1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
4 *
5 * The probing code is heavily inspired by cdc_ether, which is:
6 * Copyright (C) 2003-2005 by David Brownell
7 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
8 */
9
10#include <linux/module.h>
11#include <linux/sched/signal.h>
12#include <linux/netdevice.h>
13#include <linux/ethtool.h>
14#include <linux/etherdevice.h>
15#include <linux/if_arp.h>
16#include <linux/mii.h>
17#include <linux/rtnetlink.h>
18#include <linux/usb.h>
19#include <linux/usb/cdc.h>
20#include <linux/usb/usbnet.h>
21#include <linux/usb/cdc-wdm.h>
22#include <linux/u64_stats_sync.h>
23
24/* This driver supports wwan (3G/LTE/?) devices using a vendor
25 * specific management protocol called Qualcomm MSM Interface (QMI) -
26 * in addition to the more common AT commands over serial interface
27 * management
28 *
29 * QMI is wrapped in CDC, using CDC encapsulated commands on the
30 * control ("master") interface of a two-interface CDC Union
31 * resembling standard CDC ECM.  The devices do not use the control
32 * interface for any other CDC messages.  Most likely because the
33 * management protocol is used in place of the standard CDC
34 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
35 *
36 * Alternatively, control and data functions can be combined in a
37 * single USB interface.
38 *
39 * Handling a protocol like QMI is out of the scope for any driver.
40 * It is exported as a character device using the cdc-wdm driver as
41 * a subdriver, enabling userspace applications ("modem managers") to
42 * handle it.
43 *
44 * These devices may alternatively/additionally be configured using AT
45 * commands on a serial interface
46 */
47
48/* driver specific data */
49struct qmi_wwan_state {
50	struct usb_driver *subdriver;
51	atomic_t pmcount;
52	unsigned long flags;
53	struct usb_interface *control;
54	struct usb_interface *data;
55};
56
57enum qmi_wwan_flags {
58	QMI_WWAN_FLAG_RAWIP = 1 << 0,
59	QMI_WWAN_FLAG_MUX = 1 << 1,
60};
61
62enum qmi_wwan_quirks {
63	QMI_WWAN_QUIRK_DTR = 1 << 0,	/* needs "set DTR" request */
64};
65
66struct qmimux_hdr {
67	u8 pad;
68	u8 mux_id;
69	__be16 pkt_len;
70};
71
72struct qmimux_priv {
73	struct net_device *real_dev;
74	u8 mux_id;
75	struct pcpu_sw_netstats __percpu *stats64;
76};
77
78static int qmimux_open(struct net_device *dev)
79{
80	struct qmimux_priv *priv = netdev_priv(dev);
81	struct net_device *real_dev = priv->real_dev;
82
83	if (!(priv->real_dev->flags & IFF_UP))
84		return -ENETDOWN;
85
86	if (netif_carrier_ok(real_dev))
87		netif_carrier_on(dev);
88	return 0;
89}
90
91static int qmimux_stop(struct net_device *dev)
92{
93	netif_carrier_off(dev);
94	return 0;
95}
96
97static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
98{
99	struct qmimux_priv *priv = netdev_priv(dev);
100	unsigned int len = skb->len;
101	struct qmimux_hdr *hdr;
102	netdev_tx_t ret;
103
104	hdr = skb_push(skb, sizeof(struct qmimux_hdr));
105	hdr->pad = 0;
106	hdr->mux_id = priv->mux_id;
107	hdr->pkt_len = cpu_to_be16(len);
108	skb->dev = priv->real_dev;
109	ret = dev_queue_xmit(skb);
110
111	if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
112		struct pcpu_sw_netstats *stats64 = this_cpu_ptr(priv->stats64);
113
114		u64_stats_update_begin(&stats64->syncp);
115		stats64->tx_packets++;
116		stats64->tx_bytes += len;
117		u64_stats_update_end(&stats64->syncp);
118	} else {
119		dev->stats.tx_dropped++;
120	}
121
122	return ret;
123}
124
125static void qmimux_get_stats64(struct net_device *net,
126			       struct rtnl_link_stats64 *stats)
127{
128	struct qmimux_priv *priv = netdev_priv(net);
129
130	netdev_stats_to_stats64(stats, &net->stats);
131	dev_fetch_sw_netstats(stats, priv->stats64);
132}
133
134static const struct net_device_ops qmimux_netdev_ops = {
135	.ndo_open        = qmimux_open,
136	.ndo_stop        = qmimux_stop,
137	.ndo_start_xmit  = qmimux_start_xmit,
138	.ndo_get_stats64 = qmimux_get_stats64,
139};
140
141static void qmimux_setup(struct net_device *dev)
142{
143	dev->header_ops      = NULL;  /* No header */
144	dev->type            = ARPHRD_NONE;
145	dev->hard_header_len = 0;
146	dev->addr_len        = 0;
147	dev->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
148	dev->netdev_ops      = &qmimux_netdev_ops;
149	dev->mtu             = 1500;
150	dev->needs_free_netdev = true;
151}
152
153static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
154{
155	struct qmimux_priv *priv;
156	struct list_head *iter;
157	struct net_device *ldev;
158
159	rcu_read_lock();
160	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
161		priv = netdev_priv(ldev);
162		if (priv->mux_id == mux_id) {
163			rcu_read_unlock();
164			return ldev;
165		}
166	}
167	rcu_read_unlock();
168	return NULL;
169}
170
