1	// SPDX-License-Identifier: GPL-2.0-only
2	/*
3	* Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
4	*
5	* The probing code is heavily inspired by cdc_ether, which is:
6	* Copyright (C) 2003-2005 by David Brownell
7	* Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
8	*/
9
10	#include <linux/module.h>
11	#include <linux/sched/signal.h>
12	#include <linux/netdevice.h>
13	#include <linux/ethtool.h>
14	#include <linux/etherdevice.h>
15	#include <linux/if_arp.h>
16	#include <linux/kstrtox.h>
17	#include <linux/mii.h>
18	#include <linux/rtnetlink.h>
19	#include <linux/usb.h>
20	#include <linux/usb/cdc.h>
21	#include <linux/usb/usbnet.h>
22	#include <linux/usb/cdc-wdm.h>
23	#include <linux/u64_stats_sync.h>
24
25	/* This driver supports wwan (3G/LTE/?) devices using a vendor
26	* specific management protocol called Qualcomm MSM Interface (QMI) -
27	* in addition to the more common AT commands over serial interface
28	* management
29	*
30	* QMI is wrapped in CDC, using CDC encapsulated commands on the
31	* control ("master") interface of a two-interface CDC Union
32	* resembling standard CDC ECM. The devices do not use the control
33	* interface for any other CDC messages. Most likely because the
34	* management protocol is used in place of the standard CDC
35	* notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
36	*
37	* Alternatively, control and data functions can be combined in a
38	* single USB interface.
39	*
40	* Handling a protocol like QMI is out of the scope for any driver.
41	* It is exported as a character device using the cdc-wdm driver as
42	* a subdriver, enabling userspace applications ("modem managers") to
43	* handle it.
44	*
45	* These devices may alternatively/additionally be configured using AT
46	* commands on a serial interface
47	*/
48
49	/* driver specific data */
50	struct qmi_wwan_state {
51	struct usb_driver *subdriver;
52	atomic_t pmcount;
53	unsigned long flags;
54	struct usb_interface *control;
55	struct usb_interface *data;
56	};
57
58	enum qmi_wwan_flags {
59	QMI_WWAN_FLAG_RAWIP = 1 << 0,
60	QMI_WWAN_FLAG_MUX = 1 << 1,
61	QMI_WWAN_FLAG_PASS_THROUGH = 1 << 2,
62	};
63
64	enum qmi_wwan_quirks {
65	QMI_WWAN_QUIRK_DTR = 1 << 0, /* needs "set DTR" request */
66	};
67
68	struct qmimux_hdr {
69	u8 pad;
70	u8 mux_id;
71	__be16 pkt_len;
72	};
73
74	struct qmimux_priv {
75	struct net_device *real_dev;
76	u8 mux_id;
77	};
78
79	static int qmimux_open(struct net_device *dev)
80	{
81	struct qmimux_priv *priv = netdev_priv(dev);
82	struct net_device *real_dev = priv->real_dev;
83
84	if (!(priv->real_dev->flags & IFF_UP))
85	return -ENETDOWN;
86
87	if (netif_carrier_ok(dev: real_dev))
88	netif_carrier_on(dev);
89	return 0;
90	}
91
92	static int qmimux_stop(struct net_device *dev)
93	{
94	netif_carrier_off(dev);
95	return 0;
96	}
97
98	static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
99	{
100	struct qmimux_priv *priv = netdev_priv(dev);
101	unsigned int len = skb->len;
102	struct qmimux_hdr *hdr;
103	netdev_tx_t ret;
104
105	hdr = skb_push(skb, len: sizeof(struct qmimux_hdr));
106	hdr->pad = 0;
107	hdr->mux_id = priv->mux_id;
108	hdr->pkt_len = cpu_to_be16(len);
109	skb->dev = priv->real_dev;
110	ret = dev_queue_xmit(skb);
111
112	if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN))
113	dev_sw_netstats_tx_add(dev, packets: 1, len);
114	else
115	dev->stats.tx_dropped++;
116
117	return ret;
118	}
119
120	static const struct net_device_ops qmimux_netdev_ops = {
121	.ndo_open = qmimux_open,
122	.ndo_stop = qmimux_stop,
123	.ndo_start_xmit = qmimux_start_xmit,
124	.ndo_get_stats64 = dev_get_tstats64,
125	};
126
127	static void qmimux_setup(struct net_device *dev)
128	{
129	dev->header_ops = NULL; /* No header */
130	dev->type = ARPHRD_NONE;
131	dev->hard_header_len = 0;
132	dev->addr_len = 0;
133	dev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
134	dev->netdev_ops = &qmimux_netdev_ops;
135	dev->mtu = 1500;
136	dev->needs_free_netdev = true;
137	}
138
139	static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
140	{
141	struct qmimux_priv *priv;
142	struct list_head *iter;
143	struct net_device *ldev;
144
145	rcu_read_lock();
146	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
147	priv = netdev_priv(dev: ldev);
148	if (priv->mux_id == mux_id) {
149	rcu_read_unlock();
150	return ldev;
151	}
152	}
153	rcu_read_unlock();
154	return NULL;
155	}
156
157	static bool qmimux_has_slaves(struct usbnet *dev)
158	{
159	return !list_empty(head: &dev->net->adj_list.upper);
160	}
161
162	static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
163	{
164	unsigned int len, offset = 0, pad_len, pkt_len;
165	struct qmimux_hdr *hdr;
166	struct net_device *net;
167	struct sk_buff *skbn;
168	u8 qmimux_hdr_sz = sizeof(*hdr);
169
170	while (offset + qmimux_hdr_sz < skb->len) {
171	hdr = (struct qmimux_hdr *)(skb->data + offset);
172	len = be16_to_cpu(hdr->pkt_len);
173
174	/* drop the packet, bogus length */
175	if (offset + len + qmimux_hdr_sz > skb->len)
176	return 0;
177
178	/* control packet, we do not know what to do */
179	if (hdr->pad & 0x80)
180	goto skip;
181
182	/* extract padding length and check for valid length info */
183	pad_len = hdr->pad & 0x3f;
184	if (len == 0 || pad_len >= len)
185	goto skip;
186	pkt_len = len - pad_len;
187
188	net = qmimux_find_dev(dev, mux_id: hdr->mux_id);
189	if (!net)
190	goto skip;
191	skbn = netdev_alloc_skb(dev: net, length: pkt_len + LL_MAX_HEADER);
192	if (!skbn)
193	return 0;
194
195	switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
196	case 0x40:
197	skbn->protocol = htons(ETH_P_IP);
198	break;
199	case 0x60:
200	skbn->protocol = htons(ETH_P_IPV6);
201	break;
202	default:
203	/* not ip - do not know what to do */
204	goto skip;
205	}
206
207	skb_reserve(skb: skbn, LL_MAX_HEADER);
208	skb_put_data(skb: skbn, data: skb->data + offset + qmimux_hdr_sz, len: pkt_len);
209	if (netif_rx(skb: skbn) != NET_RX_SUCCESS) {
210	net->stats.rx_errors++;
211	return 0;
212	} else {
213	dev_sw_netstats_rx_add(dev: net, len: pkt_len);
214	}
215
216	skip:
217	offset += len + qmimux_hdr_sz;
218	}
219	return 1;
220	}
221
222	static ssize_t mux_id_show(struct device *d, struct device_attribute *attr, char *buf)
223	{
224	struct net_device *dev = to_net_dev(d);
225	struct qmimux_priv *priv;
226
227	priv = netdev_priv(dev);
228
229	return sysfs_emit(buf, fmt: "0x%02x\n", priv->mux_id);
230	}
231
232	static DEVICE_ATTR_RO(mux_id);
233
234	static struct attribute *qmi_wwan_sysfs_qmimux_attrs[] = {
235	&dev_attr_mux_id.attr,
236	NULL,
237	};
238
239	static struct attribute_group qmi_wwan_sysfs_qmimux_attr_group = {
240	.name = "qmap",
241	.attrs = qmi_wwan_sysfs_qmimux_attrs,
242	};
243
244	static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
245	{
246	struct net_device *new_dev;
247	struct qmimux_priv *priv;
248	int err;
249
250	new_dev = alloc_netdev(sizeof(struct qmimux_priv),
251	"qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
252	if (!new_dev)
253	return -ENOBUFS;
254
255	dev_net_set(dev: new_dev, net: dev_net(dev: real_dev));
256	priv = netdev_priv(dev: new_dev);
257	priv->mux_id = mux_id;
258	priv->real_dev = real_dev;
259
260	new_dev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
261	if (!new_dev->tstats) {
262	err = -ENOBUFS;
263	goto out_free_newdev;
264	}
265
266	new_dev->sysfs_groups[0] = &qmi_wwan_sysfs_qmimux_attr_group;
267
268	err = register_netdevice(dev: new_dev);
269	if (err < 0)
270	goto out_free_newdev;
271
272	/* Account for reference in struct qmimux_priv_priv */
273	dev_hold(dev: real_dev);
274
