xref: /openbmc/linux/drivers/hid/hid-sony.c (revision 9deff920)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *  HID driver for Sony / PS2 / PS3 / PS4 BD devices.
4  *
5  *  Copyright (c) 1999 Andreas Gal
6  *  Copyright (c) 2000-2005 Vojtech Pavlik <vojtech@suse.cz>
7  *  Copyright (c) 2005 Michael Haboustak <mike-@cinci.rr.com> for Concept2, Inc
8  *  Copyright (c) 2008 Jiri Slaby
9  *  Copyright (c) 2012 David Dillow <dave@thedillows.org>
10  *  Copyright (c) 2006-2013 Jiri Kosina
11  *  Copyright (c) 2013 Colin Leitner <colin.leitner@gmail.com>
12  *  Copyright (c) 2014-2016 Frank Praznik <frank.praznik@gmail.com>
13  *  Copyright (c) 2018 Todd Kelner
14  */
15 
16 /*
17  */
18 
19 /*
20  * NOTE: in order for the Sony PS3 BD Remote Control to be found by
21  * a Bluetooth host, the key combination Start+Enter has to be kept pressed
22  * for about 7 seconds with the Bluetooth Host Controller in discovering mode.
23  *
24  * There will be no PIN request from the device.
25  */
26 
27 #include <linux/device.h>
28 #include <linux/hid.h>
29 #include <linux/module.h>
30 #include <linux/slab.h>
31 #include <linux/leds.h>
32 #include <linux/power_supply.h>
33 #include <linux/spinlock.h>
34 #include <linux/list.h>
35 #include <linux/idr.h>
36 #include <linux/input/mt.h>
37 #include <linux/crc32.h>
38 #include <asm/unaligned.h>
39 
40 #include "hid-ids.h"
41 
42 #define VAIO_RDESC_CONSTANT       BIT(0)
43 #define SIXAXIS_CONTROLLER_USB    BIT(1)
44 #define SIXAXIS_CONTROLLER_BT     BIT(2)
45 #define BUZZ_CONTROLLER           BIT(3)
46 #define PS3REMOTE                 BIT(4)
47 #define DUALSHOCK4_CONTROLLER_USB BIT(5)
48 #define DUALSHOCK4_CONTROLLER_BT  BIT(6)
49 #define DUALSHOCK4_DONGLE         BIT(7)
50 #define MOTION_CONTROLLER_USB     BIT(8)
51 #define MOTION_CONTROLLER_BT      BIT(9)
52 #define NAVIGATION_CONTROLLER_USB BIT(10)
53 #define NAVIGATION_CONTROLLER_BT  BIT(11)
54 #define SINO_LITE_CONTROLLER      BIT(12)
55 #define FUTUREMAX_DANCE_MAT       BIT(13)
56 #define NSG_MR5U_REMOTE_BT        BIT(14)
57 #define NSG_MR7U_REMOTE_BT        BIT(15)
58 #define SHANWAN_GAMEPAD           BIT(16)
59 
60 #define SIXAXIS_CONTROLLER (SIXAXIS_CONTROLLER_USB | SIXAXIS_CONTROLLER_BT)
61 #define MOTION_CONTROLLER (MOTION_CONTROLLER_USB | MOTION_CONTROLLER_BT)
62 #define NAVIGATION_CONTROLLER (NAVIGATION_CONTROLLER_USB |\
63 				NAVIGATION_CONTROLLER_BT)
64 #define DUALSHOCK4_CONTROLLER (DUALSHOCK4_CONTROLLER_USB |\
65 				DUALSHOCK4_CONTROLLER_BT | \
66 				DUALSHOCK4_DONGLE)
67 #define SONY_LED_SUPPORT (SIXAXIS_CONTROLLER | BUZZ_CONTROLLER |\
68 				DUALSHOCK4_CONTROLLER | MOTION_CONTROLLER |\
69 				NAVIGATION_CONTROLLER)
70 #define SONY_BATTERY_SUPPORT (SIXAXIS_CONTROLLER | DUALSHOCK4_CONTROLLER |\
71 				MOTION_CONTROLLER_BT | NAVIGATION_CONTROLLER)
72 #define SONY_FF_SUPPORT (SIXAXIS_CONTROLLER | DUALSHOCK4_CONTROLLER |\
73 				MOTION_CONTROLLER)
74 #define SONY_BT_DEVICE (SIXAXIS_CONTROLLER_BT | DUALSHOCK4_CONTROLLER_BT |\
75 			MOTION_CONTROLLER_BT | NAVIGATION_CONTROLLER_BT)
76 #define NSG_MRXU_REMOTE (NSG_MR5U_REMOTE_BT | NSG_MR7U_REMOTE_BT)
77 
78 #define MAX_LEDS 4
79 #define NSG_MRXU_MAX_X 1667
80 #define NSG_MRXU_MAX_Y 1868
81 
82 
83 /* PS/3 Motion controller */
84 static u8 motion_rdesc[] = {
85 	0x05, 0x01,         /*  Usage Page (Desktop),               */
86 	0x09, 0x04,         /*  Usage (Joystick),                   */
87 	0xA1, 0x01,         /*  Collection (Application),           */
88 	0xA1, 0x02,         /*      Collection (Logical),           */
89 	0x85, 0x01,         /*          Report ID (1),              */
90 	0x75, 0x01,         /*          Report Size (1),            */
91 	0x95, 0x15,         /*          Report Count (21),          */
92 	0x15, 0x00,         /*          Logical Minimum (0),        */
93 	0x25, 0x01,         /*          Logical Maximum (1),        */
94 	0x35, 0x00,         /*          Physical Minimum (0),       */
95 	0x45, 0x01,         /*          Physical Maximum (1),       */
96 	0x05, 0x09,         /*          Usage Page (Button),        */
97 	0x19, 0x01,         /*          Usage Minimum (01h),        */
98 	0x29, 0x15,         /*          Usage Maximum (15h),        */
99 	0x81, 0x02,         /*          Input (Variable),           * Buttons */
100 	0x95, 0x0B,         /*          Report Count (11),          */
101 	0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
102 	0x81, 0x03,         /*          Input (Constant, Variable), * Padding */
103 	0x15, 0x00,         /*          Logical Minimum (0),        */
104 	0x26, 0xFF, 0x00,   /*          Logical Maximum (255),      */
105 	0x05, 0x01,         /*          Usage Page (Desktop),       */
106 	0xA1, 0x00,         /*          Collection (Physical),      */
107 	0x75, 0x08,         /*              Report Size (8),        */
108 	0x95, 0x01,         /*              Report Count (1),       */
109 	0x35, 0x00,         /*              Physical Minimum (0),   */
110 	0x46, 0xFF, 0x00,   /*              Physical Maximum (255), */
111 	0x09, 0x30,         /*              Usage (X),              */
112 	0x81, 0x02,         /*              Input (Variable),       * Trigger */
113 	0xC0,               /*          End Collection,             */
114 	0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
115 	0x75, 0x08,         /*          Report Size (8),            */
116 	0x95, 0x07,         /*          Report Count (7),           * skip 7 bytes */
117 	0x81, 0x02,         /*          Input (Variable),           */
118 	0x05, 0x01,         /*          Usage Page (Desktop),       */
119 	0x75, 0x10,         /*          Report Size (16),           */
120 	0x46, 0xFF, 0xFF,   /*          Physical Maximum (65535),   */
121 	0x27, 0xFF, 0xFF, 0x00, 0x00, /*      Logical Maximum (65535),    */
122 	0x95, 0x03,         /*          Report Count (3),           * 3x Accels */
123 	0x09, 0x33,         /*              Usage (rX),             */
124 	0x09, 0x34,         /*              Usage (rY),             */
125 	0x09, 0x35,         /*              Usage (rZ),             */
126 	0x81, 0x02,         /*          Input (Variable),           */
127 	0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
128 	0x95, 0x03,         /*          Report Count (3),           * Skip Accels 2nd frame */
129 	0x81, 0x02,         /*          Input (Variable),           */
130 	0x05, 0x01,         /*          Usage Page (Desktop),       */
131 	0x09, 0x01,         /*          Usage (Pointer),            */
132 	0x95, 0x03,         /*          Report Count (3),           * 3x Gyros */
133 	0x81, 0x02,         /*          Input (Variable),           */
134 	0x06, 0x00, 0xFF,   /*          Usage Page (FF00h),         */
135 	0x95, 0x03,         /*          Report Count (3),           * Skip Gyros 2nd frame */
136 	0x81, 0x02,         /*          Input (Variable),           */
137 	0x75, 0x0C,         /*          Report Size (12),           */
138 	0x46, 0xFF, 0x0F,   /*          Physical Maximum (4095),    */
139 	0x26, 0xFF, 0x0F,   /*          Logical Maximum (4095),     */
140 	0x95, 0x04,         /*          Report Count (4),           * Skip Temp and Magnetometers */
141 	0x81, 0x02,         /*          Input (Variable),           */
142 	0x75, 0x08,         /*          Report Size (8),            */
143 	0x46, 0xFF, 0x00,   /*          Physical Maximum (255),     */
144 	0x26, 0xFF, 0x00,   /*          Logical Maximum (255),      */
145 	0x95, 0x06,         /*          Report Count (6),           * Skip Timestamp and Extension Bytes */
146 	0x81, 0x02,         /*          Input (Variable),           */
147 	0x75, 0x08,         /*          Report Size (8),            */
148 	0x95, 0x30,         /*          Report Count (48),          */
149 	0x09, 0x01,         /*          Usage (Pointer),            */
150 	0x91, 0x02,         /*          Output (Variable),          */
151 	0x75, 0x08,         /*          Report Size (8),            */
152 	0x95, 0x30,         /*          Report Count (48),          */
153 	0x09, 0x01,         /*          Usage (Pointer),            */
154 	0xB1, 0x02,         /*          Feature (Variable),         */
155 	0xC0,               /*      End Collection,                 */
156 	0xA1, 0x02,         /*      Collection (Logical),           */
157 	0x85, 0x02,         /*          Report ID (2),              */
158 	0x75, 0x08,         /*          Report Size (8),            */
159 	0x95, 0x30,         /*          Report Count (48),          */
160 	0x09, 0x01,         /*          Usage (Pointer),            */
161 	0xB1, 0x02,         /*          Feature (Variable),         */
162 	0xC0,               /*      End Collection,                 */
163 	0xA1, 0x02,         /*      Collection (Logical),           */
164 	0x85, 0xEE,         /*          Report ID (238),            */
165 	0x75, 0x08,         /*          Report Size (8),            */
166 	0x95, 0x30,         /*          Report Count (48),          */
167 	0x09, 0x01,         /*          Usage (Pointer),            */
168 	0xB1, 0x02,         /*          Feature (Variable),         */
169 	0xC0,               /*      End Collection,                 */
170 	0xA1, 0x02,         /*      Collection (Logical),           */
171 	0x85, 0xEF,         /*          Report ID (239),            */
172 	0x75, 0x08,         /*          Report Size (8),            */
173 	0x95, 0x30,         /*          Report Count (48),          */
174 	0x09, 0x01,         /*          Usage (Pointer),            */
175 	0xB1, 0x02,         /*          Feature (Variable),         */
176 	0xC0,               /*      End Collection,                 */
177 	0xC0                /*  End Collection                      */
178 };
179 
180 static u8 ps3remote_rdesc[] = {
181 	0x05, 0x01,          /* GUsagePage Generic Desktop */
182 	0x09, 0x05,          /* LUsage 0x05 [Game Pad] */
183 	0xA1, 0x01,          /* MCollection Application (mouse, keyboard) */
184 
185 	 /* Use collection 1 for joypad buttons */
186 	 0xA1, 0x02,         /* MCollection Logical (interrelated data) */
187 
188 	  /*
189 	   * Ignore the 1st byte, maybe it is used for a controller
190 	   * number but it's not needed for correct operation
191 	   */
192 	  0x75, 0x08,        /* GReportSize 0x08 [8] */
193 	  0x95, 0x01,        /* GReportCount 0x01 [1] */
194 	  0x81, 0x01,        /* MInput 0x01 (Const[0] Arr[1] Abs[2]) */
195 
196 	  /*
197 	   * Bytes from 2nd to 4th are a bitmap for joypad buttons, for these
198 	   * buttons multiple keypresses are allowed
199 	   */
200 	  0x05, 0x09,        /* GUsagePage Button */
201 	  0x19, 0x01,        /* LUsageMinimum 0x01 [Button 1 (primary/trigger)] */
202 	  0x29, 0x18,        /* LUsageMaximum 0x18 [Button 24] */
203 	  0x14,              /* GLogicalMinimum [0] */
204 	  0x25, 0x01,        /* GLogicalMaximum 0x01 [1] */
205 	  0x75, 0x01,        /* GReportSize 0x01 [1] */
206 	  0x95, 0x18,        /* GReportCount 0x18 [24] */
207 	  0x81, 0x02,        /* MInput 0x02 (Data[0] Var[1] Abs[2]) */
208 
209 	  0xC0,              /* MEndCollection */
210 
211 	 /* Use collection 2 for remote control buttons */
212 	 0xA1, 0x02,         /* MCollection Logical (interrelated data) */
213 
214 	  /* 5th byte is used for remote control buttons */
215 	  0x05, 0x09,        /* GUsagePage Button */
216 	  0x18,              /* LUsageMinimum [No button pressed] */
217 	  0x29, 0xFE,        /* LUsageMaximum 0xFE [Button 254] */
218 	  0x14,              /* GLogicalMinimum [0] */
219 	  0x26, 0xFE, 0x00,  /* GLogicalMaximum 0x00FE [254] */
220 	  0x75, 0x08,        /* GReportSize 0x08 [8] */
221 	  0x95, 0x01,        /* GReportCount 0x01 [1] */
222 	  0x80,              /* MInput  */
223 
224 	  /*
225 	   * Ignore bytes from 6th to 11th, 6th to 10th are always constant at
226 	   * 0xff and 11th is for press indication
227 	   */
228 	  0x75, 0x08,        /* GReportSize 0x08 [8] */
229 	  0x95, 0x06,        /* GReportCount 0x06 [6] */
230 	  0x81, 0x01,        /* MInput 0x01 (Const[0] Arr[1] Abs[2]) */
231 
232 	  /* 12th byte is for battery strength */
233 	  0x05, 0x06,        /* GUsagePage Generic Device Controls */
234 	  0x09, 0x20,        /* LUsage 0x20 [Battery Strength] */
235 	  0x14,              /* GLogicalMinimum [0] */
236 	  0x25, 0x05,        /* GLogicalMaximum 0x05 [5] */
237 	  0x75, 0x08,        /* GReportSize 0x08 [8] */
238 	  0x95, 0x01,        /* GReportCount 0x01 [1] */
239 	  0x81, 0x02,        /* MInput 0x02 (Data[0] Var[1] Abs[2]) */
240 
241 	  0xC0,              /* MEndCollection */
242 
243 	 0xC0                /* MEndCollection [Game Pad] */
244 };
245 
246 static const unsigned int ps3remote_keymap_joypad_buttons[] = {
247 	[0x01] = KEY_SELECT,
248 	[0x02] = BTN_THUMBL,		/* L3 */
249 	[0x03] = BTN_THUMBR,		/* R3 */
250 	[0x04] = BTN_START,
251 	[0x05] = KEY_UP,
252 	[0x06] = KEY_RIGHT,
253 	[0x07] = KEY_DOWN,
254 	[0x08] = KEY_LEFT,
255 	[0x09] = BTN_TL2,		/* L2 */
256 	[0x0a] = BTN_TR2,		/* R2 */
257 	[0x0b] = BTN_TL,		/* L1 */
258 	[0x0c] = BTN_TR,		/* R1 */
259 	[0x0d] = KEY_OPTION,		/* options/triangle */
260 	[0x0e] = KEY_BACK,		/* back/circle */
261 	[0x0f] = BTN_0,			/* cross */
262 	[0x10] = KEY_SCREEN,		/* view/square */
263 	[0x11] = KEY_HOMEPAGE,		/* PS button */
264 	[0x14] = KEY_ENTER,
265 };
266 static const unsigned int ps3remote_keymap_remote_buttons[] = {
267 	[0x00] = KEY_1,
268 	[0x01] = KEY_2,
269 	[0x02] = KEY_3,
270 	[0x03] = KEY_4,
271 	[0x04] = KEY_5,
272 	[0x05] = KEY_6,
273 	[0x06] = KEY_7,
274 	[0x07] = KEY_8,
275 	[0x08] = KEY_9,
276 	[0x09] = KEY_0,
277 	[0x0e] = KEY_ESC,		/* return */
278 	[0x0f] = KEY_CLEAR,
279 	[0x16] = KEY_EJECTCD,
280 	[0x1a] = KEY_MENU,		/* top menu */
281 	[0x28] = KEY_TIME,
282 	[0x30] = KEY_PREVIOUS,
283 	[0x31] = KEY_NEXT,
284 	[0x32] = KEY_PLAY,
285 	[0x33] = KEY_REWIND,		/* scan back */
286 	[0x34] = KEY_FORWARD,		/* scan forward */
287 	[0x38] = KEY_STOP,
288 	[0x39] = KEY_PAUSE,
289 	[0x40] = KEY_CONTEXT_MENU,	/* pop up/menu */
290 	[0x60] = KEY_FRAMEBACK,		/* slow/step back */
291 	[0x61] = KEY_FRAMEFORWARD,	/* slow/step forward */
292 	[0x63] = KEY_SUBTITLE,
293 	[0x64] = KEY_AUDIO,
294 	[0x65] = KEY_ANGLE,
295 	[0x70] = KEY_INFO,		/* display */
296 	[0x80] = KEY_BLUE,
297 	[0x81] = KEY_RED,
298 	[0x82] = KEY_GREEN,
299 	[0x83] = KEY_YELLOW,
300 };
301 
302 static const unsigned int buzz_keymap[] = {
303 	/*
304 	 * The controller has 4 remote buzzers, each with one LED and 5
305 	 * buttons.
