1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
4 *
5 * The probing code is heavily inspired by cdc_ether, which is:
6 * Copyright (C) 2003-2005 by David Brownell
7 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
8 */
9
10 #include <linux/module.h>
11 #include <linux/sched/signal.h>
12 #include <linux/netdevice.h>
13 #include <linux/ethtool.h>
14 #include <linux/etherdevice.h>
15 #include <linux/if_arp.h>
16 #include <linux/kstrtox.h>
17 #include <linux/mii.h>
18 #include <linux/rtnetlink.h>
19 #include <linux/usb.h>
20 #include <linux/usb/cdc.h>
21 #include <linux/usb/usbnet.h>
22 #include <linux/usb/cdc-wdm.h>
23 #include <linux/u64_stats_sync.h>
24
25 /* This driver supports wwan (3G/LTE/?) devices using a vendor
26 * specific management protocol called Qualcomm MSM Interface (QMI) -
27 * in addition to the more common AT commands over serial interface
28 * management
29 *
30 * QMI is wrapped in CDC, using CDC encapsulated commands on the
31 * control ("master") interface of a two-interface CDC Union
32 * resembling standard CDC ECM. The devices do not use the control
33 * interface for any other CDC messages. Most likely because the
34 * management protocol is used in place of the standard CDC
35 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
36 *
37 * Alternatively, control and data functions can be combined in a
38 * single USB interface.
39 *
40 * Handling a protocol like QMI is out of the scope for any driver.
41 * It is exported as a character device using the cdc-wdm driver as
42 * a subdriver, enabling userspace applications ("modem managers") to
43 * handle it.
44 *
45 * These devices may alternatively/additionally be configured using AT
46 * commands on a serial interface
47 */
48
49 /* driver specific data */
50 struct qmi_wwan_state {
51 struct usb_driver *subdriver;
52 atomic_t pmcount;
53 unsigned long flags;
54 struct usb_interface *control;
55 struct usb_interface *data;
56 };
57
58 enum qmi_wwan_flags {
59 QMI_WWAN_FLAG_RAWIP = 1 << 0,
60 QMI_WWAN_FLAG_MUX = 1 << 1,
61 QMI_WWAN_FLAG_PASS_THROUGH = 1 << 2,
62 };
63
64 enum qmi_wwan_quirks {
65 QMI_WWAN_QUIRK_DTR = 1 << 0, /* needs "set DTR" request */
66 };
67
68 struct qmimux_hdr {
69 u8 pad;
70 u8 mux_id;
71 __be16 pkt_len;
72 };
73
74 struct qmimux_priv {
75 struct net_device *real_dev;
76 u8 mux_id;
77 };
78
qmimux_open(struct net_device * dev)79 static int qmimux_open(struct net_device *dev)
80 {
81 struct qmimux_priv *priv = netdev_priv(dev);
82 struct net_device *real_dev = priv->real_dev;
83
84 if (!(priv->real_dev->flags & IFF_UP))
85 return -ENETDOWN;
86
87 if (netif_carrier_ok(real_dev))
88 netif_carrier_on(dev);
89 return 0;
90 }
91
qmimux_stop(struct net_device * dev)92 static int qmimux_stop(struct net_device *dev)
93 {
94 netif_carrier_off(dev);
95 return 0;
96 }
97
qmimux_start_xmit(struct sk_buff * skb,struct net_device * dev)98 static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
99 {
100 struct qmimux_priv *priv = netdev_priv(dev);
101 unsigned int len = skb->len;
102 struct qmimux_hdr *hdr;
103 netdev_tx_t ret;
104
105 hdr = skb_push(skb, sizeof(struct qmimux_hdr));
106 hdr->pad = 0;
107 hdr->mux_id = priv->mux_id;
108 hdr->pkt_len = cpu_to_be16(len);
109 skb->dev = priv->real_dev;
110 ret = dev_queue_xmit(skb);
111
112 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN))
113 dev_sw_netstats_tx_add(dev, 1, len);
114 else
115 dev->stats.tx_dropped++;
116
117 return ret;
118 }
119
120 static const struct net_device_ops qmimux_netdev_ops = {
121 .ndo_open = qmimux_open,
122 .ndo_stop = qmimux_stop,
123 .ndo_start_xmit = qmimux_start_xmit,
124 .ndo_get_stats64 = dev_get_tstats64,
125 };
126
qmimux_setup(struct net_device * dev)127 static void qmimux_setup(struct net_device *dev)
128 {
129 dev->header_ops = NULL; /* No header */
130 dev->type = ARPHRD_NONE;
131 dev->hard_header_len = 0;
132 dev->addr_len = 0;
133 dev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
134 dev->netdev_ops = &qmimux_netdev_ops;
135 dev->mtu = 1500;
136 dev->needs_free_netdev = true;
137 }
138
qmimux_find_dev(struct usbnet * dev,u8 mux_id)139 static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
140 {
141 struct qmimux_priv *priv;
142 struct list_head *iter;
143 struct net_device *ldev;
144
145 rcu_read_lock();
146 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
147 priv = netdev_priv(ldev);
148 if (priv->mux_id == mux_id) {
149 rcu_read_unlock();
150 return ldev;
151 }
152 }
153 rcu_read_unlock();
154 return NULL;
155 }
156
qmimux_has_slaves(struct usbnet * dev)157 static bool qmimux_has_slaves(struct usbnet *dev)
158 {
159 return !list_empty(&dev->net->adj_list.upper);
160 }
161
qmimux_rx_fixup(struct usbnet * dev,struct sk_buff * skb)162 static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
163 {
164 unsigned int len, offset = 0, pad_len, pkt_len;
165 struct qmimux_hdr *hdr;
166 struct net_device *net;
167 struct sk_buff *skbn;
168 u8 qmimux_hdr_sz = sizeof(*hdr);
169
170 while (offset + qmimux_hdr_sz < skb->len) {
171 hdr = (struct qmimux_hdr *)(skb->data + offset);
172 len = be16_to_cpu(hdr->pkt_len);
173
174 /* drop the packet, bogus length */
175 if (offset + len + qmimux_hdr_sz > skb->len)
176 return 0;
177
178 /* control packet, we do not know what to do */
179 if (hdr->pad & 0x80)
180 goto skip;
181
182 /* extract padding length and check for valid length info */
183 pad_len = hdr->pad & 0x3f;
184 if (len == 0 || pad_len >= len)
185 goto skip;
186 pkt_len = len - pad_len;
187
188 net = qmimux_find_dev(dev, hdr->mux_id);
189 if (!net)
190 goto skip;
191 skbn = netdev_alloc_skb(net, pkt_len + LL_MAX_HEADER);
192 if (!skbn)
193 return 0;
194
195 switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
196 case 0x40:
197 skbn->protocol = htons(ETH_P_IP);
198 break;
199 case 0x60:
200 skbn->protocol = htons(ETH_P_IPV6);
201 break;
202 default:
203 /* not ip - do not know what to do */
204 goto skip;
205 }
206
207 skb_reserve(skbn, LL_MAX_HEADER);
208 skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
209 if (netif_rx(skbn) != NET_RX_SUCCESS) {
210 net->stats.rx_errors++;
211 return 0;
212 } else {
213 dev_sw_netstats_rx_add(net, pkt_len);
214 }
215
216 skip:
217 offset += len + qmimux_hdr_sz;
218 }
219 return 1;
220 }
221
mux_id_show(struct device * d,struct device_attribute * attr,char * buf)222 static ssize_t mux_id_show(struct device *d, struct device_attribute *attr, char *buf)
223 {
224 struct net_device *dev = to_net_dev(d);
225 struct qmimux_priv *priv;
226
227 priv = netdev_priv(dev);
228
229 return sysfs_emit(buf, "0x%02x\n", priv->mux_id);
230 }
231
232 static DEVICE_ATTR_RO(mux_id);
233
234 static struct attribute *qmi_wwan_sysfs_qmimux_attrs[] = {
235 &dev_attr_mux_id.attr,
236 NULL,
237 };
238
239 static struct attribute_group qmi_wwan_sysfs_qmimux_attr_group = {
240 .name = "qmap",
241 .attrs = qmi_wwan_sysfs_qmimux_attrs,
242 };
243
qmimux_register_device(struct net_device * real_dev,u8 mux_id)244 static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
245 {
246 struct net_device *new_dev;
247 struct qmimux_priv *priv;
248 int err;
249
250 new_dev = alloc_netdev(sizeof(struct qmimux_priv),
251 "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
252 if (!new_dev)
253 return -ENOBUFS;
254
255 dev_net_set(new_dev, dev_net(real_dev));
256 priv = netdev_priv(new_dev);
257 priv->mux_id = mux_id;
258 priv->real_dev = real_dev;
259
260 new_dev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
261 if (!new_dev->tstats) {
262 err = -ENOBUFS;
263 goto out_free_newdev;
264 }
265
266 new_dev->sysfs_groups[0] = &qmi_wwan_sysfs_qmimux_attr_group;
267
268 err = register_netdevice(new_dev);
269 if (err < 0)
270 goto out_free_newdev;
271
272 /* Account for reference in struct qmimux_priv_priv */
273 dev_hold(real_dev);
274
275 err = netdev_upper_dev_link(real_dev, new_dev, NULL);
276 if (err)
