2 * Copyright (C) 2009 by Bart Hartgers (bart.hartgers+ark3116@gmail.com)
5 * Simon Schulz (ark3116_driver <at> auctionant.de)
8 * - implements a driver for the arkmicro ark3116 chipset (vendor=0x6547,
9 * productid=0x0232) (used in a datacable called KQ-U8A)
11 * Supports full modem status lines, break, hardware flow control. Does not
12 * support software flow control, since I do not know how to enable it in hw.
14 * This driver is a essentially new implementation. I initially dug
15 * into the old ark3116.c driver and suddenly realized the ark3116 is
16 * a 16450 with a USB interface glued to it. See comments at the
17 * bottom of this file.
19 * This program is free software; you can redistribute it and/or modify it
20 * under the terms of the GNU General Public License as published by the
21 * Free Software Foundation; either version 2 of the License, or (at your
22 * option) any later version.
25 #include <linux/kernel.h>
26 #include <linux/init.h>
27 #include <linux/ioctl.h>
28 #include <linux/tty.h>
29 #include <linux/slab.h>
30 #include <linux/tty_flip.h>
31 #include <linux/module.h>
32 #include <linux/usb.h>
33 #include <linux/usb/serial.h>
34 #include <linux/serial.h>
35 #include <linux/serial_reg.h>
36 #include <linux/uaccess.h>
37 #include <linux/mutex.h>
38 #include <linux/spinlock.h>
40 #define DRIVER_AUTHOR "Bart Hartgers <bart.hartgers+ark3116@gmail.com>"
41 #define DRIVER_DESC "USB ARK3116 serial/IrDA driver"
42 #define DRIVER_DEV_DESC "ARK3116 RS232/IrDA"
43 #define DRIVER_NAME "ark3116"
45 /* usb timeout of 1 second */
46 #define ARK_TIMEOUT 1000
48 static const struct usb_device_id id_table
[] = {
49 { USB_DEVICE(0x6547, 0x0232) },
50 { USB_DEVICE(0x18ec, 0x3118) }, /* USB to IrDA adapter */
53 MODULE_DEVICE_TABLE(usb
, id_table
);
55 static int is_irda(struct usb_serial
*serial
)
57 struct usb_device
*dev
= serial
->dev
;
58 if (le16_to_cpu(dev
->descriptor
.idVendor
) == 0x18ec &&
59 le16_to_cpu(dev
->descriptor
.idProduct
) == 0x3118)
64 struct ark3116_private
{
65 int irda
; /* 1 for irda device */
67 /* protects hw register updates */
70 int quot
; /* baudrate divisor */
71 __u32 lcr
; /* line control register value */
72 __u32 hcr
; /* handshake control register (0x8)
74 __u32 mcr
; /* modem contol register value */
76 /* protects the status values below */
77 spinlock_t status_lock
;
78 __u32 msr
; /* modem status register value */
79 __u32 lsr
; /* line status register value */
82 static int ark3116_write_reg(struct usb_serial
*serial
,
83 unsigned reg
, __u8 val
)
86 /* 0xfe 0x40 are magic values taken from original driver */
87 result
= usb_control_msg(serial
->dev
,
88 usb_sndctrlpipe(serial
->dev
, 0),
90 NULL
, 0, ARK_TIMEOUT
);
94 static int ark3116_read_reg(struct usb_serial
*serial
,
95 unsigned reg
, unsigned char *buf
)
98 /* 0xfe 0xc0 are magic values taken from original driver */
99 result
= usb_control_msg(serial
->dev
,
100 usb_rcvctrlpipe(serial
->dev
, 0),
102 buf
, 1, ARK_TIMEOUT
);
109 static inline int calc_divisor(int bps
)
111 /* Original ark3116 made some exceptions in rounding here
112 * because windows did the same. Assume that is not really
114 * Crystal is 12MHz, probably because of USB, but we divide by 4?