171static bool qmimux_has_slaves(struct usbnet *dev)
172{
173	return !list_empty(&dev->net->adj_list.upper);
174}
175
176static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
177{
178	unsigned int len, offset = 0, pad_len, pkt_len;
179	struct qmimux_hdr *hdr;
180	struct net_device *net;
181	struct sk_buff *skbn;
182	u8 qmimux_hdr_sz = sizeof(*hdr);
183
184	while (offset + qmimux_hdr_sz < skb->len) {
185		hdr = (struct qmimux_hdr *)(skb->data + offset);
186		len = be16_to_cpu(hdr->pkt_len);
187
188		/* drop the packet, bogus length */
189		if (offset + len + qmimux_hdr_sz > skb->len)
190			return 0;
191
192		/* control packet, we do not know what to do */
193		if (hdr->pad & 0x80)
194			goto skip;
195
196		/* extract padding length and check for valid length info */
197		pad_len = hdr->pad & 0x3f;
198		if (len == 0 || pad_len >= len)
199			goto skip;
200		pkt_len = len - pad_len;
201
202		net = qmimux_find_dev(dev, hdr->mux_id);
203		if (!net)
204			goto skip;
205		skbn = netdev_alloc_skb(net, pkt_len);
206		if (!skbn)
207			return 0;
208		skbn->dev = net;
209
210		switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
211		case 0x40:
212			skbn->protocol = htons(ETH_P_IP);
213			break;
214		case 0x60:
215			skbn->protocol = htons(ETH_P_IPV6);
216			break;
217		default:
218			/* not ip - do not know what to do */
219			kfree_skb(skbn);
220			goto skip;
221		}
222
223		skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
224		if (netif_rx(skbn) != NET_RX_SUCCESS) {
225			net->stats.rx_errors++;
226			return 0;
227		} else {
228			struct pcpu_sw_netstats *stats64;
229			struct qmimux_priv *priv = netdev_priv(net);
230
231			stats64 = this_cpu_ptr(priv->stats64);
232			u64_stats_update_begin(&stats64->syncp);
233			stats64->rx_packets++;
234			stats64->rx_bytes += pkt_len;
235			u64_stats_update_end(&stats64->syncp);
236		}
237
238skip:
239		offset += len + qmimux_hdr_sz;
240	}
241	return 1;
242}
243
244static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
245{
246	struct net_device *new_dev;
247	struct qmimux_priv *priv;
248	int err;
249
250	new_dev = alloc_netdev(sizeof(struct qmimux_priv),
251			       "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
252	if (!new_dev)
253		return -ENOBUFS;
254
255	dev_net_set(new_dev, dev_net(real_dev));
256	priv = netdev_priv(new_dev);
257	priv->mux_id = mux_id;
258	priv->real_dev = real_dev;
259
260	priv->stats64 = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
261	if (!priv->stats64) {
262		err = -ENOBUFS;
263		goto out_free_newdev;
264	}
265
266	err = register_netdevice(new_dev);
267	if (err < 0)
268		goto out_free_newdev;
269
270	/* Account for reference in struct qmimux_priv_priv */
271	dev_hold(real_dev);
272
273	err = netdev_upper_dev_link(real_dev, new_dev, NULL);
274	if (err)
275		goto out_unregister_netdev;
276
277	netif_stacked_transfer_operstate(real_dev, new_dev);
278
279	return 0;
280
281out_unregister_netdev:
282	unregister_netdevice(new_dev);
283	dev_put(real_dev);
284
285out_free_newdev:
286	free_netdev(new_dev);
287	return err;
288}
289
290static void qmimux_unregister_device(struct net_device *dev,
291				     struct list_head *head)
292{
293	struct qmimux_priv *priv = netdev_priv(dev);
294	struct net_device *real_dev = priv->real_dev;
295
296	free_percpu(priv->stats64);
297	netdev_upper_dev_unlink(real_dev, dev);
298	unregister_netdevice_queue(dev, head);
299
300	/* Get rid of the reference to real_dev */
301	dev_put(real_dev);
302}
303
304static void qmi_wwan_netdev_setup(struct net_device *net)
305{
306	struct usbnet *dev = netdev_priv(net);
307	struct qmi_wwan_state *info = (void *)&dev->data;
308
309	if (info->flags & QMI_WWAN_FLAG_RAWIP) {
310		net->header_ops      = NULL;  /* No header */
311		net->type            = ARPHRD_NONE;
312		net->hard_header_len = 0;
313		net->addr_len        = 0;
314		net->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
315		set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
316		netdev_dbg(net, "mode: raw IP\n");
317	} else if (!net->header_ops) { /* don't bother if already set */
318		ether_setup(net);
319		/* Restoring min/max mtu values set originally by usbnet */
320		net->min_mtu = 0;
321		net->max_mtu = ETH_MAX_MTU;
322		clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
323		netdev_dbg(net, "mode: Ethernet\n");
324	}
325
326	/* recalculate buffers after changing hard_header_len */
327	usbnet_change_mtu(net, net->mtu);
328}
329
330static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
331{
332	struct usbnet *dev = netdev_priv(to_net_dev(d));
333	struct qmi_wwan_state *info = (void *)&dev->data;
334
335	return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
336}
337
338static ssize_t raw_ip_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