277 goto out_unregister_netdev;
278
279 netif_stacked_transfer_operstate(real_dev, new_dev);
280
281 return 0;
282
283 out_unregister_netdev:
284 unregister_netdevice(new_dev);
285 dev_put(real_dev);
286
287 out_free_newdev:
288 free_netdev(new_dev);
289 return err;
290 }
291
qmimux_unregister_device(struct net_device * dev,struct list_head * head)292 static void qmimux_unregister_device(struct net_device *dev,
293 struct list_head *head)
294 {
295 struct qmimux_priv *priv = netdev_priv(dev);
296 struct net_device *real_dev = priv->real_dev;
297
298 free_percpu(dev->tstats);
299 netdev_upper_dev_unlink(real_dev, dev);
300 unregister_netdevice_queue(dev, head);
301
302 /* Get rid of the reference to real_dev */
303 dev_put(real_dev);
304 }
305
qmi_wwan_netdev_setup(struct net_device * net)306 static void qmi_wwan_netdev_setup(struct net_device *net)
307 {
308 struct usbnet *dev = netdev_priv(net);
309 struct qmi_wwan_state *info = (void *)&dev->data;
310
311 if (info->flags & QMI_WWAN_FLAG_RAWIP) {
312 net->header_ops = NULL; /* No header */
313 net->type = ARPHRD_NONE;
314 net->hard_header_len = 0;
315 net->addr_len = 0;
316 net->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
317 set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
318 netdev_dbg(net, "mode: raw IP\n");
319 } else if (!net->header_ops) { /* don't bother if already set */
320 ether_setup(net);
321 /* Restoring min/max mtu values set originally by usbnet */
322 net->min_mtu = 0;
323 net->max_mtu = ETH_MAX_MTU;
324 clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
325 netdev_dbg(net, "mode: Ethernet\n");
326 }
327
328 /* recalculate buffers after changing hard_header_len */
329 usbnet_change_mtu(net, net->mtu);
330 }
331
raw_ip_show(struct device * d,struct device_attribute * attr,char * buf)332 static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
333 {
334 struct usbnet *dev = netdev_priv(to_net_dev(d));
335 struct qmi_wwan_state *info = (void *)&dev->data;
336
337 return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
338 }
339
raw_ip_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)340 static ssize_t raw_ip_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
341 {
342 struct usbnet *dev = netdev_priv(to_net_dev(d));
343 struct qmi_wwan_state *info = (void *)&dev->data;
344 bool enable;
345 int ret;
346
347 if (kstrtobool(buf, &enable))
348 return -EINVAL;
349
350 /* no change? */
351 if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
352 return len;
353
354 /* ip mode cannot be cleared when pass through mode is set */
355 if (!enable && (info->flags & QMI_WWAN_FLAG_PASS_THROUGH)) {
356 netdev_err(dev->net,
357 "Cannot clear ip mode on pass through device\n");
358 return -EINVAL;
359 }
360
361 if (!rtnl_trylock())
362 return restart_syscall();
363
364 /* we don't want to modify a running netdev */
365 if (netif_running(dev->net)) {
366 netdev_err(dev->net, "Cannot change a running device\n");
367 ret = -EBUSY;
368 goto err;
369 }
370
371 /* let other drivers deny the change */
372 ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
373 ret = notifier_to_errno(ret);
374 if (ret) {
375 netdev_err(dev->net, "Type change was refused\n");
376 goto err;
377 }
378
379 if (enable)
380 info->flags |= QMI_WWAN_FLAG_RAWIP;
381 else
382 info->flags &= ~QMI_WWAN_FLAG_RAWIP;
383 qmi_wwan_netdev_setup(dev->net);
384 call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
385 ret = len;
386 err:
387 rtnl_unlock();
388 return ret;
389 }
390
add_mux_show(struct device * d,struct device_attribute * attr,char * buf)391 static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
392 {
393 struct net_device *dev = to_net_dev(d);
394 struct qmimux_priv *priv;
395 struct list_head *iter;
396 struct net_device *ldev;
397 ssize_t count = 0;
398
399 rcu_read_lock();
400 netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
401 priv = netdev_priv(ldev);
402 count += scnprintf(&buf[count], PAGE_SIZE - count,
403 "0x%02x\n", priv->mux_id);
404 }
405 rcu_read_unlock();
406 return count;
407 }
408
add_mux_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)409 static ssize_t add_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
410 {
411 struct usbnet *dev = netdev_priv(to_net_dev(d));
412 struct qmi_wwan_state *info = (void *)&dev->data;
413 u8 mux_id;
414 int ret;
415
416 if (kstrtou8(buf, 0, &mux_id))
417 return -EINVAL;
418
419 /* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
420 if (mux_id < 1 || mux_id > 254)
421 return -EINVAL;
422
423 if (!rtnl_trylock())
424 return restart_syscall();
425
426 if (qmimux_find_dev(dev, mux_id)) {
427 netdev_err(dev->net, "mux_id already present\n");
428 ret = -EINVAL;
429 goto err;
430 }
431
432 ret = qmimux_register_device(dev->net, mux_id);
433 if (!ret) {
434 info->flags |= QMI_WWAN_FLAG_MUX;
435 ret = len;
436 }
437 err:
438 rtnl_unlock();
439 return ret;
440 }
441
del_mux_show(struct device * d,struct device_attribute * attr,char * buf)442 static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
443 {
444 return add_mux_show(d, attr, buf);
445 }
446
del_mux_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)447 static ssize_t del_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
448 {
449 struct usbnet *dev = netdev_priv(to_net_dev(d));
450 struct qmi_wwan_state *info = (void *)&dev->data;
451 struct net_device *del_dev;
452 u8 mux_id;
453 int ret = 0;
454
455 if (kstrtou8(buf, 0, &mux_id))
456 return -EINVAL;
457
458 if (!rtnl_trylock())
459 return restart_syscall();
460
461 del_dev = qmimux_find_dev(dev, mux_id);
462 if (!del_dev) {
463 netdev_err(dev->net, "mux_id not present\n");
464 ret = -EINVAL;
465 goto err;
466 }
467 qmimux_unregister_device(del_dev, NULL);
468
469 if (!qmimux_has_slaves(dev))
470 info->flags &= ~QMI_WWAN_FLAG_MUX;
471 ret = len;
472 err:
473 rtnl_unlock();
474 return ret;
475 }
476
pass_through_show(struct device * d,struct device_attribute * attr,char * buf)477 static ssize_t pass_through_show(struct device *d,
478 struct device_attribute *attr, char *buf)
479 {
480 struct usbnet *dev = netdev_priv(to_net_dev(d));
481 struct qmi_wwan_state *info;
482
483 info = (void *)&dev->data;
484 return sprintf(buf, "%c\n",
485 info->flags & QMI_WWAN_FLAG_PASS_THROUGH ? 'Y' : 'N');
486 }
487
pass_through_store(struct device * d,struct device_attribute * attr,const char * buf,size_t len)488 static ssize_t pass_through_store(struct device *d,
489 struct device_attribute *attr,
490 const char *buf, size_t len)
491 {
492 struct usbnet *dev = netdev_priv(to_net_dev(d));
493 struct qmi_wwan_state *info;
494 bool enable;
495
496 if (kstrtobool(buf, &enable))
497 return -EINVAL;
498
499 info = (void *)&dev->data;
500
501 /* no change? */
502 if (enable == (info->flags & QMI_WWAN_FLAG_PASS_THROUGH))
503 return len;
504
505 /* pass through mode can be set for raw ip devices only */
506 if (!(info->flags & QMI_WWAN_FLAG_RAWIP)) {
507 netdev_err(dev->net,
508 "Cannot set pass through mode on non ip device\n");
509 return -EINVAL;
510 }
511
512 if (enable)
513 info->flags |= QMI_WWAN_FLAG_PASS_THROUGH;
514 else
515 info->flags &= ~QMI_WWAN_FLAG_PASS_THROUGH;
516
517 return len;
518 }
519
520 static DEVICE_ATTR_RW(raw_ip);
521 static DEVICE_ATTR_RW(add_mux);
522 static DEVICE_ATTR_RW(del_mux);
523 static DEVICE_ATTR_RW(pass_through);
524
525 static struct attribute *qmi_wwan_sysfs_attrs[] = {
526 &dev_attr_raw_ip.attr,
527 &dev_attr_add_mux.attr,
528 &dev_attr_del_mux.attr,
529 &dev_attr_pass_through.attr,
530 NULL,
531 };
532
533 static struct attribute_group qmi_wwan_sysfs_attr_group = {
534 .name = "qmi",
535 .attrs = qmi_wwan_sysfs_attrs,
536 };
537
538 /* default ethernet address used by the modem */
539 static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
540
541 static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
542
543 /* Make up an ethernet header if the packet doesn't have one.
