18097Sjkh// SPDX-License-Identifier: GPL-2.0
28097Sjkh// Copyright (c) 2018 MediaTek Inc.
38097Sjkh
48097Sjkh/*
58097Sjkh * Bluetooth support for MediaTek serial devices
68097Sjkh *
78735Sjkh * Author: Sean Wang <sean.wang@mediatek.com>
88097Sjkh *
98097Sjkh */
108097Sjkh
118097Sjkh#include <asm/unaligned.h>
128097Sjkh#include <linux/atomic.h>
138097Sjkh#include <linux/clk.h>
148097Sjkh#include <linux/firmware.h>
158097Sjkh#include <linux/gpio/consumer.h>
168097Sjkh#include <linux/iopoll.h>
178097Sjkh#include <linux/kernel.h>
188097Sjkh#include <linux/module.h>
198097Sjkh#include <linux/of.h>
208097Sjkh#include <linux/pinctrl/consumer.h>
218097Sjkh#include <linux/pm_runtime.h>
228097Sjkh#include <linux/regulator/consumer.h>
238097Sjkh#include <linux/serdev.h>
248097Sjkh#include <linux/skbuff.h>
258097Sjkh
268097Sjkh#include <net/bluetooth/bluetooth.h>
278097Sjkh#include <net/bluetooth/hci_core.h>
288097Sjkh
298097Sjkh#include "h4_recv.h"
308097Sjkh#include "btmtk.h"
318097Sjkh
328097Sjkh#define VERSION "0.2"
338097Sjkh
348097Sjkh#define MTK_STP_TLR_SIZE	2
358097Sjkh
368097Sjkh#define BTMTKUART_TX_STATE_ACTIVE	1
378097Sjkh#define BTMTKUART_TX_STATE_WAKEUP	2
388097Sjkh#define BTMTKUART_TX_WAIT_VND_EVT	3
398097Sjkh#define BTMTKUART_REQUIRED_WAKEUP	4
408097Sjkh
418097Sjkh#define BTMTKUART_FLAG_STANDALONE_HW	 BIT(0)
428097Sjkh
438097Sjkhstruct mtk_stp_hdr {
448097Sjkh	u8	prefix;
458097Sjkh	__be16	dlen;
468097Sjkh	u8	cs;
478097Sjkh} __packed;
488097Sjkh
498097Sjkhstruct btmtkuart_data {
508097Sjkh	unsigned int flags;
518097Sjkh	const char *fwname;
528281Sjkh};
538405Sjkh
548097Sjkhstruct btmtkuart_dev {
558208Sjkh	struct hci_dev *hdev;
568208Sjkh	struct serdev_device *serdev;
578174Sjkh
588174Sjkh	struct clk *clk;
598174Sjkh	struct clk *osc;
608174Sjkh	struct regulator *vcc;
618174Sjkh	struct gpio_desc *reset;
628405Sjkh	struct gpio_desc *boot;
638174Sjkh	struct pinctrl *pinctrl;
648208Sjkh	struct pinctrl_state *pins_runtime;
658208Sjkh	struct pinctrl_state *pins_boot;
668208Sjkh	speed_t	desired_speed;
678208Sjkh	speed_t	curr_speed;
688208Sjkh
698549Sjkh	struct work_struct tx_work;
708549Sjkh	unsigned long tx_state;
718549Sjkh	struct sk_buff_head txq;
728208Sjkh
738705Sjkh	struct sk_buff *rx_skb;
748705Sjkh	struct sk_buff *evt_skb;
758705Sjkh
768705Sjkh	u8	stp_pad[6];
778705Sjkh	u8	stp_cursor;
788705Sjkh	u16	stp_dlen;
798705Sjkh
808705Sjkh	const struct btmtkuart_data *data;
818705Sjkh};
828208Sjkh
838549Sjkh#define btmtkuart_is_standalone(bdev)	\
848549Sjkh	((bdev)->data->flags & BTMTKUART_FLAG_STANDALONE_HW)
858549Sjkh#define btmtkuart_is_builtin_soc(bdev)	\
868709Sjkh	!((bdev)->data->flags & BTMTKUART_FLAG_STANDALONE_HW)
878549Sjkh
888549Sjkhstatic int mtk_hci_wmt_sync(struct hci_dev *hdev,
898549Sjkh			    struct btmtk_hci_wmt_params *wmt_params)
908549Sjkh{
918549Sjkh	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
928549Sjkh	struct btmtk_hci_wmt_evt_funcc *wmt_evt_funcc;
938556Sjkh	u32 hlen, status = BTMTK_WMT_INVALID;
948549Sjkh	struct btmtk_hci_wmt_evt *wmt_evt;
958576Sjkh	struct btmtk_hci_wmt_cmd *wc;
968549Sjkh	struct btmtk_wmt_hdr *hdr;
978576Sjkh	int err;
988576Sjkh
998549Sjkh	/* Send the WMT command and wait until the WMT event returns */
1008208Sjkh	hlen = sizeof(*hdr) + wmt_params->dlen;
1018097Sjkh	if (hlen > 255) {
1028549Sjkh		err = -EINVAL;
1038549Sjkh		goto err_free_skb;
1048097Sjkh	}
1058097Sjkh
1068174Sjkh	wc = kzalloc(hlen, GFP_KERNEL);
1078174Sjkh	if (!wc) {
1088174Sjkh		err = -ENOMEM;
1098174Sjkh		goto err_free_skb;
1108174Sjkh	}
1118174Sjkh
1128405Sjkh	hdr = &wc->hdr;
1138174Sjkh	hdr->dir = 1;
1148174Sjkh	hdr->op = wmt_params->op;
1158208Sjkh	hdr->dlen = cpu_to_le16(wmt_params->dlen + 1);
1168097Sjkh	hdr->flag = wmt_params->flag;
1178097Sjkh	memcpy(wc->data, wmt_params->data, wmt_params->dlen);
1188097Sjkh
1198174Sjkh	set_bit(BTMTKUART_TX_WAIT_VND_EVT, &bdev->tx_state);
1208174Sjkh
1218174Sjkh	err = __hci_cmd_send(hdev, 0xfc6f, hlen, wc);
1228174Sjkh	if (err < 0) {
1238405Sjkh		clear_bit(BTMTKUART_TX_WAIT_VND_EVT, &bdev->tx_state);
1248208Sjkh		goto err_free_wc;
1258097Sjkh	}
1268097Sjkh
1278097Sjkh	/* The vendor specific WMT commands are all answered by a vendor
1288174Sjkh	 * specific event and will not have the Command Status or Command
1298174Sjkh	 * Complete as with usual HCI command flow control.
