linux/drivers/net/usb/qmi_wwan.c
<<
>>
Prefs
   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
   4 *
   5 * The probing code is heavily inspired by cdc_ether, which is:
   6 * Copyright (C) 2003-2005 by David Brownell
   7 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
   8 */
   9
  10#include <linux/module.h>
  11#include <linux/sched/signal.h>
  12#include <linux/netdevice.h>
  13#include <linux/ethtool.h>
  14#include <linux/etherdevice.h>
  15#include <linux/if_arp.h>
  16#include <linux/mii.h>
  17#include <linux/rtnetlink.h>
  18#include <linux/usb.h>
  19#include <linux/usb/cdc.h>
  20#include <linux/usb/usbnet.h>
  21#include <linux/usb/cdc-wdm.h>
  22#include <linux/u64_stats_sync.h>
  23
  24/* This driver supports wwan (3G/LTE/?) devices using a vendor
  25 * specific management protocol called Qualcomm MSM Interface (QMI) -
  26 * in addition to the more common AT commands over serial interface
  27 * management
  28 *
  29 * QMI is wrapped in CDC, using CDC encapsulated commands on the
  30 * control ("master") interface of a two-interface CDC Union
  31 * resembling standard CDC ECM.  The devices do not use the control
  32 * interface for any other CDC messages.  Most likely because the
  33 * management protocol is used in place of the standard CDC
  34 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
  35 *
  36 * Alternatively, control and data functions can be combined in a
  37 * single USB interface.
  38 *
  39 * Handling a protocol like QMI is out of the scope for any driver.
  40 * It is exported as a character device using the cdc-wdm driver as
  41 * a subdriver, enabling userspace applications ("modem managers") to
  42 * handle it.
  43 *
  44 * These devices may alternatively/additionally be configured using AT
  45 * commands on a serial interface
  46 */
  47
  48/* driver specific data */
  49struct qmi_wwan_state {
  50        struct usb_driver *subdriver;
  51        atomic_t pmcount;
  52        unsigned long flags;
  53        struct usb_interface *control;
  54        struct usb_interface *data;
  55};
  56
  57enum qmi_wwan_flags {
  58        QMI_WWAN_FLAG_RAWIP = 1 << 0,
  59        QMI_WWAN_FLAG_MUX = 1 << 1,
  60};
  61
  62enum qmi_wwan_quirks {
  63        QMI_WWAN_QUIRK_DTR = 1 << 0,    /* needs "set DTR" request */
  64};
  65
  66struct qmimux_hdr {
  67        u8 pad;
  68        u8 mux_id;
  69        __be16 pkt_len;
  70};
  71
  72struct qmimux_priv {
  73        struct net_device *real_dev;
  74        u8 mux_id;
  75        struct pcpu_sw_netstats __percpu *stats64;
  76};
  77
  78static int qmimux_open(struct net_device *dev)
  79{
  80        struct qmimux_priv *priv = netdev_priv(dev);
  81        struct net_device *real_dev = priv->real_dev;
  82
  83        if (!(priv->real_dev->flags & IFF_UP))
  84                return -ENETDOWN;
  85
  86        if (netif_carrier_ok(real_dev))
  87                netif_carrier_on(dev);
  88        return 0;
  89}
  90
  91static int qmimux_stop(struct net_device *dev)
  92{
  93        netif_carrier_off(dev);
  94        return 0;
  95}
  96
  97static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
  98{
  99        struct qmimux_priv *priv = netdev_priv(dev);
 100        unsigned int len = skb->len;
 101        struct qmimux_hdr *hdr;
 102        netdev_tx_t ret;
 103
 104        hdr = skb_push(skb, sizeof(struct qmimux_hdr));
 105        hdr->pad = 0;
 106        hdr->mux_id = priv->mux_id;
 107        hdr->pkt_len = cpu_to_be16(len);
 108        skb->dev = priv->real_dev;
 109        ret = dev_queue_xmit(skb);
 110
 111        if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
 112                struct pcpu_sw_netstats *stats64 = this_cpu_ptr(priv->stats64);
 113
 114                u64_stats_update_begin(&stats64->syncp);
 115                stats64->tx_packets++;
 116                stats64->tx_bytes += len;
 117                u64_stats_update_end(&stats64->syncp);
 118        } else {
 119                dev->stats.tx_dropped++;
 120        }
 121
 122        return ret;
 123}
 124
 125static void qmimux_get_stats64(struct net_device *net,
 126                               struct rtnl_link_stats64 *stats)
 127{
 128        struct qmimux_priv *priv = netdev_priv(net);
 129        unsigned int start;
 130        int cpu;
 131
 132        netdev_stats_to_stats64(stats, &net->stats);
 133
 134        for_each_possible_cpu(cpu) {
 135                struct pcpu_sw_netstats *stats64;
 136                u64 rx_packets, rx_bytes;
 137                u64 tx_packets, tx_bytes;
 138
 139                stats64 = per_cpu_ptr(priv->stats64, cpu);
 140
 141                do {
 142                        start = u64_stats_fetch_begin_irq(&stats64->syncp);
 143                        rx_packets = stats64->rx_packets;
 144                        rx_bytes = stats64->rx_bytes;
 145                        tx_packets = stats64->tx_packets;
 146                        tx_bytes = stats64->tx_bytes;
 147                } while (u64_stats_fetch_retry_irq(&stats64->syncp, start));
 148
 149                stats->rx_packets += rx_packets;
 150                stats->rx_bytes += rx_bytes;
 151                stats->tx_packets += tx_packets;
 152                stats->tx_bytes += tx_bytes;
 153        }
 154}
 155
 156static const struct net_device_ops qmimux_netdev_ops = {
 157        .ndo_open        = qmimux_open,
 158        .ndo_stop        = qmimux_stop,
 159        .ndo_start_xmit  = qmimux_start_xmit,
 160        .ndo_get_stats64 = qmimux_get_stats64,
 161};
 162
 163static void qmimux_setup(struct net_device *dev)
 164{
 165        dev->header_ops      = NULL;  /* No header */
 166        dev->type            = ARPHRD_NONE;
 167        dev->hard_header_len = 0;
 168        dev->addr_len        = 0;
 169        dev->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
 170        dev->netdev_ops      = &qmimux_netdev_ops;
 171        dev->mtu             = 1500;
 172        dev->needs_free_netdev = true;
 173}
 174
 175static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
 176{
 177        struct qmimux_priv *priv;
 178        struct list_head *iter;
 179        struct net_device *ldev;
 180
 181        rcu_read_lock();
 182        netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
 183                priv = netdev_priv(ldev);
 184                if (priv->mux_id == mux_id) {
 185                        rcu_read_unlock();
 186                        return ldev;
 187                }
 188        }
 189        rcu_read_unlock();
 190        return NULL;
 191}
 192
 193static bool qmimux_has_slaves(struct usbnet *dev)
 194{
 195        return !list_empty(&dev->net->adj_list.upper);
 196}
 197
 198static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
 199{
 200        unsigned int len, offset = 0, pad_len, pkt_len;
 201        struct qmimux_hdr *hdr;
 202        struct net_device *net;
 203        struct sk_buff *skbn;
 204        u8 qmimux_hdr_sz = sizeof(*hdr);
 205
 206        while (offset + qmimux_hdr_sz < skb->len) {
 207                hdr = (struct qmimux_hdr *)(skb->data + offset);
 208                len = be16_to_cpu(hdr->pkt_len);
 209
 210                /* drop the packet, bogus length */
 211                if (offset + len + qmimux_hdr_sz > skb->len)
 212                        return 0;
 213
 214                /* control packet, we do not know what to do */
 215                if (hdr->pad & 0x80)
 216                        goto skip;
 217
 218                /* extract padding length and check for valid length info */
 219                pad_len = hdr->pad & 0x3f;
 220                if (len == 0 || pad_len >= len)
 221                        goto skip;
 222                pkt_len = len - pad_len;
 223
 224                net = qmimux_find_dev(dev, hdr->mux_id);
 225                if (!net)
 226                        goto skip;
 227                skbn = netdev_alloc_skb(net, pkt_len);
 228                if (!skbn)
 229                        return 0;
 230                skbn->dev = net;
 231
 232                switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
 233                case 0x40:
 234                        skbn->protocol = htons(ETH_P_IP);
 235                        break;
 236                case 0x60:
 237                        skbn->protocol = htons(ETH_P_IPV6);
 238                        break;
 239                default:
 240                        /* not ip - do not know what to do */
 241                        goto skip;
 242                }
 243
 244                skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
 245                if (netif_rx(skbn) != NET_RX_SUCCESS) {
 246                        net->stats.rx_errors++;
 247                        return 0;
 248                } else {
 249                        struct pcpu_sw_netstats *stats64;
 250                        struct qmimux_priv *priv = netdev_priv(net);
 251
 252                        stats64 = this_cpu_ptr(priv->stats64);
 253                        u64_stats_update_begin(&stats64->syncp);
 254                        stats64->rx_packets++;