275	err = netdev_upper_dev_link(dev: real_dev, upper_dev: new_dev, NULL);
276	if (err)
277	goto out_unregister_netdev;
278
279	netif_stacked_transfer_operstate(rootdev: real_dev, dev: new_dev);
280
281	return 0;
282
283	out_unregister_netdev:
284	unregister_netdevice(dev: new_dev);
285	dev_put(dev: real_dev);
286
287	out_free_newdev:
288	free_netdev(dev: new_dev);
289	return err;
290	}
291
292	static void qmimux_unregister_device(struct net_device *dev,
293	struct list_head *head)
294	{
295	struct qmimux_priv *priv = netdev_priv(dev);
296	struct net_device *real_dev = priv->real_dev;
297
298	free_percpu(pdata: dev->tstats);
299	netdev_upper_dev_unlink(dev: real_dev, upper_dev: dev);
300	unregister_netdevice_queue(dev, head);
301
302	/* Get rid of the reference to real_dev */
303	dev_put(dev: real_dev);
304	}
305
306	static void qmi_wwan_netdev_setup(struct net_device *net)
307	{
308	struct usbnet *dev = netdev_priv(dev: net);
309	struct qmi_wwan_state *info = (void *)&dev->data;
310
311	if (info->flags & QMI_WWAN_FLAG_RAWIP) {
312	net->header_ops = NULL; /* No header */
313	net->type = ARPHRD_NONE;
314	net->hard_header_len = 0;
315	net->addr_len = 0;
316	net->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
317	set_bit(EVENT_NO_IP_ALIGN, addr: &dev->flags);
318	netdev_dbg(net, "mode: raw IP\n");
319	} else if (!net->header_ops) { /* don't bother if already set */
320	ether_setup(dev: net);
321	/* Restoring min/max mtu values set originally by usbnet */
322	net->min_mtu = 0;
323	net->max_mtu = ETH_MAX_MTU;
324	clear_bit(EVENT_NO_IP_ALIGN, addr: &dev->flags);
325	netdev_dbg(net, "mode: Ethernet\n");
326	}
327
328	/* recalculate buffers after changing hard_header_len */
329	usbnet_change_mtu(net, new_mtu: net->mtu);
330	}
331
332	static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
333	{
334	struct usbnet *dev = netdev_priv(to_net_dev(d));
335	struct qmi_wwan_state *info = (void *)&dev->data;
336
337	return sprintf(buf, fmt: "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
338	}
339
340	static ssize_t raw_ip_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
341	{
342	struct usbnet *dev = netdev_priv(to_net_dev(d));
343	struct qmi_wwan_state *info = (void *)&dev->data;
344	bool enable;
345	int ret;
346
347	if (kstrtobool(s: buf, res: &enable))
348	return -EINVAL;
349
350	/* no change? */
351	if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
352	return len;
353
354	/* ip mode cannot be cleared when pass through mode is set */
355	if (!enable && (info->flags & QMI_WWAN_FLAG_PASS_THROUGH)) {
356	netdev_err(dev: dev->net,
357	format: "Cannot clear ip mode on pass through device\n");
358	return -EINVAL;
359	}
360
361	if (!rtnl_trylock())
362	return restart_syscall();
363
364	/* we don't want to modify a running netdev */
365	if (netif_running(dev: dev->net)) {
366	netdev_err(dev: dev->net, format: "Cannot change a running device\n");
367	ret = -EBUSY;
368	goto err;
369	}
370
371	/* let other drivers deny the change */
372	ret = call_netdevice_notifiers(val: NETDEV_PRE_TYPE_CHANGE, dev: dev->net);
373	ret = notifier_to_errno(ret);
374	if (ret) {
375	netdev_err(dev: dev->net, format: "Type change was refused\n");
376	goto err;
377	}
378
379	if (enable)
380	info->flags |= QMI_WWAN_FLAG_RAWIP;
381	else
382	info->flags &= ~QMI_WWAN_FLAG_RAWIP;
383	qmi_wwan_netdev_setup(net: dev->net);
384	call_netdevice_notifiers(val: NETDEV_POST_TYPE_CHANGE, dev: dev->net);
385	ret = len;
386	err:
387	rtnl_unlock();
388	return ret;
389	}
390
391	static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
392	{
393	struct net_device *dev = to_net_dev(d);
394	struct qmimux_priv *priv;
395	struct list_head *iter;
396	struct net_device *ldev;
397	ssize_t count = 0;
398
399	rcu_read_lock();
400	netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
401	priv = netdev_priv(dev: ldev);
402	count += scnprintf(buf: &buf[count], PAGE_SIZE - count,
403	fmt: "0x%02x\n", priv->mux_id);
404	}
405	rcu_read_unlock();
406	return count;
407	}
408
409	static ssize_t add_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
410	{
411	struct usbnet *dev = netdev_priv(to_net_dev(d));
412	struct qmi_wwan_state *info = (void *)&dev->data;
413	u8 mux_id;
414	int ret;
415
416	if (kstrtou8(s: buf, base: 0, res: &mux_id))
417	return -EINVAL;
418
419	/* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
420	if (mux_id < 1 || mux_id > 254)
421	return -EINVAL;
422
423	if (!rtnl_trylock())
424	return restart_syscall();
425
426	if (qmimux_find_dev(dev, mux_id)) {
427	netdev_err(dev: dev->net, format: "mux_id already present\n");
428	ret = -EINVAL;
429	goto err;
430	}
431
432	ret = qmimux_register_device(real_dev: dev->net, mux_id);
433	if (!ret) {
434	info->flags |= QMI_WWAN_FLAG_MUX;
435	ret = len;
436	}
437	err:
438	rtnl_unlock();
439	return ret;
440	}
441
442	static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
443	{
444	return add_mux_show(d, attr, buf);
445	}
446
447	static ssize_t del_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
448	{
449	struct usbnet *dev = netdev_priv(to_net_dev(d));
450	struct qmi_wwan_state *info = (void *)&dev->data;
451	struct net_device *del_dev;
452	u8 mux_id;
453	int ret = 0;
454
455	if (kstrtou8(s: buf, base: 0, res: &mux_id))
456	return -EINVAL;
457
458	if (!rtnl_trylock())
459	return restart_syscall();
460
461	del_dev = qmimux_find_dev(dev, mux_id);
462	if (!del_dev) {
463	netdev_err(dev: dev->net, format: "mux_id not present\n");
464	ret = -EINVAL;
465	goto err;
466	}
467	qmimux_unregister_device(dev: del_dev, NULL);
468
469	if (!qmimux_has_slaves(dev))
470	info->flags &= ~QMI_WWAN_FLAG_MUX;
471	ret = len;
472	err:
473	rtnl_unlock();
474	return ret;
475	}
476
477	static ssize_t pass_through_show(struct device *d,
478	struct device_attribute *attr, char *buf)
479	{
480	struct usbnet *dev = netdev_priv(to_net_dev(d));
481	struct qmi_wwan_state *info;
482
483	info = (void *)&dev->data;
484	return sprintf(buf, fmt: "%c\n",
485	info->flags & QMI_WWAN_FLAG_PASS_THROUGH ? 'Y' : 'N');
486	}
487
488	static ssize_t pass_through_store(struct device *d,
489	struct device_attribute *attr,
490	const char *buf, size_t len)
491	{
492	struct usbnet *dev = netdev_priv(to_net_dev(d));
493	struct qmi_wwan_state *info;
494	bool enable;
495
496	if (kstrtobool(s: buf, res: &enable))
497	return -EINVAL;
498
499	info = (void *)&dev->data;
500
501	/* no change? */
502	if (enable == (info->flags & QMI_WWAN_FLAG_PASS_THROUGH))
503	return len;
504
505	/* pass through mode can be set for raw ip devices only */
506	if (!(info->flags & QMI_WWAN_FLAG_RAWIP)) {
507	netdev_err(dev: dev->net,
508	format: "Cannot set pass through mode on non ip device\n");
509	return -EINVAL;
510	}
511
512	if (enable)
513	info->flags |= QMI_WWAN_FLAG_PASS_THROUGH;
514	else
515	info->flags &= ~QMI_WWAN_FLAG_PASS_THROUGH;
516
517	return len;
518	}
519
520	static DEVICE_ATTR_RW(raw_ip);
521	static DEVICE_ATTR_RW(add_mux);
522	static DEVICE_ATTR_RW(del_mux);
523	static DEVICE_ATTR_RW(pass_through);
524
525	static struct attribute *qmi_wwan_sysfs_attrs[] = {
526	&dev_attr_raw_ip.attr,
527	&dev_attr_add_mux.attr,
528	&dev_attr_del_mux.attr,
529	&dev_attr_pass_through.attr,
530	NULL,
531	};
532
533	static struct attribute_group qmi_wwan_sysfs_attr_group = {
534	.name = "qmi",
535	.attrs = qmi_wwan_sysfs_attrs,
536	};
537
538	/* default ethernet address used by the modem */
539	static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
540
541	static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
542
543	/* Make up an ethernet header if the packet doesn't have one.