306 	 *
307 	 * We use the mapping chosen by the controller, which is:
308 	 *
309 	 * Key          Offset
310 	 * -------------------
311 	 * Buzz              1
312 	 * Blue              5
313 	 * Orange            4
314 	 * Green             3
315 	 * Yellow            2
316 	 *
317 	 * So, for example, the orange button on the third buzzer is mapped to
318 	 * BTN_TRIGGER_HAPPY14
319 	 */
320 	 [1] = BTN_TRIGGER_HAPPY1,
321 	 [2] = BTN_TRIGGER_HAPPY2,
322 	 [3] = BTN_TRIGGER_HAPPY3,
323 	 [4] = BTN_TRIGGER_HAPPY4,
324 	 [5] = BTN_TRIGGER_HAPPY5,
325 	 [6] = BTN_TRIGGER_HAPPY6,
326 	 [7] = BTN_TRIGGER_HAPPY7,
327 	 [8] = BTN_TRIGGER_HAPPY8,
328 	 [9] = BTN_TRIGGER_HAPPY9,
329 	[10] = BTN_TRIGGER_HAPPY10,
330 	[11] = BTN_TRIGGER_HAPPY11,
331 	[12] = BTN_TRIGGER_HAPPY12,
332 	[13] = BTN_TRIGGER_HAPPY13,
333 	[14] = BTN_TRIGGER_HAPPY14,
334 	[15] = BTN_TRIGGER_HAPPY15,
335 	[16] = BTN_TRIGGER_HAPPY16,
336 	[17] = BTN_TRIGGER_HAPPY17,
337 	[18] = BTN_TRIGGER_HAPPY18,
338 	[19] = BTN_TRIGGER_HAPPY19,
339 	[20] = BTN_TRIGGER_HAPPY20,
340 };
341 
342 /* The Navigation controller is a partial DS3 and uses the same HID report
343  * and hence the same keymap indices, however not not all axes/buttons
344  * are physically present. We use the same axis and button mapping as
345  * the DS3, which uses the Linux gamepad spec.
346  */
347 static const unsigned int navigation_absmap[] = {
348 	[0x30] = ABS_X,
349 	[0x31] = ABS_Y,
350 	[0x33] = ABS_Z, /* L2 */
351 };
352 
353 /* Buttons not physically available on the device, but still available
354  * in the reports are explicitly set to 0 for documentation purposes.
355  */
356 static const unsigned int navigation_keymap[] = {
357 	[0x01] = 0, /* Select */
358 	[0x02] = BTN_THUMBL, /* L3 */
359 	[0x03] = 0, /* R3 */
360 	[0x04] = 0, /* Start */
361 	[0x05] = BTN_DPAD_UP, /* Up */
362 	[0x06] = BTN_DPAD_RIGHT, /* Right */
363 	[0x07] = BTN_DPAD_DOWN, /* Down */
364 	[0x08] = BTN_DPAD_LEFT, /* Left */
365 	[0x09] = BTN_TL2, /* L2 */
366 	[0x0a] = 0, /* R2 */
367 	[0x0b] = BTN_TL, /* L1 */
368 	[0x0c] = 0, /* R1 */
369 	[0x0d] = BTN_NORTH, /* Triangle */
370 	[0x0e] = BTN_EAST, /* Circle */
371 	[0x0f] = BTN_SOUTH, /* Cross */
372 	[0x10] = BTN_WEST, /* Square */
373 	[0x11] = BTN_MODE, /* PS */
374 };
375 
376 static const unsigned int sixaxis_absmap[] = {
377 	[0x30] = ABS_X,
378 	[0x31] = ABS_Y,
379 	[0x32] = ABS_RX, /* right stick X */
380 	[0x35] = ABS_RY, /* right stick Y */
381 };
382 
383 static const unsigned int sixaxis_keymap[] = {
384 	[0x01] = BTN_SELECT, /* Select */
385 	[0x02] = BTN_THUMBL, /* L3 */
386 	[0x03] = BTN_THUMBR, /* R3 */
387 	[0x04] = BTN_START, /* Start */
388 	[0x05] = BTN_DPAD_UP, /* Up */
389 	[0x06] = BTN_DPAD_RIGHT, /* Right */
390 	[0x07] = BTN_DPAD_DOWN, /* Down */
391 	[0x08] = BTN_DPAD_LEFT, /* Left */
392 	[0x09] = BTN_TL2, /* L2 */
393 	[0x0a] = BTN_TR2, /* R2 */
394 	[0x0b] = BTN_TL, /* L1 */
395 	[0x0c] = BTN_TR, /* R1 */
396 	[0x0d] = BTN_NORTH, /* Triangle */
397 	[0x0e] = BTN_EAST, /* Circle */
398 	[0x0f] = BTN_SOUTH, /* Cross */
399 	[0x10] = BTN_WEST, /* Square */
400 	[0x11] = BTN_MODE, /* PS */
401 };
402 
403 static const unsigned int ds4_absmap[] = {
404 	[0x30] = ABS_X,
405 	[0x31] = ABS_Y,
406 	[0x32] = ABS_RX, /* right stick X */
407 	[0x33] = ABS_Z, /* L2 */
408 	[0x34] = ABS_RZ, /* R2 */
409 	[0x35] = ABS_RY, /* right stick Y */
410 };
411 
412 static const unsigned int ds4_keymap[] = {
413 	[0x1] = BTN_WEST, /* Square */
414 	[0x2] = BTN_SOUTH, /* Cross */
415 	[0x3] = BTN_EAST, /* Circle */
416 	[0x4] = BTN_NORTH, /* Triangle */
417 	[0x5] = BTN_TL, /* L1 */
418 	[0x6] = BTN_TR, /* R1 */
419 	[0x7] = BTN_TL2, /* L2 */
420 	[0x8] = BTN_TR2, /* R2 */
421 	[0x9] = BTN_SELECT, /* Share */
422 	[0xa] = BTN_START, /* Options */
423 	[0xb] = BTN_THUMBL, /* L3 */
424 	[0xc] = BTN_THUMBR, /* R3 */
425 	[0xd] = BTN_MODE, /* PS */
426 };
427 
428 static const struct {int x; int y; } ds4_hat_mapping[] = {
429 	{0, -1}, {1, -1}, {1, 0}, {1, 1}, {0, 1}, {-1, 1}, {-1, 0}, {-1, -1},
430 	{0, 0}
431 };
432 
433 static enum power_supply_property sony_battery_props[] = {
434 	POWER_SUPPLY_PROP_PRESENT,
435 	POWER_SUPPLY_PROP_CAPACITY,
436 	POWER_SUPPLY_PROP_SCOPE,
437 	POWER_SUPPLY_PROP_STATUS,
438 };
439 
440 struct sixaxis_led {
441 	u8 time_enabled; /* the total time the led is active (0xff means forever) */
442 	u8 duty_length;  /* how long a cycle is in deciseconds (0 means "really fast") */
443 	u8 enabled;
444 	u8 duty_off; /* % of duty_length the led is off (0xff means 100%) */
445 	u8 duty_on;  /* % of duty_length the led is on (0xff mean 100%) */
446 } __packed;
447 
448 struct sixaxis_rumble {
449 	u8 padding;
450 	u8 right_duration; /* Right motor duration (0xff means forever) */
451 	u8 right_motor_on; /* Right (small) motor on/off, only supports values of 0 or 1 (off/on) */
452 	u8 left_duration;    /* Left motor duration (0xff means forever) */
453 	u8 left_motor_force; /* left (large) motor, supports force values from 0 to 255 */
454 } __packed;
455 
456 struct sixaxis_output_report {
457 	u8 report_id;
458 	struct sixaxis_rumble rumble;
459 	u8 padding[4];
460 	u8 leds_bitmap; /* bitmap of enabled LEDs: LED_1 = 0x02, LED_2 = 0x04, ... */
461 	struct sixaxis_led led[4];    /* LEDx at (4 - x) */
462 	struct sixaxis_led _reserved; /* LED5, not actually soldered */
463 } __packed;
464 
465 union sixaxis_output_report_01 {
466 	struct sixaxis_output_report data;
467 	u8 buf[36];
468 };
469 
470 struct motion_output_report_02 {
471 	u8 type, zero;
472 	u8 r, g, b;
473 	u8 zero2;
474 	u8 rumble;
475 };
476 
477 #define DS4_FEATURE_REPORT_0x02_SIZE 37
478 #define DS4_FEATURE_REPORT_0x05_SIZE 41
479 #define DS4_FEATURE_REPORT_0x81_SIZE 7
480 #define DS4_FEATURE_REPORT_0xA3_SIZE 49
481 #define DS4_INPUT_REPORT_0x11_SIZE 78
482 #define DS4_OUTPUT_REPORT_0x05_SIZE 32
483 #define DS4_OUTPUT_REPORT_0x11_SIZE 78
484 #define SIXAXIS_REPORT_0xF2_SIZE 17
485 #define SIXAXIS_REPORT_0xF5_SIZE 8
486 #define MOTION_REPORT_0x02_SIZE 49
487 
488 /* Offsets relative to USB input report (0x1). Bluetooth (0x11) requires an
489  * additional +2.
490  */
491 #define DS4_INPUT_REPORT_AXIS_OFFSET      1
492 #define DS4_INPUT_REPORT_BUTTON_OFFSET    5
493 #define DS4_INPUT_REPORT_TIMESTAMP_OFFSET 10
494 #define DS4_INPUT_REPORT_GYRO_X_OFFSET   13
495 #define DS4_INPUT_REPORT_BATTERY_OFFSET  30
496 #define DS4_INPUT_REPORT_TOUCHPAD_OFFSET 33
497 
498 #define SENSOR_SUFFIX " Motion Sensors"
499 #define DS4_TOUCHPAD_SUFFIX " Touchpad"
500 
501 /* Default to 4ms poll interval, which is same as USB (not adjustable). */
502 #define DS4_BT_DEFAULT_POLL_INTERVAL_MS 4
503 #define DS4_BT_MAX_POLL_INTERVAL_MS 62
504 #define DS4_GYRO_RES_PER_DEG_S 1024
505 #define DS4_ACC_RES_PER_G      8192
506 
507 #define SIXAXIS_INPUT_REPORT_ACC_X_OFFSET 41
508 #define SIXAXIS_ACC_RES_PER_G 113
509 
510 static DEFINE_SPINLOCK(sony_dev_list_lock);
511 static LIST_HEAD(sony_device_list);
512 static DEFINE_IDA(sony_device_id_allocator);
513 
514 /* Used for calibration of DS4 accelerometer and gyro. */
515 struct ds4_calibration_data {
516 	int abs_code;
517 	short bias;
518 	/* Calibration requires scaling against a sensitivity value, which is a
519 	 * float. Store sensitivity as a fraction to limit floating point
520 	 * calculations until final calibration.
521 	 */
522 	int sens_numer;
523 	int sens_denom;
524 };
525 
526 enum ds4_dongle_state {
527 	DONGLE_DISCONNECTED,
528 	DONGLE_CALIBRATING,
529 	DONGLE_CONNECTED,
530 	DONGLE_DISABLED
531 };
532 
533 enum sony_worker {
534 	SONY_WORKER_STATE,
535 	SONY_WORKER_HOTPLUG
536 };
537 
538 struct sony_sc {
539 	spinlock_t lock;
540 	struct list_head list_node;
541 	struct hid_device *hdev;
542 	struct input_dev *touchpad;
543 	struct input_dev *sensor_dev;
544 	struct led_classdev *leds[MAX_LEDS];
545 	unsigned long quirks;
546 	struct work_struct hotplug_worker;
547 	struct work_struct state_worker;
548 	void (*send_output_report)(struct sony_sc *);
549 	struct power_supply *battery;
550 	struct power_supply_desc battery_desc;
551 	int device_id;
552 	unsigned fw_version;
553 	unsigned hw_version;
554 	u8 *output_report_dmabuf;
555 
556 #ifdef CONFIG_SONY_FF
557 	u8 left;
558 	u8 right;
559 #endif
560 
561 	u8 mac_address[6];
562 	u8 hotplug_worker_initialized;
563 	u8 state_worker_initialized;
564 	u8 defer_initialization;
565 	u8 cable_state;
566 	u8 battery_charging;
567 	u8 battery_capacity;
568 	u8 led_state[MAX_LEDS];
569 	u8 led_delay_on[MAX_LEDS];
570 	u8 led_delay_off[MAX_LEDS];
571 	u8 led_count;
572 
573 	bool timestamp_initialized;
574 	u16 prev_timestamp;
575 	unsigned int timestamp_us;
576 
577 	u8 ds4_bt_poll_interval;
578 	enum ds4_dongle_state ds4_dongle_state;
579 	/* DS4 calibration data */
580 	struct ds4_calibration_data ds4_calib_data[6];
581 };
582 
583 static void sony_set_leds(struct sony_sc *sc);
584 
585 static inline void sony_schedule_work(struct sony_sc *sc,
586 				      enum sony_worker which)
587 {
588 	unsigned long flags;
589 
590 	switch (which) {
591 	case SONY_WORKER_STATE:
592 		spin_lock_irqsave(&sc->lock, flags);
593 		if (!sc->defer_initialization && sc->state_worker_initialized)
594 			schedule_work(&sc->state_worker);
595 		spin_unlock_irqrestore(&sc->lock, flags);
596 		break;
597 	case SONY_WORKER_HOTPLUG:
598 		if (sc->hotplug_worker_initialized)
599 			schedule_work(&sc->hotplug_worker);
600 		break;
601 	}
602 }
603 
604 static ssize_t ds4_show_poll_interval(struct device *dev,
605 				struct device_attribute
606 				*attr, char *buf)
607 {
608 	struct hid_device *hdev = to_hid_device(dev);
609 	struct sony_sc *sc = hid_get_drvdata(hdev);
610 
611 	return snprintf(buf, PAGE_SIZE, "%i\n", sc->ds4_bt_poll_interval);
612 }
613 
614 static ssize_t ds4_store_poll_interval(struct device *dev,
615 				struct device_attribute *attr,
616 				const char *buf, size_t count)
617 {
618 	struct hid_device *hdev = to_hid_device(dev);
619 	struct sony_sc *sc = hid_get_drvdata(hdev);
620 	unsigned long flags;
621 	u8 interval;
622 
623 	if (kstrtou8(buf, 0, &interval))
624 		return -EINVAL;
625 
626 	if (interval > DS4_BT_MAX_POLL_INTERVAL_MS)
627 		return -EINVAL;
628 
629 	spin_lock_irqsave(&sc->lock, flags);
630 	sc->ds4_bt_poll_interval = interval;
631 	spin_unlock_irqrestore(&sc->lock, flags);
632 
633 	sony_schedule_work(sc, SONY_WORKER_STATE);
634 
635 	return count;
636 }
637 
638 static DEVICE_ATTR(bt_poll_interval, 0644, ds4_show_poll_interval,
639 		ds4_store_poll_interval);
640 
641 static ssize_t sony_show_firmware_version(struct device *dev,
642 				struct device_attribute
643 				*attr, char *buf)
644 {
645 	struct hid_device *hdev = to_hid_device(dev);
646 	struct sony_sc *sc = hid_get_drvdata(hdev);
647 
648 	return snprintf(buf, PAGE_SIZE, "0x%04x\n", sc->fw_version);
649 }
650 
651 static DEVICE_ATTR(firmware_version, 0444, sony_show_firmware_version, NULL);
652 
653 static ssize_t sony_show_hardware_version(struct device *dev,
654 				struct device_attribute
655 				*attr, char *buf)
656 {
657 	struct hid_device *hdev = to_hid_device(dev);
658 	struct sony_sc *sc = hid_get_drvdata(hdev);
659 
660 	return snprintf(buf, PAGE_SIZE, "0x%04x\n", sc->hw_version);
661 }
662 
663 static DEVICE_ATTR(hardware_version, 0444, sony_show_hardware_version, NULL);
664 
665 static u8 *motion_fixup(struct hid_device *hdev, u8 *rdesc,
666 			     unsigned int *rsize)
667 {
668 	*rsize = sizeof(motion_rdesc);
669 	return motion_rdesc;
670 }
671 
672 static u8 *ps3remote_fixup(struct hid_device *hdev, u8 *rdesc,
673 			     unsigned int *rsize)
674 {
675 	*rsize = sizeof(ps3remote_rdesc);
676 	return ps3remote_rdesc;
677 }
678 
679 static int ps3remote_mapping(struct hid_device *hdev, struct hid_input *hi,
680 			     struct hid_field *field, struct hid_usage *usage,
681 			     unsigned long **bit, int *max)
682 {
683 	unsigned int key = usage->hid & HID_USAGE;
684 
685 	if ((usage->hid & HID_USAGE_PAGE) != HID_UP_BUTTON)
686 		return -1;
687 
688 	switch (usage->collection_index) {
689 	case 1:
690 		if (key >= ARRAY_SIZE(ps3remote_keymap_joypad_buttons))
691 			return -1;
692 
693 		key = ps3remote_keymap_joypad_buttons[key];
694 		if (!key)
695 			return -1;
696 		break;
697 	case 2:
698 		if (key >= ARRAY_SIZE(ps3remote_keymap_remote_buttons))
699 			return -1;
700 
701 		key = ps3remote_keymap_remote_buttons[key];
702 		if (!key)
703 			return -1;
704 		break;
705 	default:
706 		return -1;
707 	}
708 
709 	hid_map_usage_clear(hi, usage, bit, max, EV_KEY, key);
710 	return 1;
711 }
712 
713 static int navigation_mapping(struct hid_device *hdev, struct hid_input *hi,
714 			  struct hid_field *field, struct hid_usage *usage,
715 			  unsigned long **bit, int *max)
716 {
717 	if ((usage->hid & HID_USAGE_PAGE) == HID_UP_BUTTON) {
718 		unsigned int key = usage->hid & HID_USAGE;
719 
720 		if (key >= ARRAY_SIZE(sixaxis_keymap))
721 			return -1;
722 
723 		key = navigation_keymap[key];
724 		if (!key)
725 			return -1;
726 
727 		hid_map_usage_clear(hi, usage, bit, max, EV_KEY, key);
728 		return 1;
729 	} else if (usage->hid == HID_GD_POINTER) {
730 		/* See comment in sixaxis_mapping, basically the L2 (and R2)
731 		 * triggers are reported through GD Pointer.