116 return (12000000 + 2*bps
) / (4*bps
);
119 static int ark3116_attach(struct usb_serial
*serial
)
121 /* make sure we have our end-points */
122 if ((serial
->num_bulk_in
== 0) ||
123 (serial
->num_bulk_out
== 0) ||
124 (serial
->num_interrupt_in
== 0)) {
125 dev_err(&serial
->dev
->dev
,
126 "%s - missing endpoint - "
127 "bulk in: %d, bulk out: %d, int in %d\n",
130 serial
->num_bulk_out
,
131 serial
->num_interrupt_in
);
138 static int ark3116_port_probe(struct usb_serial_port
*port
)
140 struct usb_serial
*serial
= port
->serial
;
141 struct ark3116_private
*priv
;
143 priv
= kzalloc(sizeof(*priv
), GFP_KERNEL
);
147 mutex_init(&priv
->hw_lock
);
148 spin_lock_init(&priv
->status_lock
);
150 priv
->irda
= is_irda(serial
);
152 usb_set_serial_port_data(port
, priv
);
154 /* setup the hardware */
155 ark3116_write_reg(serial
, UART_IER
, 0);
157 ark3116_write_reg(serial
, UART_FCR
, 0);
158 /* handshake control */
160 ark3116_write_reg(serial
, 0x8 , 0);
163 ark3116_write_reg(serial
, UART_MCR
, 0);
166 ark3116_write_reg(serial
, 0xb , 0);
168 ark3116_write_reg(serial
, 0xb , 1);
169 ark3116_write_reg(serial
, 0xc , 0);
170 ark3116_write_reg(serial
, 0xd , 0x41);
171 ark3116_write_reg(serial
, 0xa , 1);
175 ark3116_write_reg(serial
, UART_LCR
, UART_LCR_DLAB
);
177 /* setup for 9600 8N1 */
178 priv
->quot
= calc_divisor(9600);
179 ark3116_write_reg(serial
, UART_DLL
, priv
->quot
& 0xff);
180 ark3116_write_reg(serial
, UART_DLM
, (priv
->quot
>>8) & 0xff);
182 priv
->lcr
= UART_LCR_WLEN8
;
183 ark3116_write_reg(serial
, UART_LCR
, UART_LCR_WLEN8
);
185 ark3116_write_reg(serial
, 0xe, 0);
188 ark3116_write_reg(serial
, 0x9, 0);
190 dev_info(&serial
->dev
->dev
,
191 "%s using %s mode\n",
193 priv
->irda
? "IrDA" : "RS232");
197 static int ark3116_port_remove(struct usb_serial_port
*port
)
199 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
201 /* device is closed, so URBs and DMA should be down */
202 mutex_destroy(&priv
->hw_lock
);
208 static void ark3116_init_termios(struct tty_struct
*tty
)
210 struct ktermios
*termios
= &tty
->termios
;
211 *termios
= tty_std_termios
;
212 termios
->c_cflag
= B9600
| CS8
213 | CREAD
| HUPCL
| CLOCAL
;
214 termios
->c_ispeed
= 9600;
215 termios
->c_ospeed
= 9600;
218 static void ark3116_set_termios(struct tty_struct
*tty
,
219 struct usb_serial_port
*port
,
220 struct ktermios
*old_termios
)
222 struct usb_serial
*serial
= port
->serial
;
223 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
224 struct ktermios
*termios
= &tty
->termios
;
225 unsigned int cflag
= termios
->c_cflag
;
226 int bps
= tty_get_baud_rate(tty
);
230 /* set data bit count */
231 switch (cflag
& CSIZE
) {
233 lcr
= UART_LCR_WLEN5
;
236 lcr
= UART_LCR_WLEN6
;
239 lcr
= UART_LCR_WLEN7
;
243 lcr
= UART_LCR_WLEN8
;
247 lcr
|= UART_LCR_STOP
;
249 lcr
|= UART_LCR_PARITY
;
250 if (!(cflag
& PARODD
))
251 lcr
|= UART_LCR_EPAR
;
254 lcr
|= UART_LCR_SPAR
;
256 /* handshake control */
257 hcr
= (cflag
& CRTSCTS
) ? 0x03 : 0x00;
260 dev_dbg(&port
->dev
, "%s - setting bps to %d\n", __func__
, bps
);
264 quot
= calc_divisor(9600);
267 if ((bps
< 75) || (bps
> 3000000))
269 quot
= calc_divisor(bps
);
273 quot
= calc_divisor(bps
);
277 quot
= calc_divisor(bps
);
281 /* Update state: synchronize */
282 mutex_lock(&priv
->hw_lock
);
284 /* keep old LCR_SBC bit */
285 lcr
|= (priv
->lcr
& UART_LCR_SBC
);
287 dev_dbg(&port
->dev
, "%s - setting hcr:0x%02x,lcr:0x%02x,quot:%d\n",
288 __func__
, hcr
, lcr
, quot
);
290 /* handshake control */
291 if (priv
->hcr
!= hcr
) {
293 ark3116_write_reg(serial
, 0x8, hcr
);
297 if (priv
->quot
!= quot
) {
299 priv
->lcr
= lcr
; /* need to write lcr anyway */
301 /* disable DMA since transmit/receive is
302 * shadowed by UART_DLL
304 ark3116_write_reg(serial
, UART_FCR
, 0);
306 ark3116_write_reg(serial
, UART_LCR
,
308 ark3116_write_reg(serial
, UART_DLL
, quot
& 0xff);
309 ark3116_write_reg(serial
, UART_DLM
, (quot
>>8) & 0xff);
312 ark3116_write_reg(serial
, UART_LCR
, lcr
);
313 /* magic baudrate thingy: not sure what it does,
314 * but windows does this as well.