544	*
545	* A firmware bug common among several devices cause them to send raw
546	* IP packets under some circumstances. There is no way for the
547	* driver/host to know when this will happen. And even when the bug
548	* hits, some packets will still arrive with an intact header.
549	*
550	* The supported devices are only capably of sending IPv4, IPv6 and
551	* ARP packets on a point-to-point link. Any packet with an ethernet
552	* header will have either our address or a broadcast/multicast
553	* address as destination. ARP packets will always have a header.
554	*
555	* This means that this function will reliably add the appropriate
556	* header iff necessary, provided our hardware address does not start
557	* with 4 or 6.
558	*
559	* Another common firmware bug results in all packets being addressed
560	* to 00:a0:c6:00:00:00 despite the host address being different.
561	* This function will also fixup such packets.
562	*/
563	static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
564	{
565	struct qmi_wwan_state *info = (void *)&dev->data;
566	bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
567	__be16 proto;
568
569	/* This check is no longer done by usbnet */
570	if (skb->len < dev->net->hard_header_len)
571	return 0;
572
573	if (info->flags & QMI_WWAN_FLAG_MUX)
574	return qmimux_rx_fixup(dev, skb);
575
576	if (info->flags & QMI_WWAN_FLAG_PASS_THROUGH) {
577	skb->protocol = htons(ETH_P_MAP);
578	return 1;
579	}
580
581	switch (skb->data[0] & 0xf0) {
582	case 0x40:
583	proto = htons(ETH_P_IP);
584	break;
585	case 0x60:
586	proto = htons(ETH_P_IPV6);
587	break;
588	case 0x00:
589	if (rawip)
590	return 0;
591	if (is_multicast_ether_addr(addr: skb->data))
592	return 1;
593	/* possibly bogus destination - rewrite just in case */
594	skb_reset_mac_header(skb);
595	goto fix_dest;
596	default:
597	if (rawip)
598	return 0;
599	/* pass along other packets without modifications */
600	return 1;
601	}
602	if (rawip) {
603	skb_reset_mac_header(skb);
604	skb->dev = dev->net; /* normally set by eth_type_trans */
605	skb->protocol = proto;
606	return 1;
607	}
608
609	if (skb_headroom(skb) < ETH_HLEN)
610	return 0;
611	skb_push(skb, ETH_HLEN);
612	skb_reset_mac_header(skb);
613	eth_hdr(skb)->h_proto = proto;
614	eth_zero_addr(addr: eth_hdr(skb)->h_source);
615	fix_dest:
616	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
617	return 1;
618	}
619
620	/* very simplistic detection of IPv4 or IPv6 headers */
621	static bool possibly_iphdr(const char *data)
622	{
623	return (data[0] & 0xd0) == 0x40;
624	}
625
626	/* disallow addresses which may be confused with IP headers */
627	static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
628	{
629	int ret;
630	struct sockaddr *addr = p;
631
632	ret = eth_prepare_mac_addr_change(dev, p);
633	if (ret < 0)
634	return ret;
635	if (possibly_iphdr(data: addr->sa_data))
636	return -EADDRNOTAVAIL;
637	eth_commit_mac_addr_change(dev, p);
638	return 0;
639	}
640
641	static const struct net_device_ops qmi_wwan_netdev_ops = {
642	.ndo_open = usbnet_open,
643	.ndo_stop = usbnet_stop,
644	.ndo_start_xmit = usbnet_start_xmit,
645	.ndo_tx_timeout = usbnet_tx_timeout,
646	.ndo_change_mtu = usbnet_change_mtu,
647	.ndo_get_stats64 = dev_get_tstats64,
648	.ndo_set_mac_address = qmi_wwan_mac_addr,
649	.ndo_validate_addr = eth_validate_addr,
650	};
651
652	/* using a counter to merge subdriver requests with our own into a
653	* combined state
654	*/
655	static int qmi_wwan_manage_power(struct usbnet *dev, int on)
656	{
657	struct qmi_wwan_state *info = (void *)&dev->data;
658	int rv;
659
660	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
661	atomic_read(&info->pmcount), on);
662
663	if ((on && atomic_add_return(i: 1, v: &info->pmcount) == 1) ||
664	(!on && atomic_dec_and_test(v: &info->pmcount))) {
665	/* need autopm_get/put here to ensure the usbcore sees
666	* the new value
667	*/
668	rv = usb_autopm_get_interface(intf: dev->intf);
669	dev->intf->needs_remote_wakeup = on;
670	if (!rv)
671	usb_autopm_put_interface(intf: dev->intf);
672	}
673	return 0;
674	}
675
676	static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
677	{
678	struct usbnet *dev = usb_get_intfdata(intf);
679
680	/* can be called while disconnecting */
681	if (!dev)
682	return 0;
683	return qmi_wwan_manage_power(dev, on);
684	}
685
686	/* collect all three endpoints and register subdriver */
687	static int qmi_wwan_register_subdriver(struct usbnet *dev)
688	{
689	int rv;
690	struct usb_driver *subdriver = NULL;
691	struct qmi_wwan_state *info = (void *)&dev->data;
692
693	/* collect bulk endpoints */
694	rv = usbnet_get_endpoints(dev, info->data);
695	if (rv < 0)
696	goto err;
697
698	/* update status endpoint if separate control interface */
699	if (info->control != info->data)
700	dev->status = &info->control->cur_altsetting->endpoint[0];
701
702	/* require interrupt endpoint for subdriver */
703	if (!dev->status) {
704	rv = -EINVAL;
705	goto err;
706	}
707
708	/* for subdriver power management */
709	atomic_set(v: &info->pmcount, i: 0);
710
711	/* register subdriver */
712	subdriver = usb_cdc_wdm_register(intf: info->control, ep: &dev->status->desc,
713	bufsize: 4096, type: WWAN_PORT_QMI,
714	manage_power: &qmi_wwan_cdc_wdm_manage_power);
715	if (IS_ERR(ptr: subdriver)) {
716	dev_err(&info->control->dev, "subdriver registration failed\n");
717	rv = PTR_ERR(ptr: subdriver);
718	goto err;
719	}
720
721	/* prevent usbnet from using status endpoint */
722	dev->status = NULL;
723
724	/* save subdriver struct for suspend/resume wrappers */
725	info->subdriver = subdriver;
726
727	err:
728	return rv;
729	}
730
731	/* Send CDC SetControlLineState request, setting or clearing the DTR.