732 		 * In addition we ignore any analog button 'axes' and only
733 		 * support digital buttons.
734 		 */
735 		switch (usage->usage_index) {
736 		case 8: /* L2 */
737 			usage->hid = HID_GD_Z;
738 			break;
739 		default:
740 			return -1;
741 		}
742 
743 		hid_map_usage_clear(hi, usage, bit, max, EV_ABS, usage->hid & 0xf);
744 		return 1;
745 	} else if ((usage->hid & HID_USAGE_PAGE) == HID_UP_GENDESK) {
746 		unsigned int abs = usage->hid & HID_USAGE;
747 
748 		if (abs >= ARRAY_SIZE(navigation_absmap))
749 			return -1;
750 
751 		abs = navigation_absmap[abs];
752 
753 		hid_map_usage_clear(hi, usage, bit, max, EV_ABS, abs);
754 		return 1;
755 	}
756 
757 	return -1;
758 }
759 
760 
761 static int sixaxis_mapping(struct hid_device *hdev, struct hid_input *hi,
762 			  struct hid_field *field, struct hid_usage *usage,
763 			  unsigned long **bit, int *max)
764 {
765 	if ((usage->hid & HID_USAGE_PAGE) == HID_UP_BUTTON) {
766 		unsigned int key = usage->hid & HID_USAGE;
767 
768 		if (key >= ARRAY_SIZE(sixaxis_keymap))
769 			return -1;
770 
771 		key = sixaxis_keymap[key];
772 		hid_map_usage_clear(hi, usage, bit, max, EV_KEY, key);
773 		return 1;
774 	} else if (usage->hid == HID_GD_POINTER) {
775 		/* The DS3 provides analog values for most buttons and even
776 		 * for HAT axes through GD Pointer. L2 and R2 are reported
777 		 * among these as well instead of as GD Z / RZ. Remap L2
778 		 * and R2 and ignore other analog 'button axes' as there is
779 		 * no good way for reporting them.
780 		 */
781 		switch (usage->usage_index) {
782 		case 8: /* L2 */
783 			usage->hid = HID_GD_Z;
784 			break;
785 		case 9: /* R2 */
786 			usage->hid = HID_GD_RZ;
787 			break;
788 		default:
789 			return -1;
790 		}
791 
792 		hid_map_usage_clear(hi, usage, bit, max, EV_ABS, usage->hid & 0xf);
793 		return 1;
794 	} else if ((usage->hid & HID_USAGE_PAGE) == HID_UP_GENDESK) {
795 		unsigned int abs = usage->hid & HID_USAGE;
796 
797 		if (abs >= ARRAY_SIZE(sixaxis_absmap))
798 			return -1;
799 
800 		abs = sixaxis_absmap[abs];
801 
802 		hid_map_usage_clear(hi, usage, bit, max, EV_ABS, abs);
803 		return 1;
804 	}
805 
806 	return -1;
807 }
808 
809 static int ds4_mapping(struct hid_device *hdev, struct hid_input *hi,
810 		       struct hid_field *field, struct hid_usage *usage,
811 		       unsigned long **bit, int *max)
812 {
813 	if ((usage->hid & HID_USAGE_PAGE) == HID_UP_BUTTON) {
814 		unsigned int key = usage->hid & HID_USAGE;
815 
816 		if (key >= ARRAY_SIZE(ds4_keymap))
817 			return -1;
818 
819 		key = ds4_keymap[key];
820 		hid_map_usage_clear(hi, usage, bit, max, EV_KEY, key);
821 		return 1;
822 	} else if ((usage->hid & HID_USAGE_PAGE) == HID_UP_GENDESK) {
823 		unsigned int abs = usage->hid & HID_USAGE;
824 
825 		/* Let the HID parser deal with the HAT. */
826 		if (usage->hid == HID_GD_HATSWITCH)
827 			return 0;
828 
829 		if (abs >= ARRAY_SIZE(ds4_absmap))
830 			return -1;
831 
832 		abs = ds4_absmap[abs];
833 		hid_map_usage_clear(hi, usage, bit, max, EV_ABS, abs);
834 		return 1;
835 	}
836 
837 	return 0;
838 }
839 
840 static u8 *sony_report_fixup(struct hid_device *hdev, u8 *rdesc,
841 		unsigned int *rsize)
842 {
843 	struct sony_sc *sc = hid_get_drvdata(hdev);
844 
845 	if (sc->quirks & (SINO_LITE_CONTROLLER | FUTUREMAX_DANCE_MAT))
846 		return rdesc;
847 
848 	/*
849 	 * Some Sony RF receivers wrongly declare the mouse pointer as a
850 	 * a constant non-data variable.
851 	 */
852 	if ((sc->quirks & VAIO_RDESC_CONSTANT) && *rsize >= 56 &&
853 	    /* usage page: generic desktop controls */
854 	    /* rdesc[0] == 0x05 && rdesc[1] == 0x01 && */
855 	    /* usage: mouse */
856 	    rdesc[2] == 0x09 && rdesc[3] == 0x02 &&
857 	    /* input (usage page for x,y axes): constant, variable, relative */
858 	    rdesc[54] == 0x81 && rdesc[55] == 0x07) {
859 		hid_info(hdev, "Fixing up Sony RF Receiver report descriptor\n");
860 		/* input: data, variable, relative */
861 		rdesc[55] = 0x06;
862 	}
863 
864 	if (sc->quirks & MOTION_CONTROLLER)
865 		return motion_fixup(hdev, rdesc, rsize);
866 
867 	if (sc->quirks & PS3REMOTE)
868 		return ps3remote_fixup(hdev, rdesc, rsize);
869 
870 	return rdesc;
871 }
872 
873 static void sixaxis_parse_report(struct sony_sc *sc, u8 *rd, int size)
874 {
875 	static const u8 sixaxis_battery_capacity[] = { 0, 1, 25, 50, 75, 100 };
876 	unsigned long flags;
877 	int offset;
878 	u8 cable_state, battery_capacity, battery_charging;
879 
880 	/*
881 	 * The sixaxis is charging if the battery value is 0xee
882 	 * and it is fully charged if the value is 0xef.
883 	 * It does not report the actual level while charging so it
884 	 * is set to 100% while charging is in progress.
885 	 */
886 	offset = (sc->quirks & MOTION_CONTROLLER) ? 12 : 30;
887 
888 	if (rd[offset] >= 0xee) {
889 		battery_capacity = 100;
890 		battery_charging = !(rd[offset] & 0x01);
891 		cable_state = 1;
892 	} else {
893 		u8 index = rd[offset] <= 5 ? rd[offset] : 5;
894 		battery_capacity = sixaxis_battery_capacity[index];
895 		battery_charging = 0;
896 		cable_state = 0;
897 	}
898 
899 	spin_lock_irqsave(&sc->lock, flags);
900 	sc->cable_state = cable_state;
901 	sc->battery_capacity = battery_capacity;
902 	sc->battery_charging = battery_charging;
903 	spin_unlock_irqrestore(&sc->lock, flags);
904 
905 	if (sc->quirks & SIXAXIS_CONTROLLER) {
906 		int val;
907 
908 		offset = SIXAXIS_INPUT_REPORT_ACC_X_OFFSET;
909 		val = ((rd[offset+1] << 8) | rd[offset]) - 511;
910 		input_report_abs(sc->sensor_dev, ABS_X, val);
911 
912 		/* Y and Z are swapped and inversed */
913 		val = 511 - ((rd[offset+5] << 8) | rd[offset+4]);
914 		input_report_abs(sc->sensor_dev, ABS_Y, val);
915 
916 		val = 511 - ((rd[offset+3] << 8) | rd[offset+2]);
917 		input_report_abs(sc->sensor_dev, ABS_Z, val);
918 
919 		input_sync(sc->sensor_dev);
920 	}
921 }
922 
923 static void dualshock4_parse_report(struct sony_sc *sc, u8 *rd, int size)
924 {
925 	struct hid_input *hidinput = list_entry(sc->hdev->inputs.next,
926 						struct hid_input, list);
927 	struct input_dev *input_dev = hidinput->input;
928 	unsigned long flags;
929 	int n, m, offset, num_touch_data, max_touch_data;
930 	u8 cable_state, battery_capacity, battery_charging;
931 	u16 timestamp;
932 
933 	/* When using Bluetooth the header is 2 bytes longer, so skip these. */
934 	int data_offset = (sc->quirks & DUALSHOCK4_CONTROLLER_BT) ? 2 : 0;
935 
936 	/* Second bit of third button byte is for the touchpad button. */
937 	offset = data_offset + DS4_INPUT_REPORT_BUTTON_OFFSET;
938 	input_report_key(sc->touchpad, BTN_LEFT, rd[offset+2] & 0x2);
939 
940 	/*
941 	 * The default behavior of the Dualshock 4 is to send reports using
942 	 * report type 1 when running over Bluetooth. However, when feature
943 	 * report 2 is requested during the controller initialization it starts
944 	 * sending input reports in report 17. Since report 17 is undefined
945 	 * in the default HID descriptor, the HID layer won't generate events.
946 	 * While it is possible (and this was done before) to fixup the HID
947 	 * descriptor to add this mapping, it was better to do this manually.
948 	 * The reason is there were various pieces software both open and closed
949 	 * source, relying on the descriptors to be the same across various
950 	 * operating systems. If the descriptors wouldn't match some
951 	 * applications e.g. games on Wine would not be able to function due
952 	 * to different descriptors, which such applications are not parsing.
953 	 */
954 	if (rd[0] == 17) {
955 		int value;
956 
957 		offset = data_offset + DS4_INPUT_REPORT_AXIS_OFFSET;
958 		input_report_abs(input_dev, ABS_X, rd[offset]);
959 		input_report_abs(input_dev, ABS_Y, rd[offset+1]);
960 		input_report_abs(input_dev, ABS_RX, rd[offset+2]);
961 		input_report_abs(input_dev, ABS_RY, rd[offset+3]);
962 
963 		value = rd[offset+4] & 0xf;
964 		if (value > 7)
965 			value = 8; /* Center 0, 0 */
966 		input_report_abs(input_dev, ABS_HAT0X, ds4_hat_mapping[value].x);
967 		input_report_abs(input_dev, ABS_HAT0Y, ds4_hat_mapping[value].y);
968 
969 		input_report_key(input_dev, BTN_WEST, rd[offset+4] & 0x10);
970 		input_report_key(input_dev, BTN_SOUTH, rd[offset+4] & 0x20);
971 		input_report_key(input_dev, BTN_EAST, rd[offset+4] & 0x40);
972 		input_report_key(input_dev, BTN_NORTH, rd[offset+4] & 0x80);
973 
974 		input_report_key(input_dev, BTN_TL, rd[offset+5] & 0x1);
975 		input_report_key(input_dev, BTN_TR, rd[offset+5] & 0x2);
976 		input_report_key(input_dev, BTN_TL2, rd[offset+5] & 0x4);
977 		input_report_key(input_dev, BTN_TR2, rd[offset+5] & 0x8);
978 		input_report_key(input_dev, BTN_SELECT, rd[offset+5] & 0x10);
979 		input_report_key(input_dev, BTN_START, rd[offset+5] & 0x20);
980 		input_report_key(input_dev, BTN_THUMBL, rd[offset+5] & 0x40);
981 		input_report_key(input_dev, BTN_THUMBR, rd[offset+5] & 0x80);
982 
983 		input_report_key(input_dev, BTN_MODE, rd[offset+6] & 0x1);
984 
985 		input_report_abs(input_dev, ABS_Z, rd[offset+7]);
986 		input_report_abs(input_dev, ABS_RZ, rd[offset+8]);
987 
988 		input_sync(input_dev);
989 	}
990 
991 	/* Convert timestamp (in 5.33us unit) to timestamp_us */
992 	offset = data_offset + DS4_INPUT_REPORT_TIMESTAMP_OFFSET;
993 	timestamp = get_unaligned_le16(&rd[offset]);
994 	if (!sc->timestamp_initialized) {
995 		sc->timestamp_us = ((unsigned int)timestamp * 16) / 3;
996 		sc->timestamp_initialized = true;
997 	} else {
998 		u16 delta;
999 
1000 		if (sc->prev_timestamp > timestamp)
1001 			delta = (U16_MAX - sc->prev_timestamp + timestamp + 1);
1002 		else
1003 			delta = timestamp - sc->prev_timestamp;
1004 		sc->timestamp_us += (delta * 16) / 3;
1005 	}
1006 	sc->prev_timestamp = timestamp;
1007 	input_event(sc->sensor_dev, EV_MSC, MSC_TIMESTAMP, sc->timestamp_us);
1008 
1009 	offset = data_offset + DS4_INPUT_REPORT_GYRO_X_OFFSET;
1010 	for (n = 0; n < 6; n++) {
1011 		/* Store data in int for more precision during mult_frac. */
1012 		int raw_data = (short)((rd[offset+1] << 8) | rd[offset]);
1013 		struct ds4_calibration_data *calib = &sc->ds4_calib_data[n];
1014 
1015 		/* High precision is needed during calibration, but the
1016 		 * calibrated values are within 32-bit.
1017 		 * Note: we swap numerator 'x' and 'numer' in mult_frac for
1018 		 *       precision reasons so we don't need 64-bit.
1019 		 */
1020 		int calib_data = mult_frac(calib->sens_numer,
1021 					   raw_data - calib->bias,
1022 					   calib->sens_denom);
1023 
1024 		input_report_abs(sc->sensor_dev, calib->abs_code, calib_data);
1025 		offset += 2;
1026 	}
1027 	input_sync(sc->sensor_dev);
1028 
1029 	/*
1030 	 * The lower 4 bits of byte 30 (or 32 for BT) contain the battery level
1031 	 * and the 5th bit contains the USB cable state.
1032 	 */
1033 	offset = data_offset + DS4_INPUT_REPORT_BATTERY_OFFSET;
1034 	cable_state = (rd[offset] >> 4) & 0x01;
1035 	battery_capacity = rd[offset] & 0x0F;
1036 
1037 	/*
1038 	 * When a USB power source is connected the battery level ranges from
1039 	 * 0 to 10, and when running on battery power it ranges from 0 to 9.
1040 	 * A battery level above 10 when plugged in means charge completed.
1041 	 */
1042 	if (!cable_state || battery_capacity > 10)
1043 		battery_charging = 0;
1044 	else
1045 		battery_charging = 1;
1046 
1047 	if (!cable_state)
1048 		battery_capacity++;
1049 	if (battery_capacity > 10)
1050 		battery_capacity = 10;
1051 
1052 	battery_capacity *= 10;
1053 
1054 	spin_lock_irqsave(&sc->lock, flags);
1055 	sc->cable_state = cable_state;
1056 	sc->battery_capacity = battery_capacity;
1057 	sc->battery_charging = battery_charging;
1058 	spin_unlock_irqrestore(&sc->lock, flags);
1059 
1060 	/*
1061 	 * The Dualshock 4 multi-touch trackpad data starts at offset 33 on USB
1062 	 * and 35 on Bluetooth.
1063 	 * The first byte indicates the number of touch data in the report.
1064 	 * Trackpad data starts 2 bytes later (e.g. 35 for USB).
1065 	 */
1066 	offset = data_offset + DS4_INPUT_REPORT_TOUCHPAD_OFFSET;
1067 	max_touch_data = (sc->quirks & DUALSHOCK4_CONTROLLER_BT) ? 4 : 3;
1068 	if (rd[offset] > 0 && rd[offset] <= max_touch_data)
1069 		num_touch_data = rd[offset];
1070 	else
1071 		num_touch_data = 1;
1072 	offset += 1;
1073 
1074 	for (m = 0; m < num_touch_data; m++) {
1075 		/* Skip past timestamp */
1076 		offset += 1;
1077 
1078 		/*
1079 		 * The first 7 bits of the first byte is a counter and bit 8 is
1080 		 * a touch indicator that is 0 when pressed and 1 when not
1081 		 * pressed.
1082 		 * The next 3 bytes are two 12 bit touch coordinates, X and Y.
1083 		 * The data for the second touch is in the same format and
1084 		 * immediately follows the data for the first.
1085 		 */
1086 		for (n = 0; n < 2; n++) {
1087 			u16 x, y;
1088 			bool active;
1089 
1090 			x = rd[offset+1] | ((rd[offset+2] & 0xF) << 8);
1091 			y = ((rd[offset+2] & 0xF0) >> 4) | (rd[offset+3] << 4);
1092 
1093 			active = !(rd[offset] >> 7);
1094 			input_mt_slot(sc->touchpad, n);
1095 			input_mt_report_slot_state(sc->touchpad, MT_TOOL_FINGER, active);
1096 
1097 			if (active) {
1098 				input_report_abs(sc->touchpad, ABS_MT_POSITION_X, x);
1099 				input_report_abs(sc->touchpad, ABS_MT_POSITION_Y, y);
1100 			}
1101 
1102 			offset += 4;
1103 		}
1104 		input_mt_sync_frame(sc->touchpad);
1105 		input_sync(sc->touchpad);
1106 	}
1107 }
1108 
1109 static void nsg_mrxu_parse_report(struct sony_sc *sc, u8 *rd, int size)
1110 {
1111 	int n, offset, relx, rely;
1112 	u8 active;
1113 
1114 	/*
1115 	 * The NSG-MRxU multi-touch trackpad data starts at offset 1 and
1116 	 *   the touch-related data starts at offset 2.