339{
340	struct usbnet *dev = netdev_priv(to_net_dev(d));
341	struct qmi_wwan_state *info = (void *)&dev->data;
342	bool enable;
343	int ret;
344
345	if (strtobool(buf, &enable))
346		return -EINVAL;
347
348	/* no change? */
349	if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
350		return len;
351
352	if (!rtnl_trylock())
353		return restart_syscall();
354
355	/* we don't want to modify a running netdev */
356	if (netif_running(dev->net)) {
357		netdev_err(dev->net, "Cannot change a running device\n");
358		ret = -EBUSY;
359		goto err;
360	}
361
362	/* let other drivers deny the change */
363	ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
364	ret = notifier_to_errno(ret);
365	if (ret) {
366		netdev_err(dev->net, "Type change was refused\n");
367		goto err;
368	}
369
370	if (enable)
371		info->flags |= QMI_WWAN_FLAG_RAWIP;
372	else
373		info->flags &= ~QMI_WWAN_FLAG_RAWIP;
374	qmi_wwan_netdev_setup(dev->net);
375	call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
376	ret = len;
377err:
378	rtnl_unlock();
379	return ret;
380}
381
382static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
383{
384	struct net_device *dev = to_net_dev(d);
385	struct qmimux_priv *priv;
386	struct list_head *iter;
387	struct net_device *ldev;
388	ssize_t count = 0;
389
390	rcu_read_lock();
391	netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
392		priv = netdev_priv(ldev);
393		count += scnprintf(&buf[count], PAGE_SIZE - count,
394				   "0x%02x\n", priv->mux_id);
395	}
396	rcu_read_unlock();
397	return count;
398}
399
400static ssize_t add_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
401{
402	struct usbnet *dev = netdev_priv(to_net_dev(d));
403	struct qmi_wwan_state *info = (void *)&dev->data;
404	u8 mux_id;
405	int ret;
406
407	if (kstrtou8(buf, 0, &mux_id))
408		return -EINVAL;
409
410	/* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
411	if (mux_id < 1 || mux_id > 254)
412		return -EINVAL;
413
414	if (!rtnl_trylock())
415		return restart_syscall();
416
417	if (qmimux_find_dev(dev, mux_id)) {
418		netdev_err(dev->net, "mux_id already present\n");
419		ret = -EINVAL;
420		goto err;
421	}
422
423	ret = qmimux_register_device(dev->net, mux_id);
424	if (!ret) {
425		info->flags |= QMI_WWAN_FLAG_MUX;
426		ret = len;
427	}
428err:
429	rtnl_unlock();
430	return ret;
431}
432
433static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
434{
435	return add_mux_show(d, attr, buf);
436}
437
438static ssize_t del_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
439{
440	struct usbnet *dev = netdev_priv(to_net_dev(d));
441	struct qmi_wwan_state *info = (void *)&dev->data;
442	struct net_device *del_dev;
443	u8 mux_id;
444	int ret = 0;
445
446	if (kstrtou8(buf, 0, &mux_id))
447		return -EINVAL;
448
449	if (!rtnl_trylock())
450		return restart_syscall();
451
452	del_dev = qmimux_find_dev(dev, mux_id);
453	if (!del_dev) {
454		netdev_err(dev->net, "mux_id not present\n");
455		ret = -EINVAL;
456		goto err;
457	}
458	qmimux_unregister_device(del_dev, NULL);
459
460	if (!qmimux_has_slaves(dev))
461		info->flags &= ~QMI_WWAN_FLAG_MUX;
462	ret = len;
463err:
464	rtnl_unlock();
465	return ret;
466}
467
468static DEVICE_ATTR_RW(raw_ip);
469static DEVICE_ATTR_RW(add_mux);
470static DEVICE_ATTR_RW(del_mux);
471
472static struct attribute *qmi_wwan_sysfs_attrs[] = {
473	&dev_attr_raw_ip.attr,
474	&dev_attr_add_mux.attr,
475	&dev_attr_del_mux.attr,
476	NULL,
477};
478
479static struct attribute_group qmi_wwan_sysfs_attr_group = {
480	.name = "qmi",
481	.attrs = qmi_wwan_sysfs_attrs,
482};
483
484/* default ethernet address used by the modem */
485static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
486
487static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
488
489/* Make up an ethernet header if the packet doesn't have one.
490 *
491 * A firmware bug common among several devices cause them to send raw
492 * IP packets under some circumstances.  There is no way for the
493 * driver/host to know when this will happen.  And even when the bug
494 * hits, some packets will still arrive with an intact header.
495 *
496 * The supported devices are only capably of sending IPv4, IPv6 and
497 * ARP packets on a point-to-point link. Any packet with an ethernet
498 * header will have either our address or a broadcast/multicast
499 * address as destination.  ARP packets will always have a header.
500 *
501 * This means that this function will reliably add the appropriate
502 * header iff necessary, provided our hardware address does not start
503 * with 4 or 6.
504 *
505 * Another common firmware bug results in all packets being addressed
506 * to 00:a0:c6:00:00:00 despite the host address being different.
507 * This function will also fixup such packets.