732	* "Required for Autoconnect and 9x30 to wake up" according to the
733	* GobiNet driver. The requirement has been verified on an MDM9230
734	* based Sierra Wireless MC7455
735	*/
736	static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
737	{
738	u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
739
740	return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
741	USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
742	value: on ? 0x01 : 0x00, index: intf, NULL, size: 0);
743	}
744
745	static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
746	{
747	int status;
748	u8 *buf = intf->cur_altsetting->extra;
749	int len = intf->cur_altsetting->extralen;
750	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
751	struct usb_cdc_union_desc *cdc_union;
752	struct usb_cdc_ether_desc *cdc_ether;
753	struct usb_driver *driver = driver_of(intf);
754	struct qmi_wwan_state *info = (void *)&dev->data;
755	struct usb_cdc_parsed_header hdr;
756
757	BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
758	sizeof(struct qmi_wwan_state)));
759
760	/* set up initial state */
761	info->control = intf;
762	info->data = intf;
763
764	/* and a number of CDC descriptors */
765	cdc_parse_cdc_header(hdr: &hdr, intf, buffer: buf, buflen: len);
766	cdc_union = hdr.usb_cdc_union_desc;
767	cdc_ether = hdr.usb_cdc_ether_desc;
768
769	/* Use separate control and data interfaces if we found a CDC Union */
770	if (cdc_union) {
771	info->data = usb_ifnum_to_if(dev: dev->udev,
772	ifnum: cdc_union->bSlaveInterface0);
773	if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
774	!info->data) {
775	dev_err(&intf->dev,
776	"bogus CDC Union: master=%u, slave=%u\n",
777	cdc_union->bMasterInterface0,
778	cdc_union->bSlaveInterface0);
779
780	/* ignore and continue... */
781	cdc_union = NULL;
782	info->data = intf;
783	}
784	}
785
786	/* errors aren't fatal - we can live with the dynamic address */
787	if (cdc_ether && cdc_ether->wMaxSegmentSize) {
788	dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
789	usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
790	}
791
792	/* claim data interface and set it up */
793	if (info->control != info->data) {
794	status = usb_driver_claim_interface(driver, iface: info->data, data: dev);
795	if (status < 0)
796	goto err;
797	}
798
799	status = qmi_wwan_register_subdriver(dev);
800	if (status < 0 && info->control != info->data) {
801	usb_set_intfdata(intf: info->data, NULL);
802	usb_driver_release_interface(driver, iface: info->data);
803	}
804
805	/* disabling remote wakeup on MDM9x30 devices has the same
806	* effect as clearing DTR. The device will not respond to QMI
807	* requests until we set DTR again. This is similar to a
808	* QMI_CTL SYNC request, clearing a lot of firmware state
809	* including the client ID allocations.
810	*
811	* Our usage model allows a session to span multiple
812	* open/close events, so we must prevent the firmware from
813	* clearing out state the clients might need.
814	*
815	* MDM9x30 is the first QMI chipset with USB3 support. Abuse
816	* this fact to enable the quirk for all USB3 devices.
817	*
818	* There are also chipsets with the same "set DTR" requirement
819	* but without USB3 support. Devices based on these chips
820	* need a quirk flag in the device ID table.
821	*/
822	if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
823	le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
824	qmi_wwan_manage_power(dev, on: 1);
825	qmi_wwan_change_dtr(dev, on: true);
826	}
827
828	/* Never use the same address on both ends of the link, even if the
829	* buggy firmware told us to. Or, if device is assigned the well-known
830	* buggy firmware MAC address, replace it with a random address,
831	*/
832	if (ether_addr_equal(addr1: dev->net->dev_addr, addr2: default_modem_addr) ||
833	ether_addr_equal(addr1: dev->net->dev_addr, addr2: buggy_fw_addr))
834	eth_hw_addr_random(dev: dev->net);
835
836	/* make MAC addr easily distinguishable from an IP header */
837	if (possibly_iphdr(data: dev->net->dev_addr)) {
838	u8 addr = dev->net->dev_addr[0];
839
840	addr |= 0x02; /* set local assignment bit */
841	addr &= 0xbf; /* clear "IP" bit */
842	dev_addr_mod(dev: dev->net, offset: 0, addr: &addr, len: 1);
843	}
844	dev->net->netdev_ops = &qmi_wwan_netdev_ops;
845	dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
846	err:
847	return status;
848	}
849
850	static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
851	{
852	struct qmi_wwan_state *info = (void *)&dev->data;
853	struct usb_driver *driver = driver_of(intf);
854	struct usb_interface *other;
855
856	if (info->subdriver && info->subdriver->disconnect)
857	info->subdriver->disconnect(info->control);
858
859	/* disable MDM9x30 quirk */
860	if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
861	qmi_wwan_change_dtr(dev, on: false);
862	qmi_wwan_manage_power(dev, on: 0);
863	}
864
865	/* allow user to unbind using either control or data */
866	if (intf == info->control)
867	other = info->data;
868	else
869	other = info->control;
870
871	/* only if not shared */
872	if (other && intf != other) {
873	usb_set_intfdata(intf: other, NULL);
874	usb_driver_release_interface(driver, iface: other);
875	}
876
877	info->subdriver = NULL;
878	info->data = NULL;
879	info->control = NULL;
880	}
881
882	/* suspend/resume wrappers calling both usbnet and the cdc-wdm
883	* subdriver if present.
884	*
885	* NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
886	* wrappers for those without adding usbnet reset support first.
887	*/
888	static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
889	{
890	struct usbnet *dev = usb_get_intfdata(intf);
891	struct qmi_wwan_state *info = (void *)&dev->data;
892	int ret;
893
894	/* Both usbnet_suspend() and subdriver->suspend() MUST return 0
895	* in system sleep context, otherwise, the resume callback has
896	* to recover device from previous suspend failure.
897	*/
898	ret = usbnet_suspend(intf, message);
899	if (ret < 0)
900	goto err;
901
902	if (intf == info->control && info->subdriver &&
903	info->subdriver->suspend)
904	ret = info->subdriver->suspend(intf, message);
905	if (ret < 0)
906	usbnet_resume(intf);
907	err:
908	return ret;
909	}
910
911	static int qmi_wwan_resume(struct usb_interface *intf)
912	{
913	struct usbnet *dev = usb_get_intfdata(intf);
914	struct qmi_wwan_state *info = (void *)&dev->data;
915	int ret = 0;
916	bool callsub = (intf == info->control && info->subdriver &&
917	info->subdriver->resume);
918
919	if (callsub)
920	ret = info->subdriver->resume(intf);
921	if (ret < 0)
922	goto err;
923	ret = usbnet_resume(intf);
924	if (ret < 0 && callsub)
925	info->subdriver->suspend(intf, PMSG_SUSPEND);
926	err:
927	return ret;
928	}
929
930	static const struct driver_info qmi_wwan_info = {
931	.description = "WWAN/QMI device",
932	.flags = FLAG_WWAN | FLAG_SEND_ZLP,
933	.bind = qmi_wwan_bind,
934	.unbind = qmi_wwan_unbind,
935	.manage_power = qmi_wwan_manage_power,
936	.rx_fixup = qmi_wwan_rx_fixup,
937	};
938
939	static const struct driver_info qmi_wwan_info_quirk_dtr = {
940	.description = "WWAN/QMI device",
941	.flags = FLAG_WWAN | FLAG_SEND_ZLP,
942	.bind = qmi_wwan_bind,
943	.unbind = qmi_wwan_unbind,
944	.manage_power = qmi_wwan_manage_power,
945	.rx_fixup = qmi_wwan_rx_fixup,
946	.data = QMI_WWAN_QUIRK_DTR,
947	};
948
949	#define HUAWEI_VENDOR_ID 0x12D1
950
951	/* map QMI/wwan function by a fixed interface number */
952	#define QMI_FIXED_INTF(vend, prod, num) \
953	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
954	.driver_info = (unsigned long)&qmi_wwan_info
955
956	/* devices requiring "set DTR" quirk */
957	#define QMI_QUIRK_SET_DTR(vend, prod, num) \
958	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
959	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
960
961	/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
962	#define QMI_GOBI1K_DEVICE(vend, prod) \
963	QMI_FIXED_INTF(vend, prod, 3)
964
965	/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
966	#define QMI_GOBI_DEVICE(vend, prod) \
967	QMI_FIXED_INTF(vend, prod, 0)
968
969	/* Many devices have QMI and DIAG functions which are distinguishable
970	* from other vendor specific functions by class, subclass and
971	* protocol all being 0xff. The DIAG function has exactly 2 endpoints
972	* and is silently rejected when probed.
973	*
974	* This makes it possible to match dynamically numbered QMI functions
975	* as seen on e.g. many Quectel modems.