1117 	 * For the first byte, bit 0 is set when touchpad button is pressed.
1118 	 * Bit 2 is set when a touch is active and the drag (Fn) key is pressed.
1119 	 * This drag key is mapped to BTN_LEFT.  It is operational only when a
1120 	 *   touch point is active.
1121 	 * Bit 4 is set when only the first touch point is active.
1122 	 * Bit 6 is set when only the second touch point is active.
1123 	 * Bits 5 and 7 are set when both touch points are active.
1124 	 * The next 3 bytes are two 12 bit X/Y coordinates for the first touch.
1125 	 * The following byte, offset 5, has the touch width and length.
1126 	 *   Bits 0-4=X (width), bits 5-7=Y (length).
1127 	 * A signed relative X coordinate is at offset 6.
1128 	 * The bytes at offset 7-9 are the second touch X/Y coordinates.
1129 	 * Offset 10 has the second touch width and length.
1130 	 * Offset 11 has the relative Y coordinate.
1131 	 */
1132 	offset = 1;
1133 
1134 	input_report_key(sc->touchpad, BTN_LEFT, rd[offset] & 0x0F);
1135 	active = (rd[offset] >> 4);
1136 	relx = (s8) rd[offset+5];
1137 	rely = ((s8) rd[offset+10]) * -1;
1138 
1139 	offset++;
1140 
1141 	for (n = 0; n < 2; n++) {
1142 		u16 x, y;
1143 		u8 contactx, contacty;
1144 
1145 		x = rd[offset] | ((rd[offset+1] & 0x0F) << 8);
1146 		y = ((rd[offset+1] & 0xF0) >> 4) | (rd[offset+2] << 4);
1147 
1148 		input_mt_slot(sc->touchpad, n);
1149 		input_mt_report_slot_state(sc->touchpad, MT_TOOL_FINGER, active & 0x03);
1150 
1151 		if (active & 0x03) {
1152 			contactx = rd[offset+3] & 0x0F;
1153 			contacty = rd[offset+3] >> 4;
1154 			input_report_abs(sc->touchpad, ABS_MT_TOUCH_MAJOR,
1155 				max(contactx, contacty));
1156 			input_report_abs(sc->touchpad, ABS_MT_TOUCH_MINOR,
1157 				min(contactx, contacty));
1158 			input_report_abs(sc->touchpad, ABS_MT_ORIENTATION,
1159 				(bool) (contactx > contacty));
1160 			input_report_abs(sc->touchpad, ABS_MT_POSITION_X, x);
1161 			input_report_abs(sc->touchpad, ABS_MT_POSITION_Y,
1162 				NSG_MRXU_MAX_Y - y);
1163 			/*
1164 			 * The relative coordinates belong to the first touch
1165 			 * point, when present, or to the second touch point
1166 			 * when the first is not active.
1167 			 */
1168 			if ((n == 0) || ((n == 1) && (active & 0x01))) {
1169 				input_report_rel(sc->touchpad, REL_X, relx);
1170 				input_report_rel(sc->touchpad, REL_Y, rely);
1171 			}
1172 		}
1173 
1174 		offset += 5;
1175 		active >>= 2;
1176 	}
1177 
1178 	input_mt_sync_frame(sc->touchpad);
1179 
1180 	input_sync(sc->touchpad);
1181 }
1182 
1183 static int sony_raw_event(struct hid_device *hdev, struct hid_report *report,
1184 		u8 *rd, int size)
1185 {
1186 	struct sony_sc *sc = hid_get_drvdata(hdev);
1187 
1188 	/*
1189 	 * Sixaxis HID report has acclerometers/gyro with MSByte first, this
1190 	 * has to be BYTE_SWAPPED before passing up to joystick interface
1191 	 */
1192 	if ((sc->quirks & SIXAXIS_CONTROLLER) && rd[0] == 0x01 && size == 49) {
1193 		/*
1194 		 * When connected via Bluetooth the Sixaxis occasionally sends
1195 		 * a report with the second byte 0xff and the rest zeroed.
1196 		 *
1197 		 * This report does not reflect the actual state of the
1198 		 * controller must be ignored to avoid generating false input
1199 		 * events.
1200 		 */
1201 		if (rd[1] == 0xff)
1202 			return -EINVAL;
1203 
1204 		swap(rd[41], rd[42]);
1205 		swap(rd[43], rd[44]);
1206 		swap(rd[45], rd[46]);
1207 		swap(rd[47], rd[48]);
1208 
1209 		sixaxis_parse_report(sc, rd, size);
1210 	} else if ((sc->quirks & MOTION_CONTROLLER_BT) && rd[0] == 0x01 && size == 49) {
1211 		sixaxis_parse_report(sc, rd, size);
1212 	} else if ((sc->quirks & NAVIGATION_CONTROLLER) && rd[0] == 0x01 &&
1213 			size == 49) {
1214 		sixaxis_parse_report(sc, rd, size);
1215 	} else if ((sc->quirks & DUALSHOCK4_CONTROLLER_USB) && rd[0] == 0x01 &&
1216 			size == 64) {
1217 		dualshock4_parse_report(sc, rd, size);
1218 	} else if (((sc->quirks & DUALSHOCK4_CONTROLLER_BT) && rd[0] == 0x11 &&
1219 			size == 78)) {
1220 		/* CRC check */
1221 		u8 bthdr = 0xA1;
1222 		u32 crc;
1223 		u32 report_crc;
1224 
1225 		crc = crc32_le(0xFFFFFFFF, &bthdr, 1);
1226 		crc = ~crc32_le(crc, rd, DS4_INPUT_REPORT_0x11_SIZE-4);
1227 		report_crc = get_unaligned_le32(&rd[DS4_INPUT_REPORT_0x11_SIZE-4]);
1228 		if (crc != report_crc) {
1229 			hid_dbg(sc->hdev, "DualShock 4 input report's CRC check failed, received crc 0x%0x != 0x%0x\n",
1230 				report_crc, crc);
1231 			return -EILSEQ;
1232 		}
1233 
1234 		dualshock4_parse_report(sc, rd, size);
1235 	} else if ((sc->quirks & DUALSHOCK4_DONGLE) && rd[0] == 0x01 &&
1236 			size == 64) {
1237 		unsigned long flags;
1238 		enum ds4_dongle_state dongle_state;
1239 
1240 		/*
1241 		 * In the case of a DS4 USB dongle, bit[2] of byte 31 indicates
1242 		 * if a DS4 is actually connected (indicated by '0').
1243 		 * For non-dongle, this bit is always 0 (connected).
1244 		 */
1245 		bool connected = (rd[31] & 0x04) ? false : true;
1246 
1247 		spin_lock_irqsave(&sc->lock, flags);
1248 		dongle_state = sc->ds4_dongle_state;
1249 		spin_unlock_irqrestore(&sc->lock, flags);
1250 
1251 		/*
1252 		 * The dongle always sends input reports even when no
1253 		 * DS4 is attached. When a DS4 is connected, we need to
1254 		 * obtain calibration data before we can use it.
1255 		 * The code below tracks dongle state and kicks of
1256 		 * calibration when needed and only allows us to process
1257 		 * input if a DS4 is actually connected.
1258 		 */
1259 		if (dongle_state == DONGLE_DISCONNECTED && connected) {
1260 			hid_info(sc->hdev, "DualShock 4 USB dongle: controller connected\n");
1261 			sony_set_leds(sc);
1262 
1263 			spin_lock_irqsave(&sc->lock, flags);
1264 			sc->ds4_dongle_state = DONGLE_CALIBRATING;
1265 			spin_unlock_irqrestore(&sc->lock, flags);
1266 
1267 			sony_schedule_work(sc, SONY_WORKER_HOTPLUG);
1268 
1269 			/* Don't process the report since we don't have
1270 			 * calibration data, but let hidraw have it anyway.
1271 			 */
1272 			return 0;
1273 		} else if ((dongle_state == DONGLE_CONNECTED ||
1274 			    dongle_state == DONGLE_DISABLED) && !connected) {
1275 			hid_info(sc->hdev, "DualShock 4 USB dongle: controller disconnected\n");
1276 
1277 			spin_lock_irqsave(&sc->lock, flags);
1278 			sc->ds4_dongle_state = DONGLE_DISCONNECTED;
1279 			spin_unlock_irqrestore(&sc->lock, flags);
1280 
1281 			/* Return 0, so hidraw can get the report. */
1282 			return 0;
1283 		} else if (dongle_state == DONGLE_CALIBRATING ||
1284 			   dongle_state == DONGLE_DISABLED ||
1285 			   dongle_state == DONGLE_DISCONNECTED) {
1286 			/* Return 0, so hidraw can get the report. */
1287 			return 0;
1288 		}
1289 
1290 		dualshock4_parse_report(sc, rd, size);
1291 
1292 	} else if ((sc->quirks & NSG_MRXU_REMOTE) && rd[0] == 0x02) {
1293 		nsg_mrxu_parse_report(sc, rd, size);
1294 		return 1;
1295 	}
1296 
1297 	if (sc->defer_initialization) {
1298 		sc->defer_initialization = 0;
1299 		sony_schedule_work(sc, SONY_WORKER_STATE);
1300 	}
1301 
1302 	return 0;
1303 }
1304 
1305 static int sony_mapping(struct hid_device *hdev, struct hid_input *hi,
1306 			struct hid_field *field, struct hid_usage *usage,
1307 			unsigned long **bit, int *max)
1308 {
1309 	struct sony_sc *sc = hid_get_drvdata(hdev);
1310 
1311 	if (sc->quirks & BUZZ_CONTROLLER) {
1312 		unsigned int key = usage->hid & HID_USAGE;
1313 
1314 		if ((usage->hid & HID_USAGE_PAGE) != HID_UP_BUTTON)
1315 			return -1;
1316 
1317 		switch (usage->collection_index) {
1318 		case 1:
1319 			if (key >= ARRAY_SIZE(buzz_keymap))
1320 				return -1;
1321 
1322 			key = buzz_keymap[key];
1323 			if (!key)
1324 				return -1;
1325 			break;
1326 		default:
1327 			return -1;
1328 		}
1329 
1330 		hid_map_usage_clear(hi, usage, bit, max, EV_KEY, key);
1331 		return 1;
1332 	}
1333 
1334 	if (sc->quirks & PS3REMOTE)
1335 		return ps3remote_mapping(hdev, hi, field, usage, bit, max);
1336 
1337 	if (sc->quirks & NAVIGATION_CONTROLLER)
1338 		return navigation_mapping(hdev, hi, field, usage, bit, max);
1339 
1340 	if (sc->quirks & SIXAXIS_CONTROLLER)
1341 		return sixaxis_mapping(hdev, hi, field, usage, bit, max);
1342 
1343 	if (sc->quirks & DUALSHOCK4_CONTROLLER)
1344 		return ds4_mapping(hdev, hi, field, usage, bit, max);
1345 
1346 
1347 	/* Let hid-core decide for the others */
1348 	return 0;
1349 }
1350 
1351 static int sony_register_touchpad(struct sony_sc *sc, int touch_count,
1352 		int w, int h, int touch_major, int touch_minor, int orientation)
1353 {
1354 	size_t name_sz;
1355 	char *name;
1356 	int ret;
1357 
1358 	sc->touchpad = devm_input_allocate_device(&sc->hdev->dev);
1359 	if (!sc->touchpad)
1360 		return -ENOMEM;
1361 
1362 	input_set_drvdata(sc->touchpad, sc);
1363 	sc->touchpad->dev.parent = &sc->hdev->dev;
1364 	sc->touchpad->phys = sc->hdev->phys;
1365 	sc->touchpad->uniq = sc->hdev->uniq;
1366 	sc->touchpad->id.bustype = sc->hdev->bus;
1367 	sc->touchpad->id.vendor = sc->hdev->vendor;
1368 	sc->touchpad->id.product = sc->hdev->product;
1369 	sc->touchpad->id.version = sc->hdev->version;
1370 
1371 	/* Append a suffix to the controller name as there are various
1372 	 * DS4 compatible non-Sony devices with different names.
1373 	 */
1374 	name_sz = strlen(sc->hdev->name) + sizeof(DS4_TOUCHPAD_SUFFIX);
1375 	name = devm_kzalloc(&sc->hdev->dev, name_sz, GFP_KERNEL);
1376 	if (!name)
1377 		return -ENOMEM;
1378 	snprintf(name, name_sz, "%s" DS4_TOUCHPAD_SUFFIX, sc->hdev->name);
1379 	sc->touchpad->name = name;
1380 
1381 	/* We map the button underneath the touchpad to BTN_LEFT. */
1382 	__set_bit(EV_KEY, sc->touchpad->evbit);
1383 	__set_bit(BTN_LEFT, sc->touchpad->keybit);
1384 	__set_bit(INPUT_PROP_BUTTONPAD, sc->touchpad->propbit);
1385 
1386 	input_set_abs_params(sc->touchpad, ABS_MT_POSITION_X, 0, w, 0, 0);
1387 	input_set_abs_params(sc->touchpad, ABS_MT_POSITION_Y, 0, h, 0, 0);
1388 
1389 	if (touch_major > 0) {
1390 		input_set_abs_params(sc->touchpad, ABS_MT_TOUCH_MAJOR,
1391 			0, touch_major, 0, 0);
1392 		if (touch_minor > 0)
1393 			input_set_abs_params(sc->touchpad, ABS_MT_TOUCH_MINOR,
1394 				0, touch_minor, 0, 0);
1395 		if (orientation > 0)
1396 			input_set_abs_params(sc->touchpad, ABS_MT_ORIENTATION,
1397 				0, orientation, 0, 0);
1398 	}
1399 
1400 	if (sc->quirks & NSG_MRXU_REMOTE) {
1401 		__set_bit(EV_REL, sc->touchpad->evbit);
1402 	}
1403 
1404 	ret = input_mt_init_slots(sc->touchpad, touch_count, INPUT_MT_POINTER);
1405 	if (ret < 0)
1406 		return ret;
1407 
1408 	ret = input_register_device(sc->touchpad);
1409 	if (ret < 0)
1410 		return ret;
1411 
1412 	return 0;
1413 }
1414 
1415 static int sony_register_sensors(struct sony_sc *sc)
1416 {
1417 	size_t name_sz;
1418 	char *name;
1419 	int ret;
1420 	int range;
1421 
1422 	sc->sensor_dev = devm_input_allocate_device(&sc->hdev->dev);
1423 	if (!sc->sensor_dev)
1424 		return -ENOMEM;
1425 
1426 	input_set_drvdata(sc->sensor_dev, sc);
1427 	sc->sensor_dev->dev.parent = &sc->hdev->dev;
1428 	sc->sensor_dev->phys = sc->hdev->phys;
1429 	sc->sensor_dev->uniq = sc->hdev->uniq;
1430 	sc->sensor_dev->id.bustype = sc->hdev->bus;
1431 	sc->sensor_dev->id.vendor = sc->hdev->vendor;
1432 	sc->sensor_dev->id.product = sc->hdev->product;
1433 	sc->sensor_dev->id.version = sc->hdev->version;
1434 
1435 	/* Append a suffix to the controller name as there are various
1436 	 * DS4 compatible non-Sony devices with different names.
1437 	 */
1438 	name_sz = strlen(sc->hdev->name) + sizeof(SENSOR_SUFFIX);
1439 	name = devm_kzalloc(&sc->hdev->dev, name_sz, GFP_KERNEL);
1440 	if (!name)
1441 		return -ENOMEM;
1442 	snprintf(name, name_sz, "%s" SENSOR_SUFFIX, sc->hdev->name);
1443 	sc->sensor_dev->name = name;
1444 
1445 	if (sc->quirks & SIXAXIS_CONTROLLER) {
1446 		/* For the DS3 we only support the accelerometer, which works
1447 		 * quite well even without calibration. The device also has
1448 		 * a 1-axis gyro, but it is very difficult to manage from within
1449 		 * the driver even to get data, the sensor is inaccurate and
1450 		 * the behavior is very different between hardware revisions.