508 */
509static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
510{
511	struct qmi_wwan_state *info = (void *)&dev->data;
512	bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
513	__be16 proto;
514
515	/* This check is no longer done by usbnet */
516	if (skb->len < dev->net->hard_header_len)
517		return 0;
518
519	if (info->flags & QMI_WWAN_FLAG_MUX)
520		return qmimux_rx_fixup(dev, skb);
521
522	switch (skb->data[0] & 0xf0) {
523	case 0x40:
524		proto = htons(ETH_P_IP);
525		break;
526	case 0x60:
527		proto = htons(ETH_P_IPV6);
528		break;
529	case 0x00:
530		if (rawip)
531			return 0;
532		if (is_multicast_ether_addr(skb->data))
533			return 1;
534		/* possibly bogus destination - rewrite just in case */
535		skb_reset_mac_header(skb);
536		goto fix_dest;
537	default:
538		if (rawip)
539			return 0;
540		/* pass along other packets without modifications */
541		return 1;
542	}
543	if (rawip) {
544		skb_reset_mac_header(skb);
545		skb->dev = dev->net; /* normally set by eth_type_trans */
546		skb->protocol = proto;
547		return 1;
548	}
549
550	if (skb_headroom(skb) < ETH_HLEN)
551		return 0;
552	skb_push(skb, ETH_HLEN);
553	skb_reset_mac_header(skb);
554	eth_hdr(skb)->h_proto = proto;
555	eth_zero_addr(eth_hdr(skb)->h_source);
556fix_dest:
557	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
558	return 1;
559}
560
561/* very simplistic detection of IPv4 or IPv6 headers */
562static bool possibly_iphdr(const char *data)
563{
564	return (data[0] & 0xd0) == 0x40;
565}
566
567/* disallow addresses which may be confused with IP headers */
568static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
569{
570	int ret;
571	struct sockaddr *addr = p;
572
573	ret = eth_prepare_mac_addr_change(dev, p);
574	if (ret < 0)
575		return ret;
576	if (possibly_iphdr(addr->sa_data))
577		return -EADDRNOTAVAIL;
578	eth_commit_mac_addr_change(dev, p);
579	return 0;
580}
581
582static const struct net_device_ops qmi_wwan_netdev_ops = {
583	.ndo_open		= usbnet_open,
584	.ndo_stop		= usbnet_stop,
585	.ndo_start_xmit		= usbnet_start_xmit,
586	.ndo_tx_timeout		= usbnet_tx_timeout,
587	.ndo_change_mtu		= usbnet_change_mtu,
588	.ndo_get_stats64	= usbnet_get_stats64,
589	.ndo_set_mac_address	= qmi_wwan_mac_addr,
590	.ndo_validate_addr	= eth_validate_addr,
591};
592
593/* using a counter to merge subdriver requests with our own into a
594 * combined state
595 */
596static int qmi_wwan_manage_power(struct usbnet *dev, int on)
597{
598	struct qmi_wwan_state *info = (void *)&dev->data;
599	int rv;
600
601	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
602		atomic_read(&info->pmcount), on);
603
604	if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
605	    (!on && atomic_dec_and_test(&info->pmcount))) {
606		/* need autopm_get/put here to ensure the usbcore sees
607		 * the new value
608		 */
609		rv = usb_autopm_get_interface(dev->intf);
610		dev->intf->needs_remote_wakeup = on;
611		if (!rv)
612			usb_autopm_put_interface(dev->intf);
613	}
614	return 0;
615}
616
617static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
618{
619	struct usbnet *dev = usb_get_intfdata(intf);
620
621	/* can be called while disconnecting */
622	if (!dev)
623		return 0;
624	return qmi_wwan_manage_power(dev, on);
625}
626
627/* collect all three endpoints and register subdriver */
628static int qmi_wwan_register_subdriver(struct usbnet *dev)
629{
630	int rv;
631	struct usb_driver *subdriver = NULL;
632	struct qmi_wwan_state *info = (void *)&dev->data;
633
634	/* collect bulk endpoints */
635	rv = usbnet_get_endpoints(dev, info->data);
636	if (rv < 0)
637		goto err;
638
639	/* update status endpoint if separate control interface */
640	if (info->control != info->data)
641		dev->status = &info->control->cur_altsetting->endpoint[0];
642
643	/* require interrupt endpoint for subdriver */
644	if (!dev->status) {
645		rv = -EINVAL;
646		goto err;
647	}
648
649	/* for subdriver power management */
650	atomic_set(&info->pmcount, 0);
651
652	/* register subdriver */
653	subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
654					 4096, &qmi_wwan_cdc_wdm_manage_power);
655	if (IS_ERR(subdriver)) {
656		dev_err(&info->control->dev, "subdriver registration failed\n");
657		rv = PTR_ERR(subdriver);
658		goto err;
659	}
660
661	/* prevent usbnet from using status endpoint */
662	dev->status = NULL;
663
664	/* save subdriver struct for suspend/resume wrappers */
665	info->subdriver = subdriver;
666
667err:
668	return rv;
669}
670
671/* Send CDC SetControlLineState request, setting or clearing the DTR.