976	*/
977	#define QMI_MATCH_FF_FF_FF(vend, prod) \
978	USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
979	USB_SUBCLASS_VENDOR_SPEC, 0xff), \
980	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
981
982	static const struct usb_device_id products[] = {
983	/* 1. CDC ECM like devices match on the control interface */
984	{ /* Huawei E392, E398 and possibly others sharing both device id and more... */
985	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
986	.driver_info = (unsigned long)&qmi_wwan_info,
987	},
988	{ /* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
989	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
990	.driver_info = (unsigned long)&qmi_wwan_info,
991	},
992	{ /* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
993	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
994	.driver_info = (unsigned long)&qmi_wwan_info,
995	},
996	{ /* Motorola Mapphone devices with MDM6600 */
997	USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
998	.driver_info = (unsigned long)&qmi_wwan_info,
999	},
1000
1001	/* 2. Combined interface devices matching on class+protocol */
1002	{ /* Huawei E367 and possibly others in "Windows mode" */
1003	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
1004	.driver_info = (unsigned long)&qmi_wwan_info,
1005	},
1006	{ /* Huawei E392, E398 and possibly others in "Windows mode" */
1007	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
1008	.driver_info = (unsigned long)&qmi_wwan_info,
1009	},
1010	{ /* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
1011	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
1012	.driver_info = (unsigned long)&qmi_wwan_info,
1013	},
1014	{ /* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
1015	USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
1016	.driver_info = (unsigned long)&qmi_wwan_info,
1017	},
1018	{ /* Pantech UML290, P4200 and more */
1019	USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
1020	.driver_info = (unsigned long)&qmi_wwan_info,
1021	},
1022	{ /* Pantech UML290 - newer firmware */
1023	USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
1024	.driver_info = (unsigned long)&qmi_wwan_info,
1025	},
1026	{ /* Novatel USB551L and MC551 */
1027	USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
1028	USB_CLASS_COMM,
1029	USB_CDC_SUBCLASS_ETHERNET,
1030	USB_CDC_PROTO_NONE),
1031	.driver_info = (unsigned long)&qmi_wwan_info,
1032	},
1033	{ /* Novatel E362 */
1034	USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
1035	USB_CLASS_COMM,
1036	USB_CDC_SUBCLASS_ETHERNET,
1037	USB_CDC_PROTO_NONE),
1038	.driver_info = (unsigned long)&qmi_wwan_info,
1039	},
1040	{ /* Novatel Expedite E371 */
1041	USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
1042	USB_CLASS_COMM,
1043	USB_CDC_SUBCLASS_ETHERNET,
1044	USB_CDC_PROTO_NONE),
1045	.driver_info = (unsigned long)&qmi_wwan_info,
1046	},
1047	{ /* Dell Wireless 5800 (Novatel E362) */
1048	USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
1049	USB_CLASS_COMM,
1050	USB_CDC_SUBCLASS_ETHERNET,
1051	USB_CDC_PROTO_NONE),
1052	.driver_info = (unsigned long)&qmi_wwan_info,
1053	},
1054	{ /* Dell Wireless 5800 V2 (Novatel E362) */
1055	USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
1056	USB_CLASS_COMM,
1057	USB_CDC_SUBCLASS_ETHERNET,
1058	USB_CDC_PROTO_NONE),
1059	.driver_info = (unsigned long)&qmi_wwan_info,
1060	},
1061	{ /* Dell Wireless 5804 (Novatel E371) */
1062	USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1063	USB_CLASS_COMM,
1064	USB_CDC_SUBCLASS_ETHERNET,
1065	USB_CDC_PROTO_NONE),
1066	.driver_info = (unsigned long)&qmi_wwan_info,
1067	},
1068	{ /* ADU960S */
1069	USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1070	USB_CLASS_COMM,
1071	USB_CDC_SUBCLASS_ETHERNET,
1072	USB_CDC_PROTO_NONE),
1073	.driver_info = (unsigned long)&qmi_wwan_info,
1074	},
1075	{ /* HP lt2523 (Novatel E371) */
1076	USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1077	USB_CLASS_COMM,
1078	USB_CDC_SUBCLASS_ETHERNET,
1079	USB_CDC_PROTO_NONE),
1080	.driver_info = (unsigned long)&qmi_wwan_info,
1081	},
1082	{ /* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1083	USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1084	.driver_info = (unsigned long)&qmi_wwan_info,
1085	},
1086	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)}, /* Quectel EC25, EC20 R2.0 Mini PCIe */
1087	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)}, /* Quectel EP06/EG06/EM06 */
1088	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)}, /* Quectel EG12/EM12 */
1089	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0620)}, /* Quectel EM160R-GL */
1090	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)}, /* Quectel RM500Q-GL */
1091	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0801)}, /* Quectel RM520N */
1092
1093	/* 3. Combined interface devices matching on interface number */
1094	{QMI_FIXED_INTF(0x0408, 0xea42, 4)}, /* Yota / Megafon M100-1 */
1095	{QMI_FIXED_INTF(0x05c6, 0x6001, 3)}, /* 4G LTE usb-modem U901 */
1096	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1097	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1098	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1099	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1100	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1101	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1102	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1103	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1104	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1105	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1106	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1107	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1108	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1109	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1110	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1111	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1112	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1113	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1114	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1115	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1116	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1117	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1118	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1119	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1120	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1121	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1122	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1123	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1124	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1125	{QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)}, /* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1126	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1127	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1128	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1129	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1130	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1131	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1132	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1133	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1134	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1135	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1136	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1137	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1138	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1139	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1140	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1141	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1142	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1143	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1144	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1145	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1146	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1147	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1148	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1149	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1150	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1151	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1152	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1153	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1154	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1155	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1156	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1157	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1158	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1159	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1160	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1161	