1451 		 */
1452 		input_set_abs_params(sc->sensor_dev, ABS_X, -512, 511, 4, 0);
1453 		input_set_abs_params(sc->sensor_dev, ABS_Y, -512, 511, 4, 0);
1454 		input_set_abs_params(sc->sensor_dev, ABS_Z, -512, 511, 4, 0);
1455 		input_abs_set_res(sc->sensor_dev, ABS_X, SIXAXIS_ACC_RES_PER_G);
1456 		input_abs_set_res(sc->sensor_dev, ABS_Y, SIXAXIS_ACC_RES_PER_G);
1457 		input_abs_set_res(sc->sensor_dev, ABS_Z, SIXAXIS_ACC_RES_PER_G);
1458 	} else if (sc->quirks & DUALSHOCK4_CONTROLLER) {
1459 		range = DS4_ACC_RES_PER_G*4;
1460 		input_set_abs_params(sc->sensor_dev, ABS_X, -range, range, 16, 0);
1461 		input_set_abs_params(sc->sensor_dev, ABS_Y, -range, range, 16, 0);
1462 		input_set_abs_params(sc->sensor_dev, ABS_Z, -range, range, 16, 0);
1463 		input_abs_set_res(sc->sensor_dev, ABS_X, DS4_ACC_RES_PER_G);
1464 		input_abs_set_res(sc->sensor_dev, ABS_Y, DS4_ACC_RES_PER_G);
1465 		input_abs_set_res(sc->sensor_dev, ABS_Z, DS4_ACC_RES_PER_G);
1466 
1467 		range = DS4_GYRO_RES_PER_DEG_S*2048;
1468 		input_set_abs_params(sc->sensor_dev, ABS_RX, -range, range, 16, 0);
1469 		input_set_abs_params(sc->sensor_dev, ABS_RY, -range, range, 16, 0);
1470 		input_set_abs_params(sc->sensor_dev, ABS_RZ, -range, range, 16, 0);
1471 		input_abs_set_res(sc->sensor_dev, ABS_RX, DS4_GYRO_RES_PER_DEG_S);
1472 		input_abs_set_res(sc->sensor_dev, ABS_RY, DS4_GYRO_RES_PER_DEG_S);
1473 		input_abs_set_res(sc->sensor_dev, ABS_RZ, DS4_GYRO_RES_PER_DEG_S);
1474 
1475 		__set_bit(EV_MSC, sc->sensor_dev->evbit);
1476 		__set_bit(MSC_TIMESTAMP, sc->sensor_dev->mscbit);
1477 	}
1478 
1479 	__set_bit(INPUT_PROP_ACCELEROMETER, sc->sensor_dev->propbit);
1480 
1481 	ret = input_register_device(sc->sensor_dev);
1482 	if (ret < 0)
1483 		return ret;
1484 
1485 	return 0;
1486 }
1487 
1488 /*
1489  * Sending HID_REQ_GET_REPORT changes the operation mode of the ps3 controller
1490  * to "operational".  Without this, the ps3 controller will not report any
1491  * events.
1492  */
1493 static int sixaxis_set_operational_usb(struct hid_device *hdev)
1494 {
1495 	struct sony_sc *sc = hid_get_drvdata(hdev);
1496 	const int buf_size =
1497 		max(SIXAXIS_REPORT_0xF2_SIZE, SIXAXIS_REPORT_0xF5_SIZE);
1498 	u8 *buf;
1499 	int ret;
1500 
1501 	buf = kmalloc(buf_size, GFP_KERNEL);
1502 	if (!buf)
1503 		return -ENOMEM;
1504 
1505 	ret = hid_hw_raw_request(hdev, 0xf2, buf, SIXAXIS_REPORT_0xF2_SIZE,
1506 				 HID_FEATURE_REPORT, HID_REQ_GET_REPORT);
1507 	if (ret < 0) {
1508 		hid_err(hdev, "can't set operational mode: step 1\n");
1509 		goto out;
1510 	}
1511 
1512 	/*
1513 	 * Some compatible controllers like the Speedlink Strike FX and
1514 	 * Gasia need another query plus an USB interrupt to get operational.
1515 	 */
1516 	ret = hid_hw_raw_request(hdev, 0xf5, buf, SIXAXIS_REPORT_0xF5_SIZE,
1517 				 HID_FEATURE_REPORT, HID_REQ_GET_REPORT);
1518 	if (ret < 0) {
1519 		hid_err(hdev, "can't set operational mode: step 2\n");
1520 		goto out;
1521 	}
1522 
1523 	/*
1524 	 * But the USB interrupt would cause SHANWAN controllers to
1525 	 * start rumbling non-stop, so skip step 3 for these controllers.
1526 	 */
1527 	if (sc->quirks & SHANWAN_GAMEPAD)
1528 		goto out;
1529 
1530 	ret = hid_hw_output_report(hdev, buf, 1);
1531 	if (ret < 0) {
1532 		hid_info(hdev, "can't set operational mode: step 3, ignoring\n");
1533 		ret = 0;
1534 	}
1535 
1536 out:
1537 	kfree(buf);
1538 
1539 	return ret;
1540 }
1541 
1542 static int sixaxis_set_operational_bt(struct hid_device *hdev)
1543 {
1544 	static const u8 report[] = { 0xf4, 0x42, 0x03, 0x00, 0x00 };
1545 	u8 *buf;
1546 	int ret;
1547 
1548 	buf = kmemdup(report, sizeof(report), GFP_KERNEL);
1549 	if (!buf)
1550 		return -ENOMEM;
1551 
1552 	ret = hid_hw_raw_request(hdev, buf[0], buf, sizeof(report),
1553 				  HID_FEATURE_REPORT, HID_REQ_SET_REPORT);
1554 
1555 	kfree(buf);
1556 
1557 	return ret;
1558 }
1559 
1560 /*
1561  * Request DS4 calibration data for the motion sensors.
1562  * For Bluetooth this also affects the operating mode (see below).
1563  */
1564 static int dualshock4_get_calibration_data(struct sony_sc *sc)
1565 {
1566 	u8 *buf;
1567 	int ret;
1568 	short gyro_pitch_bias, gyro_pitch_plus, gyro_pitch_minus;
1569 	short gyro_yaw_bias, gyro_yaw_plus, gyro_yaw_minus;
1570 	short gyro_roll_bias, gyro_roll_plus, gyro_roll_minus;
1571 	short gyro_speed_plus, gyro_speed_minus;
1572 	short acc_x_plus, acc_x_minus;
1573 	short acc_y_plus, acc_y_minus;
1574 	short acc_z_plus, acc_z_minus;
1575 	int speed_2x;
1576 	int range_2g;
1577 
1578 	/* For Bluetooth we use a different request, which supports CRC.
1579 	 * Note: in Bluetooth mode feature report 0x02 also changes the state
1580 	 * of the controller, so that it sends input reports of type 0x11.
1581 	 */
1582 	if (sc->quirks & (DUALSHOCK4_CONTROLLER_USB | DUALSHOCK4_DONGLE)) {
1583 		buf = kmalloc(DS4_FEATURE_REPORT_0x02_SIZE, GFP_KERNEL);
1584 		if (!buf)
1585 			return -ENOMEM;
1586 
1587 		ret = hid_hw_raw_request(sc->hdev, 0x02, buf,
1588 					 DS4_FEATURE_REPORT_0x02_SIZE,
1589 					 HID_FEATURE_REPORT,
1590 					 HID_REQ_GET_REPORT);
1591 		if (ret < 0)
1592 			goto err_stop;
1593 	} else {
1594 		u8 bthdr = 0xA3;
1595 		u32 crc;
1596 		u32 report_crc;
1597 		int retries;
1598 
1599 		buf = kmalloc(DS4_FEATURE_REPORT_0x05_SIZE, GFP_KERNEL);
1600 		if (!buf)
1601 			return -ENOMEM;
1602 
1603 		for (retries = 0; retries < 3; retries++) {
1604 			ret = hid_hw_raw_request(sc->hdev, 0x05, buf,
1605 						 DS4_FEATURE_REPORT_0x05_SIZE,
1606 						 HID_FEATURE_REPORT,
1607 						 HID_REQ_GET_REPORT);
1608 			if (ret < 0)
1609 				goto err_stop;
1610 
1611 			/* CRC check */
1612 			crc = crc32_le(0xFFFFFFFF, &bthdr, 1);
1613 			crc = ~crc32_le(crc, buf, DS4_FEATURE_REPORT_0x05_SIZE-4);
1614 			report_crc = get_unaligned_le32(&buf[DS4_FEATURE_REPORT_0x05_SIZE-4]);
1615 			if (crc != report_crc) {
1616 				hid_warn(sc->hdev, "DualShock 4 calibration report's CRC check failed, received crc 0x%0x != 0x%0x\n",
1617 					report_crc, crc);
1618 				if (retries < 2) {
1619 					hid_warn(sc->hdev, "Retrying DualShock 4 get calibration report request\n");
1620 					continue;
1621 				} else {
1622 					ret = -EILSEQ;
1623 					goto err_stop;
1624 				}
1625 			} else {
1626 				break;
1627 			}
1628 		}
1629 	}
1630 
1631 	gyro_pitch_bias  = get_unaligned_le16(&buf[1]);
1632 	gyro_yaw_bias    = get_unaligned_le16(&buf[3]);
1633 	gyro_roll_bias   = get_unaligned_le16(&buf[5]);
1634 	if (sc->quirks & DUALSHOCK4_CONTROLLER_USB) {
1635 		gyro_pitch_plus  = get_unaligned_le16(&buf[7]);
1636 		gyro_pitch_minus = get_unaligned_le16(&buf[9]);
1637 		gyro_yaw_plus    = get_unaligned_le16(&buf[11]);
1638 		gyro_yaw_minus   = get_unaligned_le16(&buf[13]);
1639 		gyro_roll_plus   = get_unaligned_le16(&buf[15]);
1640 		gyro_roll_minus  = get_unaligned_le16(&buf[17]);
1641 	} else {
1642 		/* BT + Dongle */
1643 		gyro_pitch_plus  = get_unaligned_le16(&buf[7]);
1644 		gyro_yaw_plus    = get_unaligned_le16(&buf[9]);
1645 		gyro_roll_plus   = get_unaligned_le16(&buf[11]);
1646 		gyro_pitch_minus = get_unaligned_le16(&buf[13]);
1647 		gyro_yaw_minus   = get_unaligned_le16(&buf[15]);
1648 		gyro_roll_minus  = get_unaligned_le16(&buf[17]);
1649 	}
1650 	gyro_speed_plus  = get_unaligned_le16(&buf[19]);
1651 	gyro_speed_minus = get_unaligned_le16(&buf[21]);
1652 	acc_x_plus       = get_unaligned_le16(&buf[23]);
1653 	acc_x_minus      = get_unaligned_le16(&buf[25]);
1654 	acc_y_plus       = get_unaligned_le16(&buf[27]);
1655 	acc_y_minus      = get_unaligned_le16(&buf[29]);
1656 	acc_z_plus       = get_unaligned_le16(&buf[31]);
1657 	acc_z_minus      = get_unaligned_le16(&buf[33]);
1658 
1659 	/* Set gyroscope calibration and normalization parameters.
1660 	 * Data values will be normalized to 1/DS4_GYRO_RES_PER_DEG_S degree/s.
1661 	 */
1662 	speed_2x = (gyro_speed_plus + gyro_speed_minus);
1663 	sc->ds4_calib_data[0].abs_code = ABS_RX;
1664 	sc->ds4_calib_data[0].bias = gyro_pitch_bias;
1665 	sc->ds4_calib_data[0].sens_numer = speed_2x*DS4_GYRO_RES_PER_DEG_S;
1666 	sc->ds4_calib_data[0].sens_denom = gyro_pitch_plus - gyro_pitch_minus;
1667 
1668 	sc->ds4_calib_data[1].abs_code = ABS_RY;
1669 	sc->ds4_calib_data[1].bias = gyro_yaw_bias;
1670 	sc->ds4_calib_data[1].sens_numer = speed_2x*DS4_GYRO_RES_PER_DEG_S;
1671 	sc->ds4_calib_data[1].sens_denom = gyro_yaw_plus - gyro_yaw_minus;
1672 
1673 	sc->ds4_calib_data[2].abs_code = ABS_RZ;
1674 	sc->ds4_calib_data[2].bias = gyro_roll_bias;
1675 	sc->ds4_calib_data[2].sens_numer = speed_2x*DS4_GYRO_RES_PER_DEG_S;
1676 	sc->ds4_calib_data[2].sens_denom = gyro_roll_plus - gyro_roll_minus;
1677 
1678 	/* Set accelerometer calibration and normalization parameters.
1679 	 * Data values will be normalized to 1/DS4_ACC_RES_PER_G G.
1680 	 */
1681 	range_2g = acc_x_plus - acc_x_minus;
1682 	sc->ds4_calib_data[3].abs_code = ABS_X;
1683 	sc->ds4_calib_data[3].bias = acc_x_plus - range_2g / 2;
1684 	sc->ds4_calib_data[3].sens_numer = 2*DS4_ACC_RES_PER_G;
1685 	sc->ds4_calib_data[3].sens_denom = range_2g;
1686 
1687 	range_2g = acc_y_plus - acc_y_minus;
1688 	sc->ds4_calib_data[4].abs_code = ABS_Y;
1689 	sc->ds4_calib_data[4].bias = acc_y_plus - range_2g / 2;
1690 	sc->ds4_calib_data[4].sens_numer = 2*DS4_ACC_RES_PER_G;
1691 	sc->ds4_calib_data[4].sens_denom = range_2g;
1692 
1693 	range_2g = acc_z_plus - acc_z_minus;
1694 	sc->ds4_calib_data[5].abs_code = ABS_Z;
1695 	sc->ds4_calib_data[5].bias = acc_z_plus - range_2g / 2;
1696 	sc->ds4_calib_data[5].sens_numer = 2*DS4_ACC_RES_PER_G;
1697 	sc->ds4_calib_data[5].sens_denom = range_2g;
1698 
1699 err_stop:
1700 	kfree(buf);
1701 	return ret;
1702 }
1703 
1704 static void dualshock4_calibration_work(struct work_struct *work)
1705 {
1706 	struct sony_sc *sc = container_of(work, struct sony_sc, hotplug_worker);
1707 	unsigned long flags;
1708 	enum ds4_dongle_state dongle_state;
1709 	int ret;
1710 
1711 	ret = dualshock4_get_calibration_data(sc);
1712 	if (ret < 0) {
1713 		/* This call is very unlikely to fail for the dongle. When it
1714 		 * fails we are probably in a very bad state, so mark the
1715 		 * dongle as disabled. We will re-enable the dongle if a new
1716 		 * DS4 hotplug is detect from sony_raw_event as any issues
1717 		 * are likely resolved then (the dongle is quite stupid).
1718 		 */
1719 		hid_err(sc->hdev, "DualShock 4 USB dongle: calibration failed, disabling device\n");
1720 		dongle_state = DONGLE_DISABLED;
1721 	} else {
1722 		hid_info(sc->hdev, "DualShock 4 USB dongle: calibration completed\n");
1723 		dongle_state = DONGLE_CONNECTED;
1724 	}
1725 
1726 	spin_lock_irqsave(&sc->lock, flags);
1727 	sc->ds4_dongle_state = dongle_state;
1728 	spin_unlock_irqrestore(&sc->lock, flags);
1729 }
1730 
1731 static int dualshock4_get_version_info(struct sony_sc *sc)
1732 {
1733 	u8 *buf;
1734 	int ret;
1735 
1736 	buf = kmalloc(DS4_FEATURE_REPORT_0xA3_SIZE, GFP_KERNEL);
1737 	if (!buf)
1738 		return -ENOMEM;
1739 
1740 	ret = hid_hw_raw_request(sc->hdev, 0xA3, buf,
1741 				 DS4_FEATURE_REPORT_0xA3_SIZE,
1742 				 HID_FEATURE_REPORT,
1743 				 HID_REQ_GET_REPORT);
1744 	if (ret < 0) {
1745 		kfree(buf);
1746 		return ret;
1747 	}
1748 
1749 	sc->hw_version = get_unaligned_le16(&buf[35]);
1750 	sc->fw_version = get_unaligned_le16(&buf[41]);
1751 
1752 	kfree(buf);
1753 	return 0;
1754 }
1755 
1756 static void sixaxis_set_leds_from_id(struct sony_sc *sc)
1757 {
1758 	static const u8 sixaxis_leds[10][4] = {
1759 				{ 0x01, 0x00, 0x00, 0x00 },
1760 				{ 0x00, 0x01, 0x00, 0x00 },
1761 				{ 0x00, 0x00, 0x01, 0x00 },
1762 				{ 0x00, 0x00, 0x00, 0x01 },
1763 				{ 0x01, 0x00, 0x00, 0x01 },
1764 				{ 0x00, 0x01, 0x00, 0x01 },
1765 				{ 0x00, 0x00, 0x01, 0x01 },
1766 				{ 0x01, 0x00, 0x01, 0x01 },
1767 				{ 0x00, 0x01, 0x01, 0x01 },
1768 				{ 0x01, 0x01, 0x01, 0x01 }
1769 	};
1770 
1771 	int id = sc->device_id;
1772 
1773 	BUILD_BUG_ON(MAX_LEDS < ARRAY_SIZE(sixaxis_leds[0]));
1774 
1775 	if (id < 0)
1776 		return;
1777 
1778 	id %= 10;
1779 	memcpy(sc->led_state, sixaxis_leds[id], sizeof(sixaxis_leds[id]));
1780 }
1781 
1782 static void dualshock4_set_leds_from_id(struct sony_sc *sc)
1783 {
1784 	/* The first 4 color/index entries match what the PS4 assigns */
1785 	static const u8 color_code[7][3] = {
1786 			/* Blue   */	{ 0x00, 0x00, 0x40 },
1787 			/* Red	  */	{ 0x40, 0x00, 0x00 },
1788 			/* Green  */	{ 0x00, 0x40, 0x00 },
1789 			/* Pink   */	{ 0x20, 0x00, 0x20 },
1790 			/* Orange */	{ 0x02, 0x01, 0x00 },
1791 			/* Teal   */	{ 0x00, 0x01, 0x01 },
1792 			/* White  */	{ 0x01, 0x01, 0x01 }
1793 	};
1794 
1795 	int id = sc->device_id;
1796 
1797 	BUILD_BUG_ON(MAX_LEDS < ARRAY_SIZE(color_code[0]));
1798 
1799 	if (id < 0)
1800 		return;
1801 
1802 	id %= 7;
1803 	memcpy(sc->led_state, color_code[id], sizeof(color_code[id]));
1804 }
1805 
1806 static void buzz_set_leds(struct sony_sc *sc)
1807 {
1808 	struct hid_device *hdev = sc->hdev;
1809 	struct list_head *report_list =
1810 		&hdev->report_enum[HID_OUTPUT_REPORT].report_list;
1811 	struct hid_report *report = list_entry(report_list->next,
1812 		struct hid_report, list);
1813 	s32 *value = report->field[0]->value;
1814 
1815 	BUILD_BUG_ON(MAX_LEDS < 4);
1816 
1817 	value[0] = 0x00;
1818 	value[1] = sc->led_state[0] ? 0xff : 0x00;
1819 	value[2] = sc->led_state[1] ? 0xff : 0x00;
1820 	value[3] = sc->led_state[2] ? 0xff : 0x00;
1821 	value[4] = sc->led_state[3] ? 0xff : 0x00;
1822 	value[5] = 0x00;
1823 	value[6] = 0x00;
1824 	hid_hw_request(hdev, report, HID_REQ_SET_REPORT);
1825 }
1826 
1827 static void sony_set_leds(struct sony_sc *sc)
1828 {
1829 	if (!(sc->quirks & BUZZ_CONTROLLER))
1830 		sony_schedule_work(sc, SONY_WORKER_STATE);
1831 	else
1832 		buzz_set_leds(sc);
1833 }
1834 
1835 static void sony_led_set_brightness(struct led_classdev *led,
1836 				    enum led_brightness value)
1837 {
1838 	struct device *dev = led->dev->parent;
1839 	struct hid_device *hdev = to_hid_device(dev);
1840 	struct sony_sc *drv_data;
1841 
1842 	int n;
1843 	int force_update;
1844 
1845 	drv_data = hid_get_drvdata(hdev);
1846 	if (!drv_data) {
1847 		hid_err(hdev, "No device data\n");
1848 		return;
1849 	}
1850 
1851 	/*
1852 	 * The Sixaxis on USB will override any LED settings sent to it
1853 	 * and keep flashing all of the LEDs until the PS button is pressed.