544 *
545 * A firmware bug common among several devices cause them to send raw
546 * IP packets under some circumstances. There is no way for the
547 * driver/host to know when this will happen. And even when the bug
548 * hits, some packets will still arrive with an intact header.
549 *
550 * The supported devices are only capably of sending IPv4, IPv6 and
551 * ARP packets on a point-to-point link. Any packet with an ethernet
552 * header will have either our address or a broadcast/multicast
553 * address as destination. ARP packets will always have a header.
554 *
555 * This means that this function will reliably add the appropriate
556 * header iff necessary, provided our hardware address does not start
557 * with 4 or 6.
558 *
559 * Another common firmware bug results in all packets being addressed
560 * to 00:a0:c6:00:00:00 despite the host address being different.
561 * This function will also fixup such packets.
562 */
qmi_wwan_rx_fixup(struct usbnet * dev,struct sk_buff * skb)563 static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
564 {
565 struct qmi_wwan_state *info = (void *)&dev->data;
566 bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
567 __be16 proto;
568
569 /* This check is no longer done by usbnet */
570 if (skb->len < dev->net->hard_header_len)
571 return 0;
572
573 if (info->flags & QMI_WWAN_FLAG_MUX)
574 return qmimux_rx_fixup(dev, skb);
575
576 if (info->flags & QMI_WWAN_FLAG_PASS_THROUGH) {
577 skb->protocol = htons(ETH_P_MAP);
578 return 1;
579 }
580
581 switch (skb->data[0] & 0xf0) {
582 case 0x40:
583 proto = htons(ETH_P_IP);
584 break;
585 case 0x60:
586 proto = htons(ETH_P_IPV6);
587 break;
588 case 0x00:
589 if (rawip)
590 return 0;
591 if (is_multicast_ether_addr(skb->data))
592 return 1;
593 /* possibly bogus destination - rewrite just in case */
594 skb_reset_mac_header(skb);
595 goto fix_dest;
596 default:
597 if (rawip)
598 return 0;
599 /* pass along other packets without modifications */
600 return 1;
601 }
602 if (rawip) {
603 skb_reset_mac_header(skb);
604 skb->dev = dev->net; /* normally set by eth_type_trans */
605 skb->protocol = proto;
606 return 1;
607 }
608
609 if (skb_headroom(skb) < ETH_HLEN)
610 return 0;
611 skb_push(skb, ETH_HLEN);
612 skb_reset_mac_header(skb);
613 eth_hdr(skb)->h_proto = proto;
614 eth_zero_addr(eth_hdr(skb)->h_source);
615 fix_dest:
616 memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
617 return 1;
618 }
619
620 /* very simplistic detection of IPv4 or IPv6 headers */
possibly_iphdr(const char * data)621 static bool possibly_iphdr(const char *data)
622 {
623 return (data[0] & 0xd0) == 0x40;
624 }
625
626 /* disallow addresses which may be confused with IP headers */
qmi_wwan_mac_addr(struct net_device * dev,void * p)627 static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
628 {
629 int ret;
630 struct sockaddr *addr = p;
631
632 ret = eth_prepare_mac_addr_change(dev, p);
633 if (ret < 0)
634 return ret;
635 if (possibly_iphdr(addr->sa_data))
636 return -EADDRNOTAVAIL;
637 eth_commit_mac_addr_change(dev, p);
638 return 0;
639 }
640
641 static const struct net_device_ops qmi_wwan_netdev_ops = {
642 .ndo_open = usbnet_open,
643 .ndo_stop = usbnet_stop,
644 .ndo_start_xmit = usbnet_start_xmit,
645 .ndo_tx_timeout = usbnet_tx_timeout,
646 .ndo_change_mtu = usbnet_change_mtu,
647 .ndo_get_stats64 = dev_get_tstats64,
648 .ndo_set_mac_address = qmi_wwan_mac_addr,
649 .ndo_validate_addr = eth_validate_addr,
650 };
651
652 /* using a counter to merge subdriver requests with our own into a
653 * combined state
654 */
qmi_wwan_manage_power(struct usbnet * dev,int on)655 static int qmi_wwan_manage_power(struct usbnet *dev, int on)
656 {
657 struct qmi_wwan_state *info = (void *)&dev->data;
658 int rv;
659
660 dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
661 atomic_read(&info->pmcount), on);
662
663 if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
664 (!on && atomic_dec_and_test(&info->pmcount))) {
665 /* need autopm_get/put here to ensure the usbcore sees
666 * the new value
667 */
668 rv = usb_autopm_get_interface(dev->intf);
669 dev->intf->needs_remote_wakeup = on;
670 if (!rv)
671 usb_autopm_put_interface(dev->intf);
672 }
673 return 0;
674 }
675
qmi_wwan_cdc_wdm_manage_power(struct usb_interface * intf,int on)676 static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
677 {
678 struct usbnet *dev = usb_get_intfdata(intf);
679
680 /* can be called while disconnecting */
681 if (!dev)
682 return 0;
683 return qmi_wwan_manage_power(dev, on);
684 }
685
686 /* collect all three endpoints and register subdriver */
qmi_wwan_register_subdriver(struct usbnet * dev)687 static int qmi_wwan_register_subdriver(struct usbnet *dev)
688 {
689 int rv;
690 struct usb_driver *subdriver = NULL;
691 struct qmi_wwan_state *info = (void *)&dev->data;
692
693 /* collect bulk endpoints */
694 rv = usbnet_get_endpoints(dev, info->data);
695 if (rv < 0)
696 goto err;
697
698 /* update status endpoint if separate control interface */
699 if (info->control != info->data)
700 dev->status = &info->control->cur_altsetting->endpoint[0];
701
702 /* require interrupt endpoint for subdriver */
703 if (!dev->status) {
704 rv = -EINVAL;
705 goto err;
706 }
707
708 /* for subdriver power management */
709 atomic_set(&info->pmcount, 0);
710
711 /* register subdriver */
712 subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
713 4096, WWAN_PORT_QMI,
714 &qmi_wwan_cdc_wdm_manage_power);
715 if (IS_ERR(subdriver)) {
716 dev_err(&info->control->dev, "subdriver registration failed\n");
717 rv = PTR_ERR(subdriver);
718 goto err;
719 }
720
721 /* prevent usbnet from using status endpoint */
722 dev->status = NULL;
723
724 /* save subdriver struct for suspend/resume wrappers */
725 info->subdriver = subdriver;
726
727 err:
728 return rv;
729 }
730
731 /* Send CDC SetControlLineState request, setting or clearing the DTR.