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1162	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1163	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1164	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1165	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1166	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1167	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1168	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1169	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1170	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1171	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1172	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1173	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1174	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1175	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1176	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1177	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1178	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1179	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1180	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1181	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1182	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1183	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1184	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1185	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1186	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1187	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1188	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1189	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1190	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1191	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1192	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1193	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1194	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1195	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1196	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1197	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1198	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1199	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1200	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1201	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1202	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1203	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1204	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1205	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1206	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1207	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1208	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1209	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1210	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1211	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1212	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1213	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1214	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1215	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1216	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1217	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1218	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1219	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1220	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1221	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1222	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1223	{QMI_QUIRK_SET_DTR(0x05c6, 0x9091, 2)}, /* Compal RXM-G1 */
1224	{QMI_FIXED_INTF(0x05c6, 0x90b2, 3)}, /* ublox R410M */
1225	{QMI_QUIRK_SET_DTR(0x05c6, 0x90db, 2)}, /* Compal RXM-G1 */
1226	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1227	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1228	{QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1229	{QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1230	{QMI_FIXED_INTF(0x0846, 0x68d3, 8)}, /* Netgear Aircard 779S */
1231	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)}, /* Huawei E173 */
1232	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)}, /* Huawei E1820 */
1233	{QMI_FIXED_INTF(0x1435, 0x0918, 3)}, /* Wistron NeWeb D16Q1 */
1234	{QMI_FIXED_INTF(0x1435, 0x0918, 4)}, /* Wistron NeWeb D16Q1 */
1235	{QMI_FIXED_INTF(0x1435, 0x0918, 5)}, /* Wistron NeWeb D16Q1 */
1236	{QMI_FIXED_INTF(0x1435, 0x3185, 4)}, /* Wistron NeWeb M18Q5 */
1237	{QMI_FIXED_INTF(0x1435, 0xd111, 4)}, /* M9615A DM11-1 D51QC */
1238	{QMI_FIXED_INTF(0x1435, 0xd181, 3)}, /* Wistron NeWeb D18Q1 */
1239	{QMI_FIXED_INTF(0x1435, 0xd181, 4)}, /* Wistron NeWeb D18Q1 */
1240	{QMI_FIXED_INTF(0x1435, 0xd181, 5)}, /* Wistron NeWeb D18Q1 */
1241	{QMI_FIXED_INTF(0x1435, 0xd182, 4)}, /* Wistron NeWeb D18 */
1242	{QMI_FIXED_INTF(0x1435, 0xd182, 5)}, /* Wistron NeWeb D18 */
1243	{QMI_FIXED_INTF(0x1435, 0xd191, 4)}, /* Wistron NeWeb D19Q1 */
1244	{QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)}, /* Fibocom NL668 series */
1245	{QMI_FIXED_INTF(0x1690, 0x7588, 4)}, /* ASKEY WWHC050 */
1246	{QMI_FIXED_INTF(0x16d8, 0x6003, 0)}, /* CMOTech 6003 */
1247	{QMI_FIXED_INTF(0x16d8, 0x6007, 0)}, /* CMOTech CHE-628S */
1248	{QMI_FIXED_INTF(0x16d8, 0x6008, 0)}, /* CMOTech CMU-301 */
1249	{QMI_FIXED_INTF(0x16d8, 0x6280, 0)}, /* CMOTech CHU-628 */
1250	{QMI_FIXED_INTF(0x16d8, 0x7001, 0)}, /* CMOTech CHU-720S */
1251	{QMI_FIXED_INTF(0x16d8, 0x7002, 0)}, /* CMOTech 7002 */
1252	{QMI_FIXED_INTF(0x16d8, 0x7003, 4)}, /* CMOTech CHU-629K */
1253	{QMI_FIXED_INTF(0x16d8, 0x7004, 3)}, /* CMOTech 7004 */
1254	{QMI_FIXED_INTF(0x16d8, 0x7006, 5)}, /* CMOTech CGU-629 */
1255	{QMI_FIXED_INTF(0x16d8, 0x700a, 4)}, /* CMOTech CHU-629S */
1256	{QMI_FIXED_INTF(0x16d8, 0x7211, 0)}, /* CMOTech CHU-720I */
1257	{QMI_FIXED_INTF(0x16d8, 0x7212, 0)}, /* CMOTech 7212 */
1258	{QMI_FIXED_INTF(0x16d8, 0x7213, 0)}, /* CMOTech 7213 */
1259	{QMI_FIXED_INTF(0x16d8, 0x7251, 1)}, /* CMOTech 7251 */
1260	{QMI_FIXED_INTF(0x16d8, 0x7252, 1)}, /* CMOTech 7252 */
1261	{QMI_FIXED_INTF(0x16d8, 0x7253, 1)}, /* CMOTech 7253 */
1262	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1263	{QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1264	{QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1265	{QMI_FIXED_INTF(0x19d2, 0x0019, 3)}, /* ONDA MT689DC */
1266	{QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1267	{QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1268	{QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1269	{QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1270	{QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1271	{QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1272	{QMI_FIXED_INTF(0x19d2, 0x0055, 1)}, /* ZTE (Vodafone) K3520-Z */
1273	{QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1274	{QMI_FIXED_INTF(0x19d2, 0x0063, 4)}, /* ZTE (Vodafone) K3565-Z */
1275	{QMI_FIXED_INTF(0x19d2, 0x0104, 4)}, /* ZTE (Vodafone) K4505-Z */
1276	{QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1277	{QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1278	{QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1279	{QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1280	{QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1281	{QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1282	{QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1283	{QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1284	{QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1285	{QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1286	{QMI_FIXED_INTF(0x19d2, 0x0157, 5)}, /* ZTE MF683 */
1287	{QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1288	{QMI_FIXED_INTF(0x19d2, 0x0167, 4)}, /* ZTE MF820D */
1289	{QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1290	{QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1291	{QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1292	{QMI_FIXED_INTF(0x19d2, 0x0189, 4)}, /* ZTE MF290 */
1293	{QMI_FIXED_INTF(0x19d2, 0x0191, 4)}, /* ZTE EuFi890 */
1294	{QMI_FIXED_INTF(0x19d2, 0x0199, 1)}, /* ZTE MF820S */
1295	{QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1296	{QMI_FIXED_INTF(0x19d2, 0x0257, 3)}, /* ZTE MF821 */
1297	{QMI_FIXED_INTF(0x19d2, 0x0265, 4)}, /* ONDA MT8205 4G LTE */
1298	{QMI_FIXED_INTF(0x19d2, 0x0284, 4)}, /* ZTE MF880 */
1299	{QMI_FIXED_INTF(0x19d2, 0x0326, 4)}, /* ZTE MF821D */
1300	{QMI_FIXED_INTF(0x19d2, 0x0396, 3)}, /* ZTE ZM8620 */
1301	{QMI_FIXED_INTF(0x19d2, 0x0412, 4)}, /* Telewell TW-LTE 4G */
1302	{QMI_FIXED_INTF(0x19d2, 0x1008, 4)}, /* ZTE (Vodafone) K3570-Z */
1303	{QMI_FIXED_INTF(0x19d2, 0x1010, 4)}, /* ZTE (Vodafone) K3571-Z */
1304	{QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1305	{QMI_FIXED_INTF(0x19d2, 0x1018, 3)}, /* ZTE (Vodafone) K5006-Z */