 255                        stats64->rx_bytes += pkt_len;
 256                        u64_stats_update_end(&stats64->syncp);
 257                }
 258
 259skip:
 260                offset += len + qmimux_hdr_sz;
 261        }
 262        return 1;
 263}
 264
 265static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
 266{
 267        struct net_device *new_dev;
 268        struct qmimux_priv *priv;
 269        int err;
 270
 271        new_dev = alloc_netdev(sizeof(struct qmimux_priv),
 272                               "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
 273        if (!new_dev)
 274                return -ENOBUFS;
 275
 276        dev_net_set(new_dev, dev_net(real_dev));
 277        priv = netdev_priv(new_dev);
 278        priv->mux_id = mux_id;
 279        priv->real_dev = real_dev;
 280
 281        priv->stats64 = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
 282        if (!priv->stats64) {
 283                err = -ENOBUFS;
 284                goto out_free_newdev;
 285        }
 286
 287        err = register_netdevice(new_dev);
 288        if (err < 0)
 289                goto out_free_newdev;
 290
 291        /* Account for reference in struct qmimux_priv_priv */
 292        dev_hold(real_dev);
 293
 294        err = netdev_upper_dev_link(real_dev, new_dev, NULL);
 295        if (err)
 296                goto out_unregister_netdev;
 297
 298        netif_stacked_transfer_operstate(real_dev, new_dev);
 299
 300        return 0;
 301
 302out_unregister_netdev:
 303        unregister_netdevice(new_dev);
 304        dev_put(real_dev);
 305
 306out_free_newdev:
 307        free_netdev(new_dev);
 308        return err;
 309}
 310
 311static void qmimux_unregister_device(struct net_device *dev,
 312                                     struct list_head *head)
 313{
 314        struct qmimux_priv *priv = netdev_priv(dev);
 315        struct net_device *real_dev = priv->real_dev;
 316
 317        free_percpu(priv->stats64);
 318        netdev_upper_dev_unlink(real_dev, dev);
 319        unregister_netdevice_queue(dev, head);
 320
 321        /* Get rid of the reference to real_dev */
 322        dev_put(real_dev);
 323}
 324
 325static void qmi_wwan_netdev_setup(struct net_device *net)
 326{
 327        struct usbnet *dev = netdev_priv(net);
 328        struct qmi_wwan_state *info = (void *)&dev->data;
 329
 330        if (info->flags & QMI_WWAN_FLAG_RAWIP) {
 331                net->header_ops      = NULL;  /* No header */
 332                net->type            = ARPHRD_NONE;
 333                net->hard_header_len = 0;
 334                net->addr_len        = 0;
 335                net->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
 336                set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
 337                netdev_dbg(net, "mode: raw IP\n");
 338        } else if (!net->header_ops) { /* don't bother if already set */
 339                ether_setup(net);
 340                /* Restoring min/max mtu values set originally by usbnet */
 341                net->min_mtu = 0;
 342                net->max_mtu = ETH_MAX_MTU;
 343                clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
 344                netdev_dbg(net, "mode: Ethernet\n");
 345        }
 346
 347        /* recalculate buffers after changing hard_header_len */
 348        usbnet_change_mtu(net, net->mtu);
 349}
 350
 351static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
 352{
 353        struct usbnet *dev = netdev_priv(to_net_dev(d));
 354        struct qmi_wwan_state *info = (void *)&dev->data;
 355
 356        return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
 357}
 358
 359static ssize_t raw_ip_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
 360{
 361        struct usbnet *dev = netdev_priv(to_net_dev(d));
 362        struct qmi_wwan_state *info = (void *)&dev->data;
 363        bool enable;
 364        int ret;
 365
 366        if (strtobool(buf, &enable))
 367                return -EINVAL;
 368
 369        /* no change? */
 370        if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
 371                return len;
 372
 373        if (!rtnl_trylock())
 374                return restart_syscall();
 375
 376        /* we don't want to modify a running netdev */
 377        if (netif_running(dev->net)) {
 378                netdev_err(dev->net, "Cannot change a running device\n");
 379                ret = -EBUSY;
 380                goto err;
 381        }
 382
 383        /* let other drivers deny the change */
 384        ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
 385        ret = notifier_to_errno(ret);
 386        if (ret) {
 387                netdev_err(dev->net, "Type change was refused\n");
 388                goto err;
 389        }
 390
 391        if (enable)
 392                info->flags |= QMI_WWAN_FLAG_RAWIP;
 393        else
 394                info->flags &= ~QMI_WWAN_FLAG_RAWIP;
 395        qmi_wwan_netdev_setup(dev->net);
 396        call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
 397        ret = len;
 398err:
 399        rtnl_unlock();
 400        return ret;
 401}
 402
 403static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
 404{
 405        struct net_device *dev = to_net_dev(d);
 406        struct qmimux_priv *priv;
 407        struct list_head *iter;
 408        struct net_device *ldev;
 409        ssize_t count = 0;
 410
 411        rcu_read_lock();
 412        netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
 413                priv = netdev_priv(ldev);
 414                count += scnprintf(&buf[count], PAGE_SIZE - count,
 415                                   "0x%02x\n", priv->mux_id);
 416        }
 417        rcu_read_unlock();
 418        return count;
 419}
 420
 421static ssize_t add_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
 422{
 423        struct usbnet *dev = netdev_priv(to_net_dev(d));
 424        struct qmi_wwan_state *info = (void *)&dev->data;
 425        u8 mux_id;
 426        int ret;
 427
 428        if (kstrtou8(buf, 0, &mux_id))
 429                return -EINVAL;
 430
 431        /* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
 432        if (mux_id < 1 || mux_id > 254)
 433                return -EINVAL;
 434
 435        if (!rtnl_trylock())
 436                return restart_syscall();
 437
 438        if (qmimux_find_dev(dev, mux_id)) {
 439                netdev_err(dev->net, "mux_id already present\n");
 440                ret = -EINVAL;
 441                goto err;
 442        }
 443
 444        /* we don't want to modify a running netdev */
 445        if (netif_running(dev->net)) {
 446                netdev_err(dev->net, "Cannot change a running device\n");
 447                ret = -EBUSY;
 448                goto err;
 449        }
 450
 451        ret = qmimux_register_device(dev->net, mux_id);
 452        if (!ret) {
 453                info->flags |= QMI_WWAN_FLAG_MUX;
 454                ret = len;
 455        }
 456err:
 457        rtnl_unlock();
 458        return ret;
 459}
 460
 461static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
 462{
 463        return add_mux_show(d, attr, buf);
 464}
 465
 466static ssize_t del_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
 467{
 468        struct usbnet *dev = netdev_priv(to_net_dev(d));
 469        struct qmi_wwan_state *info = (void *)&dev->data;
 470        struct net_device *del_dev;
 471        u8 mux_id;
 472        int ret = 0;
 473
 474        if (kstrtou8(buf, 0, &mux_id))
 475                return -EINVAL;
 476
 477        if (!rtnl_trylock())
 478                return restart_syscall();
 479
 480        /* we don't want to modify a running netdev */
 481        if (netif_running(dev->net)) {
 482                netdev_err(dev->net, "Cannot change a running device\n");
 483                ret = -EBUSY;
 484                goto err;
 485        }
 486
 487        del_dev = qmimux_find_dev(dev, mux_id);
 488        if (!del_dev) {
 489                netdev_err(dev->net, "mux_id not present\n");
 490                ret = -EINVAL;
 491                goto err;
 492        }
 493        qmimux_unregister_device(del_dev, NULL);
 494
 495        if (!qmimux_has_slaves(dev))
 496                info->flags &= ~QMI_WWAN_FLAG_MUX;
 497        ret = len;
 498err:
 499        rtnl_unlock();
 500        return ret;
 501}
 502
 503static DEVICE_ATTR_RW(raw_ip);
 504static DEVICE_ATTR_RW(add_mux);
 505static DEVICE_ATTR_RW(del_mux);
 506
 507static struct attribute *qmi_wwan_sysfs_attrs[] = {
 508        &dev_attr_raw_ip.attr,
 509        &dev_attr_add_mux.attr,
 510        &dev_attr_del_mux.attr,
 511        NULL,
 512};
 513
 514static struct attribute_group qmi_wwan_sysfs_attr_group = {
 515        .name = "qmi",
 516        .attrs = qmi_wwan_sysfs_attrs,
 517};
 518
 519/* default ethernet address used by the modem */
 520static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
 521
 522static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
 523
 524/* Make up an ethernet header if the packet doesn't have one.
