1 /*
2  * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
3  *
4  * The probing code is heavily inspired by cdc_ether, which is:
5  * Copyright (C) 2003-2005 by David Brownell
6  * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
7  *
8  * This program is free software; you can redistribute it and/or
9  * modify it under the terms of the GNU General Public License
10  * version 2 as published by the Free Software Foundation.
11  */
12 
13 #include <linux/module.h>
14 #include <linux/sched/signal.h>
15 #include <linux/netdevice.h>
16 #include <linux/ethtool.h>
17 #include <linux/etherdevice.h>
18 #include <linux/if_arp.h>
19 #include <linux/mii.h>
20 #include <linux/rtnetlink.h>
21 #include <linux/usb.h>
22 #include <linux/usb/cdc.h>
23 #include <linux/usb/usbnet.h>
24 #include <linux/usb/cdc-wdm.h>
25 
26 /* This driver supports wwan (3G/LTE/?) devices using a vendor
27  * specific management protocol called Qualcomm MSM Interface (QMI) -
28  * in addition to the more common AT commands over serial interface
29  * management
30  *
31  * QMI is wrapped in CDC, using CDC encapsulated commands on the
32  * control ("master") interface of a two-interface CDC Union
33  * resembling standard CDC ECM.  The devices do not use the control
34  * interface for any other CDC messages.  Most likely because the
35  * management protocol is used in place of the standard CDC
36  * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
37  *
38  * Alternatively, control and data functions can be combined in a
39  * single USB interface.
40  *
41  * Handling a protocol like QMI is out of the scope for any driver.
42  * It is exported as a character device using the cdc-wdm driver as
43  * a subdriver, enabling userspace applications ("modem managers") to
44  * handle it.
45  *
46  * These devices may alternatively/additionally be configured using AT
47  * commands on a serial interface
48  */
49 
50 /* driver specific data */
51 struct qmi_wwan_state {
52 	struct usb_driver *subdriver;
53 	atomic_t pmcount;
54 	unsigned long flags;
55 	struct usb_interface *control;
56 	struct usb_interface *data;
57 };
58 
59 enum qmi_wwan_flags {
60 	QMI_WWAN_FLAG_RAWIP = 1 << 0,
61 	QMI_WWAN_FLAG_MUX = 1 << 1,
62 };
63 
64 enum qmi_wwan_quirks {
65 	QMI_WWAN_QUIRK_DTR = 1 << 0,	/* needs "set DTR" request */
66 };
67 
68 struct qmimux_hdr {
69 	u8 pad;
70 	u8 mux_id;
71 	__be16 pkt_len;
72 };
73 
74 struct qmimux_priv {
75 	struct net_device *real_dev;
76 	u8 mux_id;
77 };
78 
qmimux_open(struct net_device * dev)79 static int qmimux_open(struct net_device *dev)
80 {
81 	struct qmimux_priv *priv = netdev_priv(dev);
82 	struct net_device *real_dev = priv->real_dev;
83 
84 	if (!(priv->real_dev->flags & IFF_UP))
85 		return -ENETDOWN;
86 
87 	if (netif_carrier_ok(real_dev))
88 		netif_carrier_on(dev);
89 	return 0;
90 }
91 
qmimux_stop(struct net_device * dev)92 static int qmimux_stop(struct net_device *dev)
93 {
94 	netif_carrier_off(dev);
95 	return 0;
96 }
97 
qmimux_start_xmit(struct sk_buff * skb,struct net_device * dev)98 static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
99 {
100 	struct qmimux_priv *priv = netdev_priv(dev);
101 	unsigned int len = skb->len;
102 	struct qmimux_hdr *hdr;
103 
104 	hdr = skb_push(skb, sizeof(struct qmimux_hdr));
105 	hdr->pad = 0;
106 	hdr->mux_id = priv->mux_id;
107 	hdr->pkt_len = cpu_to_be16(len);
108 	skb->dev = priv->real_dev;
109 	return dev_queue_xmit(skb);
110 }
111 
112 static const struct net_device_ops qmimux_netdev_ops = {
113 	.ndo_open       = qmimux_open,
114 	.ndo_stop       = qmimux_stop,
115 	.ndo_start_xmit = qmimux_start_xmit,
116 };
117 
qmimux_setup(struct net_device * dev)118 static void qmimux_setup(struct net_device *dev)
119 {
120 	dev->header_ops      = NULL;  /* No header */
121 	dev->type            = ARPHRD_NONE;
122 	dev->hard_header_len = 0;
123 	dev->addr_len        = 0;
124 	dev->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
125 	dev->netdev_ops      = &qmimux_netdev_ops;
126 	dev->needs_free_netdev = true;
127 }
128 
qmimux_find_dev(struct usbnet * dev,u8 mux_id)129 static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
130 {
131 	struct qmimux_priv *priv;
132 	struct list_head *iter;
133 	struct net_device *ldev;
134 
135 	rcu_read_lock();
136 	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
137 		priv = netdev_priv(ldev);
138 		if (priv->mux_id == mux_id) {
139 			rcu_read_unlock();
140 			return ldev;
141 		}
142 	}
143 	rcu_read_unlock();
144 	return NULL;
145 }
146 
qmimux_has_slaves(struct usbnet * dev)147 static bool qmimux_has_slaves(struct usbnet *dev)
148 {
149 	return !list_empty(&dev->net->adj_list.upper);
150 }
151 
qmimux_rx_fixup(struct usbnet * dev,struct sk_buff * skb)152 static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
153 {
154 	unsigned int len, offset = sizeof(struct qmimux_hdr);
155 	struct qmimux_hdr *hdr;
156 	struct net_device *net;
157 	struct sk_buff *skbn;
158 
159 	while (offset < skb->len) {
160 		hdr = (struct qmimux_hdr *)skb->data;
161 		len = be16_to_cpu(hdr->pkt_len);
162 
163 		/* drop the packet, bogus length */
164 		if (offset + len > skb->len)
165 			return 0;
166 
167 		/* control packet, we do not know what to do */
168 		if (hdr->pad & 0x80)
169 			goto skip;
170 
171 		net = qmimux_find_dev(dev, hdr->mux_id);
172 		if (!net)
173 			goto skip;
174 		skbn = netdev_alloc_skb(net, len);
175 		if (!skbn)
176 			return 0;
177 		skbn->dev = net;
178 
179 		switch (skb->data[offset] & 0xf0) {
180 		case 0x40:
181 			skbn->protocol = htons(ETH_P_IP);
182 			break;
183 		case 0x60:
184 			skbn->protocol = htons(ETH_P_IPV6);
185 			break;
186 		default:
187 			/* not ip - do not know what to do */
188 			goto skip;
189 		}
190 
191 		skb_put_data(skbn, skb->data + offset, len);
192 		if (netif_rx(skbn) != NET_RX_SUCCESS)
193 			return 0;
194 
195 skip:
196 		offset += len + sizeof(struct qmimux_hdr);
197 	}
198 	return 1;
199 }
200 
qmimux_register_device(struct net_device * real_dev,u8 mux_id)201 static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
202 {
203 	struct net_device *new_dev;
204 	struct qmimux_priv *priv;
205 	int err;
206 
207 	new_dev = alloc_netdev(sizeof(struct qmimux_priv),
208 			       "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
209 	if (!new_dev)
210 		return -ENOBUFS;
211 
212 	dev_net_set(new_dev, dev_net(real_dev));
213 	priv = netdev_priv(new_dev);
214 	priv->mux_id = mux_id;
215 	priv->real_dev = real_dev;
216 
217 	err = register_netdevice(new_dev);
218 	if (err < 0)
219 		goto out_free_newdev;
220 
221 	/* Account for reference in struct qmimux_priv_priv */
222 	dev_hold(real_dev);
223 
224 	err = netdev_upper_dev_link(real_dev, new_dev, NULL);