1308174Sjkh	 *
1318174Sjkh	 * After sending the command, wait for BTMTKUART_TX_WAIT_VND_EVT
1328174Sjkh	 * state to be cleared. The driver specific event receive routine
1338174Sjkh	 * will clear that state and with that indicate completion of the
1348097Sjkh	 * WMT command.
1358097Sjkh	 */
1368097Sjkh	err = wait_on_bit_timeout(&bdev->tx_state, BTMTKUART_TX_WAIT_VND_EVT,
1378097Sjkh				  TASK_INTERRUPTIBLE, HCI_INIT_TIMEOUT);
1388097Sjkh	if (err == -EINTR) {
1398208Sjkh		bt_dev_err(hdev, "Execution of wmt command interrupted");
1408208Sjkh		clear_bit(BTMTKUART_TX_WAIT_VND_EVT, &bdev->tx_state);
1418097Sjkh		goto err_free_wc;
1428097Sjkh	}
1438208Sjkh
1448363Sjkh	if (err) {
1458208Sjkh		bt_dev_err(hdev, "Execution of wmt command timed out");
1468208Sjkh		clear_bit(BTMTKUART_TX_WAIT_VND_EVT, &bdev->tx_state);
1478208Sjkh		err = -ETIMEDOUT;
1488208Sjkh		goto err_free_wc;
1498208Sjkh	}
1508642Sjkh
1518363Sjkh	/* Parse and handle the return WMT event */
1528208Sjkh	wmt_evt = (struct btmtk_hci_wmt_evt *)bdev->evt_skb->data;
1538097Sjkh	if (wmt_evt->whdr.op != hdr->op) {
1548208Sjkh		bt_dev_err(hdev, "Wrong op received %d expected %d",
1558208Sjkh			   wmt_evt->whdr.op, hdr->op);
1568208Sjkh		err = -EIO;
1578556Sjkh		goto err_free_wc;
1588636Sjkh	}
1598208Sjkh
1608549Sjkh	switch (wmt_evt->whdr.op) {
1618556Sjkh	case BTMTK_WMT_SEMAPHORE:
1628722Sjkh		if (wmt_evt->whdr.flag == 2)
1638722Sjkh			status = BTMTK_WMT_PATCH_UNDONE;
1648722Sjkh		else
1658556Sjkh			status = BTMTK_WMT_PATCH_DONE;
1668208Sjkh		break;
1678208Sjkh	case BTMTK_WMT_FUNC_CTRL:
1688307Sjkh		wmt_evt_funcc = (struct btmtk_hci_wmt_evt_funcc *)wmt_evt;
1698307Sjkh		if (be16_to_cpu(wmt_evt_funcc->status) == 0x404)
1708307Sjkh			status = BTMTK_WMT_ON_DONE;
1718307Sjkh		else if (be16_to_cpu(wmt_evt_funcc->status) == 0x420)
1728307Sjkh			status = BTMTK_WMT_ON_PROGRESS;
1738549Sjkh		else
1748549Sjkh			status = BTMTK_WMT_ON_UNDONE;
1758307Sjkh		break;
1768208Sjkh	}
1778336Sjkh
1788336Sjkh	if (wmt_params->status)
1798336Sjkh		*wmt_params->status = status;
1808307Sjkh
1818307Sjkherr_free_wc:
1828307Sjkh	kfree(wc);
1838336Sjkherr_free_skb:
1848307Sjkh	kfree_skb(bdev->evt_skb);
1858307Sjkh	bdev->evt_skb = NULL;
1868549Sjkh
1878307Sjkh	return err;
1888549Sjkh}
1898208Sjkh
1908576Sjkhstatic int btmtkuart_recv_event(struct hci_dev *hdev, struct sk_buff *skb)
1918576Sjkh{
1928576Sjkh	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
1938576Sjkh	struct hci_event_hdr *hdr = (void *)skb->data;
1948576Sjkh	int err;
1958735Sjkh
1968576Sjkh	/* When someone waits for the WMT event, the skb is being cloned
1978576Sjkh	 * and being processed the events from there then.