1854 	 * Updates, even if redundant, must be always be sent to the
1855 	 * controller to avoid having to toggle the state of an LED just to
1856 	 * stop the flashing later on.
1857 	 */
1858 	force_update = !!(drv_data->quirks & SIXAXIS_CONTROLLER_USB);
1859 
1860 	for (n = 0; n < drv_data->led_count; n++) {
1861 		if (led == drv_data->leds[n] && (force_update ||
1862 			(value != drv_data->led_state[n] ||
1863 			drv_data->led_delay_on[n] ||
1864 			drv_data->led_delay_off[n]))) {
1865 
1866 			drv_data->led_state[n] = value;
1867 
1868 			/* Setting the brightness stops the blinking */
1869 			drv_data->led_delay_on[n] = 0;
1870 			drv_data->led_delay_off[n] = 0;
1871 
1872 			sony_set_leds(drv_data);
1873 			break;
1874 		}
1875 	}
1876 }
1877 
1878 static enum led_brightness sony_led_get_brightness(struct led_classdev *led)
1879 {
1880 	struct device *dev = led->dev->parent;
1881 	struct hid_device *hdev = to_hid_device(dev);
1882 	struct sony_sc *drv_data;
1883 
1884 	int n;
1885 
1886 	drv_data = hid_get_drvdata(hdev);
1887 	if (!drv_data) {
1888 		hid_err(hdev, "No device data\n");
1889 		return LED_OFF;
1890 	}
1891 
1892 	for (n = 0; n < drv_data->led_count; n++) {
1893 		if (led == drv_data->leds[n])
1894 			return drv_data->led_state[n];
1895 	}
1896 
1897 	return LED_OFF;
1898 }
1899 
1900 static int sony_led_blink_set(struct led_classdev *led, unsigned long *delay_on,
1901 				unsigned long *delay_off)
1902 {
1903 	struct device *dev = led->dev->parent;
1904 	struct hid_device *hdev = to_hid_device(dev);
1905 	struct sony_sc *drv_data = hid_get_drvdata(hdev);
1906 	int n;
1907 	u8 new_on, new_off;
1908 
1909 	if (!drv_data) {
1910 		hid_err(hdev, "No device data\n");
1911 		return -EINVAL;
1912 	}
1913 
1914 	/* Max delay is 255 deciseconds or 2550 milliseconds */
1915 	if (*delay_on > 2550)
1916 		*delay_on = 2550;
1917 	if (*delay_off > 2550)
1918 		*delay_off = 2550;
1919 
1920 	/* Blink at 1 Hz if both values are zero */
1921 	if (!*delay_on && !*delay_off)
1922 		*delay_on = *delay_off = 500;
1923 
1924 	new_on = *delay_on / 10;
1925 	new_off = *delay_off / 10;
1926 
1927 	for (n = 0; n < drv_data->led_count; n++) {
1928 		if (led == drv_data->leds[n])
1929 			break;
1930 	}
1931 
1932 	/* This LED is not registered on this device */
1933 	if (n >= drv_data->led_count)
1934 		return -EINVAL;
1935 
1936 	/* Don't schedule work if the values didn't change */
1937 	if (new_on != drv_data->led_delay_on[n] ||
1938 		new_off != drv_data->led_delay_off[n]) {
1939 		drv_data->led_delay_on[n] = new_on;
1940 		drv_data->led_delay_off[n] = new_off;
1941 		sony_schedule_work(drv_data, SONY_WORKER_STATE);
1942 	}
1943 
1944 	return 0;
1945 }
1946 
1947 static int sony_leds_init(struct sony_sc *sc)
1948 {
1949 	struct hid_device *hdev = sc->hdev;
1950 	int n, ret = 0;
1951 	int use_ds4_names;
1952 	struct led_classdev *led;
1953 	size_t name_sz;
1954 	char *name;
1955 	size_t name_len;
1956 	const char *name_fmt;
1957 	static const char * const ds4_name_str[] = { "red", "green", "blue",
1958 						  "global" };
1959 	u8 max_brightness[MAX_LEDS] = { [0 ... (MAX_LEDS - 1)] = 1 };
1960 	u8 use_hw_blink[MAX_LEDS] = { 0 };
1961 
1962 	BUG_ON(!(sc->quirks & SONY_LED_SUPPORT));
1963 
1964 	if (sc->quirks & BUZZ_CONTROLLER) {
1965 		sc->led_count = 4;
1966 		use_ds4_names = 0;
1967 		name_len = strlen("::buzz#");
1968 		name_fmt = "%s::buzz%d";
1969 		/* Validate expected report characteristics. */
1970 		if (!hid_validate_values(hdev, HID_OUTPUT_REPORT, 0, 0, 7))
1971 			return -ENODEV;
1972 	} else if (sc->quirks & DUALSHOCK4_CONTROLLER) {
1973 		dualshock4_set_leds_from_id(sc);
1974 		sc->led_state[3] = 1;
1975 		sc->led_count = 4;
1976 		memset(max_brightness, 255, 3);
1977 		use_hw_blink[3] = 1;
1978 		use_ds4_names = 1;
1979 		name_len = 0;
1980 		name_fmt = "%s:%s";
1981 	} else if (sc->quirks & MOTION_CONTROLLER) {
1982 		sc->led_count = 3;
1983 		memset(max_brightness, 255, 3);
1984 		use_ds4_names = 1;
1985 		name_len = 0;
1986 		name_fmt = "%s:%s";
1987 	} else if (sc->quirks & NAVIGATION_CONTROLLER) {
1988 		static const u8 navigation_leds[4] = {0x01, 0x00, 0x00, 0x00};
1989 
1990 		memcpy(sc->led_state, navigation_leds, sizeof(navigation_leds));
1991 		sc->led_count = 1;
1992 		memset(use_hw_blink, 1, 4);
1993 		use_ds4_names = 0;
1994 		name_len = strlen("::sony#");
1995 		name_fmt = "%s::sony%d";
1996 	} else {
1997 		sixaxis_set_leds_from_id(sc);
1998 		sc->led_count = 4;
1999 		memset(use_hw_blink, 1, 4);
2000 		use_ds4_names = 0;
2001 		name_len = strlen("::sony#");
2002 		name_fmt = "%s::sony%d";
2003 	}
2004 
2005 	/*
2006 	 * Clear LEDs as we have no way of reading their initial state. This is
2007 	 * only relevant if the driver is loaded after somebody actively set the
2008 	 * LEDs to on
2009 	 */
2010 	sony_set_leds(sc);
2011 
2012 	name_sz = strlen(dev_name(&hdev->dev)) + name_len + 1;
2013 
2014 	for (n = 0; n < sc->led_count; n++) {
2015 
2016 		if (use_ds4_names)
2017 			name_sz = strlen(dev_name(&hdev->dev)) + strlen(ds4_name_str[n]) + 2;
2018 
2019 		led = devm_kzalloc(&hdev->dev, sizeof(struct led_classdev) + name_sz, GFP_KERNEL);
2020 		if (!led) {
2021 			hid_err(hdev, "Couldn't allocate memory for LED %d\n", n);
2022 			return -ENOMEM;
2023 		}
2024 
2025 		name = (void *)(&led[1]);
2026 		if (use_ds4_names)
2027 			snprintf(name, name_sz, name_fmt, dev_name(&hdev->dev),
2028 			ds4_name_str[n]);
2029 		else
2030 			snprintf(name, name_sz, name_fmt, dev_name(&hdev->dev), n + 1);
2031 		led->name = name;
2032 		led->brightness = sc->led_state[n];
2033 		led->max_brightness = max_brightness[n];
2034 		led->flags = LED_CORE_SUSPENDRESUME;
2035 		led->brightness_get = sony_led_get_brightness;
2036 		led->brightness_set = sony_led_set_brightness;
2037 
2038 		if (use_hw_blink[n])
2039 			led->blink_set = sony_led_blink_set;
2040 
2041 		sc->leds[n] = led;
2042 
2043 		ret = devm_led_classdev_register(&hdev->dev, led);
2044 		if (ret) {
2045 			hid_err(hdev, "Failed to register LED %d\n", n);
2046 			return ret;
2047 		}
2048 	}
2049 
2050 	return 0;
2051 }
2052 
2053 static void sixaxis_send_output_report(struct sony_sc *sc)
2054 {
2055 	static const union sixaxis_output_report_01 default_report = {
2056 		.buf = {
2057 			0x01,
2058 			0x01, 0xff, 0x00, 0xff, 0x00,
2059 			0x00, 0x00, 0x00, 0x00, 0x00,
2060 			0xff, 0x27, 0x10, 0x00, 0x32,
2061 			0xff, 0x27, 0x10, 0x00, 0x32,
2062 			0xff, 0x27, 0x10, 0x00, 0x32,
2063 			0xff, 0x27, 0x10, 0x00, 0x32,
2064 			0x00, 0x00, 0x00, 0x00, 0x00
2065 		}
2066 	};
2067 	struct sixaxis_output_report *report =
2068 		(struct sixaxis_output_report *)sc->output_report_dmabuf;
2069 	int n;
2070 
2071 	/* Initialize the report with default values */
2072 	memcpy(report, &default_report, sizeof(struct sixaxis_output_report));
2073 
2074 #ifdef CONFIG_SONY_FF
2075 	report->rumble.right_motor_on = sc->right ? 1 : 0;
2076 	report->rumble.left_motor_force = sc->left;
2077 #endif
2078 
2079 	report->leds_bitmap |= sc->led_state[0] << 1;
2080 	report->leds_bitmap |= sc->led_state[1] << 2;
2081 	report->leds_bitmap |= sc->led_state[2] << 3;
2082 	report->leds_bitmap |= sc->led_state[3] << 4;
2083 
2084 	/* Set flag for all leds off, required for 3rd party INTEC controller */
2085 	if ((report->leds_bitmap & 0x1E) == 0)
2086 		report->leds_bitmap |= 0x20;
2087 
2088 	/*
2089 	 * The LEDs in the report are indexed in reverse order to their
2090 	 * corresponding light on the controller.
2091 	 * Index 0 = LED 4, index 1 = LED 3, etc...
2092 	 *
2093 	 * In the case of both delay values being zero (blinking disabled) the
2094 	 * default report values should be used or the controller LED will be
2095 	 * always off.
2096 	 */
2097 	for (n = 0; n < 4; n++) {
2098 		if (sc->led_delay_on[n] || sc->led_delay_off[n]) {
2099 			report->led[3 - n].duty_off = sc->led_delay_off[n];
2100 			report->led[3 - n].duty_on = sc->led_delay_on[n];
2101 		}
2102 	}
2103 
2104 	/* SHANWAN controllers require output reports via intr channel */
2105 	if (sc->quirks & SHANWAN_GAMEPAD)
2106 		hid_hw_output_report(sc->hdev, (u8 *)report,
2107 				sizeof(struct sixaxis_output_report));
2108 	else
2109 		hid_hw_raw_request(sc->hdev, report->report_id, (u8 *)report,
2110 				sizeof(struct sixaxis_output_report),
2111 				HID_OUTPUT_REPORT, HID_REQ_SET_REPORT);
2112 }
2113 
2114 static void dualshock4_send_output_report(struct sony_sc *sc)
2115 {
2116 	struct hid_device *hdev = sc->hdev;
2117 	u8 *buf = sc->output_report_dmabuf;
2118 	int offset;
2119 
2120 	/*
2121 	 * NOTE: The lower 6 bits of buf[1] field of the Bluetooth report
2122 	 * control the interval at which Dualshock 4 reports data:
2123 	 * 0x00 - 1ms
2124 	 * 0x01 - 1ms
2125 	 * 0x02 - 2ms
2126 	 * 0x3E - 62ms
2127 	 * 0x3F - disabled
2128 	 */
2129 	if (sc->quirks & (DUALSHOCK4_CONTROLLER_USB | DUALSHOCK4_DONGLE)) {
2130 		memset(buf, 0, DS4_OUTPUT_REPORT_0x05_SIZE);
2131 		buf[0] = 0x05;
2132 		buf[1] = 0x07; /* blink + LEDs + motor */
2133 		offset = 4;
2134 	} else {
2135 		memset(buf, 0, DS4_OUTPUT_REPORT_0x11_SIZE);
2136 		buf[0] = 0x11;
2137 		buf[1] = 0xC0 /* HID + CRC */ | sc->ds4_bt_poll_interval;
2138 		buf[3] = 0x07; /* blink + LEDs + motor */
2139 		offset = 6;
2140 	}
2141 
2142 #ifdef CONFIG_SONY_FF
2143 	buf[offset++] = sc->right;
2144 	buf[offset++] = sc->left;
2145 #else
2146 	offset += 2;
2147 #endif
2148 
2149 	/* LED 3 is the global control */
2150 	if (sc->led_state[3]) {
2151 		buf[offset++] = sc->led_state[0];
2152 		buf[offset++] = sc->led_state[1];
2153 		buf[offset++] = sc->led_state[2];
2154 	} else {
2155 		offset += 3;
2156 	}
2157 
2158 	/* If both delay values are zero the DualShock 4 disables blinking. */
2159 	buf[offset++] = sc->led_delay_on[3];
2160 	buf[offset++] = sc->led_delay_off[3];
2161 
2162 	if (sc->quirks & (DUALSHOCK4_CONTROLLER_USB | DUALSHOCK4_DONGLE))
2163 		hid_hw_output_report(hdev, buf, DS4_OUTPUT_REPORT_0x05_SIZE);
2164 	else {
2165 		/* CRC generation */
2166 		u8 bthdr = 0xA2;
2167 		u32 crc;
2168 
2169 		crc = crc32_le(0xFFFFFFFF, &bthdr, 1);
2170 		crc = ~crc32_le(crc, buf, DS4_OUTPUT_REPORT_0x11_SIZE-4);
2171 		put_unaligned_le32(crc, &buf[74]);
2172 		hid_hw_output_report(hdev, buf, DS4_OUTPUT_REPORT_0x11_SIZE);
2173 	}
2174 }
2175 
2176 static void motion_send_output_report(struct sony_sc *sc)
2177 {
2178 	struct hid_device *hdev = sc->hdev;
2179 	struct motion_output_report_02 *report =
2180 		(struct motion_output_report_02 *)sc->output_report_dmabuf;
2181 
2182 	memset(report, 0, MOTION_REPORT_0x02_SIZE);
2183 
2184 	report->type = 0x02; /* set leds */
2185 	report->r = sc->led_state[0];
2186 	report->g = sc->led_state[1];
2187 	report->b = sc->led_state[2];
2188 
2189 #ifdef CONFIG_SONY_FF
2190 	report->rumble = max(sc->right, sc->left);
2191 #endif
2192 
2193 	hid_hw_output_report(hdev, (u8 *)report, MOTION_REPORT_0x02_SIZE);
2194 }
2195 
2196 static inline void sony_send_output_report(struct sony_sc *sc)
2197 {
2198 	if (sc->send_output_report)
2199 		sc->send_output_report(sc);
2200 }
2201 
2202 static void sony_state_worker(struct work_struct *work)
2203 {
2204 	struct sony_sc *sc = container_of(work, struct sony_sc, state_worker);
2205 
2206 	sc->send_output_report(sc);
2207 }
2208 
2209 static int sony_allocate_output_report(struct sony_sc *sc)
2210 {
2211 	if ((sc->quirks & SIXAXIS_CONTROLLER) ||
2212 			(sc->quirks & NAVIGATION_CONTROLLER))
2213 		sc->output_report_dmabuf =
2214 			devm_kmalloc(&sc->hdev->dev,
2215 				sizeof(union sixaxis_output_report_01),
2216 				GFP_KERNEL);
2217 	else if (sc->quirks & DUALSHOCK4_CONTROLLER_BT)
2218 		sc->output_report_dmabuf = devm_kmalloc(&sc->hdev->dev,
2219 						DS4_OUTPUT_REPORT_0x11_SIZE,
2220 						GFP_KERNEL);
2221 	else if (sc->quirks & (DUALSHOCK4_CONTROLLER_USB | DUALSHOCK4_DONGLE))
2222 		sc->output_report_dmabuf = devm_kmalloc(&sc->hdev->dev,
2223 						DS4_OUTPUT_REPORT_0x05_SIZE,
2224 						GFP_KERNEL);
2225 	else if (sc->quirks & MOTION_CONTROLLER)
2226 		sc->output_report_dmabuf = devm_kmalloc(&sc->hdev->dev,
2227 						MOTION_REPORT_0x02_SIZE,
2228 						GFP_KERNEL);
2229 	else
2230 		return 0;
2231 
2232 	if (!sc->output_report_dmabuf)
2233 		return -ENOMEM;
2234 
2235 	return 0;
2236 }
2237 
2238 #ifdef CONFIG_SONY_FF
2239 static int sony_play_effect(struct input_dev *dev, void *data,
2240 			    struct ff_effect *effect)
2241 {
2242 	struct hid_device *hid = input_get_drvdata(dev);
2243 	struct sony_sc *sc = hid_get_drvdata(hid);
2244 
2245 	if (effect->type != FF_RUMBLE)
2246 		return 0;
2247 
2248 	sc->left = effect->u.rumble.strong_magnitude / 256;
2249 	sc->right = effect->u.rumble.weak_magnitude / 256;
2250 
2251 	sony_schedule_work(sc, SONY_WORKER_STATE);
2252 	return 0;
2253 }
2254 
2255 static int sony_init_ff(struct sony_sc *sc)
2256 {
2257 	struct hid_input *hidinput = list_entry(sc->hdev->inputs.next,
2258 						struct hid_input, list);
2259 	struct input_dev *input_dev = hidinput->input;
2260 
2261 	input_set_capability(input_dev, EV_FF, FF_RUMBLE);
2262 	return input_ff_create_memless(input_dev, NULL, sony_play_effect);
2263 }
2264 
2265 #else
2266 static int sony_init_ff(struct sony_sc *sc)
2267 {
2268 	return 0;
2269 }
2270 
2271 #endif
2272 
2273 static int sony_battery_get_property(struct power_supply *psy,
2274 				     enum power_supply_property psp,
2275 				     union power_supply_propval *val)
2276 {
2277 	struct sony_sc *sc = power_supply_get_drvdata(psy);
2278 	unsigned long flags;
2279 	int ret = 0;
2280 	u8 battery_charging, battery_capacity, cable_state;
2281 
2282 	spin_lock_irqsave(&sc->lock, flags);
2283 	battery_charging = sc->battery_charging;
2284 	battery_capacity = sc->battery_capacity;
2285 	cable_state = sc->cable_state;
2286 	spin_unlock_irqrestore(&sc->lock, flags);
2287 
2288 	switch (psp) {
2289 	case POWER_SUPPLY_PROP_PRESENT:
2290 		val->intval = 1;
2291 		break;
2292 	case POWER_SUPPLY_PROP_SCOPE:
2293 		val->intval = POWER_SUPPLY_SCOPE_DEVICE;
2294 		break;
2295 	case POWER_SUPPLY_PROP_CAPACITY:
2296 		val->intval = battery_capacity;
2297 		break;
2298 	case POWER_SUPPLY_PROP_STATUS:
2299 		if (battery_charging)
2300 			val->intval = POWER_SUPPLY_STATUS_CHARGING;
2301 		else
2302 			if (battery_capacity == 100 && cable_state)
2303 				val->intval = POWER_SUPPLY_STATUS_FULL;
2304 			else
2305 				val->intval = POWER_SUPPLY_STATUS_DISCHARGING;
2306 		break;
2307 	default:
2308 		ret = -EINVAL;
2309 		break;
2310 	}
2311 	return ret;
2312 }
2313 
2314 static int sony_battery_probe(struct sony_sc *sc, int append_dev_id)
2315 {
2316 	const char *battery_str_fmt = append_dev_id ?