225 	if (err)
226 		goto out_unregister_netdev;
227 
228 	netif_stacked_transfer_operstate(real_dev, new_dev);
229 
230 	return 0;
231 
232 out_unregister_netdev:
233 	unregister_netdevice(new_dev);
234 	dev_put(real_dev);
235 
236 out_free_newdev:
237 	free_netdev(new_dev);
238 	return err;
239 }
240 
qmimux_unregister_device(struct net_device * dev)241 static void qmimux_unregister_device(struct net_device *dev)
242 {
243 	struct qmimux_priv *priv = netdev_priv(dev);
244 	struct net_device *real_dev = priv->real_dev;
245 
246 	netdev_upper_dev_unlink(real_dev, dev);
247 	unregister_netdevice(dev);
248 
249 	/* Get rid of the reference to real_dev */
250 	dev_put(real_dev);
251 }
252 
qmi_wwan_netdev_setup(struct net_device * net)253 static void qmi_wwan_netdev_setup(struct net_device *net)
254 {
255 	struct usbnet *dev = netdev_priv(net);
256 	struct qmi_wwan_state *info = (void *)&dev->data;
257 
258 	if (info->flags & QMI_WWAN_FLAG_RAWIP) {
259 		net->header_ops      = NULL;  /* No header */
260 		net->type            = ARPHRD_NONE;
261 		net->hard_header_len = 0;
262 		net->addr_len        = 0;
263 		net->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
264 		set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
265 		netdev_dbg(net, "mode: raw IP\n");
266 	} else if (!net->header_ops) { /* don't bother if already set */
267 		ether_setup(net);
268 		clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
269 		netdev_dbg(net, "mode: Ethernet\n");
270 	}
271 
272 	/* recalculate buffers after changing hard_header_len */
273 	usbnet_change_mtu(net, net->mtu);
274 }
275 
raw_ip_show(struct device * d,struct device_attribute * attr,char * buf)276 static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
277 {
278 	struct usbnet *dev = netdev_priv(to_net_dev(d));
279 	struct qmi_wwan_state *info = (void *)&dev->data;
280 
281 	return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
282 }
283 
raw_ip_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)284 static ssize_t raw_ip_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
285 {
286 	struct usbnet *dev = netdev_priv(to_net_dev(d));
287 	struct qmi_wwan_state *info = (void *)&dev->data;
288 	bool enable;
289 	int ret;
290 
291 	if (strtobool(buf, &enable))
292 		return -EINVAL;
293 
294 	/* no change? */
295 	if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
296 		return len;
297 
298 	if (!rtnl_trylock())
299 		return restart_syscall();
300 
301 	/* we don't want to modify a running netdev */
302 	if (netif_running(dev->net)) {
303 		netdev_err(dev->net, "Cannot change a running device\n");
304 		ret = -EBUSY;
305 		goto err;
306 	}
307 
308 	/* let other drivers deny the change */
309 	ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
310 	ret = notifier_to_errno(ret);
311 	if (ret) {
312 		netdev_err(dev->net, "Type change was refused\n");
313 		goto err;
314 	}
315 
316 	if (enable)
317 		info->flags |= QMI_WWAN_FLAG_RAWIP;
318 	else
319 		info->flags &= ~QMI_WWAN_FLAG_RAWIP;
320 	qmi_wwan_netdev_setup(dev->net);
321 	call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
322 	ret = len;
323 err:
324 	rtnl_unlock();
325 	return ret;
326 }
327 
add_mux_show(struct device * d,struct device_attribute * attr,char * buf)328 static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
329 {
330 	struct net_device *dev = to_net_dev(d);
331 	struct qmimux_priv *priv;
332 	struct list_head *iter;
333 	struct net_device *ldev;
334 	ssize_t count = 0;
335 
336 	rcu_read_lock();
337 	netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
338 		priv = netdev_priv(ldev);
339 		count += scnprintf(&buf[count], PAGE_SIZE - count,
340 				   "0x%02x\n", priv->mux_id);
341 	}
342 	rcu_read_unlock();
343 	return count;
344 }
345 
add_mux_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)346 static ssize_t add_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
347 {
348 	struct usbnet *dev = netdev_priv(to_net_dev(d));
349 	struct qmi_wwan_state *info = (void *)&dev->data;
350 	u8 mux_id;
351 	int ret;
352 
353 	if (kstrtou8(buf, 0, &mux_id))
354 		return -EINVAL;
355 
356 	/* mux_id [1 - 0x7f] range empirically found */
357 	if (mux_id < 1 || mux_id > 0x7f)
358 		return -EINVAL;
359 
360 	if (!rtnl_trylock())
361 		return restart_syscall();
362 
363 	if (qmimux_find_dev(dev, mux_id)) {
364 		netdev_err(dev->net, "mux_id already present\n");
365 		ret = -EINVAL;
366 		goto err;
367 	}
368 
369 	/* we don't want to modify a running netdev */
370 	if (netif_running(dev->net)) {
371 		netdev_err(dev->net, "Cannot change a running device\n");
372 		ret = -EBUSY;
373 		goto err;
374 	}
375 
376 	ret = qmimux_register_device(dev->net, mux_id);
377 	if (!ret) {
378 		info->flags |= QMI_WWAN_FLAG_MUX;
379 		ret = len;
380 	}
381 err:
382 	rtnl_unlock();
383 	return ret;
384 }
385 
del_mux_show(struct device * d,struct device_attribute * attr,char * buf)386 static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
387 {
388 	return add_mux_show(d, attr, buf);
389 }
390 
del_mux_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)391 static ssize_t del_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
392 {
393 	struct usbnet *dev = netdev_priv(to_net_dev(d));
394 	struct qmi_wwan_state *info = (void *)&dev->data;
395 	struct net_device *del_dev;
396 	u8 mux_id;
397 	int ret = 0;
398 
399 	if (kstrtou8(buf, 0, &mux_id))
400 		return -EINVAL;
401 
402 	if (!rtnl_trylock())
403 		return restart_syscall();
404 
405 	/* we don't want to modify a running netdev */
406 	if (netif_running(dev->net)) {
407 		netdev_err(dev->net, "Cannot change a running device\n");
408 		ret = -EBUSY;
409 		goto err;
410 	}
411 
412 	del_dev = qmimux_find_dev(dev, mux_id);
413 	if (!del_dev) {
414 		netdev_err(dev->net, "mux_id not present\n");
415 		ret = -EINVAL;
416 		goto err;
417 	}
418 	qmimux_unregister_device(del_dev);
419 
420 	if (!qmimux_has_slaves(dev))
421 		info->flags &= ~QMI_WWAN_FLAG_MUX;
422 	ret = len;
423 err:
424 	rtnl_unlock();
425 	return ret;
426 }
427 
428 static DEVICE_ATTR_RW(raw_ip);
429 static DEVICE_ATTR_RW(add_mux);
430 static DEVICE_ATTR_RW(del_mux);
431 
432 static struct attribute *qmi_wwan_sysfs_attrs[] = {
433 	&dev_attr_raw_ip.attr,
434 	&dev_attr_add_mux.attr,
435 	&dev_attr_del_mux.attr,
436 	NULL,
437 };
438 
439 static struct attribute_group qmi_wwan_sysfs_attr_group = {
440 	.name = "qmi",
441 	.attrs = qmi_wwan_sysfs_attrs,
442 };
443 
444 /* default ethernet address used by the modem */
445 static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
446 
447 static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
448 
449 /* Make up an ethernet header if the packet doesn't have one.
