1 /**
2  * Marvell Bluetooth driver
3  *
4  * Copyright (C) 2009, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  *
15  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
17  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
18  * this warranty disclaimer.
19  **/
20 
21 #include <linux/module.h>
22 #include <linux/of.h>
23 #include <net/bluetooth/bluetooth.h>
24 #include <net/bluetooth/hci_core.h>
25 #include <linux/mmc/sdio_func.h>
26 
27 #include "btmrvl_drv.h"
28 #include "btmrvl_sdio.h"
29 
30 #define VERSION "1.0"
31 
32 /*
33  * This function is called by interface specific interrupt handler.
34  * It updates Power Save & Host Sleep states, and wakes up the main
35  * thread.
36  */
37 void btmrvl_interrupt(struct btmrvl_private *priv)
38 {
39 	priv->adapter->ps_state = PS_AWAKE;
40 
41 	priv->adapter->wakeup_tries = 0;
42 
43 	priv->adapter->int_count++;
44 
45 	if (priv->adapter->hs_state == HS_ACTIVATED) {
46 		BT_DBG("BT: HS DEACTIVATED in ISR!");
47 		priv->adapter->hs_state = HS_DEACTIVATED;
48 	}
49 
50 	wake_up_interruptible(&priv->main_thread.wait_q);
51 }
52 EXPORT_SYMBOL_GPL(btmrvl_interrupt);
53 
54 bool btmrvl_check_evtpkt(struct btmrvl_private *priv, struct sk_buff *skb)
55 {
56 	struct hci_event_hdr *hdr = (void *) skb->data;
57 
58 	if (hdr->evt == HCI_EV_CMD_COMPLETE) {
59 		struct hci_ev_cmd_complete *ec;
60 		u16 opcode;
61 
62 		ec = (void *) (skb->data + HCI_EVENT_HDR_SIZE);
63 		opcode = __le16_to_cpu(ec->opcode);
64 
65 		if (priv->btmrvl_dev.sendcmdflag) {
66 			priv->btmrvl_dev.sendcmdflag = false;
67 			priv->adapter->cmd_complete = true;
68 			wake_up_interruptible(&priv->adapter->cmd_wait_q);
69 
70 			if (hci_opcode_ogf(opcode) == 0x3F) {
71 				BT_DBG("vendor event skipped: opcode=%#4.4x",
72 				       opcode);
73 				kfree_skb(skb);
74 				return false;
75 			}
76 		}
77 	}
78 
79 	return true;
80 }
81 EXPORT_SYMBOL_GPL(btmrvl_check_evtpkt);
82 
83 int btmrvl_process_event(struct btmrvl_private *priv, struct sk_buff *skb)
84 {
85 	struct btmrvl_adapter *adapter = priv->adapter;
86 	struct btmrvl_event *event;
87 	int ret = 0;
88 
89 	event = (struct btmrvl_event *) skb->data;
90 	if (event->ec != 0xff) {
91 		BT_DBG("Not Marvell Event=%x", event->ec);
92 		ret = -EINVAL;
93 		goto exit;
94 	}
95 
96 	switch (event->data[0]) {
97 	case BT_EVENT_AUTO_SLEEP_MODE:
98 		if (!event->data[2]) {
99 			if (event->data[1] == BT_PS_ENABLE)
100 				adapter->psmode = 1;
101 			else
102 				adapter->psmode = 0;
103 			BT_DBG("PS Mode:%s",
104 				(adapter->psmode) ? "Enable" : "Disable");
105 		} else {
106 			BT_DBG("PS Mode command failed");
107 		}
108 		break;
109 
110 	case BT_EVENT_HOST_SLEEP_CONFIG:
111 		if (!event->data[3])
112 			BT_DBG("gpio=%x, gap=%x", event->data[1],
113 							event->data[2]);
114 		else
115 			BT_DBG("HSCFG command failed");
116 		break;
117 
118 	case BT_EVENT_HOST_SLEEP_ENABLE:
119 		if (!event->data[1]) {
120 			adapter->hs_state = HS_ACTIVATED;
121 			if (adapter->psmode)
122 				adapter->ps_state = PS_SLEEP;
123 			wake_up_interruptible(&adapter->event_hs_wait_q);
124 			BT_DBG("HS ACTIVATED!");
125 		} else {
126 			BT_DBG("HS Enable failed");
127 		}
128 		break;
129 
130 	case BT_EVENT_MODULE_CFG_REQ:
131 		if (priv->btmrvl_dev.sendcmdflag &&
132 				event->data[1] == MODULE_BRINGUP_REQ) {
133 			BT_DBG("EVENT:%s",
134 				((event->data[2] == MODULE_BROUGHT_UP) ||
135 				(event->data[2] == MODULE_ALREADY_UP)) ?