316 ark3116_write_reg(serial
, 0xe, eval
);
319 ark3116_write_reg(serial
, UART_FCR
, UART_FCR_DMA_SELECT
);
320 } else if (priv
->lcr
!= lcr
) {
322 ark3116_write_reg(serial
, UART_LCR
, lcr
);
325 mutex_unlock(&priv
->hw_lock
);
327 /* check for software flow control */
328 if (I_IXOFF(tty
) || I_IXON(tty
)) {
329 dev_warn(&serial
->dev
->dev
,
330 "%s: don't know how to do software flow control\n",
334 /* Don't rewrite B0 */
335 if (tty_termios_baud_rate(termios
))
336 tty_termios_encode_baud_rate(termios
, bps
, bps
);
339 static void ark3116_close(struct usb_serial_port
*port
)
341 struct usb_serial
*serial
= port
->serial
;
344 ark3116_write_reg(serial
, UART_FCR
, 0);
346 /* deactivate interrupts */
347 ark3116_write_reg(serial
, UART_IER
, 0);
349 usb_serial_generic_close(port
);
350 if (serial
->num_interrupt_in
)
351 usb_kill_urb(port
->interrupt_in_urb
);
354 static int ark3116_open(struct tty_struct
*tty
, struct usb_serial_port
*port
)
356 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
357 struct usb_serial
*serial
= port
->serial
;
361 buf
= kmalloc(1, GFP_KERNEL
);
365 result
= usb_serial_generic_open(tty
, port
);
368 "%s - usb_serial_generic_open failed: %d\n",
373 /* remove any data still left: also clears error state */
374 ark3116_read_reg(serial
, UART_RX
, buf
);
376 /* read modem status */
377 priv
->msr
= ark3116_read_reg(serial
, UART_MSR
, buf
);
378 /* read line status */
379 priv
->lsr
= ark3116_read_reg(serial
, UART_LSR
, buf
);
381 result
= usb_submit_urb(port
->interrupt_in_urb
, GFP_KERNEL
);
383 dev_err(&port
->dev
, "submit irq_in urb failed %d\n",
389 /* activate interrupts */
390 ark3116_write_reg(port
->serial
, UART_IER
, UART_IER_MSI
|UART_IER_RLSI
);
393 ark3116_write_reg(port
->serial
, UART_FCR
, UART_FCR_DMA_SELECT
);
397 ark3116_set_termios(tty
, port
, NULL
);
404 static int ark3116_ioctl(struct tty_struct
*tty
,
405 unsigned int cmd
, unsigned long arg
)
407 struct usb_serial_port
*port
= tty
->driver_data
;
408 struct serial_struct serstruct
;
409 void __user
*user_arg
= (void __user
*)arg
;
413 /* XXX: Some of these values are probably wrong. */
414 memset(&serstruct
, 0, sizeof(serstruct
));
415 serstruct
.type
= PORT_16654
;
416 serstruct
.line
= port
->minor
;
417 serstruct
.port
= port
->port_number
;
418 serstruct
.custom_divisor
= 0;
419 serstruct
.baud_base
= 460800;
421 if (copy_to_user(user_arg
, &serstruct
, sizeof(serstruct
)))
426 if (copy_from_user(&serstruct
, user_arg
, sizeof(serstruct
)))
434 static int ark3116_tiocmget(struct tty_struct
*tty
)
436 struct usb_serial_port
*port
= tty
->driver_data
;
437 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
442 mutex_lock(&priv
->hw_lock
);
444 mutex_unlock(&priv
->hw_lock
);
446 spin_lock_irqsave(&priv
->status_lock
, flags
);
448 spin_unlock_irqrestore(&priv
->status_lock
, flags
);
450 return (status
& UART_MSR_DSR
? TIOCM_DSR
: 0) |
451 (status
& UART_MSR_CTS
? TIOCM_CTS
: 0) |
452 (status
& UART_MSR_RI
? TIOCM_RI
: 0) |
453 (status
& UART_MSR_DCD
? TIOCM_CD
: 0) |
454 (ctrl
& UART_MCR_DTR
? TIOCM_DTR
: 0) |
455 (ctrl
& UART_MCR_RTS
? TIOCM_RTS