1988576Sjkh	 */
1998576Sjkh	if (test_bit(BTMTKUART_TX_WAIT_VND_EVT, &bdev->tx_state)) {
2008636Sjkh		bdev->evt_skb = skb_clone(skb, GFP_KERNEL);
2018576Sjkh		if (!bdev->evt_skb) {
2028576Sjkh			err = -ENOMEM;
2038576Sjkh			goto err_out;
2048576Sjkh		}
2058576Sjkh	}
2068097Sjkh
2078576Sjkh	err = hci_recv_frame(hdev, skb);
2088660Sjkh	if (err < 0)
2098715Sjkh		goto err_free_skb;
2108576Sjkh
2118576Sjkh	if (hdr->evt == HCI_EV_WMT) {
2128576Sjkh		if (test_and_clear_bit(BTMTKUART_TX_WAIT_VND_EVT,
2138576Sjkh				       &bdev->tx_state)) {
2148576Sjkh			/* Barrier to sync with other CPUs */
2158576Sjkh			smp_mb__after_atomic();
2168677Sjkh			wake_up_bit(&bdev->tx_state, BTMTKUART_TX_WAIT_VND_EVT);
2178576Sjkh		}
2188576Sjkh	}
2198677Sjkh
2208677Sjkh	return 0;
2218722Sjkh
2228576Sjkherr_free_skb:
2238576Sjkh	kfree_skb(bdev->evt_skb);
2248576Sjkh	bdev->evt_skb = NULL;
2258576Sjkh
2268576Sjkherr_out:
2278576Sjkh	return err;
2288576Sjkh}
2298576Sjkh
2308576Sjkhstatic const struct h4_recv_pkt mtk_recv_pkts[] = {
2318576Sjkh	{ H4_RECV_ACL,      .recv = hci_recv_frame },
2328576Sjkh	{ H4_RECV_SCO,      .recv = hci_recv_frame },
2338576Sjkh	{ H4_RECV_EVENT,    .recv = btmtkuart_recv_event },
2348208Sjkh};
2358107Sjkh
2368347Sjkhstatic void btmtkuart_tx_work(struct work_struct *work)
2378347Sjkh{
2388347Sjkh	struct btmtkuart_dev *bdev = container_of(work, struct btmtkuart_dev,
2398347Sjkh						   tx_work);
2408549Sjkh	struct serdev_device *serdev = bdev->serdev;
2418549Sjkh	struct hci_dev *hdev = bdev->hdev;
2428347Sjkh
2438705Sjkh	while (1) {
2448722Sjkh		clear_bit(BTMTKUART_TX_STATE_WAKEUP, &bdev->tx_state);
2458722Sjkh
2468722Sjkh		while (1) {
2478722Sjkh			struct sk_buff *skb = skb_dequeue(&bdev->txq);
2488722Sjkh			int len;
2498722Sjkh
2508705Sjkh			if (!skb)
2518405Sjkh				break;
2528405Sjkh
2538405Sjkh			len = serdev_device_write_buf(serdev, skb->data,
2548405Sjkh						      skb->len);
2558405Sjkh			hdev->stat.byte_tx += len;
2568351Sjkh
2578549Sjkh			skb_pull(skb, len);
2588556Sjkh			if (skb->len > 0) {
2598556Sjkh				skb_queue_head(&bdev->txq, skb);
2608636Sjkh				break;
2618641Sjkh			}
2628641Sjkh
2638722Sjkh			switch (hci_skb_pkt_type(skb)) {
2648722Sjkh			case HCI_COMMAND_PKT:
2658722Sjkh				hdev->stat.cmd_tx++;
2668097Sjkh				break;
2678351Sjkh			case HCI_ACLDATA_PKT:
2688556Sjkh				hdev->stat.acl_tx++;
2698097Sjkh				break;
2708278Sjkh			case HCI_SCODATA_PKT:
2718278Sjkh				hdev->stat.sco_tx++;
2728278Sjkh				break;
2738278Sjkh			}
2748278Sjkh
2758278Sjkh			kfree_skb(skb);
2768278Sjkh		}
2778405Sjkh
2788405Sjkh		if (!test_bit(BTMTKUART_TX_STATE_WAKEUP, &bdev->tx_state))
2798278Sjkh			break;
2808107Sjkh	}
2818097Sjkh
2828097Sjkh	clear_bit(BTMTKUART_TX_STATE_ACTIVE, &bdev->tx_state);
2838549Sjkh}
2848097Sjkh
2858351Sjkhstatic void btmtkuart_tx_wakeup(struct btmtkuart_dev *bdev)
2868351Sjkh{
2878351Sjkh	if (test_and_set_bit(BTMTKUART_TX_STATE_ACTIVE, &bdev->tx_state))
2888351Sjkh		set_bit(BTMTKUART_TX_STATE_WAKEUP, &bdev->tx_state);
2898556Sjkh
2908351Sjkh	schedule_work(&bdev->tx_work);
2918351Sjkh}
2928351Sjkh
2938351Sjkhstatic const unsigned char *
2948351Sjkhmtk_stp_split(struct btmtkuart_dev *bdev, const unsigned char *data, int count,
2958351Sjkh	      int *sz_h4)
2968351Sjkh{
2978351Sjkh	struct mtk_stp_hdr *shdr;
2988351Sjkh
2998351Sjkh	/* The cursor is reset when all the data of STP is consumed out */
3008351Sjkh	if (!bdev->stp_dlen && bdev->stp_cursor >= 6)
3018351Sjkh		bdev->stp_cursor = 0;
3028351Sjkh
3038351Sjkh	/* Filling pad until all STP info is obtained */
3048549Sjkh	while (bdev->stp_cursor < 6 && count > 0) {