136 				"Bring-up succeed" : "Bring-up failed");
137 
138 			if (event->length > 3 && event->data[3])
139 				priv->btmrvl_dev.dev_type = HCI_AMP;
140 			else
141 				priv->btmrvl_dev.dev_type = HCI_BREDR;
142 
143 			BT_DBG("dev_type: %d", priv->btmrvl_dev.dev_type);
144 		} else if (priv->btmrvl_dev.sendcmdflag &&
145 				event->data[1] == MODULE_SHUTDOWN_REQ) {
146 			BT_DBG("EVENT:%s", (event->data[2]) ?
147 				"Shutdown failed" : "Shutdown succeed");
148 		} else {
149 			BT_DBG("BT_CMD_MODULE_CFG_REQ resp for APP");
150 			ret = -EINVAL;
151 		}
152 		break;
153 
154 	case BT_EVENT_POWER_STATE:
155 		if (event->data[1] == BT_PS_SLEEP)
156 			adapter->ps_state = PS_SLEEP;
157 		BT_DBG("EVENT:%s",
158 			(adapter->ps_state) ? "PS_SLEEP" : "PS_AWAKE");
159 		break;
160 
161 	default:
162 		BT_DBG("Unknown Event=%d", event->data[0]);
163 		ret = -EINVAL;
164 		break;
165 	}
166 
167 exit:
168 	if (!ret)
169 		kfree_skb(skb);
170 
171 	return ret;
172 }
173 EXPORT_SYMBOL_GPL(btmrvl_process_event);
174 
175 static int btmrvl_send_sync_cmd(struct btmrvl_private *priv, u16 opcode,
176 				const void *param, u8 len)
177 {
178 	struct sk_buff *skb;
179 	struct hci_command_hdr *hdr;
180 
181 	if (priv->surprise_removed) {
182 		BT_ERR("Card is removed");
183 		return -EFAULT;
184 	}
185 
186 	skb = bt_skb_alloc(HCI_COMMAND_HDR_SIZE + len, GFP_ATOMIC);
187 	if (skb == NULL) {
188 		BT_ERR("No free skb");
189 		return -ENOMEM;
190 	}
191 
192 	hdr = (struct hci_command_hdr *)skb_put(skb, HCI_COMMAND_HDR_SIZE);
193 	hdr->opcode = cpu_to_le16(opcode);
194 	hdr->plen = len;
195 
196 	if (len)
197 		memcpy(skb_put(skb, len), param, len);
198 
199 	bt_cb(skb)->pkt_type = MRVL_VENDOR_PKT;
200 
201 	skb_queue_head(&priv->adapter->tx_queue, skb);
202 
203 	priv->btmrvl_dev.sendcmdflag = true;
204 
205 	priv->adapter->cmd_complete = false;
206 
207 	wake_up_interruptible(&priv->main_thread.wait_q);
208 
209 	if (!wait_event_interruptible_timeout(priv->adapter->cmd_wait_q,
210 					      priv->adapter->cmd_complete ||
211 					      priv->surprise_removed,
212 					      WAIT_UNTIL_CMD_RESP))
213 		return -ETIMEDOUT;
214 
215 	if (priv->surprise_removed)
216 		return -EFAULT;
217 
218 	return 0;
219 }
220 
221 int btmrvl_send_module_cfg_cmd(struct btmrvl_private *priv, u8 subcmd)
222 {
223 	int ret;
224 
225 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_MODULE_CFG_REQ, &subcmd, 1);
226 	if (ret)
227 		BT_ERR("module_cfg_cmd(%x) failed", subcmd);
228 
229 	return ret;
230 }
231 EXPORT_SYMBOL_GPL(btmrvl_send_module_cfg_cmd);
232 
233 static int btmrvl_enable_sco_routing_to_host(struct btmrvl_private *priv)
234 {
235 	int ret;
236 	u8 subcmd = 0;
237 
238 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_ROUTE_SCO_TO_HOST, &subcmd, 1);
239 	if (ret)
240 		BT_ERR("BT_CMD_ROUTE_SCO_TO_HOST command failed: %#x", ret);
241 
242 	return ret;
243 }
244 
245 int btmrvl_pscan_window_reporting(struct btmrvl_private *priv, u8 subcmd)