672 * "Required for Autoconnect and 9x30 to wake up" according to the
673 * GobiNet driver. The requirement has been verified on an MDM9230
674 * based Sierra Wireless MC7455
675 */
676static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
677{
678	u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
679
680	return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
681				USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
682				on ? 0x01 : 0x00, intf, NULL, 0);
683}
684
685static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
686{
687	int status;
688	u8 *buf = intf->cur_altsetting->extra;
689	int len = intf->cur_altsetting->extralen;
690	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
691	struct usb_cdc_union_desc *cdc_union;
692	struct usb_cdc_ether_desc *cdc_ether;
693	struct usb_driver *driver = driver_of(intf);
694	struct qmi_wwan_state *info = (void *)&dev->data;
695	struct usb_cdc_parsed_header hdr;
696
697	BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
698		      sizeof(struct qmi_wwan_state)));
699
700	/* set up initial state */
701	info->control = intf;
702	info->data = intf;
703
704	/* and a number of CDC descriptors */
705	cdc_parse_cdc_header(&hdr, intf, buf, len);
706	cdc_union = hdr.usb_cdc_union_desc;
707	cdc_ether = hdr.usb_cdc_ether_desc;
708
709	/* Use separate control and data interfaces if we found a CDC Union */
710	if (cdc_union) {
711		info->data = usb_ifnum_to_if(dev->udev,
712					     cdc_union->bSlaveInterface0);
713		if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
714		    !info->data) {
715			dev_err(&intf->dev,
716				"bogus CDC Union: master=%u, slave=%u\n",
717				cdc_union->bMasterInterface0,
718				cdc_union->bSlaveInterface0);
719
720			/* ignore and continue... */
721			cdc_union = NULL;
722			info->data = intf;
723		}
724	}
725
726	/* errors aren't fatal - we can live with the dynamic address */
727	if (cdc_ether && cdc_ether->wMaxSegmentSize) {
728		dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
729		usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
730	}
731
732	/* claim data interface and set it up */
733	if (info->control != info->data) {
734		status = usb_driver_claim_interface(driver, info->data, dev);
735		if (status < 0)
736			goto err;
737	}
738
739	status = qmi_wwan_register_subdriver(dev);
740	if (status < 0 && info->control != info->data) {
741		usb_set_intfdata(info->data, NULL);
742		usb_driver_release_interface(driver, info->data);
743	}
744
745	/* disabling remote wakeup on MDM9x30 devices has the same
746	 * effect as clearing DTR. The device will not respond to QMI
747	 * requests until we set DTR again.  This is similar to a
748	 * QMI_CTL SYNC request, clearing a lot of firmware state
749	 * including the client ID allocations.
750	 *
751	 * Our usage model allows a session to span multiple
752	 * open/close events, so we must prevent the firmware from
753	 * clearing out state the clients might need.
754	 *
755	 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
756	 * this fact to enable the quirk for all USB3 devices.
757	 *
758	 * There are also chipsets with the same "set DTR" requirement
759	 * but without USB3 support.  Devices based on these chips
760	 * need a quirk flag in the device ID table.
761	 */
762	if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
763	    le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
764		qmi_wwan_manage_power(dev, 1);
765		qmi_wwan_change_dtr(dev, true);
766	}
767
768	/* Never use the same address on both ends of the link, even if the
769	 * buggy firmware told us to. Or, if device is assigned the well-known
770	 * buggy firmware MAC address, replace it with a random address,
771	 */
772	if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
773	    ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
774		eth_hw_addr_random(dev->net);
775
776	/* make MAC addr easily distinguishable from an IP header */
777	if (possibly_iphdr(dev->net->dev_addr)) {
778		dev->net->dev_addr[0] |= 0x02;	/* set local assignment bit */
779		dev->net->dev_addr[0] &= 0xbf;	/* clear "IP" bit */
780	}
781	dev->net->netdev_ops = &qmi_wwan_netdev_ops;
782	dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
783err:
784	return status;
785}
786
787static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
788{
789	struct qmi_wwan_state *info = (void *)&dev->data;
790	struct usb_driver *driver = driver_of(intf);
791	struct usb_interface *other;
792
793	if (info->subdriver && info->subdriver->disconnect)
794		info->subdriver->disconnect(info->control);
795
796	/* disable MDM9x30 quirk */
797	if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
798		qmi_wwan_change_dtr(dev, false);
799		qmi_wwan_manage_power(dev, 0);
800	}
801
802	/* allow user to unbind using either control or data */
803	if (intf == info->control)
804		other = info->data;
805	else
806		other = info->control;
807
808	/* only if not shared */
809	if (other && intf != other) {
810		usb_set_intfdata(other, NULL);
811		usb_driver_release_interface(driver, other);
812	}
813
814	info->subdriver = NULL;
815	info->data = NULL;
816	info->control = NULL;
817}
818
819/* suspend/resume wrappers calling both usbnet and the cdc-wdm
820 * subdriver if present.
821 *
822 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
823 * wrappers for those without adding usbnet reset support first.
824 */
825static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
826{
827	struct usbnet *dev = usb_get_intfdata(intf);
828	struct qmi_wwan_state *info = (void *)&dev->data;
829	int ret;
830
831	/* Both usbnet_suspend() and subdriver->suspend() MUST return 0
832	 * in system sleep context, otherwise, the resume callback has
833	 * to recover device from previous suspend failure.