1306	{QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1307	{QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1308	{QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1309	{QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1310	{QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1311	{QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1312	{QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1313	{QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1314	{QMI_FIXED_INTF(0x19d2, 0x1270, 5)}, /* ZTE MF667 */
1315	{QMI_FIXED_INTF(0x19d2, 0x1275, 3)}, /* ZTE P685M */
1316	{QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1317	{QMI_FIXED_INTF(0x19d2, 0x1402, 2)}, /* ZTE MF60 */
1318	{QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1319	{QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1320	{QMI_FIXED_INTF(0x19d2, 0x1426, 2)}, /* ZTE MF91 */
1321	{QMI_FIXED_INTF(0x19d2, 0x1428, 2)}, /* Telewell TW-LTE 4G v2 */
1322	{QMI_FIXED_INTF(0x19d2, 0x1432, 3)}, /* ZTE ME3620 */
1323	{QMI_FIXED_INTF(0x19d2, 0x1485, 5)}, /* ZTE MF286D */
1324	{QMI_FIXED_INTF(0x19d2, 0x2002, 4)}, /* ZTE (Vodafone) K3765-Z */
1325	{QMI_FIXED_INTF(0x2001, 0x7e16, 3)}, /* D-Link DWM-221 */
1326	{QMI_FIXED_INTF(0x2001, 0x7e19, 4)}, /* D-Link DWM-221 B1 */
1327	{QMI_FIXED_INTF(0x2001, 0x7e35, 4)}, /* D-Link DWM-222 */
1328	{QMI_FIXED_INTF(0x2001, 0x7e3d, 4)}, /* D-Link DWM-222 A2 */
1329	{QMI_FIXED_INTF(0x2020, 0x2031, 4)}, /* Olicard 600 */
1330	{QMI_FIXED_INTF(0x2020, 0x2033, 4)}, /* BroadMobi BM806U */
1331	{QMI_QUIRK_SET_DTR(0x2020, 0x2060, 4)}, /* BroadMobi BM818 */
1332	{QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)}, /* Sierra Wireless MC7700 */
1333	{QMI_FIXED_INTF(0x114f, 0x68a2, 8)}, /* Sierra Wireless MC7750 */
1334	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)}, /* Sierra Wireless MC7710 in QMI mode */
1335	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)}, /* Sierra Wireless MC7710 in QMI mode */
1336	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)}, /* Sierra Wireless MC7304/MC7354, WP76xx */
1337	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1338	{QMI_FIXED_INTF(0x1199, 0x901c, 8)}, /* Sierra Wireless EM7700 */
1339	{QMI_FIXED_INTF(0x1199, 0x901f, 8)}, /* Sierra Wireless EM7355 */
1340	{QMI_FIXED_INTF(0x1199, 0x9041, 8)}, /* Sierra Wireless MC7305/MC7355 */
1341	{QMI_FIXED_INTF(0x1199, 0x9041, 10)}, /* Sierra Wireless MC7305/MC7355 */
1342	{QMI_FIXED_INTF(0x1199, 0x9051, 8)}, /* Netgear AirCard 340U */
1343	{QMI_FIXED_INTF(0x1199, 0x9053, 8)}, /* Sierra Wireless Modem */
1344	{QMI_FIXED_INTF(0x1199, 0x9054, 8)}, /* Sierra Wireless Modem */
1345	{QMI_FIXED_INTF(0x1199, 0x9055, 8)}, /* Netgear AirCard 341U */
1346	{QMI_FIXED_INTF(0x1199, 0x9056, 8)}, /* Sierra Wireless Modem */
1347	{QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1348	{QMI_FIXED_INTF(0x1199, 0x9061, 8)}, /* Sierra Wireless Modem */
1349	{QMI_FIXED_INTF(0x1199, 0x9063, 8)}, /* Sierra Wireless EM7305 */
1350	{QMI_FIXED_INTF(0x1199, 0x9063, 10)}, /* Sierra Wireless EM7305 */
1351	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)}, /* Sierra Wireless MC74xx */
1352	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1353	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)}, /* Sierra Wireless EM74xx */
1354	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1355	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)}, /* Sierra Wireless EM74xx */
1356	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1357	{QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)}, /* Sierra Wireless EM7565 */
1358	{QMI_QUIRK_SET_DTR(0x1199, 0xc081, 8)}, /* Sierra Wireless EM7590 */
1359	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)}, /* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1360	{QMI_FIXED_INTF(0x1bbb, 0x0203, 2)}, /* Alcatel L800MA */
1361	{QMI_FIXED_INTF(0x2357, 0x0201, 4)}, /* TP-LINK HSUPA Modem MA180 */
1362	{QMI_FIXED_INTF(0x2357, 0x9000, 4)}, /* TP-LINK MA260 */
1363	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1364	{QMI_QUIRK_SET_DTR(0x1bc7, 0x103a, 0)}, /* Telit LE910C4-WWX */
1365	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)}, /* Telit LE922A */
1366	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)}, /* Telit FN980 */
1367	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1057, 2)}, /* Telit FN980 */
1368	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1060, 2)}, /* Telit LN920 */
1369	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1070, 2)}, /* Telit FN990 */
1370	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1080, 2)}, /* Telit FE990 */
1371	{QMI_FIXED_INTF(0x1bc7, 0x1100, 3)}, /* Telit ME910 */
1372	{QMI_FIXED_INTF(0x1bc7, 0x1101, 3)}, /* Telit ME910 dual modem */
1373	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)}, /* Telit LE920 */
1374	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)}, /* Telit LE920, LE920A4 */
1375	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1230, 2)}, /* Telit LE910Cx */
1376	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1250, 0)}, /* Telit LE910Cx */
1377	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)}, /* Telit LE910Cx */
1378	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)}, /* Telit LE910Cx */
1379	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)}, /* Telit LN940 series */
1380	{QMI_FIXED_INTF(0x1c9e, 0x9801, 3)}, /* Telewell TW-3G HSPA+ */
1381	{QMI_FIXED_INTF(0x1c9e, 0x9803, 4)}, /* Telewell TW-3G HSPA+ */
1382	{QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)}, /* XS Stick W100-2 from 4G Systems */
1383	{QMI_FIXED_INTF(0x0b3c, 0xc000, 4)}, /* Olivetti Olicard 100 */
1384	{QMI_FIXED_INTF(0x0b3c, 0xc001, 4)}, /* Olivetti Olicard 120 */
1385	{QMI_FIXED_INTF(0x0b3c, 0xc002, 4)}, /* Olivetti Olicard 140 */
1386	{QMI_FIXED_INTF(0x0b3c, 0xc004, 6)}, /* Olivetti Olicard 155 */
1387	{QMI_FIXED_INTF(0x0b3c, 0xc005, 6)}, /* Olivetti Olicard 200 */
1388	{QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)}, /* Olivetti Olicard 160 */
1389	{QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)}, /* Olivetti Olicard 500 */
1390	{QMI_FIXED_INTF(0x1e2d, 0x0060, 4)}, /* Cinterion PLxx */
1391	{QMI_QUIRK_SET_DTR(0x1e2d, 0x006f, 8)}, /* Cinterion PLS83/PLS63 */
1392	{QMI_FIXED_INTF(0x1e2d, 0x0053, 4)}, /* Cinterion PHxx,PXxx */
1393	{QMI_FIXED_INTF(0x1e2d, 0x0063, 10)}, /* Cinterion ALASxx (1 RmNet) */
1394	{QMI_FIXED_INTF(0x1e2d, 0x0082, 4)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1395	{QMI_FIXED_INTF(0x1e2d, 0x0082, 5)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1396	{QMI_FIXED_INTF(0x1e2d, 0x0083, 4)}, /* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1397	{QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)}, /* Cinterion CLS8 */
1398	{QMI_FIXED_INTF(0x1e2d, 0x00b7, 0)}, /* Cinterion MV31 RmNet */
1399	{QMI_FIXED_INTF(0x1e2d, 0x00b9, 0)}, /* Cinterion MV31 RmNet based on new baseline */
1400	{QMI_FIXED_INTF(0x1e2d, 0x00f3, 0)}, /* Cinterion MV32-W-A RmNet */
1401	{QMI_FIXED_INTF(0x1e2d, 0x00f4, 0)}, /* Cinterion MV32-W-B RmNet */
1402	{QMI_FIXED_INTF(0x413c, 0x81a2, 8)}, /* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1403	{QMI_FIXED_INTF(0x413c, 0x81a3, 8)}, /* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1404	{QMI_FIXED_INTF(0x413c, 0x81a4, 8)}, /* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1405	{QMI_FIXED_INTF(0x413c, 0x81a8, 8)}, /* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1406	{QMI_FIXED_INTF(0x413c, 0x81a9, 8)}, /* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1407	{QMI_FIXED_INTF(0x413c, 0x81b1, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1408	{QMI_FIXED_INTF(0x413c, 0x81b3, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1409	{QMI_FIXED_INTF(0x413c, 0x81b6, 8)}, /* Dell Wireless 5811e */
1410	{QMI_FIXED_INTF(0x413c, 0x81b6, 10)}, /* Dell Wireless 5811e */
1411	{QMI_FIXED_INTF(0x413c, 0x81c2, 8)}, /* Dell Wireless 5811e */
1412	{QMI_FIXED_INTF(0x413c, 0x81cc, 8)}, /* Dell Wireless 5816e */
1413	{QMI_FIXED_INTF(0x413c, 0x81d7, 0)}, /* Dell Wireless 5821e */
1414	{QMI_FIXED_INTF(0x413c, 0x81d7, 1)}, /* Dell Wireless 5821e preproduction config */
1415	{QMI_FIXED_INTF(0x413c, 0x81e0, 0)}, /* Dell Wireless 5821e with eSIM support*/
1416	{QMI_FIXED_INTF(0x413c, 0x81e4, 0)}, /* Dell Wireless 5829e with eSIM support*/
1417	{QMI_FIXED_INTF(0x413c, 0x81e6, 0)}, /* Dell Wireless 5829e */
1418	{QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)}, /* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1419	{QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)}, /* HP lt4120 Snapdragon X5 LTE */
1420	{QMI_QUIRK_SET_DTR(0x22de, 0x9051, 2)}, /* Hucom Wireless HM-211S/K */
1421	{QMI_FIXED_INTF(0x22de, 0x9061, 3)}, /* WeTelecom WPD-600N */
1422	{QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)}, /* SIMCom 7100E, 7230E, 7600E ++ */