246 {
247 	struct btmrvl_sdio_card *card = priv->btmrvl_dev.card;
248 	int ret;
249 
250 	if (!card->support_pscan_win_report)
251 		return 0;
252 
253 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_PSCAN_WIN_REPORT_ENABLE,
254 				   &subcmd, 1);
255 	if (ret)
256 		BT_ERR("PSCAN_WIN_REPORT_ENABLE command failed: %#x", ret);
257 
258 	return ret;
259 }
260 EXPORT_SYMBOL_GPL(btmrvl_pscan_window_reporting);
261 
262 int btmrvl_send_hscfg_cmd(struct btmrvl_private *priv)
263 {
264 	int ret;
265 	u8 param[2];
266 
267 	param[0] = (priv->btmrvl_dev.gpio_gap & 0xff00) >> 8;
268 	param[1] = (u8) (priv->btmrvl_dev.gpio_gap & 0x00ff);
269 
270 	BT_DBG("Sending HSCFG Command, gpio=0x%x, gap=0x%x",
271 	       param[0], param[1]);
272 
273 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_HOST_SLEEP_CONFIG, param, 2);
274 	if (ret)
275 		BT_ERR("HSCFG command failed");
276 
277 	return ret;
278 }
279 EXPORT_SYMBOL_GPL(btmrvl_send_hscfg_cmd);
280 
281 int btmrvl_enable_ps(struct btmrvl_private *priv)
282 {
283 	int ret;
284 	u8 param;
285 
286 	if (priv->btmrvl_dev.psmode)
287 		param = BT_PS_ENABLE;
288 	else
289 		param = BT_PS_DISABLE;
290 
291 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_AUTO_SLEEP_MODE, &param, 1);
292 	if (ret)
293 		BT_ERR("PSMODE command failed");
294 
295 	return 0;
296 }
297 EXPORT_SYMBOL_GPL(btmrvl_enable_ps);
298 
299 int btmrvl_enable_hs(struct btmrvl_private *priv)
300 {
301 	struct btmrvl_adapter *adapter = priv->adapter;
302 	int ret;
303 
304 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_HOST_SLEEP_ENABLE, NULL, 0);
305 	if (ret) {
306 		BT_ERR("Host sleep enable command failed");
307 		return ret;
308 	}
309 
310 	ret = wait_event_interruptible_timeout(adapter->event_hs_wait_q,
311 					       adapter->hs_state ||
312 					       priv->surprise_removed,
313 					       WAIT_UNTIL_HS_STATE_CHANGED);
314 	if (ret < 0 || priv->surprise_removed) {
315 		BT_ERR("event_hs_wait_q terminated (%d): %d,%d,%d",
316 		       ret, adapter->hs_state, adapter->ps_state,
317 		       adapter->wakeup_tries);
318 	} else if (!ret) {
319 		BT_ERR("hs_enable timeout: %d,%d,%d", adapter->hs_state,
320 		       adapter->ps_state, adapter->wakeup_tries);
321 		ret = -ETIMEDOUT;
322 	} else {
323 		BT_DBG("host sleep enabled: %d,%d,%d", adapter->hs_state,
324 		       adapter->ps_state, adapter->wakeup_tries);
325 		ret = 0;
326 	}
327 
328 	return ret;
329 }
330 EXPORT_SYMBOL_GPL(btmrvl_enable_hs);
331 
332 int btmrvl_prepare_command(struct btmrvl_private *priv)
333 {
334 	int ret = 0;
335 
336 	if (priv->btmrvl_dev.hscfgcmd) {
337 		priv->btmrvl_dev.hscfgcmd = 0;
338 		btmrvl_send_hscfg_cmd(priv);
339 	}
340 
341 	if (priv->btmrvl_dev.pscmd) {
342 		priv->btmrvl_dev.pscmd = 0;
343 		btmrvl_enable_ps(priv);
344 	}
345 
346 	if (priv->btmrvl_dev.hscmd) {
347 		priv->btmrvl_dev.hscmd = 0;
348 
349 		if (priv->btmrvl_dev.hsmode) {
350 			ret = btmrvl_enable_hs(priv);