: 0) |
456 (ctrl
& UART_MCR_OUT1
? TIOCM_OUT1
: 0) |
457 (ctrl
& UART_MCR_OUT2
? TIOCM_OUT2
: 0);
460 static int ark3116_tiocmset(struct tty_struct
*tty
,
461 unsigned set
, unsigned clr
)
463 struct usb_serial_port
*port
= tty
->driver_data
;
464 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
466 /* we need to take the mutex here, to make sure that the value
467 * in priv->mcr is actually the one that is in the hardware
470 mutex_lock(&priv
->hw_lock
);
473 priv
->mcr
|= UART_MCR_RTS
;
475 priv
->mcr
|= UART_MCR_DTR
;
476 if (set
& TIOCM_OUT1
)
477 priv
->mcr
|= UART_MCR_OUT1
;
478 if (set
& TIOCM_OUT2
)
479 priv
->mcr
|= UART_MCR_OUT2
;
481 priv
->mcr
&= ~UART_MCR_RTS
;
483 priv
->mcr
&= ~UART_MCR_DTR
;
484 if (clr
& TIOCM_OUT1
)
485 priv
->mcr
&= ~UART_MCR_OUT1
;
486 if (clr
& TIOCM_OUT2
)
487 priv
->mcr
&= ~UART_MCR_OUT2
;
489 ark3116_write_reg(port
->serial
, UART_MCR
, priv
->mcr
);
491 mutex_unlock(&priv
->hw_lock
);
496 static void ark3116_break_ctl(struct tty_struct
*tty
, int break_state
)
498 struct usb_serial_port
*port
= tty
->driver_data
;
499 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
501 /* LCR is also used for other things: protect access */
502 mutex_lock(&priv
->hw_lock
);
505 priv
->lcr
|= UART_LCR_SBC
;
507 priv
->lcr
&= ~UART_LCR_SBC
;
509 ark3116_write_reg(port
->serial
, UART_LCR
, priv
->lcr
);
511 mutex_unlock(&priv
->hw_lock
);
514 static void ark3116_update_msr(struct usb_serial_port
*port
, __u8 msr
)
516 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
519 spin_lock_irqsave(&priv
->status_lock
, flags
);
521 spin_unlock_irqrestore(&priv
->status_lock
, flags
);
523 if (msr
& UART_MSR_ANY_DELTA
) {
524 /* update input line counters */
525 if (msr
& UART_MSR_DCTS
)
527 if (msr
& UART_MSR_DDSR
)
529 if (msr
& UART_MSR_DDCD
)
531 if (msr
& UART_MSR_TERI
)
533 wake_up_interruptible(&port
->port
.delta_msr_wait
);
537 static void ark3116_update_lsr(struct usb_serial_port
*port
, __u8 lsr
)
539 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
542 spin_lock_irqsave(&priv
->status_lock
, flags
);
545 spin_unlock_irqrestore(&priv
->status_lock
, flags
);
547 if (lsr
&UART_LSR_BRK_ERROR_BITS
) {
548 if (lsr
& UART_LSR_BI
)
550 if (lsr
& UART_LSR_FE
)
551 port
->icount
.frame
++;
552 if (lsr
& UART_LSR_PE
)
553 port
->icount
.parity
++;
554 if (lsr
& UART_LSR_OE
)
555 port
->icount
.overrun
++;
559 static void ark3116_read_int_callback(struct urb
*urb
)
561 struct usb_serial_port
*port
= urb
->context
;
562 int status
= urb
->status
;
563 const __u8
*data
= urb
->transfer_buffer
;
570 /* this urb is terminated, clean up */
571 dev_dbg(&port
->dev
, "%s - urb shutting down with status: %d\n",
575 dev_dbg(&port
->dev
, "%s - nonzero urb status received: %d\n",
578 case 0: /* success */
579 /* discovered this by trail and error... */
580 if ((urb
->actual_length
== 4) && (data
[0] == 0xe8)) {
581 const __u8 id
= data
[1]&UART_IIR_ID
;
582 dev_dbg(&port
->dev
, "%s: iir=%02x\n", __func__
, data
[1]);
583 if (id
== UART_IIR_MSI
) {
584 dev_dbg(&port
->dev
, "%s: msr=%02x\n",
586 ark3116_update_msr(port
, data
[3]);
588 } else if (id