450  *
451  * A firmware bug common among several devices cause them to send raw
452  * IP packets under some circumstances.  There is no way for the
453  * driver/host to know when this will happen.  And even when the bug
454  * hits, some packets will still arrive with an intact header.
455  *
456  * The supported devices are only capably of sending IPv4, IPv6 and
457  * ARP packets on a point-to-point link. Any packet with an ethernet
458  * header will have either our address or a broadcast/multicast
459  * address as destination.  ARP packets will always have a header.
460  *
461  * This means that this function will reliably add the appropriate
462  * header iff necessary, provided our hardware address does not start
463  * with 4 or 6.
464  *
465  * Another common firmware bug results in all packets being addressed
466  * to 00:a0:c6:00:00:00 despite the host address being different.
467  * This function will also fixup such packets.
468  */
qmi_wwan_rx_fixup(struct usbnet * dev,struct sk_buff * skb)469 static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
470 {
471 	struct qmi_wwan_state *info = (void *)&dev->data;
472 	bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
473 	__be16 proto;
474 
475 	/* This check is no longer done by usbnet */
476 	if (skb->len < dev->net->hard_header_len)
477 		return 0;
478 
479 	if (info->flags & QMI_WWAN_FLAG_MUX)
480 		return qmimux_rx_fixup(dev, skb);
481 
482 	switch (skb->data[0] & 0xf0) {
483 	case 0x40:
484 		proto = htons(ETH_P_IP);
485 		break;
486 	case 0x60:
487 		proto = htons(ETH_P_IPV6);
488 		break;
489 	case 0x00:
490 		if (rawip)
491 			return 0;
492 		if (is_multicast_ether_addr(skb->data))
493 			return 1;
494 		/* possibly bogus destination - rewrite just in case */
495 		skb_reset_mac_header(skb);
496 		goto fix_dest;
497 	default:
498 		if (rawip)
499 			return 0;
500 		/* pass along other packets without modifications */
501 		return 1;
502 	}
503 	if (rawip) {
504 		skb_reset_mac_header(skb);
505 		skb->dev = dev->net; /* normally set by eth_type_trans */
506 		skb->protocol = proto;
507 		return 1;
508 	}
509 
510 	if (skb_headroom(skb) < ETH_HLEN)
511 		return 0;
512 	skb_push(skb, ETH_HLEN);
513 	skb_reset_mac_header(skb);
514 	eth_hdr(skb)->h_proto = proto;
515 	eth_zero_addr(eth_hdr(skb)->h_source);
516 fix_dest:
517 	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
518 	return 1;
519 }
520 
521 /* very simplistic detection of IPv4 or IPv6 headers */
possibly_iphdr(const char * data)522 static bool possibly_iphdr(const char *data)
523 {
524 	return (data[0] & 0xd0) == 0x40;
525 }
526 
527 /* disallow addresses which may be confused with IP headers */
qmi_wwan_mac_addr(struct net_device * dev,void * p)528 static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
529 {
530 	int ret;
531 	struct sockaddr *addr = p;
532 
533 	ret = eth_prepare_mac_addr_change(dev, p);
534 	if (ret < 0)
535 		return ret;
536 	if (possibly_iphdr(addr->sa_data))
537 		return -EADDRNOTAVAIL;
538 	eth_commit_mac_addr_change(dev, p);
539 	return 0;
540 }
541 
542 static const struct net_device_ops qmi_wwan_netdev_ops = {
543 	.ndo_open		= usbnet_open,
544 	.ndo_stop		= usbnet_stop,
545 	.ndo_start_xmit		= usbnet_start_xmit,
546 	.ndo_tx_timeout		= usbnet_tx_timeout,
547 	.ndo_change_mtu		= usbnet_change_mtu,
548 	.ndo_get_stats64	= usbnet_get_stats64,
549 	.ndo_set_mac_address	= qmi_wwan_mac_addr,
550 	.ndo_validate_addr	= eth_validate_addr,
551 };
552 
553 /* using a counter to merge subdriver requests with our own into a
554  * combined state
555  */
qmi_wwan_manage_power(struct usbnet * dev,int on)556 static int qmi_wwan_manage_power(struct usbnet *dev, int on)
557 {
558 	struct qmi_wwan_state *info = (void *)&dev->data;
559 	int rv;
560 
561 	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
562 		atomic_read(&info->pmcount), on);
563 
564 	if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
565 	    (!on && atomic_dec_and_test(&info->pmcount))) {
566 		/* need autopm_get/put here to ensure the usbcore sees
567 		 * the new value
568 		 */
569 		rv = usb_autopm_get_interface(dev->intf);
570 		dev->intf->needs_remote_wakeup = on;
571 		if (!rv)
572 			usb_autopm_put_interface(dev->intf);
573 	}
574 	return 0;
575 }
576 
qmi_wwan_cdc_wdm_manage_power(struct usb_interface * intf,int on)577 static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
578 {
579 	struct usbnet *dev = usb_get_intfdata(intf);
580 
581 	/* can be called while disconnecting */
582 	if (!dev)
583 		return 0;
584 	return qmi_wwan_manage_power(dev, on);
585 }
586 
587 /* collect all three endpoints and register subdriver */
qmi_wwan_register_subdriver(struct usbnet * dev)588 static int qmi_wwan_register_subdriver(struct usbnet *dev)
589 {
590 	int rv;
591 	struct usb_driver *subdriver = NULL;
592 	struct qmi_wwan_state *info = (void *)&dev->data;
593 
594 	/* collect bulk endpoints */
595 	rv = usbnet_get_endpoints(dev, info->data);
596 	if (rv < 0)
597 		goto err;
598 
599 	/* update status endpoint if separate control interface */
600 	if (info->control != info->data)
601 		dev->status = &info->control->cur_altsetting->endpoint[0];
602 
603 	/* require interrupt endpoint for subdriver */
604 	if (!dev->status) {
605 		rv = -EINVAL;
606 		goto err;
607 	}
608 
609 	/* for subdriver power management */
610 	atomic_set(&info->pmcount, 0);
611 
612 	/* register subdriver */
613 	subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
614 					 4096, &qmi_wwan_cdc_wdm_manage_power);
615 	if (IS_ERR(subdriver)) {
616 		dev_err(&info->control->dev, "subdriver registration failed\n");
617 		rv = PTR_ERR(subdriver);
618 		goto err;
619 	}
620 
621 	/* prevent usbnet from using status endpoint */
622 	dev->status = NULL;
623 
624 	/* save subdriver struct for suspend/resume wrappers */
625 	info->subdriver = subdriver;
626 
627 err:
628 	return rv;
629 }
630 
631 /* Send CDC SetControlLineState request, setting or clearing the DTR.