351 		} else {
352 			ret = priv->hw_wakeup_firmware(priv);
353 			priv->adapter->hs_state = HS_DEACTIVATED;
354 			BT_DBG("BT: HS DEACTIVATED due to host activity!");
355 		}
356 	}
357 
358 	return ret;
359 }
360 
361 void btmrvl_firmware_dump(struct btmrvl_private *priv)
362 {
363 	if (priv->firmware_dump)
364 		priv->firmware_dump(priv);
365 }
366 
367 static int btmrvl_tx_pkt(struct btmrvl_private *priv, struct sk_buff *skb)
368 {
369 	int ret = 0;
370 
371 	if (!skb || !skb->data)
372 		return -EINVAL;
373 
374 	if (!skb->len || ((skb->len + BTM_HEADER_LEN) > BTM_UPLD_SIZE)) {
375 		BT_ERR("Tx Error: Bad skb length %d : %d",
376 						skb->len, BTM_UPLD_SIZE);
377 		return -EINVAL;
378 	}
379 
380 	if (skb_headroom(skb) < BTM_HEADER_LEN) {
381 		struct sk_buff *tmp = skb;
382 
383 		skb = skb_realloc_headroom(skb, BTM_HEADER_LEN);
384 		if (!skb) {
385 			BT_ERR("Tx Error: realloc_headroom failed %d",
386 				BTM_HEADER_LEN);
387 			skb = tmp;
388 			return -EINVAL;
389 		}
390 
391 		kfree_skb(tmp);
392 	}
393 
394 	skb_push(skb, BTM_HEADER_LEN);
395 
396 	/* header type: byte[3]
397 	 * HCI_COMMAND = 1, ACL_DATA = 2, SCO_DATA = 3, 0xFE = Vendor
398 	 * header length: byte[2][1][0]
399 	 */
400 
401 	skb->data[0] = (skb->len & 0x0000ff);
402 	skb->data[1] = (skb->len & 0x00ff00) >> 8;
403 	skb->data[2] = (skb->len & 0xff0000) >> 16;
404 	skb->data[3] = bt_cb(skb)->pkt_type;
405 
406 	if (priv->hw_host_to_card)
407 		ret = priv->hw_host_to_card(priv, skb->data, skb->len);
408 
409 	return ret;
410 }
411 
412 static void btmrvl_init_adapter(struct btmrvl_private *priv)
413 {
414 	int buf_size;
415 
416 	skb_queue_head_init(&priv->adapter->tx_queue);
417 
418 	priv->adapter->ps_state = PS_AWAKE;
419 
420 	buf_size = ALIGN_SZ(SDIO_BLOCK_SIZE, BTSDIO_DMA_ALIGN);
421 	priv->adapter->hw_regs_buf = kzalloc(buf_size, GFP_KERNEL);
422 	if (!priv->adapter->hw_regs_buf) {
423 		priv->adapter->hw_regs = NULL;
424 		BT_ERR("Unable to allocate buffer for hw_regs.");
425 	} else {
426 		priv->adapter->hw_regs =
427 			(u8 *)ALIGN_ADDR(priv->adapter->hw_regs_buf,
428 					 BTSDIO_DMA_ALIGN);
429 		BT_DBG("hw_regs_buf=%p hw_regs=%p",
430 		       priv->adapter->hw_regs_buf, priv->adapter->hw_regs);
431 	}
432 
433 	init_waitqueue_head(&priv->adapter->cmd_wait_q);
434 	init_waitqueue_head(&priv->adapter->event_hs_wait_q);
435 }
436 
437 static void btmrvl_free_adapter(struct btmrvl_private *priv)
438 {
439 	skb_queue_purge(&priv->adapter->tx_queue);
440 
441 	kfree(priv->adapter->hw_regs_buf);
442 	kfree(priv->adapter);
443 
444 	priv->adapter = NULL;
445 }
446 
447 static int btmrvl_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
448 {
449 	struct btmrvl_private *priv = hci_get_drvdata(hdev);
450 
451 	BT_DBG("type=%d, len=%d", skb->pkt_type, skb->len);
452 
453 	if (!test_bit(HCI_RUNNING, &hdev->flags)) {
454 		BT_ERR("Failed testing HCI_RUNING, flags=%lx", hdev->flags);
455 		print_hex_dump_bytes("data: ", DUMP_PREFIX_OFFSET,