3058576Sjkh		bdev->stp_pad[bdev->stp_cursor] = *data;
3068549Sjkh		bdev->stp_cursor++;
3078351Sjkh		data++;
3088405Sjkh		count--;
3098405Sjkh	}
3108405Sjkh
3118405Sjkh	/* Retrieve STP info and have a sanity check */
3128405Sjkh	if (!bdev->stp_dlen && bdev->stp_cursor >= 6) {
3138405Sjkh		shdr = (struct mtk_stp_hdr *)&bdev->stp_pad[2];
3148405Sjkh		bdev->stp_dlen = be16_to_cpu(shdr->dlen) & 0x0fff;
3158601Sjkh
3168601Sjkh		/* Resync STP when unexpected data is being read */
3178629Sjkh		if (shdr->prefix != 0x80 || bdev->stp_dlen > 2048) {
3188629Sjkh			bt_dev_err(bdev->hdev, "stp format unexpect (%d, %d)",
3198629Sjkh				   shdr->prefix, bdev->stp_dlen);
3208351Sjkh			bdev->stp_cursor = 2;
3218351Sjkh			bdev->stp_dlen = 0;
3228351Sjkh		}
3238351Sjkh	}
3248351Sjkh
3258351Sjkh	/* Directly quit when there's no data found for H4 can process */
3268351Sjkh	if (count <= 0)
3278351Sjkh		return NULL;
3288556Sjkh
3298705Sjkh	/* Tranlate to how much the size of data H4 can handle so far */
3308556Sjkh	*sz_h4 = min_t(int, count, bdev->stp_dlen);
3318576Sjkh
3328576Sjkh	/* Update the remaining size of STP packet */
3338556Sjkh	bdev->stp_dlen -= *sz_h4;
3348641Sjkh
3358576Sjkh	/* Data points to STP payload which can be handled by H4 */
3368677Sjkh	return data;
3378556Sjkh}
3388705Sjkh
3398705Sjkhstatic void btmtkuart_recv(struct hci_dev *hdev, const u8 *data, size_t count)
3408705Sjkh{
3418705Sjkh	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
3428705Sjkh	const unsigned char *p_left = data, *p_h4;
3438705Sjkh	int sz_left = count, sz_h4, adv;
3448705Sjkh	int err;
3458705Sjkh
3468722Sjkh	while (sz_left > 0) {
3478722Sjkh		/*  The serial data received from MT7622 BT controller is
3488722Sjkh		 *  at all time padded around with the STP header and tailer.
3498722Sjkh		 *
3508722Sjkh		 *  A full STP packet is looking like
3518722Sjkh		 *   -----------------------------------
3528351Sjkh		 *  | STP header  |  H:4   | STP tailer |
3538107Sjkh		 *   -----------------------------------
3548097Sjkh		 *  but it doesn't guarantee to contain a full H:4 packet which
3558097Sjkh		 *  means that it's possible for multiple STP packets forms a
3568097Sjkh		 *  full H:4 packet that means extra STP header + length doesn't
3578097Sjkh		 *  indicate a full H:4 frame, things can fragment. Whose length
3588097Sjkh		 *  recorded in STP header just shows up the most length the
3598097Sjkh		 *  H:4 engine can handle currently.
3608208Sjkh		 */
3618363Sjkh
3628097Sjkh		p_h4 = mtk_stp_split(bdev, p_left, sz_left, &sz_h4);
3638174Sjkh		if (!p_h4)
3648174Sjkh			break;
3658097Sjkh
3668556Sjkh		adv = p_h4 - p_left;
3678556Sjkh		sz_left -= adv;
3688097Sjkh		p_left += adv;
3698107Sjkh
3708097Sjkh		bdev->rx_skb = h4_recv_buf(bdev->hdev, bdev->rx_skb, p_h4,
3718262Sjkh					   sz_h4, mtk_recv_pkts,
3728097Sjkh					   ARRAY_SIZE(mtk_recv_pkts));
3738347Sjkh		if (IS_ERR(bdev->rx_skb)) {
3748097Sjkh			err = PTR_ERR(bdev->rx_skb);
3758097Sjkh			bt_dev_err(bdev->hdev,
3768208Sjkh				   "Frame reassembly failed (%d)", err);
3778313Sjkh			bdev->rx_skb = NULL;
3788705Sjkh			return;
3798208Sjkh		}
3808262Sjkh
3818097Sjkh		sz_left -= sz_h4;
3828351Sjkh		p_left += sz_h4;
3838351Sjkh	}
3848351Sjkh}
3858351Sjkh
3868351Sjkhstatic size_t btmtkuart_receive_buf(struct serdev_device *serdev,
3878351Sjkh				    const u8 *data, size_t count)
3888351Sjkh{
3898351Sjkh	struct btmtkuart_dev *bdev = serdev_device_get_drvdata(serdev);
3908351Sjkh
3918351Sjkh	btmtkuart_recv(bdev->hdev, data, count);
3928351Sjkh
3938351Sjkh	bdev->hdev->stat.byte_rx += count;
3948351Sjkh
3958351Sjkh	return count;