2317 		"sony_controller_battery_%pMR_%i" :
2318 		"sony_controller_battery_%pMR";
2319 	struct power_supply_config psy_cfg = { .drv_data = sc, };
2320 	struct hid_device *hdev = sc->hdev;
2321 	int ret;
2322 
2323 	/*
2324 	 * Set the default battery level to 100% to avoid low battery warnings
2325 	 * if the battery is polled before the first device report is received.
2326 	 */
2327 	sc->battery_capacity = 100;
2328 
2329 	sc->battery_desc.properties = sony_battery_props;
2330 	sc->battery_desc.num_properties = ARRAY_SIZE(sony_battery_props);
2331 	sc->battery_desc.get_property = sony_battery_get_property;
2332 	sc->battery_desc.type = POWER_SUPPLY_TYPE_BATTERY;
2333 	sc->battery_desc.use_for_apm = 0;
2334 	sc->battery_desc.name = devm_kasprintf(&hdev->dev, GFP_KERNEL,
2335 					  battery_str_fmt, sc->mac_address, sc->device_id);
2336 	if (!sc->battery_desc.name)
2337 		return -ENOMEM;
2338 
2339 	sc->battery = devm_power_supply_register(&hdev->dev, &sc->battery_desc,
2340 					    &psy_cfg);
2341 	if (IS_ERR(sc->battery)) {
2342 		ret = PTR_ERR(sc->battery);
2343 		hid_err(hdev, "Unable to register battery device\n");
2344 		return ret;
2345 	}
2346 
2347 	power_supply_powers(sc->battery, &hdev->dev);
2348 	return 0;
2349 }
2350 
2351 /*
2352  * If a controller is plugged in via USB while already connected via Bluetooth
2353  * it will show up as two devices. A global list of connected controllers and
2354  * their MAC addresses is maintained to ensure that a device is only connected
2355  * once.
2356  *
2357  * Some USB-only devices masquerade as Sixaxis controllers and all have the
2358  * same dummy Bluetooth address, so a comparison of the connection type is
2359  * required.  Devices are only rejected in the case where two devices have
2360  * matching Bluetooth addresses on different bus types.
2361  */
2362 static inline int sony_compare_connection_type(struct sony_sc *sc0,
2363 						struct sony_sc *sc1)
2364 {
2365 	const int sc0_not_bt = !(sc0->quirks & SONY_BT_DEVICE);
2366 	const int sc1_not_bt = !(sc1->quirks & SONY_BT_DEVICE);
2367 
2368 	return sc0_not_bt == sc1_not_bt;
2369 }
2370 
2371 static int sony_check_add_dev_list(struct sony_sc *sc)
2372 {
2373 	struct sony_sc *entry;
2374 	unsigned long flags;
2375 	int ret;
2376 
2377 	spin_lock_irqsave(&sony_dev_list_lock, flags);
2378 
2379 	list_for_each_entry(entry, &sony_device_list, list_node) {
2380 		ret = memcmp(sc->mac_address, entry->mac_address,
2381 				sizeof(sc->mac_address));
2382 		if (!ret) {
2383 			if (sony_compare_connection_type(sc, entry)) {
2384 				ret = 1;
2385 			} else {
2386 				ret = -EEXIST;
2387 				hid_info(sc->hdev,
2388 				"controller with MAC address %pMR already connected\n",
2389 				sc->mac_address);
2390 			}
2391 			goto unlock;
2392 		}
2393 	}
2394 
2395 	ret = 0;
2396 	list_add(&(sc->list_node), &sony_device_list);
2397 
2398 unlock:
2399 	spin_unlock_irqrestore(&sony_dev_list_lock, flags);
2400 	return ret;
2401 }
2402 
2403 static void sony_remove_dev_list(struct sony_sc *sc)
2404 {
2405 	unsigned long flags;
2406 
2407 	if (sc->list_node.next) {
2408 		spin_lock_irqsave(&sony_dev_list_lock, flags);
2409 		list_del(&(sc->list_node));
2410 		spin_unlock_irqrestore(&sony_dev_list_lock, flags);
2411 	}
2412 }
2413 
2414 static int sony_get_bt_devaddr(struct sony_sc *sc)
2415 {
2416 	int ret;
2417 
2418 	/* HIDP stores the device MAC address as a string in the uniq field. */
2419 	ret = strlen(sc->hdev->uniq);
2420 	if (ret != 17)
2421 		return -EINVAL;
2422 
2423 	ret = sscanf(sc->hdev->uniq,
2424 		"%02hhx:%02hhx:%02hhx:%02hhx:%02hhx:%02hhx",
2425 		&sc->mac_address[5], &sc->mac_address[4], &sc->mac_address[3],
2426 		&sc->mac_address[2], &sc->mac_address[1], &sc->mac_address[0]);
2427 
2428 	if (ret != 6)
2429 		return -EINVAL;
2430 
2431 	return 0;
2432 }
2433 
2434 static int sony_check_add(struct sony_sc *sc)
2435 {
2436 	u8 *buf = NULL;
2437 	int n, ret;
2438 
2439 	if ((sc->quirks & DUALSHOCK4_CONTROLLER_BT) ||
2440 	    (sc->quirks & MOTION_CONTROLLER_BT) ||
2441 	    (sc->quirks & NAVIGATION_CONTROLLER_BT) ||
2442 	    (sc->quirks & SIXAXIS_CONTROLLER_BT)) {
2443 		/*
2444 		 * sony_get_bt_devaddr() attempts to parse the Bluetooth MAC
2445 		 * address from the uniq string where HIDP stores it.
2446 		 * As uniq cannot be guaranteed to be a MAC address in all cases
2447 		 * a failure of this function should not prevent the connection.
2448 		 */
2449 		if (sony_get_bt_devaddr(sc) < 0) {
2450 			hid_warn(sc->hdev, "UNIQ does not contain a MAC address; duplicate check skipped\n");
2451 			return 0;
2452 		}
2453 	} else if (sc->quirks & (DUALSHOCK4_CONTROLLER_USB | DUALSHOCK4_DONGLE)) {
2454 		buf = kmalloc(DS4_FEATURE_REPORT_0x81_SIZE, GFP_KERNEL);
2455 		if (!buf)
2456 			return -ENOMEM;
2457 
2458 		/*
2459 		 * The MAC address of a DS4 controller connected via USB can be
2460 		 * retrieved with feature report 0x81. The address begins at
2461 		 * offset 1.
2462 		 */
2463 		ret = hid_hw_raw_request(sc->hdev, 0x81, buf,
2464 				DS4_FEATURE_REPORT_0x81_SIZE, HID_FEATURE_REPORT,
2465 				HID_REQ_GET_REPORT);
2466 
2467 		if (ret != DS4_FEATURE_REPORT_0x81_SIZE) {
2468 			hid_err(sc->hdev, "failed to retrieve feature report 0x81 with the DualShock 4 MAC address\n");
2469 			ret = ret < 0 ? ret : -EINVAL;
2470 			goto out_free;
2471 		}
2472 
2473 		memcpy(sc->mac_address, &buf[1], sizeof(sc->mac_address));
2474 
2475 		snprintf(sc->hdev->uniq, sizeof(sc->hdev->uniq),
2476 			 "%pMR", sc->mac_address);
2477 	} else if ((sc->quirks & SIXAXIS_CONTROLLER_USB) ||
2478 			(sc->quirks & NAVIGATION_CONTROLLER_USB)) {
2479 		buf = kmalloc(SIXAXIS_REPORT_0xF2_SIZE, GFP_KERNEL);
2480 		if (!buf)
2481 			return -ENOMEM;
2482 
2483 		/*
2484 		 * The MAC address of a Sixaxis controller connected via USB can
2485 		 * be retrieved with feature report 0xf2. The address begins at
2486 		 * offset 4.
2487 		 */
2488 		ret = hid_hw_raw_request(sc->hdev, 0xf2, buf,
2489 				SIXAXIS_REPORT_0xF2_SIZE, HID_FEATURE_REPORT,
2490 				HID_REQ_GET_REPORT);
2491 
2492 		if (ret != SIXAXIS_REPORT_0xF2_SIZE) {
2493 			hid_err(sc->hdev, "failed to retrieve feature report 0xf2 with the Sixaxis MAC address\n");
2494 			ret = ret < 0 ? ret : -EINVAL;
2495 			goto out_free;
2496 		}
2497 
2498 		/*
2499 		 * The Sixaxis device MAC in the report is big-endian and must
2500 		 * be byte-swapped.
2501 		 */
2502 		for (n = 0; n < 6; n++)
2503 			sc->mac_address[5-n] = buf[4+n];
2504 
2505 		snprintf(sc->hdev->uniq, sizeof(sc->hdev->uniq),
2506 			 "%pMR", sc->mac_address);
2507 	} else {
2508 		return 0;
2509 	}
2510 
2511 	ret = sony_check_add_dev_list(sc);
2512 
2513 out_free:
2514 
2515 	kfree(buf);
2516 
2517 	return ret;
2518 }
2519 
2520 static int sony_set_device_id(struct sony_sc *sc)
2521 {
2522 	int ret;
2523 
2524 	/*
2525 	 * Only DualShock 4 or Sixaxis controllers get an id.
2526 	 * All others are set to -1.
2527 	 */
2528 	if ((sc->quirks & SIXAXIS_CONTROLLER) ||
2529 	    (sc->quirks & DUALSHOCK4_CONTROLLER)) {
2530 		ret = ida_simple_get(&sony_device_id_allocator, 0, 0,
2531 					GFP_KERNEL);
2532 		if (ret < 0) {
2533 			sc->device_id = -1;
2534 			return ret;
2535 		}
2536 		sc->device_id = ret;
2537 	} else {
2538 		sc->device_id = -1;
2539 	}
2540 
2541 	return 0;
2542 }
2543 
2544 static void sony_release_device_id(struct sony_sc *sc)
2545 {
2546 	if (sc->device_id >= 0) {
2547 		ida_simple_remove(&sony_device_id_allocator, sc->device_id);
2548 		sc->device_id = -1;
2549 	}
2550 }
2551 
2552 static inline void sony_init_output_report(struct sony_sc *sc,
2553 				void (*send_output_report)(struct sony_sc *))
2554 {
2555 	sc->send_output_report = send_output_report;
2556 
2557 	if (!sc->state_worker_initialized)
2558 		INIT_WORK(&sc->state_worker, sony_state_worker);
2559 
2560 	sc->state_worker_initialized = 1;
2561 }
2562 
2563 static inline void sony_cancel_work_sync(struct sony_sc *sc)
2564 {
2565 	unsigned long flags;
2566 
2567 	if (sc->hotplug_worker_initialized)
2568 		cancel_work_sync(&sc->hotplug_worker);
2569 	if (sc->state_worker_initialized) {
2570 		spin_lock_irqsave(&sc->lock, flags);
2571 		sc->state_worker_initialized = 0;
2572 		spin_unlock_irqrestore(&sc->lock, flags);
2573 		cancel_work_sync(&sc->state_worker);
2574 	}
2575 }
2576 
2577 static int sony_input_configured(struct hid_device *hdev,
2578 					struct hid_input *hidinput)
2579 {
2580 	struct sony_sc *sc = hid_get_drvdata(hdev);
2581 	int append_dev_id;
2582 	int ret;
2583 
2584 	ret = sony_set_device_id(sc);
2585 	if (ret < 0) {
2586 		hid_err(hdev, "failed to allocate the device id\n");
2587 		goto err_stop;
2588 	}
2589 
2590 	ret = append_dev_id = sony_check_add(sc);
2591 	if (ret < 0)
2592 		goto err_stop;
2593 
2594 	ret = sony_allocate_output_report(sc);
2595 	if (ret < 0) {
2596 		hid_err(hdev, "failed to allocate the output report buffer\n");
2597 		goto err_stop;
2598 	}
2599 
2600 	if (sc->quirks & NAVIGATION_CONTROLLER_USB) {
2601 		/*
2602 		 * The Sony Sixaxis does not handle HID Output Reports on the
2603 		 * Interrupt EP like it could, so we need to force HID Output
2604 		 * Reports to use HID_REQ_SET_REPORT on the Control EP.
2605 		 *
2606 		 * There is also another issue about HID Output Reports via USB,
2607 		 * the Sixaxis does not want the report_id as part of the data
2608 		 * packet, so we have to discard buf[0] when sending the actual
2609 		 * control message, even for numbered reports, humpf!
2610 		 *
2611 		 * Additionally, the Sixaxis on USB isn't properly initialized
2612 		 * until the PS logo button is pressed and as such won't retain
2613 		 * any state set by an output report, so the initial
2614 		 * configuration report is deferred until the first input
2615 		 * report arrives.
2616 		 */
2617 		hdev->quirks |= HID_QUIRK_NO_OUTPUT_REPORTS_ON_INTR_EP;
2618 		hdev->quirks |= HID_QUIRK_SKIP_OUTPUT_REPORT_ID;
2619 		sc->defer_initialization = 1;
2620 
2621 		ret = sixaxis_set_operational_usb(hdev);
2622 		if (ret < 0) {
2623 			hid_err(hdev, "Failed to set controller into operational mode\n");
2624 			goto err_stop;
2625 		}
2626 
2627 		sony_init_output_report(sc, sixaxis_send_output_report);
2628 	} else if (sc->quirks & NAVIGATION_CONTROLLER_BT) {
2629 		/*
2630 		 * The Navigation controller wants output reports sent on the ctrl
2631 		 * endpoint when connected via Bluetooth.