456 							skb->data, skb->len);
457 		return -EBUSY;
458 	}
459 
460 	switch (bt_cb(skb)->pkt_type) {
461 	case HCI_COMMAND_PKT:
462 		hdev->stat.cmd_tx++;
463 		break;
464 
465 	case HCI_ACLDATA_PKT:
466 		hdev->stat.acl_tx++;
467 		break;
468 
469 	case HCI_SCODATA_PKT:
470 		hdev->stat.sco_tx++;
471 		break;
472 	}
473 
474 	skb_queue_tail(&priv->adapter->tx_queue, skb);
475 
476 	wake_up_interruptible(&priv->main_thread.wait_q);
477 
478 	return 0;
479 }
480 
481 static int btmrvl_flush(struct hci_dev *hdev)
482 {
483 	struct btmrvl_private *priv = hci_get_drvdata(hdev);
484 
485 	skb_queue_purge(&priv->adapter->tx_queue);
486 
487 	return 0;
488 }
489 
490 static int btmrvl_close(struct hci_dev *hdev)
491 {
492 	struct btmrvl_private *priv = hci_get_drvdata(hdev);
493 
494 	if (!test_and_clear_bit(HCI_RUNNING, &hdev->flags))
495 		return 0;
496 
497 	skb_queue_purge(&priv->adapter->tx_queue);
498 
499 	return 0;
500 }
501 
502 static int btmrvl_open(struct hci_dev *hdev)
503 {
504 	set_bit(HCI_RUNNING, &hdev->flags);
505 
506 	return 0;
507 }
508 
509 static int btmrvl_download_cal_data(struct btmrvl_private *priv,
510 				    u8 *data, int len)
511 {
512 	int ret;
513 
514 	data[0] = 0x00;
515 	data[1] = 0x00;
516 	data[2] = 0x00;
517 	data[3] = len;
518 
519 	print_hex_dump_bytes("Calibration data: ",
520 			     DUMP_PREFIX_OFFSET, data, BT_CAL_HDR_LEN + len);
521 
522 	ret = btmrvl_send_sync_cmd(priv, BT_CMD_LOAD_CONFIG_DATA, data,
523 				   BT_CAL_HDR_LEN + len);
524 	if (ret)
525 		BT_ERR("Failed to download caibration data");
526 
527 	return 0;
528 }
529 
530 static int btmrvl_check_device_tree(struct btmrvl_private *priv)
531 {
532 	struct device_node *dt_node;
533 	u8 cal_data[BT_CAL_HDR_LEN + BT_CAL_DATA_SIZE];
534 	int ret;
535 	u32 val;
536 
537 	for_each_compatible_node(dt_node, NULL, "btmrvl,cfgdata") {
538 		ret = of_property_read_u32(dt_node, "btmrvl,gpio-gap", &val);
539 		if (!ret)
540 			priv->btmrvl_dev.gpio_gap = val;
541 
542 		ret = of_property_read_u8_array(dt_node, "btmrvl,cal-data",
543 						cal_data + BT_CAL_HDR_LEN,
544 						BT_CAL_DATA_SIZE);
545 		if (ret)
546 			return ret;
547 
548 		BT_DBG("Use cal data from device tree");
549 		ret = btmrvl_download_cal_data(priv, cal_data,
550 					       BT_CAL_DATA_SIZE);
551 		if (ret) {
552 			BT_ERR("Fail to download calibrate data");
553 			return ret;
554 		}
555 	}
556 
557 	return 0;
558 }
559 
560 static int btmrvl_setup(struct hci_dev *hdev)
561 {
562 	struct btmrvl_private *priv = hci_get_drvdata(hdev);
563 	int ret;
564 
565 	ret = btmrvl_send_module_cfg_cmd(priv, MODULE_BRINGUP_REQ);
566 	if (ret)
567 		return ret;
568 
569 	priv->btmrvl_dev.gpio_gap = 0xffff;
570 
571 	btmrvl_check_device_tree(priv);
572 
573 	btmrvl_enable_sco_routing_to_host(priv);
574 
575 	btmrvl_pscan_window_reporting(priv, 0x01);
576 
577 	priv->btmrvl_dev.psmode = 1;
578 	btmrvl_enable_ps(priv);
579 