 525 *
 526 * A firmware bug common among several devices cause them to send raw
 527 * IP packets under some circumstances.  There is no way for the
 528 * driver/host to know when this will happen.  And even when the bug
 529 * hits, some packets will still arrive with an intact header.
 530 *
 531 * The supported devices are only capably of sending IPv4, IPv6 and
 532 * ARP packets on a point-to-point link. Any packet with an ethernet
 533 * header will have either our address or a broadcast/multicast
 534 * address as destination.  ARP packets will always have a header.
 535 *
 536 * This means that this function will reliably add the appropriate
 537 * header iff necessary, provided our hardware address does not start
 538 * with 4 or 6.
 539 *
 540 * Another common firmware bug results in all packets being addressed
 541 * to 00:a0:c6:00:00:00 despite the host address being different.
 542 * This function will also fixup such packets.
 543 */
 544static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
 545{
 546        struct qmi_wwan_state *info = (void *)&dev->data;
 547        bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
 548        __be16 proto;
 549
 550        /* This check is no longer done by usbnet */
 551        if (skb->len < dev->net->hard_header_len)
 552                return 0;
 553
 554        if (info->flags & QMI_WWAN_FLAG_MUX)
 555                return qmimux_rx_fixup(dev, skb);
 556
 557        switch (skb->data[0] & 0xf0) {
 558        case 0x40:
 559                proto = htons(ETH_P_IP);
 560                break;
 561        case 0x60:
 562                proto = htons(ETH_P_IPV6);
 563                break;
 564        case 0x00:
 565                if (rawip)
 566                        return 0;
 567                if (is_multicast_ether_addr(skb->data))
 568                        return 1;
 569                /* possibly bogus destination - rewrite just in case */
 570                skb_reset_mac_header(skb);
 571                goto fix_dest;
 572        default:
 573                if (rawip)
 574                        return 0;
 575                /* pass along other packets without modifications */
 576                return 1;
 577        }
 578        if (rawip) {
 579                skb_reset_mac_header(skb);
 580                skb->dev = dev->net; /* normally set by eth_type_trans */
 581                skb->protocol = proto;
 582                return 1;
 583        }
 584
 585        if (skb_headroom(skb) < ETH_HLEN)
 586                return 0;
 587        skb_push(skb, ETH_HLEN);
 588        skb_reset_mac_header(skb);
 589        eth_hdr(skb)->h_proto = proto;
 590        eth_zero_addr(eth_hdr(skb)->h_source);
 591fix_dest:
 592        memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
 593        return 1;
 594}
 595
 596/* very simplistic detection of IPv4 or IPv6 headers */
 597static bool possibly_iphdr(const char *data)
 598{
 599        return (data[0] & 0xd0) == 0x40;
 600}
 601
 602/* disallow addresses which may be confused with IP headers */
 603static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
 604{
 605        int ret;
 606        struct sockaddr *addr = p;
 607
 608        ret = eth_prepare_mac_addr_change(dev, p);
 609        if (ret < 0)
 610                return ret;
 611        if (possibly_iphdr(addr->sa_data))
 612                return -EADDRNOTAVAIL;
 613        eth_commit_mac_addr_change(dev, p);
 614        return 0;
 615}
 616
 617static const struct net_device_ops qmi_wwan_netdev_ops = {
 618        .ndo_open               = usbnet_open,
 619        .ndo_stop               = usbnet_stop,
 620        .ndo_start_xmit         = usbnet_start_xmit,
 621        .ndo_tx_timeout         = usbnet_tx_timeout,
 622        .ndo_change_mtu         = usbnet_change_mtu,
 623        .ndo_get_stats64        = usbnet_get_stats64,
 624        .ndo_set_mac_address    = qmi_wwan_mac_addr,
 625        .ndo_validate_addr      = eth_validate_addr,
 626};
 627
 628/* using a counter to merge subdriver requests with our own into a
 629 * combined state
 630 */
 631static int qmi_wwan_manage_power(struct usbnet *dev, int on)
 632{
 633        struct qmi_wwan_state *info = (void *)&dev->data;
 634        int rv;
 635
 636        dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
 637                atomic_read(&info->pmcount), on);
 638
 639        if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
 640            (!on && atomic_dec_and_test(&info->pmcount))) {
 641                /* need autopm_get/put here to ensure the usbcore sees
 642                 * the new value
 643                 */
 644                rv = usb_autopm_get_interface(dev->intf);
 645                dev->intf->needs_remote_wakeup = on;
 646                if (!rv)
 647                        usb_autopm_put_interface(dev->intf);
 648        }
 649        return 0;
 650}
 651
 652static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
 653{
 654        struct usbnet *dev = usb_get_intfdata(intf);
 655
 656        /* can be called while disconnecting */
 657        if (!dev)
 658                return 0;
 659        return qmi_wwan_manage_power(dev, on);
 660}
 661
 662/* collect all three endpoints and register subdriver */
 663static int qmi_wwan_register_subdriver(struct usbnet *dev)
 664{
 665        int rv;
 666        struct usb_driver *subdriver = NULL;
 667        struct qmi_wwan_state *info = (void *)&dev->data;
 668
 669        /* collect bulk endpoints */
 670        rv = usbnet_get_endpoints(dev, info->data);
 671        if (rv < 0)
 672                goto err;
 673
 674        /* update status endpoint if separate control interface */
 675        if (info->control != info->data)
 676                dev->status = &info->control->cur_altsetting->endpoint[0];
 677
 678        /* require interrupt endpoint for subdriver */
 679        if (!dev->status) {
 680                rv = -EINVAL;
 681                goto err;
 682        }
 683
 684        /* for subdriver power management */
 685        atomic_set(&info->pmcount, 0);
 686
 687        /* register subdriver */
 688        subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
 689                                         4096, &qmi_wwan_cdc_wdm_manage_power);
 690        if (IS_ERR(subdriver)) {
 691                dev_err(&info->control->dev, "subdriver registration failed\n");
 692                rv = PTR_ERR(subdriver);
 693                goto err;
 694        }
 695
 696        /* prevent usbnet from using status endpoint */
 697        dev->status = NULL;
 698
 699        /* save subdriver struct for suspend/resume wrappers */
 700        info->subdriver = subdriver;
 701
 702err:
 703        return rv;
 704}
 705
 706/* Send CDC SetControlLineState request, setting or clearing the DTR.