3968107Sjkh}
3978556Sjkh
3988556Sjkhstatic void btmtkuart_write_wakeup(struct serdev_device *serdev)
3998677Sjkh{
4008709Sjkh	struct btmtkuart_dev *bdev = serdev_device_get_drvdata(serdev);
4018556Sjkh
4028351Sjkh	btmtkuart_tx_wakeup(bdev);
4038351Sjkh}
4048208Sjkh
4058208Sjkhstatic const struct serdev_device_ops btmtkuart_client_ops = {
4068208Sjkh	.receive_buf = btmtkuart_receive_buf,
4078208Sjkh	.write_wakeup = btmtkuart_write_wakeup,
4088208Sjkh};
4098281Sjkh
4108549Sjkhstatic int btmtkuart_open(struct hci_dev *hdev)
4118281Sjkh{
4128097Sjkh	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
4138097Sjkh	struct device *dev;
414	int err;
415
416	err = serdev_device_open(bdev->serdev);
417	if (err) {
418		bt_dev_err(hdev, "Unable to open UART device %s",
419			   dev_name(&bdev->serdev->dev));
420		goto err_open;
421	}
422
423	if (btmtkuart_is_standalone(bdev)) {
424		if (bdev->curr_speed != bdev->desired_speed)
425			err = serdev_device_set_baudrate(bdev->serdev,
426							 115200);
427		else
428			err = serdev_device_set_baudrate(bdev->serdev,
429							 bdev->desired_speed);
430
431		if (err < 0) {
432			bt_dev_err(hdev, "Unable to set baudrate UART device %s",
433				   dev_name(&bdev->serdev->dev));
434			goto  err_serdev_close;
435		}
436
437		serdev_device_set_flow_control(bdev->serdev, false);
438	}
439
440	bdev->stp_cursor = 2;
441	bdev->stp_dlen = 0;
442
443	dev = &bdev->serdev->dev;
444
445	/* Enable the power domain and clock the device requires */
446	pm_runtime_enable(dev);
447	err = pm_runtime_resume_and_get(dev);
448	if (err < 0)
449		goto err_disable_rpm;
450
451	err = clk_prepare_enable(bdev->clk);
452	if (err < 0)
453		goto err_put_rpm;
454
455	return 0;
456
457err_put_rpm:
458	pm_runtime_put_sync(dev);
459err_disable_rpm:
460	pm_runtime_disable(dev);
461err_serdev_close:
462	serdev_device_close(bdev->serdev);
463err_open:
464	return err;
465}
466
467static int btmtkuart_close(struct hci_dev *hdev)
468{
469	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
470	struct device *dev = &bdev->serdev->dev;
471
472	/* Shutdown the clock and power domain the device requires */
473	clk_disable_unprepare(bdev->clk);
474	pm_runtime_put_sync(dev);
475	pm_runtime_disable(dev);
476
477	serdev_device_close(bdev->serdev);
478
479	return 0;
480}
481
482static int btmtkuart_flush(struct hci_dev *hdev)
483{
484	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
485
486	/* Flush any pending characters */
487	serdev_device_write_flush(bdev->serdev);
488	skb_queue_purge(&bdev->txq);
489
490	cancel_work_sync(&bdev->tx_work);
491
492	kfree_skb(bdev->rx_skb);
493	bdev->rx_skb = NULL;
494
495	bdev->stp_cursor = 2;
496	bdev->stp_dlen = 0;
497
498	return 0;
499}
500
501static int btmtkuart_func_query(struct hci_dev *hdev)
502{
503	struct btmtk_hci_wmt_params wmt_params;
504	int status, err;
505	u8 param = 0;
506
507	/* Query whether the function is enabled */
508	wmt_params.op = BTMTK_WMT_FUNC_CTRL;
509	wmt_params.flag = 4;
510	wmt_params.dlen = sizeof(param);
511	wmt_params.data = &param;
512	wmt_params.status = &status;
513
514	err = mtk_hci_wmt_sync(hdev, &wmt_params);
515	if (err < 0) {
516		bt_dev_err(hdev, "Failed to query function status (%d)", err);
517		return err;
518	}
519
520	return status;
521}
522
523static int btmtkuart_change_baudrate(struct hci_dev *hdev)
524{
525	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
526	struct btmtk_hci_wmt_params wmt_params;
527	__le32 baudrate;
528	u8 param;
529	int err;
530
531	/* Indicate the device to enter the probe state the host is
532	 * ready to change a new baudrate.