834	 */
835	ret = usbnet_suspend(intf, message);
836	if (ret < 0)
837		goto err;
838
839	if (intf == info->control && info->subdriver &&
840	    info->subdriver->suspend)
841		ret = info->subdriver->suspend(intf, message);
842	if (ret < 0)
843		usbnet_resume(intf);
844err:
845	return ret;
846}
847
848static int qmi_wwan_resume(struct usb_interface *intf)
849{
850	struct usbnet *dev = usb_get_intfdata(intf);
851	struct qmi_wwan_state *info = (void *)&dev->data;
852	int ret = 0;
853	bool callsub = (intf == info->control && info->subdriver &&
854			info->subdriver->resume);
855
856	if (callsub)
857		ret = info->subdriver->resume(intf);
858	if (ret < 0)
859		goto err;
860	ret = usbnet_resume(intf);
861	if (ret < 0 && callsub)
862		info->subdriver->suspend(intf, PMSG_SUSPEND);
863err:
864	return ret;
865}
866
867static const struct driver_info	qmi_wwan_info = {
868	.description	= "WWAN/QMI device",
869	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
870	.bind		= qmi_wwan_bind,
871	.unbind		= qmi_wwan_unbind,
872	.manage_power	= qmi_wwan_manage_power,
873	.rx_fixup       = qmi_wwan_rx_fixup,
874};
875
876static const struct driver_info	qmi_wwan_info_quirk_dtr = {
877	.description	= "WWAN/QMI device",
878	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
879	.bind		= qmi_wwan_bind,
880	.unbind		= qmi_wwan_unbind,
881	.manage_power	= qmi_wwan_manage_power,
882	.rx_fixup       = qmi_wwan_rx_fixup,
883	.data           = QMI_WWAN_QUIRK_DTR,
884};
885
886#define HUAWEI_VENDOR_ID	0x12D1
887
888/* map QMI/wwan function by a fixed interface number */
889#define QMI_FIXED_INTF(vend, prod, num) \
890	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
891	.driver_info = (unsigned long)&qmi_wwan_info
892
893/* devices requiring "set DTR" quirk */
894#define QMI_QUIRK_SET_DTR(vend, prod, num) \
895	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
896	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
897
898/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
899#define QMI_GOBI1K_DEVICE(vend, prod) \
900	QMI_FIXED_INTF(vend, prod, 3)
901
902/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
903#define QMI_GOBI_DEVICE(vend, prod) \
904	QMI_FIXED_INTF(vend, prod, 0)
905
906/* Many devices have QMI and DIAG functions which are distinguishable
907 * from other vendor specific functions by class, subclass and
908 * protocol all being 0xff. The DIAG function has exactly 2 endpoints
909 * and is silently rejected when probed.
910 *
911 * This makes it possible to match dynamically numbered QMI functions
912 * as seen on e.g. many Quectel modems.
913 */
914#define QMI_MATCH_FF_FF_FF(vend, prod) \
915	USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
916				      USB_SUBCLASS_VENDOR_SPEC, 0xff), \
917	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
918
919static const struct usb_device_id products[] = {
920	/* 1. CDC ECM like devices match on the control interface */
921	{	/* Huawei E392, E398 and possibly others sharing both device id and more... */
922		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
923		.driver_info        = (unsigned long)&qmi_wwan_info,
924	},
925	{	/* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
926		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
927		.driver_info        = (unsigned long)&qmi_wwan_info,
928	},
929	{	/* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
930		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
931		.driver_info        = (unsigned long)&qmi_wwan_info,
932	},
933	{	/* Motorola Mapphone devices with MDM6600 */
934		USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
935		.driver_info        = (unsigned long)&qmi_wwan_info,
936	},
937
938	/* 2. Combined interface devices matching on class+protocol */
939	{	/* Huawei E367 and possibly others in "Windows mode" */
940		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
941		.driver_info        = (unsigned long)&qmi_wwan_info,
942	},
943	{	/* Huawei E392, E398 and possibly others in "Windows mode" */
944		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
945		.driver_info        = (unsigned long)&qmi_wwan_info,
946	},
947	{	/* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
948		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
949		.driver_info        = (unsigned long)&qmi_wwan_info,
950	},
951	{	/* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
952		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
953		.driver_info        = (unsigned long)&qmi_wwan_info,
954	},
955	{	/* Pantech UML290, P4200 and more */
956		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
957		.driver_info        = (unsigned long)&qmi_wwan_info,
958	},
959	{	/* Pantech UML290 - newer firmware */
960		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
961		.driver_info        = (unsigned long)&qmi_wwan_info,
962	},
963	{	/* Novatel USB551L and MC551 */
964		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
965		                              USB_CLASS_COMM,
966		                              USB_CDC_SUBCLASS_ETHERNET,
967		                              USB_CDC_PROTO_NONE),
968		.driver_info        = (unsigned long)&qmi_wwan_info,
969	},
970	{	/* Novatel E362 */
971		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
972		                              USB_CLASS_COMM,
973		                              USB_CDC_SUBCLASS_ETHERNET,
974		                              USB_CDC_PROTO_NONE),
975		.driver_info        = (unsigned long)&qmi_wwan_info,
976	},
977	{	/* Novatel Expedite E371 */
978		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
979		                              USB_CLASS_COMM,
980		                              USB_CDC_SUBCLASS_ETHERNET,
981		                              USB_CDC_PROTO_NONE),
982		.driver_info        = (unsigned long)&qmi_wwan_info,
983	},
984	{	/* Dell Wireless 5800 (Novatel E362) */
985		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
986					      USB_CLASS_COMM,
987					      USB_CDC_SUBCLASS_ETHERNET,
988					      USB_CDC_PROTO_NONE),
989		.driver_info        = (unsigned long)&qmi_wwan_info,
990	},
991	{	/* Dell Wireless 5800 V2 (Novatel E362) */
992		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
993					      USB_CLASS_COMM,
994					      USB_CDC_SUBCLASS_ETHERNET,
995					      USB_CDC_PROTO_NONE),
996		.driver_info        = (unsigned long)&qmi_wwan_info,
997	},
998	{	/* Dell Wireless 5804 (Novatel E371) */
999		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1000					      USB_CLASS_COMM,
1001					      USB_CDC_SUBCLASS_ETHERNET,
1002					      USB_CDC_PROTO_NONE),
1003		.driver_info        = (unsigned long)&qmi_wwan_info,
1004	},
1005	{	/* ADU960S */
1006		USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1007					      USB_CLASS_COMM,
1008					      USB_CDC_SUBCLASS_ETHERNET,
1009					      USB_CDC_PROTO_NONE),
1010		.driver_info        = (unsigned long)&qmi_wwan_info,
1011	},
1012	{	/* HP lt2523 (Novatel E371) */
1013		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1014					      USB_CLASS_COMM,
1015					      USB_CDC_SUBCLASS_ETHERNET,
1016					      USB_CDC_PROTO_NONE),
1017		.driver_info        = (unsigned long)&qmi_wwan_info,