732 * "Required for Autoconnect and 9x30 to wake up" according to the
733 * GobiNet driver. The requirement has been verified on an MDM9230
734 * based Sierra Wireless MC7455
735 */
qmi_wwan_change_dtr(struct usbnet * dev,bool on)736 static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
737 {
738 u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
739
740 return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
741 USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
742 on ? 0x01 : 0x00, intf, NULL, 0);
743 }
744
qmi_wwan_bind(struct usbnet * dev,struct usb_interface * intf)745 static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
746 {
747 int status;
748 u8 *buf = intf->cur_altsetting->extra;
749 int len = intf->cur_altsetting->extralen;
750 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
751 struct usb_cdc_union_desc *cdc_union;
752 struct usb_cdc_ether_desc *cdc_ether;
753 struct usb_driver *driver = driver_of(intf);
754 struct qmi_wwan_state *info = (void *)&dev->data;
755 struct usb_cdc_parsed_header hdr;
756
757 BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
758 sizeof(struct qmi_wwan_state)));
759
760 /* set up initial state */
761 info->control = intf;
762 info->data = intf;
763
764 /* and a number of CDC descriptors */
765 cdc_parse_cdc_header(&hdr, intf, buf, len);
766 cdc_union = hdr.usb_cdc_union_desc;
767 cdc_ether = hdr.usb_cdc_ether_desc;
768
769 /* Use separate control and data interfaces if we found a CDC Union */
770 if (cdc_union) {
771 info->data = usb_ifnum_to_if(dev->udev,
772 cdc_union->bSlaveInterface0);
773 if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
774 !info->data) {
775 dev_err(&intf->dev,
776 "bogus CDC Union: master=%u, slave=%u\n",
777 cdc_union->bMasterInterface0,
778 cdc_union->bSlaveInterface0);
779
780 /* ignore and continue... */
781 cdc_union = NULL;
782 info->data = intf;
783 }
784 }
785
786 /* errors aren't fatal - we can live with the dynamic address */
787 if (cdc_ether && cdc_ether->wMaxSegmentSize) {
788 dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
789 usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
790 }
791
792 /* claim data interface and set it up */
793 if (info->control != info->data) {
794 status = usb_driver_claim_interface(driver, info->data, dev);
795 if (status < 0)
796 goto err;
797 }
798
799 status = qmi_wwan_register_subdriver(dev);
800 if (status < 0 && info->control != info->data) {
801 usb_set_intfdata(info->data, NULL);
802 usb_driver_release_interface(driver, info->data);
803 }
804
805 /* disabling remote wakeup on MDM9x30 devices has the same
806 * effect as clearing DTR. The device will not respond to QMI
807 * requests until we set DTR again. This is similar to a
808 * QMI_CTL SYNC request, clearing a lot of firmware state
809 * including the client ID allocations.
810 *
811 * Our usage model allows a session to span multiple
812 * open/close events, so we must prevent the firmware from
813 * clearing out state the clients might need.
814 *
815 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
816 * this fact to enable the quirk for all USB3 devices.
817 *
818 * There are also chipsets with the same "set DTR" requirement
819 * but without USB3 support. Devices based on these chips
820 * need a quirk flag in the device ID table.
821 */
822 if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
823 le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
824 qmi_wwan_manage_power(dev, 1);
825 qmi_wwan_change_dtr(dev, true);
826 }
827
828 /* Never use the same address on both ends of the link, even if the
829 * buggy firmware told us to. Or, if device is assigned the well-known
830 * buggy firmware MAC address, replace it with a random address,
831 */
832 if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
833 ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
834 eth_hw_addr_random(dev->net);
835
836 /* make MAC addr easily distinguishable from an IP header */
837 if (possibly_iphdr(dev->net->dev_addr)) {
838 u8 addr = dev->net->dev_addr[0];
839
840 addr |= 0x02; /* set local assignment bit */
841 addr &= 0xbf; /* clear "IP" bit */
842 dev_addr_mod(dev->net, 0, &addr, 1);
843 }
844 dev->net->netdev_ops = &qmi_wwan_netdev_ops;
845 dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
846 err:
847 return status;
848 }
849
qmi_wwan_unbind(struct usbnet * dev,struct usb_interface * intf)850 static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
851 {
852 struct qmi_wwan_state *info = (void *)&dev->data;
853 struct usb_driver *driver = driver_of(intf);
854 struct usb_interface *other;
855
856 if (info->subdriver && info->subdriver->disconnect)
857 info->subdriver->disconnect(info->control);
858
859 /* disable MDM9x30 quirk */
860 if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
861 qmi_wwan_change_dtr(dev, false);
862 qmi_wwan_manage_power(dev, 0);
863 }
864
865 /* allow user to unbind using either control or data */
866 if (intf == info->control)
867 other = info->data;
868 else
869 other = info->control;
870
871 /* only if not shared */
872 if (other && intf != other) {
873 usb_set_intfdata(other, NULL);
874 usb_driver_release_interface(driver, other);
875 }
876
877 info->subdriver = NULL;
878 info->data = NULL;
879 info->control = NULL;
880 }
881
882 /* suspend/resume wrappers calling both usbnet and the cdc-wdm
883 * subdriver if present.
884 *
885 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
886 * wrappers for those without adding usbnet reset support first.
887 */
qmi_wwan_suspend(struct usb_interface * intf,pm_message_t message)888 static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
889 {
890 struct usbnet *dev = usb_get_intfdata(intf);
891 struct qmi_wwan_state *info = (void *)&dev->data;
892 int ret;
893
894 /* Both usbnet_suspend() and subdriver->suspend() MUST return 0
895 * in system sleep context, otherwise, the resume callback has
896 * to recover device from previous suspend failure.
897 */
898 ret = usbnet_suspend(intf, message);
899 if (ret < 0)
900 goto err;
901
902 if (intf == info->control && info->subdriver &&
903 info->subdriver->suspend)
904 ret = info->subdriver->suspend(intf, message);
905 if (ret < 0)
906 usbnet_resume(intf);
907 err:
908 return ret;
909 }
910
qmi_wwan_resume(struct usb_interface * intf)911 static int qmi_wwan_resume(struct usb_interface *intf)
912 {
913 struct usbnet *dev = usb_get_intfdata(intf);
914 struct qmi_wwan_state *info = (void *)&dev->data;
915 int ret = 0;
916 bool callsub = (intf == info->control && info->subdriver &&
917 info->subdriver->resume);
918
919 if (callsub)
920 ret = info->subdriver->resume(intf);
921 if (ret < 0)
922 goto err;
923 ret = usbnet_resume(intf);
924 if (ret < 0 && callsub)
925 info->subdriver->suspend(intf, PMSG_SUSPEND);
926 err:
927 return ret;
928 }
929
930 static const struct driver_info qmi_wwan_info = {
931 .description = "WWAN/QMI device",
932 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
933 .bind = qmi_wwan_bind,
934 .unbind = qmi_wwan_unbind,
935 .manage_power = qmi_wwan_manage_power,
936 .rx_fixup = qmi_wwan_rx_fixup,
937 };
938
939 static const struct driver_info qmi_wwan_info_quirk_dtr = {
940 .description = "WWAN/QMI device",
941 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
942 .bind = qmi_wwan_bind,
943 .unbind = qmi_wwan_unbind,
944 .manage_power = qmi_wwan_manage_power,
945 .rx_fixup = qmi_wwan_rx_fixup,
946 .data = QMI_WWAN_QUIRK_DTR,
947 };
948
949 #define HUAWEI_VENDOR_ID 0x12D1
950
951 /* map QMI/wwan function by a fixed interface number */
952 #define QMI_FIXED_INTF(vend, prod, num) \
953 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
954 .driver_info = (unsigned long)&qmi_wwan_info
955
956 /* devices requiring "set DTR" quirk */
957 #define QMI_QUIRK_SET_DTR(vend, prod, num) \
958 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
959 .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
960
961 /* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
962 #define QMI_GOBI1K_DEVICE(vend, prod) \
963 QMI_FIXED_INTF(vend, prod, 3)
964
965 /* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
966 #define QMI_GOBI_DEVICE(vend, prod) \
967 QMI_FIXED_INTF(vend, prod, 0)
968
969 /* Many devices have QMI and DIAG functions which are distinguishable
970 * from other vendor specific functions by class, subclass and
971 * protocol all being 0xff. The DIAG function has exactly 2 endpoints
972 * and is silently rejected when probed.
973 *
974 * This makes it possible to match dynamically numbered QMI functions
975 * as seen on e.g. many Quectel modems.