2632 		 */
2633 		hdev->quirks |= HID_QUIRK_NO_OUTPUT_REPORTS_ON_INTR_EP;
2634 
2635 		ret = sixaxis_set_operational_bt(hdev);
2636 		if (ret < 0) {
2637 			hid_err(hdev, "Failed to set controller into operational mode\n");
2638 			goto err_stop;
2639 		}
2640 
2641 		sony_init_output_report(sc, sixaxis_send_output_report);
2642 	} else if (sc->quirks & SIXAXIS_CONTROLLER_USB) {
2643 		/*
2644 		 * The Sony Sixaxis does not handle HID Output Reports on the
2645 		 * Interrupt EP and the device only becomes active when the
2646 		 * PS button is pressed. See comment for Navigation controller
2647 		 * above for more details.
2648 		 */
2649 		hdev->quirks |= HID_QUIRK_NO_OUTPUT_REPORTS_ON_INTR_EP;
2650 		hdev->quirks |= HID_QUIRK_SKIP_OUTPUT_REPORT_ID;
2651 		sc->defer_initialization = 1;
2652 
2653 		ret = sixaxis_set_operational_usb(hdev);
2654 		if (ret < 0) {
2655 			hid_err(hdev, "Failed to set controller into operational mode\n");
2656 			goto err_stop;
2657 		}
2658 
2659 		ret = sony_register_sensors(sc);
2660 		if (ret) {
2661 			hid_err(sc->hdev,
2662 			"Unable to initialize motion sensors: %d\n", ret);
2663 			goto err_stop;
2664 		}
2665 
2666 		sony_init_output_report(sc, sixaxis_send_output_report);
2667 	} else if (sc->quirks & SIXAXIS_CONTROLLER_BT) {
2668 		/*
2669 		 * The Sixaxis wants output reports sent on the ctrl endpoint
2670 		 * when connected via Bluetooth.
2671 		 */
2672 		hdev->quirks |= HID_QUIRK_NO_OUTPUT_REPORTS_ON_INTR_EP;
2673 
2674 		ret = sixaxis_set_operational_bt(hdev);
2675 		if (ret < 0) {
2676 			hid_err(hdev, "Failed to set controller into operational mode\n");
2677 			goto err_stop;
2678 		}
2679 
2680 		ret = sony_register_sensors(sc);
2681 		if (ret) {
2682 			hid_err(sc->hdev,
2683 			"Unable to initialize motion sensors: %d\n", ret);
2684 			goto err_stop;
2685 		}
2686 
2687 		sony_init_output_report(sc, sixaxis_send_output_report);
2688 	} else if (sc->quirks & DUALSHOCK4_CONTROLLER) {
2689 		ret = dualshock4_get_calibration_data(sc);
2690 		if (ret < 0) {
2691 			hid_err(hdev, "Failed to get calibration data from Dualshock 4\n");
2692 			goto err_stop;
2693 		}
2694 
2695 		ret = dualshock4_get_version_info(sc);
2696 		if (ret < 0) {
2697 			hid_err(sc->hdev, "Failed to get version data from Dualshock 4\n");
2698 			goto err_stop;
2699 		}
2700 
2701 		ret = device_create_file(&sc->hdev->dev, &dev_attr_firmware_version);
2702 		if (ret) {
2703 			/* Make zero for cleanup reasons of sysfs entries. */
2704 			sc->fw_version = 0;
2705 			sc->hw_version = 0;
2706 			hid_err(sc->hdev, "can't create sysfs firmware_version attribute err: %d\n", ret);
2707 			goto err_stop;
2708 		}
2709 
2710 		ret = device_create_file(&sc->hdev->dev, &dev_attr_hardware_version);
2711 		if (ret) {
2712 			sc->hw_version = 0;
2713 			hid_err(sc->hdev, "can't create sysfs hardware_version attribute err: %d\n", ret);
2714 			goto err_stop;
2715 		}
2716 
2717 		/*
2718 		 * The Dualshock 4 touchpad supports 2 touches and has a
2719 		 * resolution of 1920x942 (44.86 dots/mm).
2720 		 */
2721 		ret = sony_register_touchpad(sc, 2, 1920, 942, 0, 0, 0);
2722 		if (ret) {
2723 			hid_err(sc->hdev,
2724 			"Unable to initialize multi-touch slots: %d\n",
2725 			ret);
2726 			goto err_stop;
2727 		}
2728 
2729 		ret = sony_register_sensors(sc);
2730 		if (ret) {
2731 			hid_err(sc->hdev,
2732 			"Unable to initialize motion sensors: %d\n", ret);
2733 			goto err_stop;
2734 		}
2735 
2736 		if (sc->quirks & DUALSHOCK4_CONTROLLER_BT) {
2737 			sc->ds4_bt_poll_interval = DS4_BT_DEFAULT_POLL_INTERVAL_MS;
2738 			ret = device_create_file(&sc->hdev->dev, &dev_attr_bt_poll_interval);
2739 			if (ret)
2740 				hid_warn(sc->hdev,
2741 				 "can't create sysfs bt_poll_interval attribute err: %d\n",
2742 				 ret);
2743 		}
2744 
2745 		if (sc->quirks & DUALSHOCK4_DONGLE) {
2746 			INIT_WORK(&sc->hotplug_worker, dualshock4_calibration_work);
2747 			sc->hotplug_worker_initialized = 1;
2748 			sc->ds4_dongle_state = DONGLE_DISCONNECTED;
2749 		}
2750 
2751 		sony_init_output_report(sc, dualshock4_send_output_report);
2752 	} else if (sc->quirks & NSG_MRXU_REMOTE) {
2753 		/*
2754 		 * The NSG-MRxU touchpad supports 2 touches and has a
2755 		 * resolution of 1667x1868
2756 		 */
2757 		ret = sony_register_touchpad(sc, 2,
2758 			NSG_MRXU_MAX_X, NSG_MRXU_MAX_Y, 15, 15, 1);
2759 		if (ret) {
2760 			hid_err(sc->hdev,
2761 			"Unable to initialize multi-touch slots: %d\n",
2762 			ret);
2763 			goto err_stop;
2764 		}
2765 
2766 	} else if (sc->quirks & MOTION_CONTROLLER) {
2767 		sony_init_output_report(sc, motion_send_output_report);
2768 	} else {
2769 		ret = 0;
2770 	}
2771 
2772 	if (sc->quirks & SONY_LED_SUPPORT) {
2773 		ret = sony_leds_init(sc);
2774 		if (ret < 0)
2775 			goto err_stop;
2776 	}
2777 
2778 	if (sc->quirks & SONY_BATTERY_SUPPORT) {
2779 		ret = sony_battery_probe(sc, append_dev_id);
2780 		if (ret < 0)
2781 			goto err_stop;
2782 
2783 		/* Open the device to receive reports with battery info */
2784 		ret = hid_hw_open(hdev);
2785 		if (ret < 0) {
2786 			hid_err(hdev, "hw open failed\n");
2787 			goto err_stop;
2788 		}
2789 	}
2790 
2791 	if (sc->quirks & SONY_FF_SUPPORT) {
2792 		ret = sony_init_ff(sc);
2793 		if (ret < 0)
2794 			goto err_close;
2795 	}
2796 
2797 	return 0;
2798 err_close:
2799 	hid_hw_close(hdev);
2800 err_stop:
2801 	/* Piggy back on the default ds4_bt_ poll_interval to determine
2802 	 * if we need to remove the file as we don't know for sure if we
2803 	 * executed that logic.
2804 	 */
2805 	if (sc->ds4_bt_poll_interval)
2806 		device_remove_file(&sc->hdev->dev, &dev_attr_bt_poll_interval);
2807 	if (sc->fw_version)
2808 		device_remove_file(&sc->hdev->dev, &dev_attr_firmware_version);
2809 	if (sc->hw_version)
2810 		device_remove_file(&sc->hdev->dev, &dev_attr_hardware_version);
2811 	sony_cancel_work_sync(sc);
2812 	sony_remove_dev_list(sc);
2813 	sony_release_device_id(sc);
2814 	hid_hw_stop(hdev);
2815 	return ret;
2816 }
2817 
2818 static int sony_probe(struct hid_device *hdev, const struct hid_device_id *id)
2819 {
2820 	int ret;
2821 	unsigned long quirks = id->driver_data;
2822 	struct sony_sc *sc;
2823 	unsigned int connect_mask = HID_CONNECT_DEFAULT;
2824 
2825 	if (!strcmp(hdev->name, "FutureMax Dance Mat"))
2826 		quirks |= FUTUREMAX_DANCE_MAT;
2827 
2828 	if (!strcmp(hdev->name, "SHANWAN PS3 GamePad"))
2829 		quirks |= SHANWAN_GAMEPAD;
2830 
2831 	sc = devm_kzalloc(&hdev->dev, sizeof(*sc), GFP_KERNEL);
2832 	if (sc == NULL) {
2833 		hid_err(hdev, "can't alloc sony descriptor\n");
2834 		return -ENOMEM;
2835 	}
2836 
2837 	spin_lock_init(&sc->lock);
2838 
2839 	sc->quirks = quirks;
2840 	hid_set_drvdata(hdev, sc);
2841 	sc->hdev = hdev;
2842 
2843 	ret = hid_parse(hdev);
2844 	if (ret) {
2845 		hid_err(hdev, "parse failed\n");
2846 		return ret;
2847 	}
2848 
2849 	if (sc->quirks & VAIO_RDESC_CONSTANT)
2850 		connect_mask |= HID_CONNECT_HIDDEV_FORCE;
2851 	else if (sc->quirks & SIXAXIS_CONTROLLER)
2852 		connect_mask |= HID_CONNECT_HIDDEV_FORCE;
2853 
2854 	/* Patch the hw version on DS3/4 compatible devices, so applications can
2855 	 * distinguish between the default HID mappings and the mappings defined
2856 	 * by the Linux game controller spec. This is important for the SDL2
2857 	 * library, which has a game controller database, which uses device ids
2858 	 * in combination with version as a key.
2859 	 */
2860 	if (sc->quirks & (SIXAXIS_CONTROLLER | DUALSHOCK4_CONTROLLER))
2861 		hdev->version |= 0x8000;
2862 
2863 	ret = hid_hw_start(hdev, connect_mask);
2864 	if (ret) {
2865 		hid_err(hdev, "hw start failed\n");
2866 		return ret;
2867 	}
2868 
2869 	/* sony_input_configured can fail, but this doesn't result
2870 	 * in hid_hw_start failures (intended). Check whether
2871 	 * the HID layer claimed the device else fail.
2872 	 * We don't know the actual reason for the failure, most
2873 	 * likely it is due to EEXIST in case of double connection
2874 	 * of USB and Bluetooth, but could have been due to ENOMEM
2875 	 * or other reasons as well.
2876 	 */
2877 	if (!(hdev->claimed & HID_CLAIMED_INPUT)) {
2878 		hid_err(hdev, "failed to claim input\n");
2879 		return -ENODEV;
2880 	}
2881 
2882 	return ret;
2883 }
2884 
2885 static void sony_remove(struct hid_device *hdev)
2886 {
2887 	struct sony_sc *sc = hid_get_drvdata(hdev);
2888 
2889 	hid_hw_close(hdev);
2890 
2891 	if (sc->quirks & DUALSHOCK4_CONTROLLER_BT)
2892 		device_remove_file(&sc->hdev->dev, &dev_attr_bt_poll_interval);
2893 
2894 	if (sc->fw_version)
2895 		device_remove_file(&sc->hdev->dev, &dev_attr_firmware_version);
2896 
2897 	if (sc->hw_version)
2898 		device_remove_file(&sc->hdev->dev, &dev_attr_hardware_version);
2899 
2900 	sony_cancel_work_sync(sc);
2901 
2902 	sony_remove_dev_list(sc);
2903 
2904 	sony_release_device_id(sc);
2905 
2906 	hid_hw_stop(hdev);
2907 }
2908 
2909 #ifdef CONFIG_PM
2910 
2911 static int sony_suspend(struct hid_device *hdev, pm_message_t message)
2912 {
2913 #ifdef CONFIG_SONY_FF
2914 
2915 	/* On suspend stop any running force-feedback events */
2916 	if (SONY_FF_SUPPORT) {
2917 		struct sony_sc *sc = hid_get_drvdata(hdev);
2918 
2919 		sc->left = sc->right = 0;
2920 		sony_send_output_report(sc);
2921 	}
2922 
2923 #endif
2924 	return 0;
2925 }
2926 
2927 static int sony_resume(struct hid_device *hdev)
2928 {
2929 	struct sony_sc *sc = hid_get_drvdata(hdev);
2930 
2931 	/*
2932 	 * The Sixaxis and navigation controllers on USB need to be
2933 	 * reinitialized on resume or they won't behave properly.
2934 	 */
2935 	if ((sc->quirks & SIXAXIS_CONTROLLER_USB) ||
2936 		(sc->quirks & NAVIGATION_CONTROLLER_USB)) {
2937 		sixaxis_set_operational_usb(sc->hdev);
2938 		sc->defer_initialization = 1;
2939 	}
2940 
2941 	return 0;
2942 }
2943 
2944 #endif
2945 
2946 static const struct hid_device_id sony_devices[] = {
2947 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS3_CONTROLLER),
2948 		.driver_data = SIXAXIS_CONTROLLER_USB },
2949 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_NAVIGATION_CONTROLLER),
2950 		.driver_data = NAVIGATION_CONTROLLER_USB },
2951 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_NAVIGATION_CONTROLLER),
2952 		.driver_data = NAVIGATION_CONTROLLER_BT },
2953 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_MOTION_CONTROLLER),
2954 		.driver_data = MOTION_CONTROLLER_USB },
2955 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_MOTION_CONTROLLER),
2956 		.driver_data = MOTION_CONTROLLER_BT },
2957 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS3_CONTROLLER),
2958 		.driver_data = SIXAXIS_CONTROLLER_BT },
2959 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_VAIO_VGX_MOUSE),
2960 		.driver_data = VAIO_RDESC_CONSTANT },
2961 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_VAIO_VGP_MOUSE),
2962 		.driver_data = VAIO_RDESC_CONSTANT },
2963 	/*
2964 	 * Wired Buzz Controller. Reported as Sony Hub from its USB ID and as
2965 	 * Logitech joystick from the device descriptor.
2966 	 */
2967 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_BUZZ_CONTROLLER),
2968 		.driver_data = BUZZ_CONTROLLER },
2969 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_WIRELESS_BUZZ_CONTROLLER),
2970 		.driver_data = BUZZ_CONTROLLER },
2971 	/* PS3 BD Remote Control */
2972 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS3_BDREMOTE),
2973 		.driver_data = PS3REMOTE },
2974 	/* Logitech Harmony Adapter for PS3 */
2975 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_LOGITECH, USB_DEVICE_ID_LOGITECH_HARMONY_PS3),
2976 		.driver_data = PS3REMOTE },
2977 	/* SMK-Link PS3 BD Remote Control */
2978 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SMK, USB_DEVICE_ID_SMK_PS3_BDREMOTE),
2979 		.driver_data = PS3REMOTE },
2980 	/* Sony Dualshock 4 controllers for PS4 */
2981 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS4_CONTROLLER),
2982 		.driver_data = DUALSHOCK4_CONTROLLER_USB },
2983 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS4_CONTROLLER),
2984 		.driver_data = DUALSHOCK4_CONTROLLER_BT },
2985 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS4_CONTROLLER_2),
2986 		.driver_data = DUALSHOCK4_CONTROLLER_USB },
2987 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS4_CONTROLLER_2),
2988 		.driver_data = DUALSHOCK4_CONTROLLER_BT },
2989 	{ HID_USB_DEVICE(USB_VENDOR_ID_SONY, USB_DEVICE_ID_SONY_PS4_CONTROLLER_DONGLE),
2990 		.driver_data = DUALSHOCK4_DONGLE },
2991 	/* Nyko Core Controller for PS3 */
2992 	{ HID_USB_DEVICE(USB_VENDOR_ID_SINO_LITE, USB_DEVICE_ID_SINO_LITE_CONTROLLER),
2993 		.driver_data = SIXAXIS_CONTROLLER_USB | SINO_LITE_CONTROLLER },
2994 	/* SMK-Link NSG-MR5U Remote Control */
2995 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SMK, USB_DEVICE_ID_SMK_NSG_MR5U_REMOTE),
2996 		.driver_data = NSG_MR5U_REMOTE_BT },
2997 	/* SMK-Link NSG-MR7U Remote Control */
2998 	{ HID_BLUETOOTH_DEVICE(USB_VENDOR_ID_SMK, USB_DEVICE_ID_SMK_NSG_MR7U_REMOTE),
2999 		.driver_data = NSG_MR7U_REMOTE_BT },
3000 	{ }
3001 };
3002 MODULE_DEVICE_TABLE(hid, sony_devices);
3003 
3004 static struct hid_driver sony_driver = {
3005 	.name             = "sony",
3006 	.id_table         = sony_devices,
3007 	.input_mapping    = sony_mapping,
3008 	.input_configured = sony_input_configured,
3009 	.probe            = sony_probe,
3010 	.remove           = sony_remove,
3011 	.report_fixup     = sony_report_fixup,
3012 	.raw_event        = sony_raw_event,
3013 
3014 #ifdef CONFIG_PM
3015 	.suspend          = sony_suspend,
3016 	.resume	          = sony_resume,
3017 	.reset_resume     = sony_resume,
3018 #endif
3019 };
3020 
3021 static int __init sony_init(void)
3022 {
3023 	dbg_hid("Sony:%s\n", __func__);
3024 
3025 	return hid_register_driver(&sony_driver);
3026 }
3027 
3028 static void __exit sony_exit(void)
3029 {
3030 	dbg_hid("Sony:%s\n", __func__);
3031 
3032 	hid_unregister_driver(&sony_driver);
3033 	ida_destroy(&sony_device_id_allocator);
3034 }
3035 module_init(sony_init);
3036 module_exit(sony_exit);
3037 
3038 MODULE_LICENSE("GPL");
3039