632  * "Required for Autoconnect and 9x30 to wake up" according to the
633  * GobiNet driver. The requirement has been verified on an MDM9230
634  * based Sierra Wireless MC7455
635  */
qmi_wwan_change_dtr(struct usbnet * dev,bool on)636 static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
637 {
638 	u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
639 
640 	return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
641 				USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
642 				on ? 0x01 : 0x00, intf, NULL, 0);
643 }
644 
qmi_wwan_bind(struct usbnet * dev,struct usb_interface * intf)645 static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
646 {
647 	int status = -1;
648 	u8 *buf = intf->cur_altsetting->extra;
649 	int len = intf->cur_altsetting->extralen;
650 	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
651 	struct usb_cdc_union_desc *cdc_union;
652 	struct usb_cdc_ether_desc *cdc_ether;
653 	struct usb_driver *driver = driver_of(intf);
654 	struct qmi_wwan_state *info = (void *)&dev->data;
655 	struct usb_cdc_parsed_header hdr;
656 
657 	BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
658 		      sizeof(struct qmi_wwan_state)));
659 
660 	/* set up initial state */
661 	info->control = intf;
662 	info->data = intf;
663 
664 	/* and a number of CDC descriptors */
665 	cdc_parse_cdc_header(&hdr, intf, buf, len);
666 	cdc_union = hdr.usb_cdc_union_desc;
667 	cdc_ether = hdr.usb_cdc_ether_desc;
668 
669 	/* Use separate control and data interfaces if we found a CDC Union */
670 	if (cdc_union) {
671 		info->data = usb_ifnum_to_if(dev->udev,
672 					     cdc_union->bSlaveInterface0);
673 		if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
674 		    !info->data) {
675 			dev_err(&intf->dev,
676 				"bogus CDC Union: master=%u, slave=%u\n",
677 				cdc_union->bMasterInterface0,
678 				cdc_union->bSlaveInterface0);
679 
680 			/* ignore and continue... */
681 			cdc_union = NULL;
682 			info->data = intf;
683 		}
684 	}
685 
686 	/* errors aren't fatal - we can live with the dynamic address */
687 	if (cdc_ether && cdc_ether->wMaxSegmentSize) {
688 		dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
689 		usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
690 	}
691 
692 	/* claim data interface and set it up */
693 	if (info->control != info->data) {
694 		status = usb_driver_claim_interface(driver, info->data, dev);
695 		if (status < 0)
696 			goto err;
697 	}
698 
699 	status = qmi_wwan_register_subdriver(dev);
700 	if (status < 0 && info->control != info->data) {
701 		usb_set_intfdata(info->data, NULL);
702 		usb_driver_release_interface(driver, info->data);
703 	}
704 
705 	/* disabling remote wakeup on MDM9x30 devices has the same
706 	 * effect as clearing DTR. The device will not respond to QMI
707 	 * requests until we set DTR again.  This is similar to a
708 	 * QMI_CTL SYNC request, clearing a lot of firmware state
709 	 * including the client ID allocations.
710 	 *
711 	 * Our usage model allows a session to span multiple
712 	 * open/close events, so we must prevent the firmware from
713 	 * clearing out state the clients might need.
714 	 *
715 	 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
716 	 * this fact to enable the quirk for all USB3 devices.
717 	 *
718 	 * There are also chipsets with the same "set DTR" requirement
719 	 * but without USB3 support.  Devices based on these chips
720 	 * need a quirk flag in the device ID table.
721 	 */
722 	if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
723 	    le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
724 		qmi_wwan_manage_power(dev, 1);
725 		qmi_wwan_change_dtr(dev, true);
726 	}
727 
728 	/* Never use the same address on both ends of the link, even if the
729 	 * buggy firmware told us to. Or, if device is assigned the well-known
730 	 * buggy firmware MAC address, replace it with a random address,
731 	 */
732 	if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
733 	    ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
734 		eth_hw_addr_random(dev->net);
735 
736 	/* make MAC addr easily distinguishable from an IP header */
737 	if (possibly_iphdr(dev->net->dev_addr)) {
738 		dev->net->dev_addr[0] |= 0x02;	/* set local assignment bit */
739 		dev->net->dev_addr[0] &= 0xbf;	/* clear "IP" bit */
740 	}
741 	dev->net->netdev_ops = &qmi_wwan_netdev_ops;
742 	dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
743 err:
744 	return status;
745 }
746 
qmi_wwan_unbind(struct usbnet * dev,struct usb_interface * intf)747 static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
748 {
749 	struct qmi_wwan_state *info = (void *)&dev->data;
750 	struct usb_driver *driver = driver_of(intf);
751 	struct usb_interface *other;
752 
753 	if (info->subdriver && info->subdriver->disconnect)
754 		info->subdriver->disconnect(info->control);
755 
756 	/* disable MDM9x30 quirk */
757 	if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
758 		qmi_wwan_change_dtr(dev, false);
759 		qmi_wwan_manage_power(dev, 0);
760 	}
761 
762 	/* allow user to unbind using either control or data */
763 	if (intf == info->control)
764 		other = info->data;
765 	else
766 		other = info->control;
767 
768 	/* only if not shared */
769 	if (other && intf != other) {
770 		usb_set_intfdata(other, NULL);
771 		usb_driver_release_interface(driver, other);
772 	}
773 
774 	info->subdriver = NULL;
775 	info->data = NULL;
776 	info->control = NULL;
777 }
778 
779 /* suspend/resume wrappers calling both usbnet and the cdc-wdm
780  * subdriver if present.
781  *
782  * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
783  * wrappers for those without adding usbnet reset support first.
784  */
qmi_wwan_suspend(struct usb_interface * intf,pm_message_t message)785 static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
786 {
787 	struct usbnet *dev = usb_get_intfdata(intf);
788 	struct qmi_wwan_state *info = (void *)&dev->data;
789 	int ret;
790 
791 	/* Both usbnet_suspend() and subdriver->suspend() MUST return 0
792 	 * in system sleep context, otherwise, the resume callback has
793 	 * to recover device from previous suspend failure.
794 	 */
795 	ret = usbnet_suspend(intf, message);
796 	if (ret < 0)
797 		goto err;
798 
799 	if (intf == info->control && info->subdriver &&
800 	    info->subdriver->suspend)
801 		ret = info->subdriver->suspend(intf, message);
802 	if (ret < 0)
803 		usbnet_resume(intf);
804 err:
805 	return ret;
806 }
807 
qmi_wwan_resume(struct usb_interface * intf)808 static int qmi_wwan_resume(struct usb_interface *intf)
809 {
810 	struct usbnet *dev = usb_get_intfdata(intf);
811 	struct qmi_wwan_state *info = (void *)&dev->data;
812 	int ret = 0;
813 	bool callsub = (intf == info->control && info->subdriver &&
814 			info->subdriver->resume);
815 
816 	if (callsub)
817 		ret = info->subdriver->resume(intf);
818 	if (ret < 0)
819 		goto err;
820 	ret = usbnet_resume(intf);
821 	if (ret < 0 && callsub)
822 		info->subdriver->suspend(intf, PMSG_SUSPEND);
823 err:
824 	return ret;
825 }
826 
827 static const struct driver_info	qmi_wwan_info = {
828 	.description	= "WWAN/QMI device",
829 	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
830 	.bind		= qmi_wwan_bind,
831 	.unbind		= qmi_wwan_unbind,
832 	.manage_power	= qmi_wwan_manage_power,
833 	.rx_fixup       = qmi_wwan_rx_fixup,
834 };
835 
836 static const struct driver_info	qmi_wwan_info_quirk_dtr = {
837 	.description	= "WWAN/QMI device",
838 	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
839 	.bind		= qmi_wwan_bind,
840 	.unbind		= qmi_wwan_unbind,
841 	.manage_power	= qmi_wwan_manage_power,
842 	.rx_fixup       = qmi_wwan_rx_fixup,
843 	.data           = QMI_WWAN_QUIRK_DTR,
844 };
845 
846 #define HUAWEI_VENDOR_ID	0x12D1
847 
848 /* map QMI/wwan function by a fixed interface number */
849 #define QMI_FIXED_INTF(vend, prod, num) \
850 	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
851 	.driver_info = (unsigned long)&qmi_wwan_info
852 
853 /* devices requiring "set DTR" quirk */
854 #define QMI_QUIRK_SET_DTR(vend, prod, num) \
855 	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
856 	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
857 
858 /* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