1423	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)}, /* Quectel EC21 Mini PCIe */
1424	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)}, /* Quectel EG91 */
1425	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)}, /* Quectel EG95 */
1426	{QMI_FIXED_INTF(0x2c7c, 0x0296, 4)}, /* Quectel BG96 */
1427	{QMI_QUIRK_SET_DTR(0x2c7c, 0x030e, 4)}, /* Quectel EM05GV2 */
1428	{QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)}, /* Fibocom NL678 series */
1429	{QMI_FIXED_INTF(0x0489, 0xe0b4, 0)}, /* Foxconn T77W968 LTE */
1430	{QMI_FIXED_INTF(0x0489, 0xe0b5, 0)}, /* Foxconn T77W968 LTE with eSIM support*/
1431	{QMI_FIXED_INTF(0x2692, 0x9025, 4)}, /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1432	{QMI_QUIRK_SET_DTR(0x1546, 0x1312, 4)}, /* u-blox LARA-R6 01B */
1433	{QMI_QUIRK_SET_DTR(0x1546, 0x1342, 4)}, /* u-blox LARA-L6 */
1434	{QMI_QUIRK_SET_DTR(0x33f8, 0x0104, 4)}, /* Rolling RW101 RMNET */
1435
1436	/* 4. Gobi 1000 devices */
1437	{QMI_GOBI1K_DEVICE(0x05c6, 0x9212)}, /* Acer Gobi Modem Device */
1438	{QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)}, /* HP un2400 Gobi Modem Device */
1439	{QMI_GOBI1K_DEVICE(0x04da, 0x250d)}, /* Panasonic Gobi Modem device */
1440	{QMI_GOBI1K_DEVICE(0x413c, 0x8172)}, /* Dell Gobi Modem device */
1441	{QMI_GOBI1K_DEVICE(0x1410, 0xa001)}, /* Novatel/Verizon USB-1000 */
1442	{QMI_GOBI1K_DEVICE(0x1410, 0xa002)}, /* Novatel Gobi Modem device */
1443	{QMI_GOBI1K_DEVICE(0x1410, 0xa003)}, /* Novatel Gobi Modem device */
1444	{QMI_GOBI1K_DEVICE(0x1410, 0xa004)}, /* Novatel Gobi Modem device */
1445	{QMI_GOBI1K_DEVICE(0x1410, 0xa005)}, /* Novatel Gobi Modem device */
1446	{QMI_GOBI1K_DEVICE(0x1410, 0xa006)}, /* Novatel Gobi Modem device */
1447	{QMI_GOBI1K_DEVICE(0x1410, 0xa007)}, /* Novatel Gobi Modem device */
1448	{QMI_GOBI1K_DEVICE(0x0b05, 0x1776)}, /* Asus Gobi Modem device */
1449	{QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)}, /* ONDA Gobi Modem device */
1450	{QMI_GOBI1K_DEVICE(0x05c6, 0x9001)}, /* Generic Gobi Modem device */
1451	{QMI_GOBI1K_DEVICE(0x05c6, 0x9002)}, /* Generic Gobi Modem device */
1452	{QMI_GOBI1K_DEVICE(0x05c6, 0x9202)}, /* Generic Gobi Modem device */
1453	{QMI_GOBI1K_DEVICE(0x05c6, 0x9203)}, /* Generic Gobi Modem device */
1454	{QMI_GOBI1K_DEVICE(0x05c6, 0x9222)}, /* Generic Gobi Modem device */
1455	{QMI_GOBI1K_DEVICE(0x05c6, 0x9009)}, /* Generic Gobi Modem device */
1456
1457	/* 5. Gobi 2000 and 3000 devices */
1458	{QMI_GOBI_DEVICE(0x413c, 0x8186)}, /* Dell Gobi 2000 Modem device (N0218, VU936) */
1459	{QMI_GOBI_DEVICE(0x413c, 0x8194)}, /* Dell Gobi 3000 Composite */
1460	{QMI_GOBI_DEVICE(0x05c6, 0x920b)}, /* Generic Gobi 2000 Modem device */
1461	{QMI_GOBI_DEVICE(0x05c6, 0x9225)}, /* Sony Gobi 2000 Modem device (N0279, VU730) */
1462	{QMI_GOBI_DEVICE(0x05c6, 0x9245)}, /* Samsung Gobi 2000 Modem device (VL176) */
1463	{QMI_GOBI_DEVICE(0x03f0, 0x251d)}, /* HP Gobi 2000 Modem device (VP412) */
1464	{QMI_GOBI_DEVICE(0x05c6, 0x9215)}, /* Acer Gobi 2000 Modem device (VP413) */
1465	{QMI_FIXED_INTF(0x05c6, 0x9215, 4)}, /* Quectel EC20 Mini PCIe */
1466	{QMI_GOBI_DEVICE(0x05c6, 0x9265)}, /* Asus Gobi 2000 Modem device (VR305) */
1467	{QMI_GOBI_DEVICE(0x05c6, 0x9235)}, /* Top Global Gobi 2000 Modem device (VR306) */
1468	{QMI_GOBI_DEVICE(0x05c6, 0x9275)}, /* iRex Technologies Gobi 2000 Modem device (VR307) */
1469	{QMI_GOBI_DEVICE(0x0af0, 0x8120)}, /* Option GTM681W */
1470	{QMI_GOBI_DEVICE(0x1199, 0x68a5)}, /* Sierra Wireless Modem */
1471	{QMI_GOBI_DEVICE(0x1199, 0x68a9)}, /* Sierra Wireless Modem */
1472	{QMI_GOBI_DEVICE(0x1199, 0x9001)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1473	{QMI_GOBI_DEVICE(0x1199, 0x9002)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1474	{QMI_GOBI_DEVICE(0x1199, 0x9003)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1475	{QMI_GOBI_DEVICE(0x1199, 0x9004)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1476	{QMI_GOBI_DEVICE(0x1199, 0x9005)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1477	{QMI_GOBI_DEVICE(0x1199, 0x9006)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1478	{QMI_GOBI_DEVICE(0x1199, 0x9007)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1479	{QMI_GOBI_DEVICE(0x1199, 0x9008)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1480	{QMI_GOBI_DEVICE(0x1199, 0x9009)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1481	{QMI_GOBI_DEVICE(0x1199, 0x900a)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1482	{QMI_GOBI_DEVICE(0x1199, 0x9011)}, /* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1483	{QMI_GOBI_DEVICE(0x16d8, 0x8002)}, /* CMDTech Gobi 2000 Modem device (VU922) */
1484	{QMI_GOBI_DEVICE(0x05c6, 0x9205)}, /* Gobi 2000 Modem device */
1485	{QMI_GOBI_DEVICE(0x1199, 0x9013)}, /* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1486	{QMI_GOBI_DEVICE(0x03f0, 0x371d)}, /* HP un2430 Mobile Broadband Module */
1487	{QMI_GOBI_DEVICE(0x1199, 0x9015)}, /* Sierra Wireless Gobi 3000 Modem device */
1488	{QMI_GOBI_DEVICE(0x1199, 0x9019)}, /* Sierra Wireless Gobi 3000 Modem device */
1489	{QMI_GOBI_DEVICE(0x1199, 0x901b)}, /* Sierra Wireless MC7770 */
1490	{QMI_GOBI_DEVICE(0x12d1, 0x14f1)}, /* Sony Gobi 3000 Composite */
1491	{QMI_GOBI_DEVICE(0x1410, 0xa021)}, /* Foxconn Gobi 3000 Modem device (Novatel E396) */
1492
1493	{ } /* END */
1494	};
1495	MODULE_DEVICE_TABLE(usb, products);
1496
1497	static bool quectel_ec20_detected(struct usb_interface *intf)
1498	{
1499	struct usb_device *dev = interface_to_usbdev(intf);
1500
1501	if (dev->actconfig &&
1502	le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1503	le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1504	dev->actconfig->desc.bNumInterfaces == 5)
1505	return true;
1506
1507	return false;
1508	}
1509
1510	static int qmi_wwan_probe(struct usb_interface *intf,
1511	const struct usb_device_id *prod)
1512	{
1513	struct usb_device_id *id = (struct usb_device_id *)prod;
1514	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1515
1516	/* Workaround to enable dynamic IDs. This disables usbnet
1517	* blacklisting functionality. Which, if required, can be
1518	* reimplemented here by using a magic "blacklist" value
1519	* instead of 0 in the static device id table
1520	*/
1521	if (!id->driver_info) {
1522	dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1523	id->driver_info = (unsigned long)&qmi_wwan_info;
1524	}
1525
1526	/* There are devices where the same interface number can be
1527	* configured as different functions. We should only bind to
1528	* vendor specific functions when matching on interface number
1529	*/
1530	if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1531	desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1532	dev_dbg(&intf->dev,
1533	"Rejecting interface number match for class %02x\n",
1534	desc->bInterfaceClass);
1535	return -ENODEV;
1536	}
1537
1538	/* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1539	if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1540	dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1541	return -ENODEV;
1542	}
1543
1544	/* Several Quectel modems supports dynamic interface configuration, so
1545	* we need to match on class/subclass/protocol. These values are
1546	* identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1547	* different. Ignore the current interface if the number of endpoints
1548	* equals the number for the diag interface (two).
1549	*/
1550	if (desc->bNumEndpoints == 2)
1551	return -ENODEV;
1552
1553	return usbnet_probe(intf, id);
1554	}
1555
1556	static void qmi_wwan_disconnect(struct usb_interface *intf)
1557	{
1558	struct usbnet *dev = usb_get_intfdata(intf);
1559	struct qmi_wwan_state *info;
1560	struct list_head *iter;
1561	struct net_device *ldev;
1562	LIST_HEAD(list);
1563
1564	/* called twice if separate control and data intf */
1565	if (!dev)
1566	return;
1567	info = (void *)&dev->data;
1568	if (info->flags & QMI_WWAN_FLAG_MUX) {
1569	if (!rtnl_trylock()) {
1570	restart_syscall();
1571	return;
1572	}
1573	rcu_read_lock();
1574	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1575	qmimux_unregister_device(dev: ldev, head: &list);
1576	rcu_read_unlock();
1577	unregister_netdevice_many(head: &list);
1578	rtnl_unlock();
1579	info->flags &= ~QMI_WWAN_FLAG_MUX;
1580	}
1581	usbnet_disconnect(intf);
1582	}
1583
1584	static struct usb_driver qmi_wwan_driver = {
1585	.name = "qmi_wwan",
1586	.id_table = products,
1587	.probe = qmi_wwan_probe,
1588	.disconnect = qmi_wwan_disconnect,
1589	.suspend = qmi_wwan_suspend,
1590	.resume = qmi_wwan_resume,
1591	.reset_resume = qmi_wwan_resume,
1592	.supports_autosuspend = 1,
1593	.disable_hub_initiated_lpm = 1,
1594	};
1595
1596	module_usb_driver(qmi_wwan_driver);
1597
1598	MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1599	MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1600	MODULE_LICENSE("GPL");
1601