTMTK_WMT_ON_UNDONE;
  572. break;
  573. case BTMTK_WMT_PATCH_DWNLD:
  574. if (wmt_evt->whdr.flag == 2)
  575. status = BTMTK_WMT_PATCH_DONE;
  576. else if (wmt_evt->whdr.flag == 1)
  577. status = BTMTK_WMT_PATCH_PROGRESS;
  578. else
  579. status = BTMTK_WMT_PATCH_UNDONE;
  580. break;
  581. }
  582. if (wmt_params->status)
  583. *wmt_params->status = status;
  584. err_free_skb:
  585. kfree_skb(data->evt_skb);
  586. data->evt_skb = NULL;
  587. err_free_wc:
  588. kfree(wc);
  589. return err;
  590. }
  591. static int btmtk_usb_func_query(struct hci_dev *hdev)
  592. {
  593. struct btmtk_hci_wmt_params wmt_params;
  594. int status, err;
  595. u8 param = 0;
  596. /* Query whether the function is enabled */
  597. wmt_params.op = BTMTK_WMT_FUNC_CTRL;
  598. wmt_params.flag = 4;
  599. wmt_params.dlen = sizeof(param);
  600. wmt_params.data = &param;
  601. wmt_params.status = &status;
  602. err = btmtk_usb_hci_wmt_sync(hdev, &wmt_params);
  603. if (err < 0) {
  604. bt_dev_err(hdev, "Failed to query function status (%d)", err);
  605. return err;
  606. }
  607. return status;
  608. }
  609. static int btmtk_usb_uhw_reg_write(struct hci_dev *hdev, u32 reg, u32 val)
  610. {
  611. struct btmtk_data *data = hci_get_priv(hdev);
  612. int pipe, err;
  613. void *buf;
  614. buf = kzalloc(4, GFP_KERNEL);
  615. if (!buf)
  616. return -ENOMEM;
  617. put_unaligned_le32(val, buf);
  618. pipe = usb_sndctrlpipe(data->udev, 0);
  619. err = usb_control_msg(data->udev, pipe, 0x02,
  620. 0x5E,
  621. reg >> 16, reg & 0xffff,
  622. buf, 4, USB_CTRL_SET_TIMEOUT);
  623. if (err < 0)
  624. bt_dev_err(hdev, "Failed to write uhw reg(%d)", err);
  625. kfree(buf);
  626. return err;
  627. }
  628. static int btmtk_usb_uhw_reg_read(struct hci_dev *hdev, u32 reg, u32 *val)
  629. {
  630. struct btmtk_data *data = hci_get_priv(hdev);
  631. int pipe, err;
  632. void *buf;
  633. buf = kzalloc(4, GFP_KERNEL);
  634. if (!buf)
  635. return -ENOMEM;
  636. pipe = usb_rcvctrlpipe(data->udev, 0);
  637. err = usb_control_msg(data->udev, pipe, 0x01,
  638. 0xDE,
  639. reg >> 16, reg & 0xffff,
  640. buf, 4, USB_CTRL_GET_TIMEOUT);
  641. if (err < 0) {
  642. bt_dev_err(hdev, "Failed to read uhw reg(%d)", err);
  643. goto err_free_buf;
  644. }
  645. *val = get_unaligned_le32(buf);
  646. bt_dev_dbg(hdev, "reg=%x, value=0x%08x", reg, *val);
  647. err_free_buf:
  648. kfree(buf);
  649. return err;
  650. }
  651. static int btmtk_usb_reg_read(struct hci_dev *hdev, u32 reg, u32 *val)
  652. {
  653. struct btmtk_data *data = hci_get_priv(hdev);
  654. int pipe, err, size = sizeof(u32);
  655. void *buf;
  656. buf = kzalloc(size, GFP_KERNEL);
  657. if (!buf)
  658. return -ENOMEM;
  659. pipe = usb_rcvctrlpipe(data->udev, 0);
  660. err = usb_control_msg(data->udev, pipe, 0x63,
  661. USB_TYPE_VENDOR | USB_DIR_IN,
  662. reg >> 16, reg & 0xffff,
  663. buf, size, USB_CTRL_GET_TIMEOUT);
  664. if (err < 0)
  665. goto err_free_buf;
  666. *val = get_unaligned_le32(buf);
  667. err_free_buf:
  668. kfree(buf);
  669. return err;
  670. }
  671. static int btmtk_usb_id_get(struct hci_dev *hdev, u32 reg, u32 *id)
  672. {