533	 */
534	baudrate = cpu_to_le32(bdev->desired_speed);
535	wmt_params.op = BTMTK_WMT_HIF;
536	wmt_params.flag = 1;
537	wmt_params.dlen = 4;
538	wmt_params.data = &baudrate;
539	wmt_params.status = NULL;
540
541	err = mtk_hci_wmt_sync(hdev, &wmt_params);
542	if (err < 0) {
543		bt_dev_err(hdev, "Failed to device baudrate (%d)", err);
544		return err;
545	}
546
547	err = serdev_device_set_baudrate(bdev->serdev,
548					 bdev->desired_speed);
549	if (err < 0) {
550		bt_dev_err(hdev, "Failed to set up host baudrate (%d)",
551			   err);
552		return err;
553	}
554
555	serdev_device_set_flow_control(bdev->serdev, false);
556
557	/* Send a dummy byte 0xff to activate the new baudrate */
558	param = 0xff;
559	err = serdev_device_write_buf(bdev->serdev, &param, sizeof(param));
560	if (err < 0 || err < sizeof(param))
561		return err;
562
563	serdev_device_wait_until_sent(bdev->serdev, 0);
564
565	/* Wait some time for the device changing baudrate done */
566	usleep_range(20000, 22000);
567
568	/* Test the new baudrate */
569	wmt_params.op = BTMTK_WMT_TEST;
570	wmt_params.flag = 7;
571	wmt_params.dlen = 0;
572	wmt_params.data = NULL;
573	wmt_params.status = NULL;
574
575	err = mtk_hci_wmt_sync(hdev, &wmt_params);
576	if (err < 0) {
577		bt_dev_err(hdev, "Failed to test new baudrate (%d)",
578			   err);
579		return err;
580	}
581
582	bdev->curr_speed = bdev->desired_speed;
583
584	return 0;
585}
586
587static int btmtkuart_setup(struct hci_dev *hdev)
588{
589	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
590	struct btmtk_hci_wmt_params wmt_params;
591	ktime_t calltime, delta, rettime;
592	struct btmtk_tci_sleep tci_sleep;
593	unsigned long long duration;
594	struct sk_buff *skb;
595	int err, status;
596	u8 param = 0x1;
597
598	calltime = ktime_get();
599
600	/* Wakeup MCUSYS is required for certain devices before we start to
601	 * do any setups.
602	 */
603	if (test_bit(BTMTKUART_REQUIRED_WAKEUP, &bdev->tx_state)) {
604		wmt_params.op = BTMTK_WMT_WAKEUP;
605		wmt_params.flag = 3;
606		wmt_params.dlen = 0;
607		wmt_params.data = NULL;
608		wmt_params.status = NULL;
609
610		err = mtk_hci_wmt_sync(hdev, &wmt_params);
611		if (err < 0) {
612			bt_dev_err(hdev, "Failed to wakeup the chip (%d)", err);
613			return err;
614		}
615
616		clear_bit(BTMTKUART_REQUIRED_WAKEUP, &bdev->tx_state);
617	}
618
619	if (btmtkuart_is_standalone(bdev))
620		btmtkuart_change_baudrate(hdev);
621
622	/* Query whether the firmware is already download */
623	wmt_params.op = BTMTK_WMT_SEMAPHORE;
624	wmt_params.flag = 1;
625	wmt_params.dlen = 0;
626	wmt_params.data = NULL;
627	wmt_params.status = &status;
628
629	err = mtk_hci_wmt_sync(hdev, &wmt_params);
630	if (err < 0) {
631		bt_dev_err(hdev, "Failed to query firmware status (%d)", err);
632		return err;
633	}
634
635	if (status == BTMTK_WMT_PATCH_DONE) {
636		bt_dev_info(hdev, "Firmware already downloaded");
637		goto ignore_setup_fw;
638	}
639
640	/* Setup a firmware which the device definitely requires */
641	err = btmtk_setup_firmware(hdev, bdev->data->fwname, mtk_hci_wmt_sync);
642	if (err < 0)
643		return err;
644
645ignore_setup_fw:
646	/* Query whether the device is already enabled */
647	err = readx_poll_timeout(btmtkuart_func_query, hdev, status,
648				 status < 0 || status != BTMTK_WMT_ON_PROGRESS,
649				 2000, 5000000);
650	/* -ETIMEDOUT happens */
651	if (err < 0)
652		return err;
653
654	/* The other errors happen in btusb_mtk_func_query */
655	if (status < 0)
656		return status;
657
658	if (status == BTMTK_WMT_ON_DONE) {
659		bt_dev_info(hdev, "function already on");
660		goto ignore_func_on;
661	}
662
663	/* Enable Bluetooth protocol */
664	wmt_params.op = BTMTK_WMT_FUNC_CTRL;
665	wmt_params.flag = 0;
666	wmt_params.dlen = sizeof(param);
667	wmt_params.data = &param;
668	wmt_params.status = NULL;
669
670	err = mtk_hci_wmt_sync(hdev, &wmt_params);
671	if (err < 0) {
672		bt_dev_err(hdev, "Failed to send wmt func ctrl (%d)", err);
673		return err;
674	}
675
676ignore_func_on:
677	/* Apply the low power environment setup */
678	tci_sleep.mode = 0x5;
679	tci_sleep.duration = cpu_to_le16(0x640);
680	tci_sleep.host_duration = cpu_to_le16(0x640);
681	tci_sleep.host_wakeup_pin = 0;
682	tci_sleep.time_compensation = 0;
683
684	skb = __hci_cmd_sync(hdev, 0xfc7a, sizeof(tci_sleep), &tci_sleep,
685			     HCI_INIT_TIMEOUT);
686	if (IS_ERR(skb)) {
687		err = PTR_ERR(skb);
688		bt_dev_err(hdev, "Failed to apply low power setting (%d)", err);
689		return err;
690	}
691	kfree_skb(skb);
692
693	rettime = ktime_get();
694	delta = ktime_sub(rettime, calltime);
695	duration = (unsigned long long)ktime_to_ns(delta) >> 10;
696
697	bt_dev_info(hdev, "Device setup in %llu usecs", duration);
698
699	return 0;
700}
701
702static int btmtkuart_shutdown(struct hci_dev *hdev)
703{
704	struct btmtk_hci_wmt_params wmt_params;
705	u8 param = 0x0;
706	int err;
707
708	/* Disable the device */