== UART_IIR_RLSI
) {
589 dev_dbg(&port
->dev
, "%s: lsr=%02x\n",
591 ark3116_update_lsr(port
, data
[2]);
596 * Not sure what this data meant...
598 usb_serial_debug_data(&port
->dev
, __func__
,
600 urb
->transfer_buffer
);
604 result
= usb_submit_urb(urb
, GFP_ATOMIC
);
606 dev_err(&urb
->dev
->dev
,
607 "%s - Error %d submitting interrupt urb\n",
612 /* Data comes in via the bulk (data) URB, erors/interrupts via the int URB.
613 * This means that we cannot be sure which data byte has an associated error
614 * condition, so we report an error for all data in the next bulk read.
616 * Actually, there might even be a window between the bulk data leaving the
617 * ark and reading/resetting the lsr in the read_bulk_callback where an
618 * interrupt for the next data block could come in.
619 * Without somekind of ordering on the ark, we would have to report the
620 * error for the next block of data as well...
621 * For now, let's pretend this can't happen.
623 static void ark3116_process_read_urb(struct urb
*urb
)
625 struct usb_serial_port
*port
= urb
->context
;
626 struct ark3116_private
*priv
= usb_get_serial_port_data(port
);
627 unsigned char *data
= urb
->transfer_buffer
;
628 char tty_flag
= TTY_NORMAL
;
632 /* update line status */
633 spin_lock_irqsave(&priv
->status_lock
, flags
);
635 priv
->lsr
&= ~UART_LSR_BRK_ERROR_BITS
;
636 spin_unlock_irqrestore(&priv
->status_lock
, flags
);
638 if (!urb
->actual_length
)
641 if (lsr
& UART_LSR_BRK_ERROR_BITS
) {
642 if (lsr
& UART_LSR_BI
)
643 tty_flag
= TTY_BREAK
;
644 else if (lsr
& UART_LSR_PE
)
645 tty_flag
= TTY_PARITY
;
646 else if (lsr
& UART_LSR_FE
)
647 tty_flag
= TTY_FRAME
;
649 /* overrun is special, not associated with a char */
650 if (lsr
& UART_LSR_OE
)
651 tty_insert_flip_char(&port
->port
, 0, TTY_OVERRUN
);
653 tty_insert_flip_string_fixed_flag(&port
->port
, data
, tty_flag
,
655 tty_flip_buffer_push(&port
->port
);
658 static struct usb_serial_driver ark3116_device
= {
660 .owner
= THIS_MODULE
,
663 .id_table
= id_table
,
665 .attach
= ark3116_attach
,
666 .port_probe
= ark3116_port_probe
,
667 .port_remove
= ark3116_port_remove
,
668 .set_termios
= ark3116_set_termios
,
669 .init_termios
= ark3116_init_termios
,
670 .ioctl
= ark3116_ioctl
,
671 .tiocmget
= ark3116_tiocmget
,
672 .tiocmset
= ark3116_tiocmset
,
673 .tiocmiwait
= usb_serial_generic_tiocmiwait
,
674 .get_icount
= usb_serial_generic_get_icount
,
675 .open
= ark3116_open
,
676 .close
= ark3116_close
,
677 .break_ctl
= ark3116_break_ctl
,
678 .read_int_callback
= ark3116_read_int_callback
,
679 .process_read_urb
= ark3116_process_read_urb
,
682 static struct usb_serial_driver
* const serial_drivers
[] = {
683 &ark3116_device
, NULL
686 module_usb_serial_driver(serial_drivers
, id_table
);
688 MODULE_LICENSE("GPL");
690 MODULE_AUTHOR(DRIVER_AUTHOR
);
691 MODULE_DESCRIPTION(DRIVER_DESC
);
694 * The following describes what I learned from studying the old
695 * ark3116.c driver, disassembling the windows driver, and some lucky
696 * guesses. Since I do not have any datasheet or other
697 * documentation, inaccuracies are almost guaranteed.