  673. return btmtk_usb_reg_read(hdev, reg, id);
  674. }
  675. static u32 btmtk_usb_reset_done(struct hci_dev *hdev)
  676. {
  677. u32 val = 0;
  678. btmtk_usb_uhw_reg_read(hdev, MTK_BT_MISC, &val);
  679. return val & MTK_BT_RST_DONE;
  680. }
  681. int btmtk_usb_subsys_reset(struct hci_dev *hdev, u32 dev_id)
  682. {
  683. u32 val;
  684. int err;
  685. if (dev_id == 0x7922) {
  686. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_SUBSYS_RST, &val);
  687. if (err < 0)
  688. return err;
  689. val |= 0x00002020;
  690. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_SUBSYS_RST, val);
  691. if (err < 0)
  692. return err;
  693. err = btmtk_usb_uhw_reg_write(hdev, MTK_EP_RST_OPT, 0x00010001);
  694. if (err < 0)
  695. return err;
  696. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_SUBSYS_RST, &val);
  697. if (err < 0)
  698. return err;
  699. val |= BIT(0);
  700. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_SUBSYS_RST, val);
  701. if (err < 0)
  702. return err;
  703. msleep(100);
  704. } else if (dev_id == 0x7925) {
  705. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_RESET_REG_CONNV3, &val);
  706. if (err < 0)
  707. return err;
  708. val |= (1 << 5);
  709. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_RESET_REG_CONNV3, val);
  710. if (err < 0)
  711. return err;
  712. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_RESET_REG_CONNV3, &val);
  713. if (err < 0)
  714. return err;
  715. val &= 0xFFFF00FF;
  716. val |= (1 << 13);
  717. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_RESET_REG_CONNV3, val);
  718. if (err < 0)
  719. return err;
  720. err = btmtk_usb_uhw_reg_write(hdev, MTK_EP_RST_OPT, 0x00010001);
  721. if (err < 0)
  722. return err;
  723. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_RESET_REG_CONNV3, &val);
  724. if (err < 0)
  725. return err;
  726. val |= (1 << 0);
  727. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_RESET_REG_CONNV3, val);
  728. if (err < 0)
  729. return err;
  730. err = btmtk_usb_uhw_reg_write(hdev, MTK_UDMA_INT_STA_BT, 0x000000FF);
  731. if (err < 0)
  732. return err;
  733. err = btmtk_usb_uhw_reg_read(hdev, MTK_UDMA_INT_STA_BT, &val);
  734. if (err < 0)
  735. return err;
  736. err = btmtk_usb_uhw_reg_write(hdev, MTK_UDMA_INT_STA_BT1, 0x000000FF);
  737. if (err < 0)
  738. return err;
  739. err = btmtk_usb_uhw_reg_read(hdev, MTK_UDMA_INT_STA_BT1, &val);
  740. if (err < 0)
  741. return err;
  742. msleep(100);
  743. } else {
  744. /* It's Device EndPoint Reset Option Register */
  745. bt_dev_dbg(hdev, "Initiating reset mechanism via uhw");
  746. err = btmtk_usb_uhw_reg_write(hdev, MTK_EP_RST_OPT, MTK_EP_RST_IN_OUT_OPT);
  747. if (err < 0)
  748. return err;
  749. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_WDT_STATUS, &val);
  750. if (err < 0)
  751. return err;
  752. /* Reset the bluetooth chip via USB interface. */
  753. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_SUBSYS_RST, 1);
  754. if (err < 0)
  755. return err;
  756. err = btmtk_usb_uhw_reg_write(hdev, MTK_UDMA_INT_STA_BT, 0x000000FF);
  757. if (err < 0)
  758. return err;