 707 * "Required for Autoconnect and 9x30 to wake up" according to the
 708 * GobiNet driver. The requirement has been verified on an MDM9230
 709 * based Sierra Wireless MC7455
 710 */
 711static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
 712{
 713        u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
 714
 715        return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
 716                                USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
 717                                on ? 0x01 : 0x00, intf, NULL, 0);
 718}
 719
 720static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
 721{
 722        int status;
 723        u8 *buf = intf->cur_altsetting->extra;
 724        int len = intf->cur_altsetting->extralen;
 725        struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
 726        struct usb_cdc_union_desc *cdc_union;
 727        struct usb_cdc_ether_desc *cdc_ether;
 728        struct usb_driver *driver = driver_of(intf);
 729        struct qmi_wwan_state *info = (void *)&dev->data;
 730        struct usb_cdc_parsed_header hdr;
 731
 732        BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
 733                      sizeof(struct qmi_wwan_state)));
 734
 735        /* set up initial state */
 736        info->control = intf;
 737        info->data = intf;
 738
 739        /* and a number of CDC descriptors */
 740        cdc_parse_cdc_header(&hdr, intf, buf, len);
 741        cdc_union = hdr.usb_cdc_union_desc;
 742        cdc_ether = hdr.usb_cdc_ether_desc;
 743
 744        /* Use separate control and data interfaces if we found a CDC Union */
 745        if (cdc_union) {
 746                info->data = usb_ifnum_to_if(dev->udev,
 747                                             cdc_union->bSlaveInterface0);
 748                if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
 749                    !info->data) {
 750                        dev_err(&intf->dev,
 751                                "bogus CDC Union: master=%u, slave=%u\n",
 752                                cdc_union->bMasterInterface0,
 753                                cdc_union->bSlaveInterface0);
 754
 755                        /* ignore and continue... */
 756                        cdc_union = NULL;
 757                        info->data = intf;
 758                }
 759        }
 760
 761        /* errors aren't fatal - we can live with the dynamic address */
 762        if (cdc_ether && cdc_ether->wMaxSegmentSize) {
 763                dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
 764                usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
 765        }
 766
 767        /* claim data interface and set it up */
 768        if (info->control != info->data) {
 769                status = usb_driver_claim_interface(driver, info->data, dev);
 770                if (status < 0)
 771                        goto err;
 772        }
 773
 774        status = qmi_wwan_register_subdriver(dev);
 775        if (status < 0 && info->control != info->data) {
 776                usb_set_intfdata(info->data, NULL);
 777                usb_driver_release_interface(driver, info->data);
 778        }
 779
 780        /* disabling remote wakeup on MDM9x30 devices has the same
 781         * effect as clearing DTR. The device will not respond to QMI
 782         * requests until we set DTR again.  This is similar to a
 783         * QMI_CTL SYNC request, clearing a lot of firmware state
 784         * including the client ID allocations.
 785         *
 786         * Our usage model allows a session to span multiple
 787         * open/close events, so we must prevent the firmware from
 788         * clearing out state the clients might need.
 789         *
 790         * MDM9x30 is the first QMI chipset with USB3 support. Abuse
 791         * this fact to enable the quirk for all USB3 devices.
 792         *
 793         * There are also chipsets with the same "set DTR" requirement
 794         * but without USB3 support.  Devices based on these chips
 795         * need a quirk flag in the device ID table.
 796         */
 797        if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
 798            le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
 799                qmi_wwan_manage_power(dev, 1);
 800                qmi_wwan_change_dtr(dev, true);
 801        }
 802
 803        /* Never use the same address on both ends of the link, even if the
 804         * buggy firmware told us to. Or, if device is assigned the well-known
 805         * buggy firmware MAC address, replace it with a random address,
 806         */
 807        if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
 808            ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
 809                eth_hw_addr_random(dev->net);
 810
 811        /* make MAC addr easily distinguishable from an IP header */
 812        if (possibly_iphdr(dev->net->dev_addr)) {
 813                dev->net->dev_addr[0] |= 0x02;  /* set local assignment bit */
 814                dev->net->dev_addr[0] &= 0xbf;  /* clear "IP" bit */
 815        }
 816        dev->net->netdev_ops = &qmi_wwan_netdev_ops;
 817        dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
 818err:
 819        return status;
 820}
 821
 822static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
 823{
 824        struct qmi_wwan_state *info = (void *)&dev->data;
 825        struct usb_driver *driver = driver_of(intf);
 826        struct usb_interface *other;
 827
 828        if (info->subdriver && info->subdriver->disconnect)
 829                info->subdriver->disconnect(info->control);
 830
 831        /* disable MDM9x30 quirk */
 832        if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
 833                qmi_wwan_change_dtr(dev, false);
 834                qmi_wwan_manage_power(dev, 0);
 835        }
 836
 837        /* allow user to unbind using either control or data */
 838        if (intf == info->control)
 839                other = info->data;
 840        else
 841                other = info->control;
 842
 843        /* only if not shared */
 844        if (other && intf != other) {
 845                usb_set_intfdata(other, NULL);
 846                usb_driver_release_interface(driver, other);
 847        }
 848
 849        info->subdriver = NULL;
 850        info->data = NULL;
 851        info->control = NULL;
 852}
 853
 854/* suspend/resume wrappers calling both usbnet and the cdc-wdm
 855 * subdriver if present.
 856 *
 857 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
 858 * wrappers for those without adding usbnet reset support first.
 859 */
 860static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
 861{
 862        struct usbnet *dev = usb_get_intfdata(intf);
 863        struct qmi_wwan_state *info = (void *)&dev->data;
 864        int ret;
 865
 866        /* Both usbnet_suspend() and subdriver->suspend() MUST return 0
 867         * in system sleep context, otherwise, the resume callback has
 868         * to recover device from previous suspend failure.
 869         */
 870        ret = usbnet_suspend(intf, message);
 871        if (ret < 0)
 872                goto err;
 873
 874        if (intf == info->control && info->subdriver &&
 875            info->subdriver->suspend)
 876                ret = info->subdriver->suspend(intf, message);
 877        if (ret < 0)
 878                usbnet_resume(intf);
 879err:
 880        return ret;
 881}
 882
 883static int qmi_wwan_resume(struct usb_interface *intf)
 884{
 885        struct usbnet *dev = usb_get_intfdata(intf);
 886        struct qmi_wwan_state *info = (void *)&dev->data;
 887        int ret = 0;
 888        bool callsub = (intf == info->control && info->subdriver &&
 889                        info->subdriver->resume);
 890
 891        if (callsub)
 892                ret = info->subdriver->resume(intf);
 893        if (ret < 0)
 894                goto err;
 895        ret = usbnet_resume(intf);
 896        if (ret < 0 && callsub)
 897                info->subdriver->suspend(intf, PMSG_SUSPEND);
 898err:
 899        return ret;
 900}
 901
 902static const struct driver_info qmi_wwan_info = {
 903        .description    = "WWAN/QMI device",
 904        .flags          = FLAG_WWAN | FLAG_SEND_ZLP,
 905        .bind           = qmi_wwan_bind,
 906        .unbind         = qmi_wwan_unbind,
 907        .manage_power   = qmi_wwan_manage_power,
 908        .rx_fixup       = qmi_wwan_rx_fixup,
 909};
 910
 911static const struct driver_info qmi_wwan_info_quirk_dtr = {
 912        .description    = "WWAN/QMI device",
 913        .flags          = FLAG_WWAN | FLAG_SEND_ZLP,
 914        .bind           = qmi_wwan_bind,
 915        .unbind         = qmi_wwan_unbind,
 916        .manage_power   = qmi_wwan_manage_power,
 917        .rx_fixup       = qmi_wwan_rx_fixup,
 918        .data           = QMI_WWAN_QUIRK_DTR,
 919};
 920
 921#define HUAWEI_VENDOR_ID        0x12D1
 922
 923/* map QMI/wwan function by a fixed interface number */
 924#define QMI_FIXED_INTF(vend, prod, num) \
 925        USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
 926        .driver_info = (unsigned long)&qmi_wwan_info
 927
 928/* devices requiring "set DTR" quirk */
 929#define QMI_QUIRK_SET_DTR(vend, prod, num) \
 930        USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
 931        .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
 932
 933/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
 934#define QMI_GOBI1K_DEVICE(vend, prod) \
 935        QMI_FIXED_INTF(vend, prod, 3)
 936
 937/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
 938#define QMI_GOBI_DEVICE(vend, prod) \
 939        QMI_FIXED_INTF(vend, prod, 0)
 940
 941/* Many devices have QMI and DIAG functions which are distinguishable
 942 * from other vendor specific functions by class, subclass and
 943 * protocol all being 0xff. The DIAG function has exactly 2 endpoints
 944 * and is silently rejected when probed.
 945 *
 946 * This makes it possible to match dynamically numbered QMI functions
 947 * as seen on e.g. many Quectel modems.