976 */
977 #define QMI_MATCH_FF_FF_FF(vend, prod) \
978 USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
979 USB_SUBCLASS_VENDOR_SPEC, 0xff), \
980 .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
981
982 static const struct usb_device_id products[] = {
983 /* 1. CDC ECM like devices match on the control interface */
984 { /* Huawei E392, E398 and possibly others sharing both device id and more... */
985 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
986 .driver_info = (unsigned long)&qmi_wwan_info,
987 },
988 { /* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
989 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
990 .driver_info = (unsigned long)&qmi_wwan_info,
991 },
992 { /* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
993 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
994 .driver_info = (unsigned long)&qmi_wwan_info,
995 },
996 { /* Motorola Mapphone devices with MDM6600 */
997 USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
998 .driver_info = (unsigned long)&qmi_wwan_info,
999 },
1000
1001 /* 2. Combined interface devices matching on class+protocol */
1002 { /* Huawei E367 and possibly others in "Windows mode" */
1003 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
1004 .driver_info = (unsigned long)&qmi_wwan_info,
1005 },
1006 { /* Huawei E392, E398 and possibly others in "Windows mode" */
1007 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
1008 .driver_info = (unsigned long)&qmi_wwan_info,
1009 },
1010 { /* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
1011 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
1012 .driver_info = (unsigned long)&qmi_wwan_info,
1013 },
1014 { /* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
1015 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
1016 .driver_info = (unsigned long)&qmi_wwan_info,
1017 },
1018 { /* Pantech UML290, P4200 and more */
1019 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
1020 .driver_info = (unsigned long)&qmi_wwan_info,
1021 },
1022 { /* Pantech UML290 - newer firmware */
1023 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
1024 .driver_info = (unsigned long)&qmi_wwan_info,
1025 },
1026 { /* Novatel USB551L and MC551 */
1027 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
1028 USB_CLASS_COMM,
1029 USB_CDC_SUBCLASS_ETHERNET,
1030 USB_CDC_PROTO_NONE),
1031 .driver_info = (unsigned long)&qmi_wwan_info,
1032 },
1033 { /* Novatel E362 */
1034 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
1035 USB_CLASS_COMM,
1036 USB_CDC_SUBCLASS_ETHERNET,
1037 USB_CDC_PROTO_NONE),
1038 .driver_info = (unsigned long)&qmi_wwan_info,
1039 },
1040 { /* Novatel Expedite E371 */
1041 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
1042 USB_CLASS_COMM,
1043 USB_CDC_SUBCLASS_ETHERNET,
1044 USB_CDC_PROTO_NONE),
1045 .driver_info = (unsigned long)&qmi_wwan_info,
1046 },
1047 { /* Dell Wireless 5800 (Novatel E362) */
1048 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
1049 USB_CLASS_COMM,
1050 USB_CDC_SUBCLASS_ETHERNET,
1051 USB_CDC_PROTO_NONE),
1052 .driver_info = (unsigned long)&qmi_wwan_info,
1053 },
1054 { /* Dell Wireless 5800 V2 (Novatel E362) */
1055 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
1056 USB_CLASS_COMM,
1057 USB_CDC_SUBCLASS_ETHERNET,
1058 USB_CDC_PROTO_NONE),
1059 .driver_info = (unsigned long)&qmi_wwan_info,
1060 },
1061 { /* Dell Wireless 5804 (Novatel E371) */
1062 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1063 USB_CLASS_COMM,
1064 USB_CDC_SUBCLASS_ETHERNET,
1065 USB_CDC_PROTO_NONE),
1066 .driver_info = (unsigned long)&qmi_wwan_info,
1067 },
1068 { /* ADU960S */
1069 USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1070 USB_CLASS_COMM,
1071 USB_CDC_SUBCLASS_ETHERNET,
1072 USB_CDC_PROTO_NONE),
1073 .driver_info = (unsigned long)&qmi_wwan_info,
1074 },
1075 { /* HP lt2523 (Novatel E371) */
1076 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1077 USB_CLASS_COMM,
1078 USB_CDC_SUBCLASS_ETHERNET,
1079 USB_CDC_PROTO_NONE),
1080 .driver_info = (unsigned long)&qmi_wwan_info,
1081 },
1082 { /* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1083 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1084 .driver_info = (unsigned long)&qmi_wwan_info,
1085 },
1086 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)}, /* Quectel EC25, EC20 R2.0 Mini PCIe */
1087 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)}, /* Quectel EP06/EG06/EM06 */
1088 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)}, /* Quectel EG12/EM12 */
1089 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0620)}, /* Quectel EM160R-GL */
1090 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)}, /* Quectel RM500Q-GL */
1091 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0801)}, /* Quectel RM520N */
1092
1093 /* 3. Combined interface devices matching on interface number */
1094 {QMI_FIXED_INTF(0x0408, 0xea42, 4)}, /* Yota / Megafon M100-1 */
1095 {QMI_FIXED_INTF(0x05c6, 0x6001, 3)}, /* 4G LTE usb-modem U901 */
1096 {QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1097 {QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1098 {QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1099 {QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1100 {QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1101 {QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1102 {QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1103 {QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1104 {QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1105 {QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1106 {QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1107 {QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1108 {QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1109 {QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1110 {QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1111 {QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1112 {QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1113 {QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1114 {QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1115 {QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1116 {QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1117 {QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1118 {QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1119 {QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1120 {QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1121 {QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1122 {QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1123 {QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1124 {QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1125 {QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)}, /* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1126 {QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1127 {QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1128 {QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1129 {QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1130 {QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1131 {QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1132 {QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1133 {QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1134 {QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1135 {QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1136 {QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1137 {QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1138 {QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1139 {QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1140 {QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1141 {QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1142 {QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1143 {QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1144 {QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1145 {QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1146 {QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1147 {QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1148 {QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1149 {QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1150 {QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1151 {QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1152 {QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1153 {QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1154 {QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1155 {QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1156 {QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1157 {QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1158 {QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1159 {QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1160 {QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1161 {QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1162 {QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1163 {QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1164 {QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1165 {QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1166 {QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1167 {QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1168 {QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1169 {QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1170 {QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1171 {QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1172 {QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1173 {QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1174 {QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1175 {QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1176 {QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1177 {QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1178 {QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1179 {QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1180 {QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1181 {QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1182 {QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1183 {QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1184 {QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1185 {QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1186 {QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1187 {QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1188 {QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1189 {QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1190 {QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1191 {QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1192 {QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1193 {QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1194 {QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1195 {QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1196 {QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1197 {QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1198 {QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1199 {QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1200 {QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1201 {QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1202 {QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1203 {QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1204 {QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1205 {QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1206 {QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1207 {QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1208 {QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1209 {QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1210 {QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1211 {QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1212 {QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1213 {QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1214 {QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1215 {QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1216 {QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1217 {QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1218 {QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1219 {QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1220 {QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1221 {QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1222 {QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1223 {QMI_QUIRK_SET_DTR(0x05c6, 0x9091, 2)}, /* Compal RXM-G1 */
1224 {QMI_FIXED_INTF(0x05c6, 0x90b2, 3)}, /* ublox R410M */
1225 {QMI_QUIRK_SET_DTR(0x05c6, 0x90db, 2)}, /* Compal RXM-G1 */
1226 {QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1227 {QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1228 {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1229 {QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1230 {QMI_FIXED_INTF(0x0846, 0x68d3, 8)}, /* Netgear Aircard 779S */
1231 {QMI_FIXED_INTF(0x12d1, 0x140c, 1)}, /* Huawei E173 */
1232 {QMI_FIXED_INTF(0x12d1, 0x14ac, 1)}, /* Huawei E1820 */
1233 {QMI_FIXED_INTF(0x1435, 0x0918, 3)}, /* Wistron NeWeb D16Q1 */
1234 {QMI_FIXED_INTF(0x1435, 0x0918, 4)}, /* Wistron NeWeb D16Q1 */
1235 {QMI_FIXED_INTF(0x1435, 0x0918, 5)}, /* Wistron NeWeb D16Q1 */
1236 {QMI_FIXED_INTF(0x1435, 0x3185, 4)}, /* Wistron NeWeb M18Q5 */
1237 {QMI_FIXED_INTF(0x1435, 0xd111, 4)}, /* M9615A DM11-1 D51QC */
1238 {QMI_FIXED_INTF(0x1435, 0xd181, 3)}, /* Wistron NeWeb D18Q1 */
1239 {QMI_FIXED_INTF(0x1435, 0xd181, 4)}, /* Wistron NeWeb D18Q1 */
1240 {QMI_FIXED_INTF(0x1435, 0xd181, 5)}, /* Wistron NeWeb D18Q1 */
1241 {QMI_FIXED_INTF(0x1435, 0xd182, 4)}, /* Wistron NeWeb D18 */
1242 {QMI_FIXED_INTF(0x1435, 0xd182, 5)}, /* Wistron NeWeb D18 */
1243 {QMI_FIXED_INTF(0x1435, 0xd191, 4)}, /* Wistron NeWeb D19Q1 */
1244 {QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)}, /* Fibocom NL668 series */
1245 {QMI_FIXED_INTF(0x1690, 0x7588, 4)}, /* ASKEY WWHC050 */
1246 {QMI_FIXED_INTF(0x16d8, 0x6003, 0)}, /* CMOTech 6003 */
1247 {QMI_FIXED_INTF(0x16d8, 0x6007, 0)}, /* CMOTech CHE-628S */
1248 {QMI_FIXED_INTF(0x16d8, 0x6008, 0)}, /* CMOTech CMU-301 */
1249 {QMI_FIXED_INTF(0x16d8, 0x6280, 0)}, /* CMOTech CHU-628 */
1250 {QMI_FIXED_INTF(0x16d8, 0x7001, 0)}, /* CMOTech CHU-720S */
1251 {QMI_FIXED_INTF(0x16d8, 0x7002, 0)}, /* CMOTech 7002 */
1252 {QMI_FIXED_INTF(0x16d8, 0x7003, 4)}, /* CMOTech CHU-629K */
1253 {QMI_FIXED_INTF(0x16d8, 0x7004, 3)}, /* CMOTech 7004 */
1254 {QMI_FIXED_INTF(0x16d8, 0x7006, 5)}, /* CMOTech CGU-629 */
1255 {QMI_FIXED_INTF(0x16d8, 0x700a, 4)}, /* CMOTech CHU-629S */
1256 {QMI_FIXED_INTF(0x16d8, 0x7211, 0)}, /* CMOTech CHU-720I */
1257 {QMI_FIXED_INTF(0x16d8, 0x7212, 0)}, /* CMOTech 7212 */
1258 {QMI_FIXED_INTF(0x16d8, 0x7213, 0)}, /* CMOTech 7213 */
1259 {QMI_FIXED_INTF(0x16d8, 0x7251, 1)}, /* CMOTech 7251 */
1260 {QMI_FIXED_INTF(0x16d8, 0x7252, 1)}, /* CMOTech 7252 */
1261 {QMI_FIXED_INTF(0x16d8, 0x7253, 1)}, /* CMOTech 7253 */
1262 {QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1263 {QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1264 {QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1265 {QMI_FIXED_INTF(0x19d2, 0x0019, 3)}, /* ONDA MT689DC */
1266 {QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1267 {QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1268 {QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1269 {QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1270 {QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1271 {QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1272 {QMI_FIXED_INTF(0x19d2, 0x0055, 1)}, /* ZTE (Vodafone) K3520-Z */
1273 {QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1274 {QMI_FIXED_INTF(0x19d2, 0x0063, 4)}, /* ZTE (Vodafone) K3565-Z */
1275 {QMI_FIXED_INTF(0x19d2, 0x0104, 4)}, /* ZTE (Vodafone) K4505-Z */
1276 {QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1277 {QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1278 {QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1279 {QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1280 {QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1281 {QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1282 {QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1283 {QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1284 {QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1285 {QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1286 {QMI_FIXED_INTF(0x19d2, 0x0157, 5)}, /* ZTE MF683 */
1287 {QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1288 {QMI_FIXED_INTF(0x19d2, 0x0167, 4)}, /* ZTE MF820D */
1289 {QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1290 {QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1291 {QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1292 {QMI_FIXED_INTF(0x19d2, 0x0191, 4)}, /* ZTE EuFi890 */
1293 {QMI_FIXED_INTF(0x19d2, 0x0199, 1)}, /* ZTE MF820S */
1294 {QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1295 {QMI_FIXED_INTF(0x19d2, 0x0257, 3)}, /* ZTE MF821 */
1296 {QMI_FIXED_INTF(0x19d2, 0x0265, 4)}, /* ONDA MT8205 4G LTE */
1297 {QMI_FIXED_INTF(0x19d2, 0x0284, 4)}, /* ZTE MF880 */
1298 {QMI_FIXED_INTF(0x19d2, 0x0326, 4)}, /* ZTE MF821D */
1299 {QMI_FIXED_INTF(0x19d2, 0x0396, 3)}, /* ZTE ZM8620 */
1300 {QMI_FIXED_INTF(0x19d2, 0x0412, 4)}, /* Telewell TW-LTE 4G */
1301 {QMI_FIXED_INTF(0x19d2, 0x1008, 4)}, /* ZTE (Vodafone) K3570-Z */
1302 {QMI_FIXED_INTF(0x19d2, 0x1010, 4)}, /* ZTE (Vodafone) K3571-Z */
1303 {QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1304 {QMI_FIXED_INTF(0x19d2, 0x1018, 3)}, /* ZTE (Vodafone) K5006-Z */