  759. err = btmtk_usb_uhw_reg_read(hdev, MTK_UDMA_INT_STA_BT, &val);
  760. if (err < 0)
  761. return err;
  762. err = btmtk_usb_uhw_reg_write(hdev, MTK_UDMA_INT_STA_BT1, 0x000000FF);
  763. if (err < 0)
  764. return err;
  765. err = btmtk_usb_uhw_reg_read(hdev, MTK_UDMA_INT_STA_BT1, &val);
  766. if (err < 0)
  767. return err;
  768. /* MT7921 need to delay 20ms between toggle reset bit */
  769. msleep(20);
  770. err = btmtk_usb_uhw_reg_write(hdev, MTK_BT_SUBSYS_RST, 0);
  771. if (err < 0)
  772. return err;
  773. err = btmtk_usb_uhw_reg_read(hdev, MTK_BT_SUBSYS_RST, &val);
  774. if (err < 0)
  775. return err;
  776. }
  777. err = readx_poll_timeout(btmtk_usb_reset_done, hdev, val,
  778. val & MTK_BT_RST_DONE, 20000, 1000000);
  779. if (err < 0)
  780. bt_dev_err(hdev, "Reset timeout");
  781. if (dev_id == 0x7922) {
  782. err = btmtk_usb_uhw_reg_write(hdev, MTK_UDMA_INT_STA_BT, 0x000000FF);
  783. if (err < 0)
  784. return err;
  785. }
  786. err = btmtk_usb_id_get(hdev, 0x70010200, &val);
  787. if (err < 0 || !val)
  788. bt_dev_err(hdev, "Can't get device id, subsys reset fail.");
  789. return err;
  790. }
  791. EXPORT_SYMBOL_GPL(btmtk_usb_subsys_reset);
  792. int btmtk_usb_recv_acl(struct hci_dev *hdev, struct sk_buff *skb)
  793. {
  794. struct btmtk_data *data = hci_get_priv(hdev);
  795. u16 handle = le16_to_cpu(hci_acl_hdr(skb)->handle);
  796. switch (handle) {
  797. case 0xfc6f: /* Firmware dump from device */
  798. /* When the firmware hangs, the device can no longer
  799. * suspend and thus disable auto-suspend.
  800. */
  801. usb_disable_autosuspend(data->udev);
  802. /* We need to forward the diagnostic packet to userspace daemon
  803. * for backward compatibility, so we have to clone the packet
  804. * extraly for the in-kernel coredump support.
  805. */
  806. if (IS_ENABLED(CONFIG_DEV_COREDUMP)) {
  807. struct sk_buff *skb_cd = skb_clone(skb, GFP_ATOMIC);
  808. if (skb_cd)
  809. btmtk_process_coredump(hdev, skb_cd);
  810. }
  811. fallthrough;
  812. case 0x05ff: /* Firmware debug logging 1 */
  813. case 0x05fe: /* Firmware debug logging 2 */
  814. return hci_recv_diag(hdev, skb);
  815. }
  816. return hci_recv_frame(hdev, skb);
  817. }
  818. EXPORT_SYMBOL_GPL(btmtk_usb_recv_acl);
  819. static int btmtk_isopkt_pad(struct hci_dev *hdev, struct sk_buff *skb)
  820. {
  821. if (skb->len > MTK_ISO_THRESHOLD)
  822. return -EINVAL;
  823. if (skb_pad(skb, MTK_ISO_THRESHOLD - skb->len))
  824. return -ENOMEM;
  825. __skb_put(skb, MTK_ISO_THRESHOLD - skb->len);
  826. return 0;
  827. }
  828. static int __set_mtk_intr_interface(struct hci_dev *hdev)
  829. {
  830. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  831. struct usb_interface *intf = btmtk_data->isopkt_intf;
  832. int i, err;
  833. if (!btmtk_data->isopkt_intf)
  834. return -ENODEV;
  835. err = usb_set_interface(btmtk_data->udev, MTK_ISO_IFNUM, 1);
  836. if (err < 0) {
  837. bt_dev_err(hdev, "setting interface failed (%d)", -err);
  838. return err;
  839. }
  840. btmtk_data->isopkt_tx_ep = NULL;
  841. btmtk_data->isopkt_rx_ep = NULL;
  842. for (i = 0; i < intf->cur_altsetting->desc.bNumEndpoints; i++) {