580 	btmrvl_send_hscfg_cmd(priv);
581 
582 	return 0;
583 }
584 
585 static int btmrvl_set_bdaddr(struct hci_dev *hdev, const bdaddr_t *bdaddr)
586 {
587 	struct sk_buff *skb;
588 	long ret;
589 	u8 buf[8];
590 
591 	buf[0] = MRVL_VENDOR_PKT;
592 	buf[1] = sizeof(bdaddr_t);
593 	memcpy(buf + 2, bdaddr, sizeof(bdaddr_t));
594 
595 	skb = __hci_cmd_sync(hdev, BT_CMD_SET_BDADDR, sizeof(buf), buf,
596 			     HCI_INIT_TIMEOUT);
597 	if (IS_ERR(skb)) {
598 		ret = PTR_ERR(skb);
599 		BT_ERR("%s: changing btmrvl device address failed (%ld)",
600 		       hdev->name, ret);
601 		return ret;
602 	}
603 	kfree_skb(skb);
604 
605 	return 0;
606 }
607 
608 /*
609  * This function handles the event generated by firmware, rx data
610  * received from firmware, and tx data sent from kernel.
611  */
612 static int btmrvl_service_main_thread(void *data)
613 {
614 	struct btmrvl_thread *thread = data;
615 	struct btmrvl_private *priv = thread->priv;
616 	struct btmrvl_adapter *adapter = priv->adapter;
617 	wait_queue_t wait;
618 	struct sk_buff *skb;
619 	ulong flags;
620 
621 	init_waitqueue_entry(&wait, current);
622 
623 	for (;;) {
624 		add_wait_queue(&thread->wait_q, &wait);
625 
626 		set_current_state(TASK_INTERRUPTIBLE);
627 		if (kthread_should_stop() || priv->surprise_removed) {
628 			BT_DBG("main_thread: break from main thread");
629 			break;
630 		}
631 
632 		if (adapter->wakeup_tries ||
633 				((!adapter->int_count) &&
634 				(!priv->btmrvl_dev.tx_dnld_rdy ||
635 				skb_queue_empty(&adapter->tx_queue)))) {
636 			BT_DBG("main_thread is sleeping...");
637 			schedule();
638 		}
639 
640 		set_current_state(TASK_RUNNING);
641 
642 		remove_wait_queue(&thread->wait_q, &wait);
643 
644 		BT_DBG("main_thread woke up");
645 
646 		if (kthread_should_stop() || priv->surprise_removed) {
647 			BT_DBG("main_thread: break from main thread");
648 			break;
649 		}
650 
651 		spin_lock_irqsave(&priv->driver_lock, flags);
652 		if (adapter->int_count) {
653 			adapter->int_count = 0;
654 			spin_unlock_irqrestore(&priv->driver_lock, flags);
655 			priv->hw_process_int_status(priv);
656 		} else if (adapter->ps_state == PS_SLEEP &&
657 					!skb_queue_empty(&adapter->tx_queue)) {
658 			spin_unlock_irqrestore(&priv->driver_lock, flags);
659 			adapter->wakeup_tries++;
660 			priv->hw_wakeup_firmware(priv);
661 			continue;
662 		} else {
663 			spin_unlock_irqrestore(&priv->driver_lock, flags);
664 		}
665 
666 		if (adapter->ps_state == PS_SLEEP)
667 			continue;
668 
669 		if (!priv->btmrvl_dev.tx_dnld_rdy)
670 			continue;
671 
672 		skb = skb_dequeue(&adapter->tx_queue);
673 		if (skb) {
674 			if (btmrvl_tx_pkt(priv, skb))
675 				priv->btmrvl_dev.hcidev->stat.err_tx++;
676 			else
677 				priv->btmrvl_dev.hcidev->stat.byte_tx += skb->len;
678 
679 			kfree_skb(skb);
680 		}
681 	}
682 
683 	return 0;
684 }
685 
686 int btmrvl_register_hdev(struct btmrvl_private *priv)
687 {
688 	struct hci_dev *hdev = NULL;
689 	int ret;