1018	},
1019	{	/* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1020		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1021		.driver_info = (unsigned long)&qmi_wwan_info,
1022	},
1023	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)},	/* Quectel EC25, EC20 R2.0  Mini PCIe */
1024	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)},	/* Quectel EP06/EG06/EM06 */
1025	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)},	/* Quectel EG12/EM12 */
1026	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0620)},	/* Quectel EM160R-GL */
1027	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)},	/* Quectel RM500Q-GL */
1028	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0801)},	/* Quectel RM520N */
1029
1030	/* 3. Combined interface devices matching on interface number */
1031	{QMI_FIXED_INTF(0x0408, 0xea42, 4)},	/* Yota / Megafon M100-1 */
1032	{QMI_FIXED_INTF(0x05c6, 0x6001, 3)},	/* 4G LTE usb-modem U901 */
1033	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1034	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1035	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1036	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1037	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1038	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1039	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1040	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1041	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1042	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1043	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1044	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1045	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1046	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1047	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1048	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1049	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1050	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1051	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1052	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1053	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1054	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1055	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1056	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1057	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1058	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1059	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1060	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1061	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1062	{QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)},	/* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1063	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1064	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1065	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1066	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1067	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1068	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1069	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1070	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1071	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1072	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1073	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1074	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1075	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1076	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1077	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1078	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1079	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1080	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1081	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1082	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1083	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1084	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1085	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1086	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1087	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1088	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1089	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1090	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1091	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1092	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1093	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1094	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1095	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1096	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1097	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1098	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1099	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1100	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1101	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1102	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1103	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1104	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1105	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1106	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1107	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1108	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1109	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1110	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1111	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1112	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1113	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1114	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1115	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1116	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1117	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1118	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1119	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1120	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1121	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1122	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1123	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1124	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1125	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1126	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1127	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1128	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1129	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1130	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1131	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1132	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1133	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1134	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1135	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1136	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1137	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1138	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1139	