709	wmt_params.op = BTMTK_WMT_FUNC_CTRL;
710	wmt_params.flag = 0;
711	wmt_params.dlen = sizeof(param);
712	wmt_params.data = &param;
713	wmt_params.status = NULL;
714
715	err = mtk_hci_wmt_sync(hdev, &wmt_params);
716	if (err < 0) {
717		bt_dev_err(hdev, "Failed to send wmt func ctrl (%d)", err);
718		return err;
719	}
720
721	return 0;
722}
723
724static int btmtkuart_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
725{
726	struct btmtkuart_dev *bdev = hci_get_drvdata(hdev);
727	struct mtk_stp_hdr *shdr;
728	int err, dlen, type = 0;
729
730	/* Prepend skb with frame type */
731	memcpy(skb_push(skb, 1), &hci_skb_pkt_type(skb), 1);
732
733	/* Make sure that there is enough rooms for STP header and trailer */
734	if (unlikely(skb_headroom(skb) < sizeof(*shdr)) ||
735	    (skb_tailroom(skb) < MTK_STP_TLR_SIZE)) {
736		err = pskb_expand_head(skb, sizeof(*shdr), MTK_STP_TLR_SIZE,
737				       GFP_ATOMIC);
738		if (err < 0)
739			return err;
740	}
741
742	/* Add the STP header */
743	dlen = skb->len;
744	shdr = skb_push(skb, sizeof(*shdr));
745	shdr->prefix = 0x80;
746	shdr->dlen = cpu_to_be16((dlen & 0x0fff) | (type << 12));
747	shdr->cs = 0;		/* MT7622 doesn't care about checksum value */
748
749	/* Add the STP trailer */
750	skb_put_zero(skb, MTK_STP_TLR_SIZE);
751
752	skb_queue_tail(&bdev->txq, skb);
753
754	btmtkuart_tx_wakeup(bdev);
755	return 0;
756}
757
758static int btmtkuart_parse_dt(struct serdev_device *serdev)
759{
760	struct btmtkuart_dev *bdev = serdev_device_get_drvdata(serdev);
761	struct device_node *node = serdev->dev.of_node;
762	u32 speed = 921600;
763	int err;
764
765	if (btmtkuart_is_standalone(bdev)) {
766		of_property_read_u32(node, "current-speed", &speed);
767
768		bdev->desired_speed = speed;
769
770		bdev->vcc = devm_regulator_get(&serdev->dev, "vcc");
771		if (IS_ERR(bdev->vcc)) {
772			err = PTR_ERR(bdev->vcc);
773			return err;
774		}
775
776		bdev->osc = devm_clk_get_optional(&serdev->dev, "osc");
777		if (IS_ERR(bdev->osc)) {
778			err = PTR_ERR(bdev->osc);
779			return err;
780		}
781
782		bdev->boot = devm_gpiod_get_optional(&serdev->dev, "boot",
783						     GPIOD_OUT_LOW);
784		if (IS_ERR(bdev->boot)) {
785			err = PTR_ERR(bdev->boot);
786			return err;
787		}
788
789		bdev->pinctrl = devm_pinctrl_get(&serdev->dev);
790		if (IS_ERR(bdev->pinctrl)) {
791			err = PTR_ERR(bdev->pinctrl);
792			return err;
793		}
794
795		bdev->pins_boot = pinctrl_lookup_state(bdev->pinctrl,
796						       "default");
797		if (IS_ERR(bdev->pins_boot) && !bdev->boot) {
798			err = PTR_ERR(bdev->pins_boot);
799			dev_err(&serdev->dev,
800				"Should assign RXD to LOW at boot stage\n");
801			return err;
802		}
803
804		bdev->pins_runtime = pinctrl_lookup_state(bdev->pinctrl,
805							  "runtime");
806		if (IS_ERR(bdev->pins_runtime)) {
807			err = PTR_ERR(bdev->pins_runtime);
808			return err;
809		}
810
811		bdev->reset = devm_gpiod_get_optional(&serdev->dev, "reset",
812						      GPIOD_OUT_LOW);
813		if (IS_ERR(bdev->reset)) {
814			err = PTR_ERR(bdev->reset);
815			return err;
816		}
817	} else if (btmtkuart_is_builtin_soc(bdev)) {
818		bdev->clk = devm_clk_get(&serdev->dev, "ref");
819		if (IS_ERR(bdev->clk))
820			return PTR_ERR(bdev->clk);
821	}
822
823	return 0;
824}
825
826static int btmtkuart_probe(struct serdev_device *serdev)
827{
828	struct btmtkuart_dev *bdev;
829	struct hci_dev *hdev;
830	int err;
831
832	bdev = devm_kzalloc(&serdev->dev, sizeof(*bdev), GFP_KERNEL);
833	if (!bdev)
834		return -ENOMEM;
835
836	bdev->data = of_device_get_match_data(&serdev->dev);
837	if (!bdev->data)
838		return -ENODEV;
839
840	bdev->serdev = serdev;
841	serdev_device_set_drvdata(serdev, bdev);
842
843	serdev_device_set_client_ops(serdev, &btmtkuart_client_ops);
844
845	err = btmtkuart_parse_dt(serdev);
846	if (err < 0)
847		return err;
848
849	INIT_WORK(&bdev->tx_work, btmtkuart_tx_work);
850	skb_queue_head_init(&bdev->txq);
851
852	/* Initialize and register HCI device */
853	hdev = hci_alloc_dev();
854	if (!hdev) {
855		dev_err(&serdev->dev, "Can't allocate HCI device\n");
856		return -ENOMEM;
857	}
858
859	bdev->hdev = hdev;
860
861	hdev->bus = HCI_UART;
862	hci_set_drvdata(hdev, bdev);
863
864	hdev->open     = btmtkuart_open;
865	hdev->close    = btmtkuart_close;
866	hdev->flush    = btmtkuart_flush;
867	hdev->setup    = btmtkuart_setup;
868	hdev->shutdown = btmtkuart_shutdown;
869	hdev->send     = btmtkuart_send_frame;
870	hdev->set_bdaddr = btmtk_set_bdaddr;
871	SET_HCIDEV_DEV(hdev, &serdev->dev);
872
873	hdev->manufacturer = 70;
874	set_bit(HCI_QUIRK_NON_PERSISTENT_SETUP, &hdev->quirks);
875
876	if (btmtkuart_is_standalone(bdev)) {
877		err = clk_prepare_enable(bdev->osc);
878		if (err < 0)
879			goto err_hci_free_dev;
880
881		if (bdev->boot) {
882			gpiod_set_value_cansleep(bdev->boot, 1);
883		} else {
884			/* Switch to the specific pin state for the booting
885			 * requires.