 948 */
 949#define QMI_MATCH_FF_FF_FF(vend, prod) \
 950        USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
 951                                      USB_SUBCLASS_VENDOR_SPEC, 0xff), \
 952        .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
 953
 954static const struct usb_device_id products[] = {
 955        /* 1. CDC ECM like devices match on the control interface */
 956        {       /* Huawei E392, E398 and possibly others sharing both device id and more... */
 957                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
 958                .driver_info        = (unsigned long)&qmi_wwan_info,
 959        },
 960        {       /* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
 961                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
 962                .driver_info        = (unsigned long)&qmi_wwan_info,
 963        },
 964        {       /* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
 965                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
 966                .driver_info        = (unsigned long)&qmi_wwan_info,
 967        },
 968        {       /* Motorola Mapphone devices with MDM6600 */
 969                USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
 970                .driver_info        = (unsigned long)&qmi_wwan_info,
 971        },
 972
 973        /* 2. Combined interface devices matching on class+protocol */
 974        {       /* Huawei E367 and possibly others in "Windows mode" */
 975                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
 976                .driver_info        = (unsigned long)&qmi_wwan_info,
 977        },
 978        {       /* Huawei E392, E398 and possibly others in "Windows mode" */
 979                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
 980                .driver_info        = (unsigned long)&qmi_wwan_info,
 981        },
 982        {       /* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
 983                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
 984                .driver_info        = (unsigned long)&qmi_wwan_info,
 985        },
 986        {       /* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
 987                USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
 988                .driver_info        = (unsigned long)&qmi_wwan_info,
 989        },
 990        {       /* Pantech UML290, P4200 and more */
 991                USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
 992                .driver_info        = (unsigned long)&qmi_wwan_info,
 993        },
 994        {       /* Pantech UML290 - newer firmware */
 995                USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
 996                .driver_info        = (unsigned long)&qmi_wwan_info,
 997        },
 998        {       /* Novatel USB551L and MC551 */
 999                USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
1000                                              USB_CLASS_COMM,
1001                                              USB_CDC_SUBCLASS_ETHERNET,
1002                                              USB_CDC_PROTO_NONE),
1003                .driver_info        = (unsigned long)&qmi_wwan_info,
1004        },
1005        {       /* Novatel E362 */
1006                USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
1007                                              USB_CLASS_COMM,
1008                                              USB_CDC_SUBCLASS_ETHERNET,
1009                                              USB_CDC_PROTO_NONE),
1010                .driver_info        = (unsigned long)&qmi_wwan_info,
1011        },
1012        {       /* Novatel Expedite E371 */
1013                USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
1014                                              USB_CLASS_COMM,
1015                                              USB_CDC_SUBCLASS_ETHERNET,
1016                                              USB_CDC_PROTO_NONE),
1017                .driver_info        = (unsigned long)&qmi_wwan_info,
1018        },
1019        {       /* Dell Wireless 5800 (Novatel E362) */
1020                USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
1021                                              USB_CLASS_COMM,
1022                                              USB_CDC_SUBCLASS_ETHERNET,
1023                                              USB_CDC_PROTO_NONE),
1024                .driver_info        = (unsigned long)&qmi_wwan_info,
1025        },
1026        {       /* Dell Wireless 5800 V2 (Novatel E362) */
1027                USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
1028                                              USB_CLASS_COMM,
1029                                              USB_CDC_SUBCLASS_ETHERNET,
1030                                              USB_CDC_PROTO_NONE),
1031                .driver_info        = (unsigned long)&qmi_wwan_info,
1032        },
1033        {       /* Dell Wireless 5804 (Novatel E371) */
1034                USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1035                                              USB_CLASS_COMM,
1036                                              USB_CDC_SUBCLASS_ETHERNET,
1037                                              USB_CDC_PROTO_NONE),
1038                .driver_info        = (unsigned long)&qmi_wwan_info,
1039        },
1040        {       /* ADU960S */
1041                USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1042                                              USB_CLASS_COMM,
1043                                              USB_CDC_SUBCLASS_ETHERNET,
1044                                              USB_CDC_PROTO_NONE),
1045                .driver_info        = (unsigned long)&qmi_wwan_info,
1046        },
1047        {       /* HP lt2523 (Novatel E371) */
1048                USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1049                                              USB_CLASS_COMM,
1050                                              USB_CDC_SUBCLASS_ETHERNET,
1051                                              USB_CDC_PROTO_NONE),
1052                .driver_info        = (unsigned long)&qmi_wwan_info,
1053        },
1054        {       /* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1055                USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1056                .driver_info = (unsigned long)&qmi_wwan_info,
1057        },
1058        {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)},   /* Quectel EC25, EC20 R2.0  Mini PCIe */
1059        {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)},   /* Quectel EP06/EG06/EM06 */
1060        {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)},   /* Quectel EG12/EM12 */
1061        {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)},   /* Quectel RM500Q-GL */
1062
1063        /* 3. Combined interface devices matching on interface number */
1064        {QMI_FIXED_INTF(0x0408, 0xea42, 4)},    /* Yota / Megafon M100-1 */
1065        {QMI_FIXED_INTF(0x05c6, 0x6001, 3)},    /* 4G LTE usb-modem U901 */
1066        {QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1067        {QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1068        {QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1069        {QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1070        {QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1071        {QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1072        {QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1073        {QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1074        {QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1075        {QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1076        {QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1077        {QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1078        {QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1079        {QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1080        {QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1081        {QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1082        {QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1083        {QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1084        {QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1085        {QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1086        {QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1087        {QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1088        {QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1089        {QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1090        {QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1091        {QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1092        {QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1093        {QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1094        {QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1095        {QMI_FIXED_INTF(0x05c6, 0x9025, 4)},    /* Alcatel-sbell ASB TL131 TDD LTE  (China Mobile) */