699 * Some specs for the ARK3116 can be found here:
700 * http://web.archive.org/web/20060318000438/
701 * www.arkmicro.com/en/products/view.php?id=10
702 * On that page, 2 GPIO pins are mentioned: I assume these are the
703 * OUT1 and OUT2 pins of the UART, so I added support for those
704 * through the MCR. Since the pins are not available on my hardware,
705 * I could not verify this.
706 * Also, it states there is "on-chip hardware flow control". I have
707 * discovered how to enable that. Unfortunately, I do not know how to
708 * enable XON/XOFF (software) flow control, which would need support
709 * from the chip as well to work. Because of the wording on the web
710 * page there is a real possibility the chip simply does not support
711 * software flow control.
713 * I got my ark3116 as part of a mobile phone adapter cable. On the
714 * PCB, the following numbered contacts are present:
727 * On my chip, all signals seem to be 3.3V, but 5V tolerant. But that
728 * may be different for the one you have ;-).
730 * The windows driver limits the registers to 0-F, so I assume there
731 * are actually 16 present on the device.
733 * On an UART interrupt, 4 bytes of data come in on the interrupt
734 * endpoint. The bytes are 0xe8 IIR LSR MSR.
736 * The baudrate seems to be generated from the 12MHz crystal, using
737 * 4-times subsampling. So quot=12e6/(4*baud). Also see description
741 * These seem to be the same as for a regular 16450. The FCR is set
742 * to UART_FCR_DMA_SELECT (0x8), I guess to enable transfers between
743 * the UART and the USB bridge/DMA engine.
746 * By trial and error, I found out that bit 0 enables hardware CTS,
747 * stopping TX when CTS is +5V. Bit 1 does the same for RTS, making
748 * RTS +5V when the 3116 cannot transfer the data to the USB bus
749 * (verified by disabling the reading URB). Note that as far as I can
750 * tell, the windows driver does NOT use this, so there might be some
751 * hardware bug or something.
753 * According to a patch provided here
754 * (http://lkml.org/lkml/2009/7/26/56), the ARK3116 can also be used
755 * as an IrDA dongle. Since I do not have such a thing, I could not
756 * investigate that aspect. However, I can speculate ;-).
758 * - IrDA encodes data differently than RS232. Most likely, one of
759 * the bits in registers 9..E enables the IR ENDEC (encoder/decoder).
760 * - Depending on the IR transceiver, the input and output need to be
761 * inverted, so there are probably bits for that as well.
762 * - IrDA is half-duplex, so there should be a bit for selecting that.
764 * This still leaves at least two registers unaccounted for. Perhaps
765 * The chip can do XON/XOFF or CRC in HW?
768 * Set to 0x00 for IrDA, when the baudrate is initialised.
771 * Set to 0x01 for IrDA, at init.
774 * Set to 0x01 for IrDA, 0x00 for RS232, at init.
777 * Set to 00 for IrDA, at init.
780 * Set to 0x41 for IrDA, at init.
783 * Somekind of baudrate override. The windows driver seems to set
784 * this to 0x00 for normal baudrates, 0x01 for 460800, 0x02 for 921600.
785 * Since 460800 and 921600 cannot be obtained by dividing 3MHz by an integer,
786 * it could be somekind of subdivisor thingy.
787 * However,it does not seem to do anything: selecting 921600 (divisor 3,
788 * reg E=2), still gets 1 MHz. I also checked if registers 9, C or F would
789 * work, but they don't.
791 * Register F: unknown