886			 */
887			pinctrl_select_state(bdev->pinctrl, bdev->pins_boot);
888		}
889
890		/* Power on */
891		err = regulator_enable(bdev->vcc);
892		if (err < 0)
893			goto err_clk_disable_unprepare;
894
895		/* Reset if the reset-gpios is available otherwise the board
896		 * -level design should be guaranteed.
897		 */
898		if (bdev->reset) {
899			gpiod_set_value_cansleep(bdev->reset, 1);
900			usleep_range(1000, 2000);
901			gpiod_set_value_cansleep(bdev->reset, 0);
902		}
903
904		/* Wait some time until device got ready and switch to the pin
905		 * mode the device requires for UART transfers.
906		 */
907		msleep(50);
908
909		if (bdev->boot)
910			devm_gpiod_put(&serdev->dev, bdev->boot);
911
912		pinctrl_select_state(bdev->pinctrl, bdev->pins_runtime);
913
914		/* A standalone device doesn't depends on power domain on SoC,
915		 * so mark it as no callbacks.
916		 */
917		pm_runtime_no_callbacks(&serdev->dev);
918
919		set_bit(BTMTKUART_REQUIRED_WAKEUP, &bdev->tx_state);
920	}
921
922	err = hci_register_dev(hdev);
923	if (err < 0) {
924		dev_err(&serdev->dev, "Can't register HCI device\n");
925		goto err_regulator_disable;
926	}
927
928	return 0;
929
930err_regulator_disable:
931	if (btmtkuart_is_standalone(bdev))
932		regulator_disable(bdev->vcc);
933err_clk_disable_unprepare:
934	if (btmtkuart_is_standalone(bdev))
935		clk_disable_unprepare(bdev->osc);
936err_hci_free_dev:
937	hci_free_dev(hdev);
938
939	return err;
940}
941
942static void btmtkuart_remove(struct serdev_device *serdev)
943{
944	struct btmtkuart_dev *bdev = serdev_device_get_drvdata(serdev);
945	struct hci_dev *hdev = bdev->hdev;
946
947	if (btmtkuart_is_standalone(bdev)) {
948		regulator_disable(bdev->vcc);
949		clk_disable_unprepare(bdev->osc);
950	}
951
952	hci_unregister_dev(hdev);
953	hci_free_dev(hdev);
954}
955
956static const struct btmtkuart_data mt7622_data __maybe_unused = {
957	.fwname = FIRMWARE_MT7622,
958};
959
960static const struct btmtkuart_data mt7663_data __maybe_unused = {
961	.flags = BTMTKUART_FLAG_STANDALONE_HW,
962	.fwname = FIRMWARE_MT7663,
963};
964
965static const struct btmtkuart_data mt7668_data __maybe_unused = {
966	.flags = BTMTKUART_FLAG_STANDALONE_HW,
967	.fwname = FIRMWARE_MT7668,
968};
969
970#ifdef CONFIG_OF
971static const struct of_device_id mtk_of_match_table[] = {
972	{ .compatible = "mediatek,mt7622-bluetooth", .data = &mt7622_data},
973	{ .compatible = "mediatek,mt7663u-bluetooth", .data = &mt7663_data},
974	{ .compatible = "mediatek,mt7668u-bluetooth", .data = &mt7668_data},
975	{ }
976};
977MODULE_DEVICE_TABLE(of, mtk_of_match_table);
978#endif
979
980static struct serdev_device_driver btmtkuart_driver = {
981	.probe = btmtkuart_probe,
982	.remove = btmtkuart_remove,
983	.driver = {
984		.name = "btmtkuart",
985		.of_match_table = of_match_ptr(mtk_of_match_table),
986	},
987};
988
989module_serdev_device_driver(btmtkuart_driver);
990
991MODULE_AUTHOR("Sean Wang <sean.wang@mediatek.com>");
992MODULE_DESCRIPTION("MediaTek Bluetooth Serial driver ver " VERSION);
993MODULE_VERSION(VERSION);
994MODULE_LICENSE("GPL");
995