1096        {QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1097        {QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1098        {QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1099        {QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1100        {QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1101        {QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1102        {QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1103        {QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1104        {QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1105        {QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1106        {QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1107        {QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1108        {QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1109        {QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1110        {QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1111        {QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1112        {QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1113        {QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1114        {QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1115        {QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1116        {QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1117        {QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1118        {QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1119        {QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1120        {QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1121        {QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1122        {QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1123        {QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1124        {QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1125        {QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1126        {QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1127        {QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1128        {QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1129        {QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1130        {QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1131        {QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1132        {QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1133        {QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1134        {QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1135        {QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1136        {QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1137        {QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1138        {QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1139        {QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1140        {QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1141        {QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1142        {QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1143        {QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1144        {QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1145        {QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1146        {QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1147        {QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1148        {QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1149        {QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1150        {QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1151        {QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1152        {QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1153        {QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1154        {QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1155        {QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1156        {QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1157        {QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1158        {QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1159        {QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1160        {QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1161        {QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1162        {QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1163        {QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1164        {QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1165        {QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1166        {QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1167        {QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1168        {QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1169        {QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1170        {QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1171        {QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1172        {QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1173        {QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1174        {QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1175        {QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1176        {QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1177        {QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1178        {QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1179        {QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1180        {QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1181        {QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1182        {QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1183        {QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1184        {QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1185        {QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1186        {QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1187        {QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1188        {QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1189        {QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1190        {QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1191        {QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1192        {QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1193        {QMI_FIXED_INTF(0x05c6, 0x90b2, 3)},    /* ublox R410M */
1194        {QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1195        {QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1196        {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1197        {QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1198        {QMI_FIXED_INTF(0x0846, 0x68d3, 8)},    /* Netgear Aircard 779S */
1199        {QMI_FIXED_INTF(0x12d1, 0x140c, 1)},    /* Huawei E173 */
1200        {QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},    /* Huawei E1820 */
1201        {QMI_FIXED_INTF(0x1435, 0x0918, 3)},    /* Wistron NeWeb D16Q1 */
1202        {QMI_FIXED_INTF(0x1435, 0x0918, 4)},    /* Wistron NeWeb D16Q1 */
1203        {QMI_FIXED_INTF(0x1435, 0x0918, 5)},    /* Wistron NeWeb D16Q1 */
1204        {QMI_FIXED_INTF(0x1435, 0x3185, 4)},    /* Wistron NeWeb M18Q5 */
1205        {QMI_FIXED_INTF(0x1435, 0xd111, 4)},    /* M9615A DM11-1 D51QC */
1206        {QMI_FIXED_INTF(0x1435, 0xd181, 3)},    /* Wistron NeWeb D18Q1 */
1207        {QMI_FIXED_INTF(0x1435, 0xd181, 4)},    /* Wistron NeWeb D18Q1 */
1208        {QMI_FIXED_INTF(0x1435, 0xd181, 5)},    /* Wistron NeWeb D18Q1 */
1209        {QMI_FIXED_INTF(0x1435, 0xd182, 4)},    /* Wistron NeWeb D18 */
1210        {QMI_FIXED_INTF(0x1435, 0xd182, 5)},    /* Wistron NeWeb D18 */
1211        {QMI_FIXED_INTF(0x1435, 0xd191, 4)},    /* Wistron NeWeb D19Q1 */
1212        {QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)}, /* Fibocom NL668 series */
1213        {QMI_FIXED_INTF(0x1690, 0x7588, 4)},    /* ASKEY WWHC050 */
1214        {QMI_FIXED_INTF(0x16d8, 0x6003, 0)},    /* CMOTech 6003 */
1215        {QMI_FIXED_INTF(0x16d8, 0x6007, 0)},    /* CMOTech CHE-628S */
1216        {QMI_FIXED_INTF(0x16d8, 0x6008, 0)},    /* CMOTech CMU-301 */
1217        {QMI_FIXED_INTF(0x16d8, 0x6280, 0)},    /* CMOTech CHU-628 */
1218        {QMI_FIXED_INTF(0x16d8, 0x7001, 0)},    /* CMOTech CHU-720S */
1219        {QMI_FIXED_INTF(0x16d8, 0x7002, 0)},    /* CMOTech 7002 */
1220        {QMI_FIXED_INTF(0x16d8, 0x7003, 4)},    /* CMOTech CHU-629K */
1221        {QMI_FIXED_INTF(0x16d8, 0x7004, 3)},    /* CMOTech 7004 */
1222        {QMI_FIXED_INTF(0x16d8, 0x7006, 5)},    /* CMOTech CGU-629 */
1223        {QMI_FIXED_INTF(0x16d8, 0x700a, 4)},    /* CMOTech CHU-629S */
1224        {QMI_FIXED_INTF(0x16d8, 0x7211, 0)},    /* CMOTech CHU-720I */
1225        {QMI_FIXED_INTF(0x16d8, 0x7212, 0)},    /* CMOTech 7212 */
1226        {QMI_FIXED_INTF(0x16d8, 0x7213, 0)},    /* CMOTech 7213 */
1227        {QMI_FIXED_INTF(0x16d8, 0x7251, 1)},    /* CMOTech 7251 */
1228        {QMI_FIXED_INTF(0x16d8, 0x7252, 1)},    /* CMOTech 7252 */
1229        {QMI_FIXED_INTF(0x16d8, 0x7253, 1)},    /* CMOTech 7253 */
1230        {QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1231        {QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1232        {QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1233        {QMI_FIXED_INTF(0x19d2, 0x0019, 3)},    /* ONDA MT689DC */
1234        {QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1235        {QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1236        {QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1237        {QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1238        {QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1239        {QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1240        {QMI_FIXED_INTF(0x19d2, 0x0055, 1)},    /* ZTE (Vodafone) K3520-Z */
1241        {QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1242        {QMI_FIXED_INTF(0x19d2, 0x0063, 4)},    /* ZTE (Vodafone) K3565-Z */
1243        {QMI_FIXED_INTF(0x19d2, 0x0104, 4)},    /* ZTE (Vodafone) K4505-Z */
1244        {QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1245        {QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1246        {QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1247        {QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1248        {QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1249        {QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1250        {QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1251        {QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1252        {QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1253        {QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1254        {QMI_FIXED_INTF(0x19d2, 0x0157, 5)},    /* ZTE MF683 */