1305 {QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1306 {QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1307 {QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1308 {QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1309 {QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1310 {QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1311 {QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1312 {QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1313 {QMI_FIXED_INTF(0x19d2, 0x1270, 5)}, /* ZTE MF667 */
1314 {QMI_FIXED_INTF(0x19d2, 0x1275, 3)}, /* ZTE P685M */
1315 {QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1316 {QMI_FIXED_INTF(0x19d2, 0x1402, 2)}, /* ZTE MF60 */
1317 {QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1318 {QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1319 {QMI_FIXED_INTF(0x19d2, 0x1426, 2)}, /* ZTE MF91 */
1320 {QMI_FIXED_INTF(0x19d2, 0x1428, 2)}, /* Telewell TW-LTE 4G v2 */
1321 {QMI_FIXED_INTF(0x19d2, 0x1432, 3)}, /* ZTE ME3620 */
1322 {QMI_FIXED_INTF(0x19d2, 0x1485, 5)}, /* ZTE MF286D */
1323 {QMI_FIXED_INTF(0x19d2, 0x2002, 4)}, /* ZTE (Vodafone) K3765-Z */
1324 {QMI_FIXED_INTF(0x2001, 0x7e16, 3)}, /* D-Link DWM-221 */
1325 {QMI_FIXED_INTF(0x2001, 0x7e19, 4)}, /* D-Link DWM-221 B1 */
1326 {QMI_FIXED_INTF(0x2001, 0x7e35, 4)}, /* D-Link DWM-222 */
1327 {QMI_FIXED_INTF(0x2001, 0x7e3d, 4)}, /* D-Link DWM-222 A2 */
1328 {QMI_FIXED_INTF(0x2020, 0x2031, 4)}, /* Olicard 600 */
1329 {QMI_FIXED_INTF(0x2020, 0x2033, 4)}, /* BroadMobi BM806U */
1330 {QMI_QUIRK_SET_DTR(0x2020, 0x2060, 4)}, /* BroadMobi BM818 */
1331 {QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)}, /* Sierra Wireless MC7700 */
1332 {QMI_FIXED_INTF(0x114f, 0x68a2, 8)}, /* Sierra Wireless MC7750 */
1333 {QMI_FIXED_INTF(0x1199, 0x68a2, 8)}, /* Sierra Wireless MC7710 in QMI mode */
1334 {QMI_FIXED_INTF(0x1199, 0x68a2, 19)}, /* Sierra Wireless MC7710 in QMI mode */
1335 {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)}, /* Sierra Wireless MC7304/MC7354, WP76xx */
1336 {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1337 {QMI_FIXED_INTF(0x1199, 0x901c, 8)}, /* Sierra Wireless EM7700 */
1338 {QMI_FIXED_INTF(0x1199, 0x901f, 8)}, /* Sierra Wireless EM7355 */
1339 {QMI_FIXED_INTF(0x1199, 0x9041, 8)}, /* Sierra Wireless MC7305/MC7355 */
1340 {QMI_FIXED_INTF(0x1199, 0x9041, 10)}, /* Sierra Wireless MC7305/MC7355 */
1341 {QMI_FIXED_INTF(0x1199, 0x9051, 8)}, /* Netgear AirCard 340U */
1342 {QMI_FIXED_INTF(0x1199, 0x9053, 8)}, /* Sierra Wireless Modem */
1343 {QMI_FIXED_INTF(0x1199, 0x9054, 8)}, /* Sierra Wireless Modem */
1344 {QMI_FIXED_INTF(0x1199, 0x9055, 8)}, /* Netgear AirCard 341U */
1345 {QMI_FIXED_INTF(0x1199, 0x9056, 8)}, /* Sierra Wireless Modem */
1346 {QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1347 {QMI_FIXED_INTF(0x1199, 0x9061, 8)}, /* Sierra Wireless Modem */
1348 {QMI_FIXED_INTF(0x1199, 0x9063, 8)}, /* Sierra Wireless EM7305 */
1349 {QMI_FIXED_INTF(0x1199, 0x9063, 10)}, /* Sierra Wireless EM7305 */
1350 {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)}, /* Sierra Wireless MC74xx */
1351 {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1352 {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)}, /* Sierra Wireless EM74xx */
1353 {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1354 {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)}, /* Sierra Wireless EM74xx */
1355 {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1356 {QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)}, /* Sierra Wireless EM7565 */
1357 {QMI_QUIRK_SET_DTR(0x1199, 0xc081, 8)}, /* Sierra Wireless EM7590 */
1358 {QMI_FIXED_INTF(0x1bbb, 0x011e, 4)}, /* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1359 {QMI_FIXED_INTF(0x1bbb, 0x0203, 2)}, /* Alcatel L800MA */
1360 {QMI_FIXED_INTF(0x2357, 0x0201, 4)}, /* TP-LINK HSUPA Modem MA180 */
1361 {QMI_FIXED_INTF(0x2357, 0x9000, 4)}, /* TP-LINK MA260 */
1362 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1363 {QMI_QUIRK_SET_DTR(0x1bc7, 0x103a, 0)}, /* Telit LE910C4-WWX */
1364 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)}, /* Telit LE922A */
1365 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)}, /* Telit FN980 */
1366 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1057, 2)}, /* Telit FN980 */
1367 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1060, 2)}, /* Telit LN920 */
1368 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1070, 2)}, /* Telit FN990 */
1369 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1080, 2)}, /* Telit FE990 */
1370 {QMI_FIXED_INTF(0x1bc7, 0x1100, 3)}, /* Telit ME910 */
1371 {QMI_FIXED_INTF(0x1bc7, 0x1101, 3)}, /* Telit ME910 dual modem */
1372 {QMI_FIXED_INTF(0x1bc7, 0x1200, 5)}, /* Telit LE920 */
1373 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)}, /* Telit LE920, LE920A4 */
1374 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1230, 2)}, /* Telit LE910Cx */
1375 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1250, 0)}, /* Telit LE910Cx */
1376 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)}, /* Telit LE910Cx */
1377 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)}, /* Telit LE910Cx */
1378 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)}, /* Telit LN940 series */
1379 {QMI_FIXED_INTF(0x1c9e, 0x9801, 3)}, /* Telewell TW-3G HSPA+ */
1380 {QMI_FIXED_INTF(0x1c9e, 0x9803, 4)}, /* Telewell TW-3G HSPA+ */
1381 {QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)}, /* XS Stick W100-2 from 4G Systems */
1382 {QMI_FIXED_INTF(0x0b3c, 0xc000, 4)}, /* Olivetti Olicard 100 */
1383 {QMI_FIXED_INTF(0x0b3c, 0xc001, 4)}, /* Olivetti Olicard 120 */
1384 {QMI_FIXED_INTF(0x0b3c, 0xc002, 4)}, /* Olivetti Olicard 140 */
1385 {QMI_FIXED_INTF(0x0b3c, 0xc004, 6)}, /* Olivetti Olicard 155 */
1386 {QMI_FIXED_INTF(0x0b3c, 0xc005, 6)}, /* Olivetti Olicard 200 */
1387 {QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)}, /* Olivetti Olicard 160 */
1388 {QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)}, /* Olivetti Olicard 500 */
1389 {QMI_FIXED_INTF(0x1e2d, 0x0060, 4)}, /* Cinterion PLxx */
1390 {QMI_QUIRK_SET_DTR(0x1e2d, 0x006f, 8)}, /* Cinterion PLS83/PLS63 */
1391 {QMI_FIXED_INTF(0x1e2d, 0x0053, 4)}, /* Cinterion PHxx,PXxx */
1392 {QMI_FIXED_INTF(0x1e2d, 0x0063, 10)}, /* Cinterion ALASxx (1 RmNet) */
1393 {QMI_FIXED_INTF(0x1e2d, 0x0082, 4)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1394 {QMI_FIXED_INTF(0x1e2d, 0x0082, 5)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1395 {QMI_FIXED_INTF(0x1e2d, 0x0083, 4)}, /* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1396 {QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)}, /* Cinterion CLS8 */
1397 {QMI_FIXED_INTF(0x1e2d, 0x00b7, 0)}, /* Cinterion MV31 RmNet */
1398 {QMI_FIXED_INTF(0x1e2d, 0x00b9, 0)}, /* Cinterion MV31 RmNet based on new baseline */
1399 {QMI_FIXED_INTF(0x1e2d, 0x00f3, 0)}, /* Cinterion MV32-W-A RmNet */
1400 {QMI_FIXED_INTF(0x1e2d, 0x00f4, 0)}, /* Cinterion MV32-W-B RmNet */
1401 {QMI_FIXED_INTF(0x413c, 0x81a2, 8)}, /* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1402 {QMI_FIXED_INTF(0x413c, 0x81a3, 8)}, /* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1403 {QMI_FIXED_INTF(0x413c, 0x81a4, 8)}, /* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1404 {QMI_FIXED_INTF(0x413c, 0x81a8, 8)}, /* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1405 {QMI_FIXED_INTF(0x413c, 0x81a9, 8)}, /* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1406 {QMI_FIXED_INTF(0x413c, 0x81b1, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1407 {QMI_FIXED_INTF(0x413c, 0x81b3, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1408 {QMI_FIXED_INTF(0x413c, 0x81b6, 8)}, /* Dell Wireless 5811e */
1409 {QMI_FIXED_INTF(0x413c, 0x81b6, 10)}, /* Dell Wireless 5811e */
1410 {QMI_FIXED_INTF(0x413c, 0x81c2, 8)}, /* Dell Wireless 5811e */
1411 {QMI_FIXED_INTF(0x413c, 0x81cc, 8)}, /* Dell Wireless 5816e */
1412 {QMI_FIXED_INTF(0x413c, 0x81d7, 0)}, /* Dell Wireless 5821e */
1413 {QMI_FIXED_INTF(0x413c, 0x81d7, 1)}, /* Dell Wireless 5821e preproduction config */
1414 {QMI_FIXED_INTF(0x413c, 0x81e0, 0)}, /* Dell Wireless 5821e with eSIM support*/
1415 {QMI_FIXED_INTF(0x413c, 0x81e4, 0)}, /* Dell Wireless 5829e with eSIM support*/
1416 {QMI_FIXED_INTF(0x413c, 0x81e6, 0)}, /* Dell Wireless 5829e */
1417 {QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)}, /* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1418 {QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)}, /* HP lt4120 Snapdragon X5 LTE */
1419 {QMI_QUIRK_SET_DTR(0x22de, 0x9051, 2)}, /* Hucom Wireless HM-211S/K */
1420 {QMI_FIXED_INTF(0x22de, 0x9061, 3)}, /* WeTelecom WPD-600N */
1421 {QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)}, /* SIMCom 7100E, 7230E, 7600E ++ */