  843. struct usb_endpoint_descriptor *ep_desc;
  844. ep_desc = &intf->cur_altsetting->endpoint[i].desc;
  845. if (!btmtk_data->isopkt_tx_ep &&
  846. usb_endpoint_is_int_out(ep_desc)) {
  847. btmtk_data->isopkt_tx_ep = ep_desc;
  848. continue;
  849. }
  850. if (!btmtk_data->isopkt_rx_ep &&
  851. usb_endpoint_is_int_in(ep_desc)) {
  852. btmtk_data->isopkt_rx_ep = ep_desc;
  853. continue;
  854. }
  855. }
  856. if (!btmtk_data->isopkt_tx_ep ||
  857. !btmtk_data->isopkt_rx_ep) {
  858. bt_dev_err(hdev, "invalid interrupt descriptors");
  859. return -ENODEV;
  860. }
  861. return 0;
  862. }
  863. struct urb *alloc_mtk_intr_urb(struct hci_dev *hdev, struct sk_buff *skb,
  864. usb_complete_t tx_complete)
  865. {
  866. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  867. struct urb *urb;
  868. unsigned int pipe;
  869. if (!btmtk_data->isopkt_tx_ep)
  870. return ERR_PTR(-ENODEV);
  871. urb = usb_alloc_urb(0, GFP_KERNEL);
  872. if (!urb)
  873. return ERR_PTR(-ENOMEM);
  874. if (btmtk_isopkt_pad(hdev, skb))
  875. return ERR_PTR(-EINVAL);
  876. pipe = usb_sndintpipe(btmtk_data->udev,
  877. btmtk_data->isopkt_tx_ep->bEndpointAddress);
  878. usb_fill_int_urb(urb, btmtk_data->udev, pipe,
  879. skb->data, skb->len, tx_complete,
  880. skb, btmtk_data->isopkt_tx_ep->bInterval);
  881. skb->dev = (void *)hdev;
  882. return urb;
  883. }
  884. EXPORT_SYMBOL_GPL(alloc_mtk_intr_urb);
  885. static int btmtk_recv_isopkt(struct hci_dev *hdev, void *buffer, int count)
  886. {
  887. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  888. struct sk_buff *skb;
  889. unsigned long flags;
  890. int err = 0;
  891. spin_lock_irqsave(&btmtk_data->isorxlock, flags);
  892. skb = btmtk_data->isopkt_skb;
  893. while (count) {
  894. int len;
  895. if (!skb) {
  896. skb = bt_skb_alloc(HCI_MAX_ISO_SIZE, GFP_ATOMIC);
  897. if (!skb) {
  898. err = -ENOMEM;
  899. break;
  900. }
  901. hci_skb_pkt_type(skb) = HCI_ISODATA_PKT;
  902. hci_skb_expect(skb) = HCI_ISO_HDR_SIZE;
  903. }
  904. len = min_t(uint, hci_skb_expect(skb), count);
  905. skb_put_data(skb, buffer, len);
  906. count -= len;
  907. buffer += len;
  908. hci_skb_expect(skb) -= len;
  909. if (skb->len == HCI_ISO_HDR_SIZE) {
  910. __le16 dlen = ((struct hci_iso_hdr *)skb->data)->dlen;
  911. /* Complete ISO header */
  912. hci_skb_expect(skb) = __le16_to_cpu(dlen);
  913. if (skb_tailroom(skb) < hci_skb_expect(skb)) {
  914. kfree_skb(skb);
  915. skb = NULL;
  916. err = -EILSEQ;
  917. break;
  918. }
  919. }
  920. if (!hci_skb_expect(skb)) {
  921. /* Complete frame */
  922. hci_recv_frame(hdev, skb);
  923. skb = NULL;
  924. }
  925. }
  926. btmtk_data->isopkt_skb = skb;
  927. spin_unlock_irqrestore(&btmtk_data->isorxlock, flags);
  928. return err;
  929. }
  930. static void btmtk_intr_complete(struct urb *urb)
  931. {
  932. struct hci_dev *hdev = urb->context;
  933. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  934. int err;
  935. BT_DBG("%s urb %p status %d count %d", hdev->name, urb, urb->status,
  936. urb->actual_length);
  937. if (!test_bit(HCI_RUNNING, &hdev->flags))
  938. return;
  939. if (hdev->suspended)
  940. return;