859 #define QMI_GOBI1K_DEVICE(vend, prod) \
860 	QMI_FIXED_INTF(vend, prod, 3)
861 
862 /* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
863 #define QMI_GOBI_DEVICE(vend, prod) \
864 	QMI_FIXED_INTF(vend, prod, 0)
865 
866 static const struct usb_device_id products[] = {
867 	/* 1. CDC ECM like devices match on the control interface */
868 	{	/* Huawei E392, E398 and possibly others sharing both device id and more... */
869 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
870 		.driver_info        = (unsigned long)&qmi_wwan_info,
871 	},
872 	{	/* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
873 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
874 		.driver_info        = (unsigned long)&qmi_wwan_info,
875 	},
876 	{	/* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
877 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
878 		.driver_info        = (unsigned long)&qmi_wwan_info,
879 	},
880 	{	/* Motorola Mapphone devices with MDM6600 */
881 		USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
882 		.driver_info        = (unsigned long)&qmi_wwan_info,
883 	},
884 
885 	/* 2. Combined interface devices matching on class+protocol */
886 	{	/* Huawei E367 and possibly others in "Windows mode" */
887 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
888 		.driver_info        = (unsigned long)&qmi_wwan_info,
889 	},
890 	{	/* Huawei E392, E398 and possibly others in "Windows mode" */
891 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
892 		.driver_info        = (unsigned long)&qmi_wwan_info,
893 	},
894 	{	/* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
895 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
896 		.driver_info        = (unsigned long)&qmi_wwan_info,
897 	},
898 	{	/* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
899 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
900 		.driver_info        = (unsigned long)&qmi_wwan_info,
901 	},
902 	{	/* Pantech UML290, P4200 and more */
903 		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
904 		.driver_info        = (unsigned long)&qmi_wwan_info,
905 	},
906 	{	/* Pantech UML290 - newer firmware */
907 		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
908 		.driver_info        = (unsigned long)&qmi_wwan_info,
909 	},
910 	{	/* Novatel USB551L and MC551 */
911 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
912 		                              USB_CLASS_COMM,
913 		                              USB_CDC_SUBCLASS_ETHERNET,
914 		                              USB_CDC_PROTO_NONE),
915 		.driver_info        = (unsigned long)&qmi_wwan_info,
916 	},
917 	{	/* Novatel E362 */
918 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
919 		                              USB_CLASS_COMM,
920 		                              USB_CDC_SUBCLASS_ETHERNET,
921 		                              USB_CDC_PROTO_NONE),
922 		.driver_info        = (unsigned long)&qmi_wwan_info,
923 	},
924 	{	/* Novatel Expedite E371 */
925 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
926 		                              USB_CLASS_COMM,
927 		                              USB_CDC_SUBCLASS_ETHERNET,
928 		                              USB_CDC_PROTO_NONE),
929 		.driver_info        = (unsigned long)&qmi_wwan_info,
930 	},
931 	{	/* Dell Wireless 5800 (Novatel E362) */
932 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
933 					      USB_CLASS_COMM,
934 					      USB_CDC_SUBCLASS_ETHERNET,
935 					      USB_CDC_PROTO_NONE),
936 		.driver_info        = (unsigned long)&qmi_wwan_info,
937 	},
938 	{	/* Dell Wireless 5800 V2 (Novatel E362) */
939 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
940 					      USB_CLASS_COMM,
941 					      USB_CDC_SUBCLASS_ETHERNET,
942 					      USB_CDC_PROTO_NONE),
943 		.driver_info        = (unsigned long)&qmi_wwan_info,
944 	},
945 	{	/* Dell Wireless 5804 (Novatel E371) */
946 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
947 					      USB_CLASS_COMM,
948 					      USB_CDC_SUBCLASS_ETHERNET,
949 					      USB_CDC_PROTO_NONE),
950 		.driver_info        = (unsigned long)&qmi_wwan_info,
951 	},
952 	{	/* ADU960S */
953 		USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
954 					      USB_CLASS_COMM,
955 					      USB_CDC_SUBCLASS_ETHERNET,
956 					      USB_CDC_PROTO_NONE),
957 		.driver_info        = (unsigned long)&qmi_wwan_info,
958 	},
959 	{	/* HP lt2523 (Novatel E371) */
960 		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
961 					      USB_CLASS_COMM,
962 					      USB_CDC_SUBCLASS_ETHERNET,
963 					      USB_CDC_PROTO_NONE),
964 		.driver_info        = (unsigned long)&qmi_wwan_info,
965 	},
966 	{	/* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
967 		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
968 		.driver_info = (unsigned long)&qmi_wwan_info,
969 	},
970 	{	/* Quectel EP06/EG06/EM06 */
971 		USB_DEVICE_AND_INTERFACE_INFO(0x2c7c, 0x0306,
972 					      USB_CLASS_VENDOR_SPEC,
973 					      USB_SUBCLASS_VENDOR_SPEC,
974 					      0xff),
975 		.driver_info	    = (unsigned long)&qmi_wwan_info_quirk_dtr,
976 	},
977 
978 	/* 3. Combined interface devices matching on interface number */
979 	{QMI_FIXED_INTF(0x0408, 0xea42, 4)},	/* Yota / Megafon M100-1 */
980 	{QMI_FIXED_INTF(0x05c6, 0x6001, 3)},	/* 4G LTE usb-modem U901 */
981 	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
982 	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
983 	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
984 	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
985 	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
986 	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
987 	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
988 	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
989 	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
990 	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
991 	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
992 	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
993 	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
994 	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
995 	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
996 	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
997 	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
998 	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
999 	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1000 	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1001 	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1002 	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1003 	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1004 	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1005 	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1006 	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1007 	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1008 	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1009 	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1010 	{QMI_FIXED_INTF(0x05c6, 0x9025, 4)},	/* Alcatel-sbell ASB TL131 TDD LTE  (China Mobile) */