1422 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)}, /* Quectel EC21 Mini PCIe */
1423 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)}, /* Quectel EG91 */
1424 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)}, /* Quectel EG95 */
1425 {QMI_FIXED_INTF(0x2c7c, 0x0296, 4)}, /* Quectel BG96 */
1426 {QMI_QUIRK_SET_DTR(0x2c7c, 0x030e, 4)}, /* Quectel EM05GV2 */
1427 {QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)}, /* Fibocom NL678 series */
1428 {QMI_FIXED_INTF(0x0489, 0xe0b4, 0)}, /* Foxconn T77W968 LTE */
1429 {QMI_FIXED_INTF(0x0489, 0xe0b5, 0)}, /* Foxconn T77W968 LTE with eSIM support*/
1430 {QMI_FIXED_INTF(0x2692, 0x9025, 4)}, /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1431 {QMI_QUIRK_SET_DTR(0x1546, 0x1312, 4)}, /* u-blox LARA-R6 01B */
1432 {QMI_QUIRK_SET_DTR(0x1546, 0x1342, 4)}, /* u-blox LARA-L6 */
1433
1434 /* 4. Gobi 1000 devices */
1435 {QMI_GOBI1K_DEVICE(0x05c6, 0x9212)}, /* Acer Gobi Modem Device */
1436 {QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)}, /* HP un2400 Gobi Modem Device */
1437 {QMI_GOBI1K_DEVICE(0x04da, 0x250d)}, /* Panasonic Gobi Modem device */
1438 {QMI_GOBI1K_DEVICE(0x413c, 0x8172)}, /* Dell Gobi Modem device */
1439 {QMI_GOBI1K_DEVICE(0x1410, 0xa001)}, /* Novatel/Verizon USB-1000 */
1440 {QMI_GOBI1K_DEVICE(0x1410, 0xa002)}, /* Novatel Gobi Modem device */
1441 {QMI_GOBI1K_DEVICE(0x1410, 0xa003)}, /* Novatel Gobi Modem device */
1442 {QMI_GOBI1K_DEVICE(0x1410, 0xa004)}, /* Novatel Gobi Modem device */
1443 {QMI_GOBI1K_DEVICE(0x1410, 0xa005)}, /* Novatel Gobi Modem device */
1444 {QMI_GOBI1K_DEVICE(0x1410, 0xa006)}, /* Novatel Gobi Modem device */
1445 {QMI_GOBI1K_DEVICE(0x1410, 0xa007)}, /* Novatel Gobi Modem device */
1446 {QMI_GOBI1K_DEVICE(0x0b05, 0x1776)}, /* Asus Gobi Modem device */
1447 {QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)}, /* ONDA Gobi Modem device */
1448 {QMI_GOBI1K_DEVICE(0x05c6, 0x9001)}, /* Generic Gobi Modem device */
1449 {QMI_GOBI1K_DEVICE(0x05c6, 0x9002)}, /* Generic Gobi Modem device */
1450 {QMI_GOBI1K_DEVICE(0x05c6, 0x9202)}, /* Generic Gobi Modem device */
1451 {QMI_GOBI1K_DEVICE(0x05c6, 0x9203)}, /* Generic Gobi Modem device */
1452 {QMI_GOBI1K_DEVICE(0x05c6, 0x9222)}, /* Generic Gobi Modem device */
1453 {QMI_GOBI1K_DEVICE(0x05c6, 0x9009)}, /* Generic Gobi Modem device */
1454
1455 /* 5. Gobi 2000 and 3000 devices */
1456 {QMI_GOBI_DEVICE(0x413c, 0x8186)}, /* Dell Gobi 2000 Modem device (N0218, VU936) */
1457 {QMI_GOBI_DEVICE(0x413c, 0x8194)}, /* Dell Gobi 3000 Composite */
1458 {QMI_GOBI_DEVICE(0x05c6, 0x920b)}, /* Generic Gobi 2000 Modem device */
1459 {QMI_GOBI_DEVICE(0x05c6, 0x9225)}, /* Sony Gobi 2000 Modem device (N0279, VU730) */
1460 {QMI_GOBI_DEVICE(0x05c6, 0x9245)}, /* Samsung Gobi 2000 Modem device (VL176) */
1461 {QMI_GOBI_DEVICE(0x03f0, 0x251d)}, /* HP Gobi 2000 Modem device (VP412) */
1462 {QMI_GOBI_DEVICE(0x05c6, 0x9215)}, /* Acer Gobi 2000 Modem device (VP413) */
1463 {QMI_FIXED_INTF(0x05c6, 0x9215, 4)}, /* Quectel EC20 Mini PCIe */
1464 {QMI_GOBI_DEVICE(0x05c6, 0x9265)}, /* Asus Gobi 2000 Modem device (VR305) */
1465 {QMI_GOBI_DEVICE(0x05c6, 0x9235)}, /* Top Global Gobi 2000 Modem device (VR306) */
1466 {QMI_GOBI_DEVICE(0x05c6, 0x9275)}, /* iRex Technologies Gobi 2000 Modem device (VR307) */
1467 {QMI_GOBI_DEVICE(0x0af0, 0x8120)}, /* Option GTM681W */
1468 {QMI_GOBI_DEVICE(0x1199, 0x68a5)}, /* Sierra Wireless Modem */
1469 {QMI_GOBI_DEVICE(0x1199, 0x68a9)}, /* Sierra Wireless Modem */
1470 {QMI_GOBI_DEVICE(0x1199, 0x9001)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1471 {QMI_GOBI_DEVICE(0x1199, 0x9002)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1472 {QMI_GOBI_DEVICE(0x1199, 0x9003)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1473 {QMI_GOBI_DEVICE(0x1199, 0x9004)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1474 {QMI_GOBI_DEVICE(0x1199, 0x9005)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1475 {QMI_GOBI_DEVICE(0x1199, 0x9006)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1476 {QMI_GOBI_DEVICE(0x1199, 0x9007)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1477 {QMI_GOBI_DEVICE(0x1199, 0x9008)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1478 {QMI_GOBI_DEVICE(0x1199, 0x9009)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1479 {QMI_GOBI_DEVICE(0x1199, 0x900a)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1480 {QMI_GOBI_DEVICE(0x1199, 0x9011)}, /* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1481 {QMI_GOBI_DEVICE(0x16d8, 0x8002)}, /* CMDTech Gobi 2000 Modem device (VU922) */
1482 {QMI_GOBI_DEVICE(0x05c6, 0x9205)}, /* Gobi 2000 Modem device */
1483 {QMI_GOBI_DEVICE(0x1199, 0x9013)}, /* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1484 {QMI_GOBI_DEVICE(0x03f0, 0x371d)}, /* HP un2430 Mobile Broadband Module */
1485 {QMI_GOBI_DEVICE(0x1199, 0x9015)}, /* Sierra Wireless Gobi 3000 Modem device */
1486 {QMI_GOBI_DEVICE(0x1199, 0x9019)}, /* Sierra Wireless Gobi 3000 Modem device */
1487 {QMI_GOBI_DEVICE(0x1199, 0x901b)}, /* Sierra Wireless MC7770 */
1488 {QMI_GOBI_DEVICE(0x12d1, 0x14f1)}, /* Sony Gobi 3000 Composite */
1489 {QMI_GOBI_DEVICE(0x1410, 0xa021)}, /* Foxconn Gobi 3000 Modem device (Novatel E396) */
1490
1491 { } /* END */
1492 };
1493 MODULE_DEVICE_TABLE(usb, products);
1494
quectel_ec20_detected(struct usb_interface * intf)1495 static bool quectel_ec20_detected(struct usb_interface *intf)
1496 {
1497 struct usb_device *dev = interface_to_usbdev(intf);
1498
1499 if (dev->actconfig &&
1500 le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1501 le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1502 dev->actconfig->desc.bNumInterfaces == 5)
1503 return true;
1504
1505 return false;
1506 }
1507
qmi_wwan_probe(struct usb_interface * intf,const struct usb_device_id * prod)1508 static int qmi_wwan_probe(struct usb_interface *intf,
1509 const struct usb_device_id *prod)
1510 {
1511 struct usb_device_id *id = (struct usb_device_id *)prod;
1512 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1513
1514 /* Workaround to enable dynamic IDs. This disables usbnet
1515 * blacklisting functionality. Which, if required, can be
1516 * reimplemented here by using a magic "blacklist" value
1517 * instead of 0 in the static device id table
1518 */
1519 if (!id->driver_info) {
1520 dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1521 id->driver_info = (unsigned long)&qmi_wwan_info;
1522 }
1523
1524 /* There are devices where the same interface number can be
1525 * configured as different functions. We should only bind to
1526 * vendor specific functions when matching on interface number
1527 */
1528 if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1529 desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1530 dev_dbg(&intf->dev,
1531 "Rejecting interface number match for class %02x\n",
1532 desc->bInterfaceClass);
1533 return -ENODEV;
1534 }
1535
1536 /* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1537 if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1538 dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1539 return -ENODEV;
1540 }
1541
1542 /* Several Quectel modems supports dynamic interface configuration, so
1543 * we need to match on class/subclass/protocol. These values are
1544 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1545 * different. Ignore the current interface if the number of endpoints
1546 * equals the number for the diag interface (two).
1547 */
1548 if (desc->bNumEndpoints == 2)
1549 return -ENODEV;
1550
1551 return usbnet_probe(intf, id);
1552 }
1553
qmi_wwan_disconnect(struct usb_interface * intf)1554 static void qmi_wwan_disconnect(struct usb_interface *intf)
1555 {
1556 struct usbnet *dev = usb_get_intfdata(intf);
1557 struct qmi_wwan_state *info;
1558 struct list_head *iter;
1559 struct net_device *ldev;
1560 LIST_HEAD(list);
1561
1562 /* called twice if separate control and data intf */
1563 if (!dev)
1564 return;
1565 info = (void *)&dev->data;
1566 if (info->flags & QMI_WWAN_FLAG_MUX) {
1567 if (!rtnl_trylock()) {
1568 restart_syscall();
1569 return;
1570 }
1571 rcu_read_lock();
1572 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1573 qmimux_unregister_device(ldev, &list);
1574 rcu_read_unlock();
1575 unregister_netdevice_many(&list);
1576 rtnl_unlock();
1577 info->flags &= ~QMI_WWAN_FLAG_MUX;
1578 }
1579 usbnet_disconnect(intf);
1580 }
1581
1582 static struct usb_driver qmi_wwan_driver = {
1583 .name = "qmi_wwan",
1584 .id_table = products,
1585 .probe = qmi_wwan_probe,
1586 .disconnect = qmi_wwan_disconnect,
1587 .suspend = qmi_wwan_suspend,
1588 .resume = qmi_wwan_resume,
1589 .reset_resume = qmi_wwan_resume,
1590 .supports_autosuspend = 1,
1591 .disable_hub_initiated_lpm = 1,
1592 };
1593
1594 module_usb_driver(qmi_wwan_driver);
1595
1596 MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1597 MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1598 MODULE_LICENSE("GPL");
1599