1255        {QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1256        {QMI_FIXED_INTF(0x19d2, 0x0167, 4)},    /* ZTE MF820D */
1257        {QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1258        {QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1259        {QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1260        {QMI_FIXED_INTF(0x19d2, 0x0191, 4)},    /* ZTE EuFi890 */
1261        {QMI_FIXED_INTF(0x19d2, 0x0199, 1)},    /* ZTE MF820S */
1262        {QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1263        {QMI_FIXED_INTF(0x19d2, 0x0257, 3)},    /* ZTE MF821 */
1264        {QMI_FIXED_INTF(0x19d2, 0x0265, 4)},    /* ONDA MT8205 4G LTE */
1265        {QMI_FIXED_INTF(0x19d2, 0x0284, 4)},    /* ZTE MF880 */
1266        {QMI_FIXED_INTF(0x19d2, 0x0326, 4)},    /* ZTE MF821D */
1267        {QMI_FIXED_INTF(0x19d2, 0x0396, 3)},    /* ZTE ZM8620 */
1268        {QMI_FIXED_INTF(0x19d2, 0x0412, 4)},    /* Telewell TW-LTE 4G */
1269        {QMI_FIXED_INTF(0x19d2, 0x1008, 4)},    /* ZTE (Vodafone) K3570-Z */
1270        {QMI_FIXED_INTF(0x19d2, 0x1010, 4)},    /* ZTE (Vodafone) K3571-Z */
1271        {QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1272        {QMI_FIXED_INTF(0x19d2, 0x1018, 3)},    /* ZTE (Vodafone) K5006-Z */
1273        {QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1274        {QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1275        {QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1276        {QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1277        {QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1278        {QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1279        {QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1280        {QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1281        {QMI_FIXED_INTF(0x19d2, 0x1270, 5)},    /* ZTE MF667 */
1282        {QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1283        {QMI_FIXED_INTF(0x19d2, 0x1402, 2)},    /* ZTE MF60 */
1284        {QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1285        {QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1286        {QMI_FIXED_INTF(0x19d2, 0x1426, 2)},    /* ZTE MF91 */
1287        {QMI_FIXED_INTF(0x19d2, 0x1428, 2)},    /* Telewell TW-LTE 4G v2 */
1288        {QMI_FIXED_INTF(0x19d2, 0x1432, 3)},    /* ZTE ME3620 */
1289        {QMI_FIXED_INTF(0x19d2, 0x2002, 4)},    /* ZTE (Vodafone) K3765-Z */
1290        {QMI_FIXED_INTF(0x2001, 0x7e16, 3)},    /* D-Link DWM-221 */
1291        {QMI_FIXED_INTF(0x2001, 0x7e19, 4)},    /* D-Link DWM-221 B1 */
1292        {QMI_FIXED_INTF(0x2001, 0x7e35, 4)},    /* D-Link DWM-222 */
1293        {QMI_FIXED_INTF(0x2001, 0x7e3d, 4)},    /* D-Link DWM-222 A2 */
1294        {QMI_FIXED_INTF(0x2020, 0x2031, 4)},    /* Olicard 600 */
1295        {QMI_FIXED_INTF(0x2020, 0x2033, 4)},    /* BroadMobi BM806U */
1296        {QMI_FIXED_INTF(0x2020, 0x2060, 4)},    /* BroadMobi BM818 */
1297        {QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)},    /* Sierra Wireless MC7700 */
1298        {QMI_FIXED_INTF(0x114f, 0x68a2, 8)},    /* Sierra Wireless MC7750 */
1299        {QMI_FIXED_INTF(0x1199, 0x68a2, 8)},    /* Sierra Wireless MC7710 in QMI mode */
1300        {QMI_FIXED_INTF(0x1199, 0x68a2, 19)},   /* Sierra Wireless MC7710 in QMI mode */
1301        {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)}, /* Sierra Wireless MC7304/MC7354, WP76xx */
1302        {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1303        {QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
1304        {QMI_FIXED_INTF(0x1199, 0x901f, 8)},    /* Sierra Wireless EM7355 */
1305        {QMI_FIXED_INTF(0x1199, 0x9041, 8)},    /* Sierra Wireless MC7305/MC7355 */
1306        {QMI_FIXED_INTF(0x1199, 0x9041, 10)},   /* Sierra Wireless MC7305/MC7355 */
1307        {QMI_FIXED_INTF(0x1199, 0x9051, 8)},    /* Netgear AirCard 340U */
1308        {QMI_FIXED_INTF(0x1199, 0x9053, 8)},    /* Sierra Wireless Modem */
1309        {QMI_FIXED_INTF(0x1199, 0x9054, 8)},    /* Sierra Wireless Modem */
1310        {QMI_FIXED_INTF(0x1199, 0x9055, 8)},    /* Netgear AirCard 341U */
1311        {QMI_FIXED_INTF(0x1199, 0x9056, 8)},    /* Sierra Wireless Modem */
1312        {QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1313        {QMI_FIXED_INTF(0x1199, 0x9061, 8)},    /* Sierra Wireless Modem */
1314        {QMI_FIXED_INTF(0x1199, 0x9063, 8)},    /* Sierra Wireless EM7305 */
1315        {QMI_FIXED_INTF(0x1199, 0x9063, 10)},   /* Sierra Wireless EM7305 */
1316        {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)}, /* Sierra Wireless MC74xx */
1317        {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1318        {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)}, /* Sierra Wireless EM74xx */
1319        {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1320        {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)}, /* Sierra Wireless EM74xx */
1321        {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1322        {QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)}, /* Sierra Wireless EM7565 */
1323        {QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},    /* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1324        {QMI_FIXED_INTF(0x1bbb, 0x0203, 2)},    /* Alcatel L800MA */
1325        {QMI_FIXED_INTF(0x2357, 0x0201, 4)},    /* TP-LINK HSUPA Modem MA180 */
1326        {QMI_FIXED_INTF(0x2357, 0x9000, 4)},    /* TP-LINK MA260 */
1327        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1328        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)}, /* Telit LE922A */
1329        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)}, /* Telit FN980 */
1330        {QMI_FIXED_INTF(0x1bc7, 0x1100, 3)},    /* Telit ME910 */
1331        {QMI_FIXED_INTF(0x1bc7, 0x1101, 3)},    /* Telit ME910 dual modem */
1332        {QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},    /* Telit LE920 */
1333        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)}, /* Telit LE920, LE920A4 */
1334        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)}, /* Telit LE910Cx */
1335        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)}, /* Telit LE910Cx */
1336        {QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)}, /* Telit LN940 series */
1337        {QMI_FIXED_INTF(0x1c9e, 0x9801, 3)},    /* Telewell TW-3G HSPA+ */
1338        {QMI_FIXED_INTF(0x1c9e, 0x9803, 4)},    /* Telewell TW-3G HSPA+ */
1339        {QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)},    /* XS Stick W100-2 from 4G Systems */
1340        {QMI_FIXED_INTF(0x0b3c, 0xc000, 4)},    /* Olivetti Olicard 100 */
1341        {QMI_FIXED_INTF(0x0b3c, 0xc001, 4)},    /* Olivetti Olicard 120 */
1342        {QMI_FIXED_INTF(0x0b3c, 0xc002, 4)},    /* Olivetti Olicard 140 */
1343        {QMI_FIXED_INTF(0x0b3c, 0xc004, 6)},    /* Olivetti Olicard 155 */
1344        {QMI_FIXED_INTF(0x0b3c, 0xc005, 6)},    /* Olivetti Olicard 200 */
1345        {QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)},    /* Olivetti Olicard 160 */
1346        {QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)},    /* Olivetti Olicard 500 */
1347        {QMI_FIXED_INTF(0x1e2d, 0x0060, 4)},    /* Cinterion PLxx */
1348        {QMI_FIXED_INTF(0x1e2d, 0x0053, 4)},    /* Cinterion PHxx,PXxx */
1349        {QMI_FIXED_INTF(0x1e2d, 0x0063, 10)},   /* Cinterion ALASxx (1 RmNet) */
1350        {QMI_FIXED_INTF(0x1e2d, 0x0082, 4)},    /* Cinterion PHxx,PXxx (2 RmNet) */
1351        {QMI_FIXED_INTF(0x1e2d, 0x0082, 5)},    /* Cinterion PHxx,PXxx (2 RmNet) */
1352        {QMI_FIXED_INTF(0x1e2d, 0x0083, 4)},    /* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1353        {QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)}, /* Cinterion CLS8 */
1354        {QMI_FIXED_INTF(0x413c, 0x81a2, 8)},    /* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1355        {QMI_FIXED_INTF(0x413c, 0x81a3, 8)},    /* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1356        {QMI_FIXED_INTF(0x413c, 0x81a4, 8)},    /* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1357        {QMI_FIXED_INTF(0x413c, 0x81a8, 8)},    /* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1358        {QMI_FIXED_INTF(0x413c, 0x81a9, 8)},    /* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1359        {QMI_FIXED_INTF(0x413c, 0x81b1, 8)},    /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1360        {QMI_FIXED_INTF(0x413c, 0x81b3, 8)},    /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1361        {QMI_FIXED_INTF(0x413c, 0x81b6, 8)},    /* Dell Wireless 5811e */
1362        {QMI_FIXED_INTF(0x413c, 0x81b6, 10)},   /* Dell Wireless 5811e */
1363        {QMI_FIXED_INTF(0x413c, 0x81cc, 8)},    /* Dell Wireless 5816e */
1364        {QMI_FIXED_INTF(0x413c, 0x81d7, 0)},    /* Dell Wireless 5821e */
1365        {QMI_FIXED_INTF(0x413c, 0x81d7, 1)},    /* Dell Wireless 5821e preproduction config */
1366        {QMI_FIXED_INTF(0x413c, 0x81e0, 0)},    /* Dell Wireless 5821e with eSIM support*/
1367        {QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)},    /* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1368        {QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)},    /* HP lt4120 Snapdragon X5 LTE */
1369        {QMI_FIXED_INTF(0x22de, 0x9061, 3)},    /* WeTelecom WPD-600N */
1370        {QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)}, /* SIMCom 7100E, 7230E, 7600E ++ */
1371        {QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)}, /* Quectel EC21 Mini PCIe */
1372        {QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)}, /* Quectel EG91 */