1011 	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1012 	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1013 	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1014 	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1015 	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1016 	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1017 	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1018 	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1019 	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1020 	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1021 	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1022 	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1023 	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1024 	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1025 	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1026 	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1027 	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1028 	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1029 	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1030 	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1031 	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1032 	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1033 	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1034 	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1035 	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1036 	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1037 	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1038 	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1039 	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1040 	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1041 	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1042 	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1043 	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1044 	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1045 	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1046 	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1047 	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1048 	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1049 	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1050 	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1051 	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1052 	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1053 	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1054 	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1055 	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1056 	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1057 	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1058 	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1059 	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1060 	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1061 	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1062 	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1063 	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1064 	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1065 	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1066 	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1067 	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1068 	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1069 	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1070 	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1071 	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1072 	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1073 	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1074 	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1075 	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1076 	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1077 	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1078 	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1079 	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1080 	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1081 	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1082 	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1083 	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1084 	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1085 	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1086 	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1087 	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1088 	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1089 	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1090 	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1091 	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1092 	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1093 	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1094 	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1095 	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1096 	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1097 	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1098 	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1099 	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1100 	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1101 	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1102 	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1103 	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1104 	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1105 	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1106 	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1107 	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1108 	{QMI_FIXED_INTF(0x05c6, 0x90b2, 3)},    /* ublox R410M */
1109 	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1110 	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1111 	{QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)},	/* YUGA CLM920-NC5 */
1112 	{QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1113 	{QMI_FIXED_INTF(0x0846, 0x68d3, 8)},	/* Netgear Aircard 779S */
1114 	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)},	/* Huawei E173 */
1115 	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},	/* Huawei E1820 */
1116 	{QMI_FIXED_INTF(0x1435, 0xd181, 3)},	/* Wistron NeWeb D18Q1 */
1117 	{QMI_FIXED_INTF(0x1435, 0xd181, 4)},	/* Wistron NeWeb D18Q1 */
1118 	{QMI_FIXED_INTF(0x1435, 0xd181, 5)},	/* Wistron NeWeb D18Q1 */
1119 	{QMI_FIXED_INTF(0x1435, 0xd191, 4)},	/* Wistron NeWeb D19Q1 */
1120 	{QMI_FIXED_INTF(0x16d8, 0x6003, 0)},	/* CMOTech 6003 */
1121 	{QMI_FIXED_INTF(0x16d8, 0x6007, 0)},	/* CMOTech CHE-628S */
1122 	{QMI_FIXED_INTF(0x16d8, 0x6008, 0)},	/* CMOTech CMU-301 */
1123 	{QMI_FIXED_INTF(0x16d8, 0x6280, 0)},	/* CMOTech CHU-628 */
1124 	{QMI_FIXED_INTF(0x16d8, 0x7001, 0)},	/* CMOTech CHU-720S */
1125 	{QMI_FIXED_INTF(0x16d8, 0x7002, 0)},	/* CMOTech 7002 */
1126 	{QMI_FIXED_INTF(0x16d8, 0x7003, 4)},	/* CMOTech CHU-629K */
1127 	{QMI_FIXED_INTF(0x16d8, 0x7004, 3)},	/* CMOTech 7004 */
1128 	{QMI_FIXED_INTF(0x16d8, 0x7006, 5)},	/* CMOTech CGU-629 */
1129 	{QMI_FIXED_INTF(0x16d8, 0x700a, 4)},	/* CMOTech CHU-629S */
1130 	{QMI_FIXED_INTF(0x16d8, 0x7211, 0)},	/* CMOTech CHU-720I */
1131 	{QMI_FIXED_INTF(0x16d8, 0x7212, 0)},	/* CMOTech 7212 */
1132 	{QMI_FIXED_INTF(0x16d8, 0x7213, 0)},	/* CMOTech 7213 */
1133 	{QMI_FIXED_INTF(0x16d8, 0x7251, 1)},	/* CMOTech 7251 */
1134 	{QMI_FIXED_INTF(0x16d8, 0x7252, 1)},	/* CMOTech 7252 */
1135 	{QMI_FIXED_INTF(0x16d8, 0x7253, 1)},	/* CMOTech 7253 */
1136 	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1137 	{QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1138 	{QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1139 	{QMI_FIXED_INTF(0x19d2, 0x0019, 3)},	/* ONDA MT689DC */
1140 	{QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1141 	{QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1142 	{QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1143 	{QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1144 	{QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1145 	{QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1146 	{QMI_FIXED_INTF(0x19d2, 0x0055, 1)},	/* ZTE (Vodafone) K3520-Z */
1147 	{QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1148 	{QMI_FIXED_INTF(0x19d2, 0x0063, 4)},	/* ZTE (Vodafone) K3565-Z */
1149 	{QMI_FIXED_INTF(0x19d2, 0x0104, 4)},	/* ZTE (Vodafone) K4505-Z */
1150 	{QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1151 	{QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1152 	{QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1153 	{QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1154 	{QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1155 	{QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1156 	{QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1157 	{QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1158 	{QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1159 	{QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1160 	{QMI_FIXED_INTF(0x19d2, 0x0157, 5)},	/* ZTE MF683 */
1161 	{QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1162 	{QMI_FIXED_INTF(0x19d2, 0x0167, 4)},	/* ZTE MF820D */
1163 	{QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1164 	{QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1165 	{QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1166 	{QMI_FIXED_INTF(0x19d2, 0x0191, 4)},	/* ZTE EuFi890 */