690 
691 	hdev = hci_alloc_dev();
692 	if (!hdev) {
693 		BT_ERR("Can not allocate HCI device");
694 		goto err_hdev;
695 	}
696 
697 	priv->btmrvl_dev.hcidev = hdev;
698 	hci_set_drvdata(hdev, priv);
699 
700 	hdev->bus   = HCI_SDIO;
701 	hdev->open  = btmrvl_open;
702 	hdev->close = btmrvl_close;
703 	hdev->flush = btmrvl_flush;
704 	hdev->send  = btmrvl_send_frame;
705 	hdev->setup = btmrvl_setup;
706 	hdev->set_bdaddr = btmrvl_set_bdaddr;
707 
708 	hdev->dev_type = priv->btmrvl_dev.dev_type;
709 
710 	ret = hci_register_dev(hdev);
711 	if (ret < 0) {
712 		BT_ERR("Can not register HCI device");
713 		goto err_hci_register_dev;
714 	}
715 
716 #ifdef CONFIG_DEBUG_FS
717 	btmrvl_debugfs_init(hdev);
718 #endif
719 
720 	return 0;
721 
722 err_hci_register_dev:
723 	hci_free_dev(hdev);
724 
725 err_hdev:
726 	/* Stop the thread servicing the interrupts */
727 	kthread_stop(priv->main_thread.task);
728 
729 	btmrvl_free_adapter(priv);
730 	kfree(priv);
731 
732 	return -ENOMEM;
733 }
734 EXPORT_SYMBOL_GPL(btmrvl_register_hdev);
735 
736 struct btmrvl_private *btmrvl_add_card(void *card)
737 {
738 	struct btmrvl_private *priv;
739 
740 	priv = kzalloc(sizeof(*priv), GFP_KERNEL);
741 	if (!priv) {
742 		BT_ERR("Can not allocate priv");
743 		goto err_priv;
744 	}
745 
746 	priv->adapter = kzalloc(sizeof(*priv->adapter), GFP_KERNEL);
747 	if (!priv->adapter) {
748 		BT_ERR("Allocate buffer for btmrvl_adapter failed!");
749 		goto err_adapter;
750 	}
751 
752 	btmrvl_init_adapter(priv);
753 
754 	BT_DBG("Starting kthread...");
755 	priv->main_thread.priv = priv;
756 	spin_lock_init(&priv->driver_lock);
757 
758 	init_waitqueue_head(&priv->main_thread.wait_q);
759 	priv->main_thread.task = kthread_run(btmrvl_service_main_thread,
760 				&priv->main_thread, "btmrvl_main_service");
761 	if (IS_ERR(priv->main_thread.task))
762 		goto err_thread;
763 
764 	priv->btmrvl_dev.card = card;
765 	priv->btmrvl_dev.tx_dnld_rdy = true;
766 
767 	return priv;
768 
769 err_thread:
770 	btmrvl_free_adapter(priv);
771 
772 err_adapter:
773 	kfree(priv);
774 
775 err_priv:
776 	return NULL;
777 }
778 EXPORT_SYMBOL_GPL(btmrvl_add_card);
779 
780 int btmrvl_remove_card(struct btmrvl_private *priv)
781 {
782 	struct hci_dev *hdev;
783 
784 	hdev = priv->btmrvl_dev.hcidev;
785 
786 	wake_up_interruptible(&priv->adapter->cmd_wait_q);
787 	wake_up_interruptible(&priv->adapter->event_hs_wait_q);
788 
789 	kthread_stop(priv->main_thread.task);
790 
791 #ifdef CONFIG_DEBUG_FS
792 	btmrvl_debugfs_remove(hdev);
793 #endif
794 
795 	hci_unregister_dev(hdev);
796 
797 	hci_free_dev(hdev);
798 
799 	priv->btmrvl_dev.hcidev = NULL;
800 
801 	btmrvl_free_adapter(priv);
802 
803 	kfree(priv);
804 
805 	return 0;
806 }
807 EXPORT_SYMBOL_GPL(btmrvl_remove_card);
808 
809 MODULE_AUTHOR("Marvell International Ltd.");
810 MODULE_DESCRIPTION("Marvell Bluetooth driver ver " VERSION);
811 MODULE_VERSION(VERSION);
812 MODULE_LICENSE("GPL v2");
813