1373        {QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)}, /* Quectel EG95 */
1374        {QMI_FIXED_INTF(0x2c7c, 0x0296, 4)},    /* Quectel BG96 */
1375        {QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)}, /* Fibocom NL678 series */
1376        {QMI_FIXED_INTF(0x0489, 0xe0b4, 0)},    /* Foxconn T77W968 LTE */
1377        {QMI_FIXED_INTF(0x0489, 0xe0b5, 0)},    /* Foxconn T77W968 LTE with eSIM support*/
1378        {QMI_FIXED_INTF(0x2692, 0x9025, 4)},    /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1379
1380        /* 4. Gobi 1000 devices */
1381        {QMI_GOBI1K_DEVICE(0x05c6, 0x9212)},    /* Acer Gobi Modem Device */
1382        {QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)},    /* HP un2400 Gobi Modem Device */
1383        {QMI_GOBI1K_DEVICE(0x04da, 0x250d)},    /* Panasonic Gobi Modem device */
1384        {QMI_GOBI1K_DEVICE(0x413c, 0x8172)},    /* Dell Gobi Modem device */
1385        {QMI_GOBI1K_DEVICE(0x1410, 0xa001)},    /* Novatel/Verizon USB-1000 */
1386        {QMI_GOBI1K_DEVICE(0x1410, 0xa002)},    /* Novatel Gobi Modem device */
1387        {QMI_GOBI1K_DEVICE(0x1410, 0xa003)},    /* Novatel Gobi Modem device */
1388        {QMI_GOBI1K_DEVICE(0x1410, 0xa004)},    /* Novatel Gobi Modem device */
1389        {QMI_GOBI1K_DEVICE(0x1410, 0xa005)},    /* Novatel Gobi Modem device */
1390        {QMI_GOBI1K_DEVICE(0x1410, 0xa006)},    /* Novatel Gobi Modem device */
1391        {QMI_GOBI1K_DEVICE(0x1410, 0xa007)},    /* Novatel Gobi Modem device */
1392        {QMI_GOBI1K_DEVICE(0x0b05, 0x1776)},    /* Asus Gobi Modem device */
1393        {QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)},    /* ONDA Gobi Modem device */
1394        {QMI_GOBI1K_DEVICE(0x05c6, 0x9001)},    /* Generic Gobi Modem device */
1395        {QMI_GOBI1K_DEVICE(0x05c6, 0x9002)},    /* Generic Gobi Modem device */
1396        {QMI_GOBI1K_DEVICE(0x05c6, 0x9202)},    /* Generic Gobi Modem device */
1397        {QMI_GOBI1K_DEVICE(0x05c6, 0x9203)},    /* Generic Gobi Modem device */
1398        {QMI_GOBI1K_DEVICE(0x05c6, 0x9222)},    /* Generic Gobi Modem device */
1399        {QMI_GOBI1K_DEVICE(0x05c6, 0x9009)},    /* Generic Gobi Modem device */
1400
1401        /* 5. Gobi 2000 and 3000 devices */
1402        {QMI_GOBI_DEVICE(0x413c, 0x8186)},      /* Dell Gobi 2000 Modem device (N0218, VU936) */
1403        {QMI_GOBI_DEVICE(0x413c, 0x8194)},      /* Dell Gobi 3000 Composite */
1404        {QMI_GOBI_DEVICE(0x05c6, 0x920b)},      /* Generic Gobi 2000 Modem device */
1405        {QMI_GOBI_DEVICE(0x05c6, 0x9225)},      /* Sony Gobi 2000 Modem device (N0279, VU730) */
1406        {QMI_GOBI_DEVICE(0x05c6, 0x9245)},      /* Samsung Gobi 2000 Modem device (VL176) */
1407        {QMI_GOBI_DEVICE(0x03f0, 0x251d)},      /* HP Gobi 2000 Modem device (VP412) */
1408        {QMI_GOBI_DEVICE(0x05c6, 0x9215)},      /* Acer Gobi 2000 Modem device (VP413) */
1409        {QMI_FIXED_INTF(0x05c6, 0x9215, 4)},    /* Quectel EC20 Mini PCIe */
1410        {QMI_GOBI_DEVICE(0x05c6, 0x9265)},      /* Asus Gobi 2000 Modem device (VR305) */
1411        {QMI_GOBI_DEVICE(0x05c6, 0x9235)},      /* Top Global Gobi 2000 Modem device (VR306) */
1412        {QMI_GOBI_DEVICE(0x05c6, 0x9275)},      /* iRex Technologies Gobi 2000 Modem device (VR307) */
1413        {QMI_GOBI_DEVICE(0x0af0, 0x8120)},      /* Option GTM681W */
1414        {QMI_GOBI_DEVICE(0x1199, 0x68a5)},      /* Sierra Wireless Modem */
1415        {QMI_GOBI_DEVICE(0x1199, 0x68a9)},      /* Sierra Wireless Modem */
1416        {QMI_GOBI_DEVICE(0x1199, 0x9001)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1417        {QMI_GOBI_DEVICE(0x1199, 0x9002)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1418        {QMI_GOBI_DEVICE(0x1199, 0x9003)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1419        {QMI_GOBI_DEVICE(0x1199, 0x9004)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1420        {QMI_GOBI_DEVICE(0x1199, 0x9005)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1421        {QMI_GOBI_DEVICE(0x1199, 0x9006)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1422        {QMI_GOBI_DEVICE(0x1199, 0x9007)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1423        {QMI_GOBI_DEVICE(0x1199, 0x9008)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1424        {QMI_GOBI_DEVICE(0x1199, 0x9009)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1425        {QMI_GOBI_DEVICE(0x1199, 0x900a)},      /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1426        {QMI_GOBI_DEVICE(0x1199, 0x9011)},      /* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1427        {QMI_GOBI_DEVICE(0x16d8, 0x8002)},      /* CMDTech Gobi 2000 Modem device (VU922) */
1428        {QMI_GOBI_DEVICE(0x05c6, 0x9205)},      /* Gobi 2000 Modem device */
1429        {QMI_GOBI_DEVICE(0x1199, 0x9013)},      /* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1430        {QMI_GOBI_DEVICE(0x03f0, 0x371d)},      /* HP un2430 Mobile Broadband Module */
1431        {QMI_GOBI_DEVICE(0x1199, 0x9015)},      /* Sierra Wireless Gobi 3000 Modem device */
1432        {QMI_GOBI_DEVICE(0x1199, 0x9019)},      /* Sierra Wireless Gobi 3000 Modem device */
1433        {QMI_GOBI_DEVICE(0x1199, 0x901b)},      /* Sierra Wireless MC7770 */
1434        {QMI_GOBI_DEVICE(0x12d1, 0x14f1)},      /* Sony Gobi 3000 Composite */
1435        {QMI_GOBI_DEVICE(0x1410, 0xa021)},      /* Foxconn Gobi 3000 Modem device (Novatel E396) */
1436
1437        { }                                     /* END */
1438};
1439MODULE_DEVICE_TABLE(usb, products);
1440
1441static bool quectel_ec20_detected(struct usb_interface *intf)
1442{
1443        struct usb_device *dev = interface_to_usbdev(intf);
1444
1445        if (dev->actconfig &&
1446            le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1447            le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1448            dev->actconfig->desc.bNumInterfaces == 5)
1449                return true;
1450
1451        return false;
1452}
1453
1454static int qmi_wwan_probe(struct usb_interface *intf,
1455                          const struct usb_device_id *prod)
1456{
1457        struct usb_device_id *id = (struct usb_device_id *)prod;
1458        struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1459
1460        /* Workaround to enable dynamic IDs.  This disables usbnet
1461         * blacklisting functionality.  Which, if required, can be
1462         * reimplemented here by using a magic "blacklist" value
1463         * instead of 0 in the static device id table
1464         */
1465        if (!id->driver_info) {
1466                dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1467                id->driver_info = (unsigned long)&qmi_wwan_info;
1468        }
1469
1470        /* There are devices where the same interface number can be
1471         * configured as different functions. We should only bind to
1472         * vendor specific functions when matching on interface number
1473         */
1474        if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1475            desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1476                dev_dbg(&intf->dev,
1477                        "Rejecting interface number match for class %02x\n",
1478                        desc->bInterfaceClass);
1479                return -ENODEV;
1480        }
1481
1482        /* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1483        if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1484                dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1485                return -ENODEV;
1486        }
1487
1488        /* Several Quectel modems supports dynamic interface configuration, so
1489         * we need to match on class/subclass/protocol. These values are
1490         * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1491         * different. Ignore the current interface if the number of endpoints
1492         * equals the number for the diag interface (two).
1493         */
1494        if (desc->bNumEndpoints == 2)
1495                return -ENODEV;
1496
1497        return usbnet_probe(intf, id);
1498}
1499
1500static void qmi_wwan_disconnect(struct usb_interface *intf)
1501{
1502        struct usbnet *dev = usb_get_intfdata(intf);
1503        struct qmi_wwan_state *info;
1504        struct list_head *iter;
1505        struct net_device *ldev;
1506        LIST_HEAD(list);
1507
1508        /* called twice if separate control and data intf */
1509        if (!dev)
1510                return;
1511        info = (void *)&dev->data;
1512        if (info->flags & QMI_WWAN_FLAG_MUX) {
1513                if (!rtnl_trylock()) {
1514                        restart_syscall();
1515                        return;
1516                }
1517                rcu_read_lock();
1518                netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1519                        qmimux_unregister_device(ldev, &list);
1520                rcu_read_unlock();
1521                unregister_netdevice_many(&list);
1522                rtnl_unlock();
1523                info->flags &= ~QMI_WWAN_FLAG_MUX;
1524        }
1525        usbnet_disconnect(intf);
1526}
1527
1528static struct usb_driver qmi_wwan_driver = {
1529        .name                 = "qmi_wwan",
1530        .id_table             = products,
1531        .probe                = qmi_wwan_probe,
1532        .disconnect           = qmi_wwan_disconnect,
1533        .suspend              = qmi_wwan_suspend,
1534        .resume               = qmi_wwan_resume,
1535        .reset_resume         = qmi_wwan_resume,
1536        .supports_autosuspend = 1,
1537        .disable_hub_initiated_lpm = 1,
1538};
1539
1540module_usb_driver(qmi_wwan_driver);
1541
1542MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1543MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1544MODULE_LICENSE("GPL");
1545