1167 	{QMI_FIXED_INTF(0x19d2, 0x0199, 1)},	/* ZTE MF820S */
1168 	{QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1169 	{QMI_FIXED_INTF(0x19d2, 0x0257, 3)},	/* ZTE MF821 */
1170 	{QMI_FIXED_INTF(0x19d2, 0x0265, 4)},	/* ONDA MT8205 4G LTE */
1171 	{QMI_FIXED_INTF(0x19d2, 0x0284, 4)},	/* ZTE MF880 */
1172 	{QMI_FIXED_INTF(0x19d2, 0x0326, 4)},	/* ZTE MF821D */
1173 	{QMI_FIXED_INTF(0x19d2, 0x0412, 4)},	/* Telewell TW-LTE 4G */
1174 	{QMI_FIXED_INTF(0x19d2, 0x1008, 4)},	/* ZTE (Vodafone) K3570-Z */
1175 	{QMI_FIXED_INTF(0x19d2, 0x1010, 4)},	/* ZTE (Vodafone) K3571-Z */
1176 	{QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1177 	{QMI_FIXED_INTF(0x19d2, 0x1018, 3)},	/* ZTE (Vodafone) K5006-Z */
1178 	{QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1179 	{QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1180 	{QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1181 	{QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1182 	{QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1183 	{QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1184 	{QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1185 	{QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1186 	{QMI_FIXED_INTF(0x19d2, 0x1270, 5)},	/* ZTE MF667 */
1187 	{QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1188 	{QMI_FIXED_INTF(0x19d2, 0x1402, 2)},	/* ZTE MF60 */
1189 	{QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1190 	{QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1191 	{QMI_FIXED_INTF(0x19d2, 0x1426, 2)},	/* ZTE MF91 */
1192 	{QMI_FIXED_INTF(0x19d2, 0x1428, 2)},	/* Telewell TW-LTE 4G v2 */
1193 	{QMI_FIXED_INTF(0x19d2, 0x2002, 4)},	/* ZTE (Vodafone) K3765-Z */
1194 	{QMI_FIXED_INTF(0x2001, 0x7e19, 4)},	/* D-Link DWM-221 B1 */
1195 	{QMI_FIXED_INTF(0x2001, 0x7e35, 4)},	/* D-Link DWM-222 */
1196 	{QMI_FIXED_INTF(0x2020, 0x2033, 4)},	/* BroadMobi BM806U */
1197 	{QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)},    /* Sierra Wireless MC7700 */
1198 	{QMI_FIXED_INTF(0x114f, 0x68a2, 8)},    /* Sierra Wireless MC7750 */
1199 	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)},	/* Sierra Wireless MC7710 in QMI mode */
1200 	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)},	/* Sierra Wireless MC7710 in QMI mode */
1201 	{QMI_FIXED_INTF(0x1199, 0x68c0, 8)},	/* Sierra Wireless MC7304/MC7354 */
1202 	{QMI_FIXED_INTF(0x1199, 0x68c0, 10)},	/* Sierra Wireless MC7304/MC7354 */
1203 	{QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
1204 	{QMI_FIXED_INTF(0x1199, 0x901f, 8)},    /* Sierra Wireless EM7355 */
1205 	{QMI_FIXED_INTF(0x1199, 0x9041, 8)},	/* Sierra Wireless MC7305/MC7355 */
1206 	{QMI_FIXED_INTF(0x1199, 0x9041, 10)},	/* Sierra Wireless MC7305/MC7355 */
1207 	{QMI_FIXED_INTF(0x1199, 0x9051, 8)},	/* Netgear AirCard 340U */
1208 	{QMI_FIXED_INTF(0x1199, 0x9053, 8)},	/* Sierra Wireless Modem */
1209 	{QMI_FIXED_INTF(0x1199, 0x9054, 8)},	/* Sierra Wireless Modem */
1210 	{QMI_FIXED_INTF(0x1199, 0x9055, 8)},	/* Netgear AirCard 341U */
1211 	{QMI_FIXED_INTF(0x1199, 0x9056, 8)},	/* Sierra Wireless Modem */
1212 	{QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1213 	{QMI_FIXED_INTF(0x1199, 0x9061, 8)},	/* Sierra Wireless Modem */
1214 	{QMI_FIXED_INTF(0x1199, 0x9063, 8)},	/* Sierra Wireless EM7305 */
1215 	{QMI_FIXED_INTF(0x1199, 0x9063, 10)},	/* Sierra Wireless EM7305 */
1216 	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)},	/* Sierra Wireless MC74xx */
1217 	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1218 	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)},	/* Sierra Wireless EM74xx */
1219 	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1220 	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)},	/* Sierra Wireless EM74xx */
1221 	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1222 	{QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)},	/* Sierra Wireless EM7565 */
1223 	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},	/* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1224 	{QMI_FIXED_INTF(0x1bbb, 0x0203, 2)},	/* Alcatel L800MA */
1225 	{QMI_FIXED_INTF(0x2357, 0x0201, 4)},	/* TP-LINK HSUPA Modem MA180 */
1226 	{QMI_FIXED_INTF(0x2357, 0x9000, 4)},	/* TP-LINK MA260 */
1227 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)},	/* Telit LE922A */
1228 	{QMI_FIXED_INTF(0x1bc7, 0x1100, 3)},	/* Telit ME910 */
1229 	{QMI_FIXED_INTF(0x1bc7, 0x1101, 3)},	/* Telit ME910 dual modem */
1230 	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},	/* Telit LE920 */
1231 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)},	/* Telit LE920, LE920A4 */
1232 	{QMI_FIXED_INTF(0x1c9e, 0x9801, 3)},	/* Telewell TW-3G HSPA+ */
1233 	{QMI_FIXED_INTF(0x1c9e, 0x9803, 4)},	/* Telewell TW-3G HSPA+ */
1234 	{QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)},	/* XS Stick W100-2 from 4G Systems */
1235 	{QMI_FIXED_INTF(0x0b3c, 0xc000, 4)},	/* Olivetti Olicard 100 */
1236 	{QMI_FIXED_INTF(0x0b3c, 0xc001, 4)},	/* Olivetti Olicard 120 */
1237 	{QMI_FIXED_INTF(0x0b3c, 0xc002, 4)},	/* Olivetti Olicard 140 */
1238 	{QMI_FIXED_INTF(0x0b3c, 0xc004, 6)},	/* Olivetti Olicard 155 */
1239 	{QMI_FIXED_INTF(0x0b3c, 0xc005, 6)},	/* Olivetti Olicard 200 */
1240 	{QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)},	/* Olivetti Olicard 160 */
1241 	{QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)},	/* Olivetti Olicard 500 */
1242 	{QMI_FIXED_INTF(0x1e2d, 0x0060, 4)},	/* Cinterion PLxx */
1243 	{QMI_FIXED_INTF(0x1e2d, 0x0053, 4)},	/* Cinterion PHxx,PXxx */
1244 	{QMI_FIXED_INTF(0x1e2d, 0x0063, 10)},	/* Cinterion ALASxx (1 RmNet) */
1245 	{QMI_FIXED_INTF(0x1e2d, 0x0082, 4)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1246 	{QMI_FIXED_INTF(0x1e2d, 0x0082, 5)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1247 	{QMI_FIXED_INTF(0x1e2d, 0x0083, 4)},	/* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1248 	{QMI_FIXED_INTF(0x413c, 0x81a2, 8)},	/* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1249 	{QMI_FIXED_INTF(0x413c, 0x81a3, 8)},	/* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1250 	{QMI_FIXED_INTF(0x413c, 0x81a4, 8)},	/* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1251 	{QMI_FIXED_INTF(0x413c, 0x81a8, 8)},	/* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1252 	{QMI_FIXED_INTF(0x413c, 0x81a9, 8)},	/* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1253 	{QMI_FIXED_INTF(0x413c, 0x81b1, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1254 	{QMI_FIXED_INTF(0x413c, 0x81b3, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1255 	{QMI_FIXED_INTF(0x413c, 0x81b6, 8)},	/* Dell Wireless 5811e */
1256 	{QMI_FIXED_INTF(0x413c, 0x81b6, 10)},	/* Dell Wireless 5811e */
1257 	{QMI_FIXED_INTF(0x413c, 0x81d7, 0)},	/* Dell Wireless 5821e */
1258 	{QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)},	/* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1259 	{QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)},	/* HP lt4120 Snapdragon X5 LTE */
1260 	{QMI_FIXED_INTF(0x22de, 0x9061, 3)},	/* WeTelecom WPD-600N */
1261 	{QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)},	/* SIMCom 7100E, 7230E, 7600E ++ */
1262 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0125, 4)},	/* Quectel EC25, EC20 R2.0  Mini PCIe */
1263 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)},	/* Quectel EC21 Mini PCIe */
1264 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)},	/* Quectel EG91 */
1265 	{QMI_FIXED_INTF(0x2c7c, 0x0296, 4)},	/* Quectel BG96 */
1266 
1267 	/* 4. Gobi 1000 devices */
1268 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9212)},	/* Acer Gobi Modem Device */
1269 	{QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)},	/* HP un2400 Gobi Modem Device */
1270 	{QMI_GOBI1K_DEVICE(0x04da, 0x250d)},	/* Panasonic Gobi Modem device */
1271 	{QMI_GOBI1K_DEVICE(0x413c, 0x8172)},	/* Dell Gobi Modem device */
1272 	{QMI_GOBI1K_DEVICE(0x1410, 0xa001)},	/* Novatel/Verizon USB-1000 */
1273 	{QMI_GOBI1K_DEVICE(0x1410, 0xa002)},	/* Novatel Gobi Modem device */
1274 	{QMI_GOBI1K_DEVICE(0x1410, 0xa003)},	/* Novatel Gobi Modem device */
1275 	{QMI_GOBI1K_DEVICE(0x1410, 0xa004)},	/* Novatel Gobi Modem device */