  941. if (urb->status == 0) {
  942. hdev->stat.byte_rx += urb->actual_length;
  943. if (btmtk_recv_isopkt(hdev, urb->transfer_buffer,
  944. urb->actual_length) < 0) {
  945. bt_dev_err(hdev, "corrupted iso packet");
  946. hdev->stat.err_rx++;
  947. }
  948. } else if (urb->status == -ENOENT) {
  949. /* Avoid suspend failed when usb_kill_urb */
  950. return;
  951. }
  952. usb_mark_last_busy(btmtk_data->udev);
  953. usb_anchor_urb(urb, &btmtk_data->isopkt_anchor);
  954. err = usb_submit_urb(urb, GFP_ATOMIC);
  955. if (err < 0) {
  956. /* -EPERM: urb is being killed;
  957. * -ENODEV: device got disconnected
  958. */
  959. if (err != -EPERM && err != -ENODEV)
  960. bt_dev_err(hdev, "urb %p failed to resubmit (%d)",
  961. urb, -err);
  962. if (err != -EPERM)
  963. hci_cmd_sync_cancel(hdev, -err);
  964. usb_unanchor_urb(urb);
  965. }
  966. }
  967. static int btmtk_submit_intr_urb(struct hci_dev *hdev, gfp_t mem_flags)
  968. {
  969. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  970. unsigned char *buf;
  971. unsigned int pipe;
  972. struct urb *urb;
  973. int err, size;
  974. BT_DBG("%s", hdev->name);
  975. if (!btmtk_data->isopkt_rx_ep)
  976. return -ENODEV;
  977. urb = usb_alloc_urb(0, mem_flags);
  978. if (!urb)
  979. return -ENOMEM;
  980. size = le16_to_cpu(btmtk_data->isopkt_rx_ep->wMaxPacketSize);
  981. buf = kmalloc(size, mem_flags);
  982. if (!buf) {
  983. usb_free_urb(urb);
  984. return -ENOMEM;
  985. }
  986. pipe = usb_rcvintpipe(btmtk_data->udev,
  987. btmtk_data->isopkt_rx_ep->bEndpointAddress);
  988. usb_fill_int_urb(urb, btmtk_data->udev, pipe, buf, size,
  989. btmtk_intr_complete, hdev,
  990. btmtk_data->isopkt_rx_ep->bInterval);
  991. urb->transfer_flags |= URB_FREE_BUFFER;
  992. usb_mark_last_busy(btmtk_data->udev);
  993. usb_anchor_urb(urb, &btmtk_data->isopkt_anchor);
  994. err = usb_submit_urb(urb, mem_flags);
  995. if (err < 0) {
  996. if (err != -EPERM && err != -ENODEV)
  997. bt_dev_err(hdev, "urb %p submission failed (%d)",
  998. urb, -err);
  999. usb_unanchor_urb(urb);
  1000. }
  1001. usb_free_urb(urb);
  1002. return err;
  1003. }
  1004. static int btmtk_usb_isointf_init(struct hci_dev *hdev)
  1005. {
  1006. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  1007. u8 iso_param[2] = { 0x08, 0x01 };
  1008. struct sk_buff *skb;
  1009. int err;
  1010. spin_lock_init(&btmtk_data->isorxlock);
  1011. __set_mtk_intr_interface(hdev);
  1012. err = btmtk_submit_intr_urb(hdev, GFP_KERNEL);
  1013. if (err < 0) {
  1014. usb_kill_anchored_urbs(&btmtk_data->isopkt_anchor);
  1015. bt_dev_err(hdev, "ISO intf not support (%d)", err);
  1016. return err;
  1017. }
  1018. skb = __hci_cmd_sync(hdev, 0xfd98, sizeof(iso_param), iso_param,
  1019. HCI_INIT_TIMEOUT);
  1020. if (IS_ERR(skb)) {
  1021. bt_dev_err(hdev, "Failed to apply iso setting (%ld)", PTR_ERR(skb));
  1022. return PTR_ERR(skb);
  1023. }
  1024. kfree_skb(skb);
  1025. return 0;
  1026. }
  1027. int btmtk_usb_resume(struct hci_dev *hdev)
  1028. {
  1029. /* This function describes the specific additional steps taken by MediaTek
  1030. * when Bluetooth usb driver's resume function is called.