1276 	{QMI_GOBI1K_DEVICE(0x1410, 0xa005)},	/* Novatel Gobi Modem device */
1277 	{QMI_GOBI1K_DEVICE(0x1410, 0xa006)},	/* Novatel Gobi Modem device */
1278 	{QMI_GOBI1K_DEVICE(0x1410, 0xa007)},	/* Novatel Gobi Modem device */
1279 	{QMI_GOBI1K_DEVICE(0x0b05, 0x1776)},	/* Asus Gobi Modem device */
1280 	{QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)},	/* ONDA Gobi Modem device */
1281 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9001)},	/* Generic Gobi Modem device */
1282 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9002)},	/* Generic Gobi Modem device */
1283 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9202)},	/* Generic Gobi Modem device */
1284 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9203)},	/* Generic Gobi Modem device */
1285 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9222)},	/* Generic Gobi Modem device */
1286 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9009)},	/* Generic Gobi Modem device */
1287 
1288 	/* 5. Gobi 2000 and 3000 devices */
1289 	{QMI_GOBI_DEVICE(0x413c, 0x8186)},	/* Dell Gobi 2000 Modem device (N0218, VU936) */
1290 	{QMI_GOBI_DEVICE(0x413c, 0x8194)},	/* Dell Gobi 3000 Composite */
1291 	{QMI_GOBI_DEVICE(0x05c6, 0x920b)},	/* Generic Gobi 2000 Modem device */
1292 	{QMI_GOBI_DEVICE(0x05c6, 0x9225)},	/* Sony Gobi 2000 Modem device (N0279, VU730) */
1293 	{QMI_GOBI_DEVICE(0x05c6, 0x9245)},	/* Samsung Gobi 2000 Modem device (VL176) */
1294 	{QMI_GOBI_DEVICE(0x03f0, 0x251d)},	/* HP Gobi 2000 Modem device (VP412) */
1295 	{QMI_GOBI_DEVICE(0x05c6, 0x9215)},	/* Acer Gobi 2000 Modem device (VP413) */
1296 	{QMI_FIXED_INTF(0x05c6, 0x9215, 4)},	/* Quectel EC20 Mini PCIe */
1297 	{QMI_GOBI_DEVICE(0x05c6, 0x9265)},	/* Asus Gobi 2000 Modem device (VR305) */
1298 	{QMI_GOBI_DEVICE(0x05c6, 0x9235)},	/* Top Global Gobi 2000 Modem device (VR306) */
1299 	{QMI_GOBI_DEVICE(0x05c6, 0x9275)},	/* iRex Technologies Gobi 2000 Modem device (VR307) */
1300 	{QMI_GOBI_DEVICE(0x0af0, 0x8120)},	/* Option GTM681W */
1301 	{QMI_GOBI_DEVICE(0x1199, 0x68a5)},	/* Sierra Wireless Modem */
1302 	{QMI_GOBI_DEVICE(0x1199, 0x68a9)},	/* Sierra Wireless Modem */
1303 	{QMI_GOBI_DEVICE(0x1199, 0x9001)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1304 	{QMI_GOBI_DEVICE(0x1199, 0x9002)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1305 	{QMI_GOBI_DEVICE(0x1199, 0x9003)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1306 	{QMI_GOBI_DEVICE(0x1199, 0x9004)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1307 	{QMI_GOBI_DEVICE(0x1199, 0x9005)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1308 	{QMI_GOBI_DEVICE(0x1199, 0x9006)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1309 	{QMI_GOBI_DEVICE(0x1199, 0x9007)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1310 	{QMI_GOBI_DEVICE(0x1199, 0x9008)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1311 	{QMI_GOBI_DEVICE(0x1199, 0x9009)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1312 	{QMI_GOBI_DEVICE(0x1199, 0x900a)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1313 	{QMI_GOBI_DEVICE(0x1199, 0x9011)},	/* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1314 	{QMI_GOBI_DEVICE(0x16d8, 0x8002)},	/* CMDTech Gobi 2000 Modem device (VU922) */
1315 	{QMI_GOBI_DEVICE(0x05c6, 0x9205)},	/* Gobi 2000 Modem device */
1316 	{QMI_GOBI_DEVICE(0x1199, 0x9013)},	/* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1317 	{QMI_GOBI_DEVICE(0x03f0, 0x371d)},	/* HP un2430 Mobile Broadband Module */
1318 	{QMI_GOBI_DEVICE(0x1199, 0x9015)},	/* Sierra Wireless Gobi 3000 Modem device */
1319 	{QMI_GOBI_DEVICE(0x1199, 0x9019)},	/* Sierra Wireless Gobi 3000 Modem device */
1320 	{QMI_GOBI_DEVICE(0x1199, 0x901b)},	/* Sierra Wireless MC7770 */
1321 	{QMI_GOBI_DEVICE(0x12d1, 0x14f1)},	/* Sony Gobi 3000 Composite */
1322 	{QMI_GOBI_DEVICE(0x1410, 0xa021)},	/* Foxconn Gobi 3000 Modem device (Novatel E396) */
1323 
1324 	{ }					/* END */
1325 };
1326 MODULE_DEVICE_TABLE(usb, products);
1327 
quectel_ec20_detected(struct usb_interface * intf)1328 static bool quectel_ec20_detected(struct usb_interface *intf)
1329 {
1330 	struct usb_device *dev = interface_to_usbdev(intf);
1331 
1332 	if (dev->actconfig &&
1333 	    le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1334 	    le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1335 	    dev->actconfig->desc.bNumInterfaces == 5)
1336 		return true;
1337 
1338 	return false;
1339 }
1340 
quectel_ep06_diag_detected(struct usb_interface * intf)1341 static bool quectel_ep06_diag_detected(struct usb_interface *intf)
1342 {
1343 	struct usb_device *dev = interface_to_usbdev(intf);
1344 	struct usb_interface_descriptor intf_desc = intf->cur_altsetting->desc;
1345 
1346 	if (le16_to_cpu(dev->descriptor.idVendor) == 0x2c7c &&
1347 	    le16_to_cpu(dev->descriptor.idProduct) == 0x0306 &&
1348 	    intf_desc.bNumEndpoints == 2)
1349 		return true;
1350 
1351 	return false;
1352 }
1353 
qmi_wwan_probe(struct usb_interface * intf,const struct usb_device_id * prod)1354 static int qmi_wwan_probe(struct usb_interface *intf,
1355 			  const struct usb_device_id *prod)
1356 {
1357 	struct usb_device_id *id = (struct usb_device_id *)prod;
1358 	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1359 
1360 	/* Workaround to enable dynamic IDs.  This disables usbnet
1361 	 * blacklisting functionality.  Which, if required, can be
1362 	 * reimplemented here by using a magic "blacklist" value
1363 	 * instead of 0 in the static device id table
1364 	 */
1365 	if (!id->driver_info) {
1366 		dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1367 		id->driver_info = (unsigned long)&qmi_wwan_info;
1368 	}
1369 
1370 	/* There are devices where the same interface number can be
1371 	 * configured as different functions. We should only bind to
1372 	 * vendor specific functions when matching on interface number
1373 	 */
1374 	if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1375 	    desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1376 		dev_dbg(&intf->dev,
1377 			"Rejecting interface number match for class %02x\n",
1378 			desc->bInterfaceClass);
1379 		return -ENODEV;
1380 	}
1381 
1382 	/* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1383 	if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1384 		dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1385 		return -ENODEV;
1386 	}
1387 
1388 	/* Quectel EP06/EM06/EG06 supports dynamic interface configuration, so
1389 	 * we need to match on class/subclass/protocol. These values are
1390 	 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1391 	 * different. Ignore the current interface if the number of endpoints
1392 	 * the number for the diag interface (two).
1393 	 */
1394 	if (quectel_ep06_diag_detected(intf))
1395 		return -ENODEV;
1396 
1397 	return usbnet_probe(intf, id);
1398 }
1399 
qmi_wwan_disconnect(struct usb_interface * intf)1400 static void qmi_wwan_disconnect(struct usb_interface *intf)
1401 {
1402 	struct usbnet *dev = usb_get_intfdata(intf);
1403 	struct qmi_wwan_state *info;
1404 	struct list_head *iter;
1405 	struct net_device *ldev;
1406 
1407 	/* called twice if separate control and data intf */
1408 	if (!dev)
1409 		return;
1410 	info = (void *)&dev->data;
1411 	if (info->flags & QMI_WWAN_FLAG_MUX) {
1412 		if (!rtnl_trylock()) {
1413 			restart_syscall();
1414 			return;
1415 		}
1416 		rcu_read_lock();
1417 		netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1418 			qmimux_unregister_device(ldev);
1419 		rcu_read_unlock();
1420 		rtnl_unlock();
1421 		info->flags &= ~QMI_WWAN_FLAG_MUX;
1422 	}
1423 	usbnet_disconnect(intf);
1424 }
1425 
1426 static struct usb_driver qmi_wwan_driver = {
1427 	.name		      = "qmi_wwan",
1428 	.id_table	      = products,
1429 	.probe		      = qmi_wwan_probe,
1430 	.disconnect	      = qmi_wwan_disconnect,
1431 	.suspend	      = qmi_wwan_suspend,
1432 	.resume		      =	qmi_wwan_resume,
1433 	.reset_resume         = qmi_wwan_resume,
1434 	.supports_autosuspend = 1,
1435 	.disable_hub_initiated_lpm = 1,
1436 };
1437 
1438 module_usb_driver(qmi_wwan_driver);
1439 
1440 MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1441 MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1442 MODULE_LICENSE("GPL");
1443