  1031. */
  1032. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  1033. /* Resubmit urb for iso data transmission */
  1034. if (test_bit(BTMTK_ISOPKT_RUNNING, &btmtk_data->flags)) {
  1035. if (btmtk_submit_intr_urb(hdev, GFP_NOIO) < 0)
  1036. clear_bit(BTMTK_ISOPKT_RUNNING, &btmtk_data->flags);
  1037. }
  1038. return 0;
  1039. }
  1040. EXPORT_SYMBOL_GPL(btmtk_usb_resume);
  1041. int btmtk_usb_suspend(struct hci_dev *hdev)
  1042. {
  1043. /* This function describes the specific additional steps taken by MediaTek
  1044. * when Bluetooth usb driver's suspend function is called.
  1045. */
  1046. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  1047. /* Stop urb anchor for iso data transmission */
  1048. if (test_bit(BTMTK_ISOPKT_RUNNING, &btmtk_data->flags))
  1049. usb_kill_anchored_urbs(&btmtk_data->isopkt_anchor);
  1050. return 0;
  1051. }
  1052. EXPORT_SYMBOL_GPL(btmtk_usb_suspend);
  1053. int btmtk_usb_setup(struct hci_dev *hdev)
  1054. {
  1055. struct btmtk_data *btmtk_data = hci_get_priv(hdev);
  1056. struct btmtk_hci_wmt_params wmt_params;
  1057. ktime_t calltime, delta, rettime;
  1058. struct btmtk_tci_sleep tci_sleep;
  1059. unsigned long long duration;
  1060. struct sk_buff *skb;
  1061. const char *fwname;
  1062. int err, status;
  1063. u32 dev_id = 0;
  1064. char fw_bin_name[64];
  1065. u32 fw_version = 0, fw_flavor = 0;
  1066. u8 param;
  1067. calltime = ktime_get();
  1068. err = btmtk_usb_id_get(hdev, 0x80000008, &dev_id);
  1069. if (err < 0) {
  1070. bt_dev_err(hdev, "Failed to get device id (%d)", err);
  1071. return err;
  1072. }
  1073. if (!dev_id || dev_id != 0x7663) {
  1074. err = btmtk_usb_id_get(hdev, 0x70010200, &dev_id);
  1075. if (err < 0) {
  1076. bt_dev_err(hdev, "Failed to get device id (%d)", err);
  1077. return err;
  1078. }
  1079. err = btmtk_usb_id_get(hdev, 0x80021004, &fw_version);
  1080. if (err < 0) {
  1081. bt_dev_err(hdev, "Failed to get fw version (%d)", err);
  1082. return err;
  1083. }
  1084. err = btmtk_usb_id_get(hdev, 0x70010020, &fw_flavor);
  1085. if (err < 0) {
  1086. bt_dev_err(hdev, "Failed to get fw flavor (%d)", err);
  1087. return err;
  1088. }
  1089. fw_flavor = (fw_flavor & 0x00000080) >> 7;
  1090. }
  1091. btmtk_data->dev_id = dev_id;
  1092. err = btmtk_register_coredump(hdev, btmtk_data->drv_name, fw_version);
  1093. if (err < 0)
  1094. bt_dev_err(hdev, "Failed to register coredump (%d)", err);
  1095. switch (dev_id) {
  1096. case 0x7663:
  1097. fwname = FIRMWARE_MT7663;
  1098. break;
  1099. case 0x7668:
  1100. fwname = FIRMWARE_MT7668;
  1101. break;
  1102. case 0x7922:
  1103. case 0x7925:
  1104. case 0x7961:
  1105. btmtk_fw_get_filename(fw_bin_name, sizeof(fw_bin_name), dev_id,
  1106. fw_version, fw_flavor);
  1107. err = btmtk_setup_firmware_79xx(hdev, fw_bin_name,
  1108. btmtk_usb_hci_wmt_sync);
  1109. if (err < 0) {
  1110. bt_dev_err(hdev, "Failed to set up firmware (%d)", err);
  1111. return err;
  1112. }
  1113. /* It's Device EndPoint Reset Option Register */
  1114. err = btmtk_usb_uhw_reg_write(hdev, MTK_EP_RST_OPT,
  1115. MTK_EP_RST_IN_OUT_OPT);
  1116. if (err < 0)
  1117. return err;
  1118. /* Enable Bluetooth protocol */
  1119. param = 1;
  1120. wmt_params.op = BTMTK_WMT_FUNC_CTRL;
  1121. wmt_params.flag = 0;
  1122. wmt_params.dlen = sizeof(param);
  1123. wmt_params.data = &param;
  1124. wmt_params.status = NULL;
  1125. err = btmtk_usb_hci_wmt_sync(hdev, &wmt_params);
  1126. if (err < 0) {
  1127. bt_dev_err(hdev, "Failed to send wmt func ctrl (%d)", err);
  1128. return err;
  1129. }
  1130. hci_set_msft_opcode(hdev, 0xFD30);
  1131. hci_set_aosp_capable(hdev);
  1132. /* Set up ISO interface after protocol enabled */
  1133. if (test_bit(BTMTK_ISOPKT_OVER_INTR, &btmtk_data->flags)) {
  1134. if (!btmtk_usb_isointf_init(hdev))
  1135. set_bit(BTMTK_ISOPKT_RUNNING, &btmtk_data->flags);
  1136. }
  1137. goto done;
  1138. default:
  1139. bt_dev_err(hdev, "Unsupported hardware variant (%08x)",
  1140. dev_id);
  1141. return -ENODEV;
  1142. }
  1143. /* Query whether the firmware is already download */
  1144. wmt_params.op = BTMTK_WMT_SEMAPHORE;
  1145. wmt_params.flag = 1;
  1146. wmt_params.dlen = 0;
  1147. wmt_params.data = NULL;
  1148. wmt_params.status = &status;
  1149. err = btmtk_usb_hci_wmt_sync(hdev, &wmt_params);
  1150. if (err < 0) {
  1151. bt_dev_err(hdev, "Failed to query firmware status (%d)", err);
  1152. return err;
  1153. }
  1154. if (status == BTMTK_WMT_PATCH_DONE) {
  1155. bt_dev_info(hdev, "firmware already downloaded");
  1156. goto ignore_setup_fw;
  1157. }
  1158. /* Setup a firmware which the device definitely requires */
  1159. err = btmtk_setup_firmware(hdev, fwname,
  1160. btmtk_usb_hci_wmt_sync);
  1161. if (err < 0)
  1162. return err;
  1163. ignore_setup_fw:
  1164. err = readx_poll_timeout(btmtk_usb_func_query, hdev, status,
  1165. status < 0 || status != BTMTK_WMT_ON_PROGRESS,
  1166. 2000, 5000000);
  1167. /* -ETIMEDOUT happens */
  1168. if (err < 0)
  1169. return err;
  1170. /* The other errors happen in btmtk_usb_func_query */
  1171. if (status < 0)
  1172. return status;
  1173. if (status == BTMTK_WMT_ON_DONE) {
  1174. bt_dev_info(hdev, "function already on");
  1175. goto ignore_func_on;
  1176. }
  1177. /* Enable Bluetooth protocol */
  1178. param = 1;
  1179. wmt_params.op = BTMTK_WMT_FUNC_CTRL;
  1180. wmt_params.flag = 0;
  1181. wmt_params.dlen = sizeof(param);
  1182. wmt_params.data = &param;
  1183. wmt_params.status = NULL;
  1184. err = btmtk_usb_hci_wmt_sync(hdev, &wmt_params);
  1185. if (err < 0) {
  1186. bt_dev_err(hdev, "Failed to send wmt func ctrl (%d)", err);
  1187. return err;
  1188. }
  1189. ignore_func_on:
  1190. /* Apply the low power environment setup */
  1191. tci_sleep.mode = 0x5;
  1192. tci_sleep.duration = cpu_to_le16(0x640);
  1193. tci_sleep.host_duration = cpu_to_le16(0x640);
  1194. tci_sleep.host_wakeup_pin = 0;
  1195. tci_sleep.time_compensation = 0;
  1196. skb = __hci_cmd_sync(hdev, 0xfc7a, sizeof(tci_sleep), &tci_sleep,
  1197. HCI_INIT_TIMEOUT);
  1198. if (IS_ERR(skb)) {
  1199. err = PTR_ERR(skb);
  1200. bt_dev_err(hdev, "Failed to apply low power setting (%d)", err);
  1201. return err;
  1202. }
  1203. kfree_skb(skb);
  1204. done:
  1205. rettime = ktime_get();
  1206. delta = ktime_sub(rettime, calltime);
  1207. duration = (unsigned long long)ktime_to_ns(delta) >> 10;
  1208. bt_dev_info(hdev, "Device setup in %llu usecs", duration);
  1209. return 0;
  1210. }
  1211. EXPORT_SYMBOL_GPL(btmtk_usb_setup);
  1212. int btmtk_usb_shutdown(struct hci_dev *hdev)
  1213. {
  1214. struct btmtk_data *data = hci_get_priv(hdev);
  1215. struct btmtk_hci_wmt_params wmt_params;
  1216. u8 param = 0;
  1217. int err;
  1218. err = usb_autopm_get_interface(data->intf);
  1219. if (err < 0)
  1220. return err;
  1221. /* Disable the device */
  1222. wmt_params.op = BTMTK_WMT_FUNC_CTRL;
  1223. wmt_params.flag = 0;
  1224. wmt_params.dlen = sizeof(param);
  1225. wmt_params.data = &param;
  1226. wmt_params.status = NULL;
  1227. err = btmtk_usb_hci_wmt_sync(hdev, &wmt_params);
  1228. if (err < 0) {
  1229. bt_dev_err(hdev, "Failed to send wmt func ctrl (%d)", err);
  1230. usb_autopm_put_interface(data->intf);
  1231. return err;
  1232. }
  1233. usb_autopm_put_interface(data->intf);
  1234. return 0;
  1235. }
  1236. EXPORT_SYMBOL_GPL(btmtk_usb_shutdown);
  1237. #endif
  1238. MODULE_AUTHOR("Sean Wang <sean.wang@mediatek.com>");
  1239. MODULE_AUTHOR("Mark Chen <mark-yw.chen@mediatek.com>");
  1240. MODULE_DESCRIPTION("Bluetooth support for MediaTek devices ver " VERSION);
  1241. MODULE_VERSION(VERSION);
  1242. MODULE_LICENSE("GPL");
  1243. MODULE_FIRMWARE(FIRMWARE_MT7622);
  1244. MODULE_FIRMWARE(FIRMWARE_MT7663);
  1245. MODULE_FIRMWARE(FIRMWARE_MT7668);
  1246. MODULE_FIRMWARE(FIRMWARE_MT7922);
  1247. MODULE_FIRMWARE(FIRMWARE_MT7961);
  1248. MODULE_FIRMWARE(FIRMWARE_MT7925);