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1140	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1141	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1142	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1143	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1144	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1145	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1146	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1147	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1148	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1149	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1150	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1151	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1152	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1153	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1154	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1155	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1156	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1157	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1158	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1159	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1160	{QMI_QUIRK_SET_DTR(0x05c6, 0x9091, 2)},	/* Compal RXM-G1 */
1161	{QMI_FIXED_INTF(0x05c6, 0x90b2, 3)},    /* ublox R410M */
1162	{QMI_QUIRK_SET_DTR(0x05c6, 0x90db, 2)},	/* Compal RXM-G1 */
1163	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1164	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1165	{QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)},	/* YUGA CLM920-NC5 */
1166	{QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1167	{QMI_FIXED_INTF(0x0846, 0x68d3, 8)},	/* Netgear Aircard 779S */
1168	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)},	/* Huawei E173 */
1169	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},	/* Huawei E1820 */
1170	{QMI_FIXED_INTF(0x1435, 0x0918, 3)},	/* Wistron NeWeb D16Q1 */
1171	{QMI_FIXED_INTF(0x1435, 0x0918, 4)},	/* Wistron NeWeb D16Q1 */
1172	{QMI_FIXED_INTF(0x1435, 0x0918, 5)},	/* Wistron NeWeb D16Q1 */
1173	{QMI_FIXED_INTF(0x1435, 0x3185, 4)},	/* Wistron NeWeb M18Q5 */
1174	{QMI_FIXED_INTF(0x1435, 0xd111, 4)},	/* M9615A DM11-1 D51QC */
1175	{QMI_FIXED_INTF(0x1435, 0xd181, 3)},	/* Wistron NeWeb D18Q1 */
1176	{QMI_FIXED_INTF(0x1435, 0xd181, 4)},	/* Wistron NeWeb D18Q1 */
1177	{QMI_FIXED_INTF(0x1435, 0xd181, 5)},	/* Wistron NeWeb D18Q1 */
1178	{QMI_FIXED_INTF(0x1435, 0xd182, 4)},	/* Wistron NeWeb D18 */
1179	{QMI_FIXED_INTF(0x1435, 0xd182, 5)},	/* Wistron NeWeb D18 */
1180	{QMI_FIXED_INTF(0x1435, 0xd191, 4)},	/* Wistron NeWeb D19Q1 */
1181	{QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)},	/* Fibocom NL668 series */
1182	{QMI_FIXED_INTF(0x1690, 0x7588, 4)},    /* ASKEY WWHC050 */
1183	{QMI_FIXED_INTF(0x16d8, 0x6003, 0)},	/* CMOTech 6003 */
1184	{QMI_FIXED_INTF(0x16d8, 0x6007, 0)},	/* CMOTech CHE-628S */
1185	{QMI_FIXED_INTF(0x16d8, 0x6008, 0)},	/* CMOTech CMU-301 */
1186	{QMI_FIXED_INTF(0x16d8, 0x6280, 0)},	/* CMOTech CHU-628 */
1187	{QMI_FIXED_INTF(0x16d8, 0x7001, 0)},	/* CMOTech CHU-720S */
1188	{QMI_FIXED_INTF(0x16d8, 0x7002, 0)},	/* CMOTech 7002 */
1189	{QMI_FIXED_INTF(0x16d8, 0x7003, 4)},	/* CMOTech CHU-629K */
1190	{QMI_FIXED_INTF(0x16d8, 0x7004, 3)},	/* CMOTech 7004 */
1191	{QMI_FIXED_INTF(0x16d8, 0x7006, 5)},	/* CMOTech CGU-629 */
1192	{QMI_FIXED_INTF(0x16d8, 0x700a, 4)},	/* CMOTech CHU-629S */
1193	{QMI_FIXED_INTF(0x16d8, 0x7211, 0)},	/* CMOTech CHU-720I */
1194	{QMI_FIXED_INTF(0x16d8, 0x7212, 0)},	/* CMOTech 7212 */
1195	{QMI_FIXED_INTF(0x16d8, 0x7213, 0)},	/* CMOTech 7213 */
1196	{QMI_FIXED_INTF(0x16d8, 0x7251, 1)},	/* CMOTech 7251 */
1197	{QMI_FIXED_INTF(0x16d8, 0x7252, 1)},	/* CMOTech 7252 */
1198	{QMI_FIXED_INTF(0x16d8, 0x7253, 1)},	/* CMOTech 7253 */
1199	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1200	{QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1201	{QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1202	{QMI_FIXED_INTF(0x19d2, 0x0019, 3)},	/* ONDA MT689DC */
1203	{QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1204	{QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1205	{QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1206	{QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1207	{QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1208	{QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1209	{QMI_FIXED_INTF(0x19d2, 0x0055, 1)},	/* ZTE (Vodafone) K3520-Z */
1210	{QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1211	{QMI_FIXED_INTF(0x19d2, 0x0063, 4)},	/* ZTE (Vodafone) K3565-Z */
1212	{QMI_FIXED_INTF(0x19d2, 0x0104, 4)},	/* ZTE (Vodafone) K4505-Z */
1213	{QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1214	{QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1215	{QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1216	{QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1217	{QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1218	{QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1219	{QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1220	{QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1221	{QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1222	{QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1223	{QMI_FIXED_INTF(0x19d2, 0x0157, 5)},	/* ZTE MF683 */
1224	{QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1225	{QMI_FIXED_INTF(0x19d2, 0x0167, 4)},	/* ZTE MF820D */
1226	{QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1227	{QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1228	{QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1229	{QMI_FIXED_INTF(0x19d2, 0x0189, 4)},    /* ZTE MF290 */
1230	{QMI_FIXED_INTF(0x19d2, 0x0191, 4)},	/* ZTE EuFi890 */
1231	{QMI_FIXED_INTF(0x19d2, 0x0199, 1)},	/* ZTE MF820S */
1232	{QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1233	{QMI_FIXED_INTF(0x19d2, 0x0257, 3)},	/* ZTE MF821 */
1234	{QMI_FIXED_INTF(0x19d2, 0x0265, 4)},	/* ONDA MT8205 4G LTE */
1235	{QMI_FIXED_INTF(0x19d2, 0x0284, 4)},	/* ZTE MF880 */
1236	{QMI_FIXED_INTF(0x19d2, 0x0326, 4)},	/* ZTE MF821D */
1237	{QMI_FIXED_INTF(0x19d2, 0x0396, 3)},	/* ZTE ZM8620 */
1238	{QMI_FIXED_INTF(0x19d2, 0x0412, 4)},	/* Telewell TW-LTE 4G */
1239	{QMI_FIXED_INTF(0x19d2, 0x1008, 4)},	/* ZTE (Vodafone) K3570-Z */
1240	{QMI_FIXED_INTF(0x19d2, 0x1010, 4)},	/* ZTE (Vodafone) K3571-Z */
1241	{QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1242	{QMI_FIXED_INTF(0x19d2, 0x1018, 3)},	/* ZTE (Vodafone) K5006-Z */
1243	{QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1244	{QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1245	{QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1246	{QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1247	{QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1248	{QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1249	{QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1250	{QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1251	{QMI_FIXED_INTF(0x19d2, 0x1270, 5)},	/* ZTE MF667 */
1252	{QMI_FIXED_INTF(0x19d2, 0x1275, 3)},	/* ZTE P685M */
1253	{QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1254	{QMI_FIXED_INTF(0x19d2, 0x1402, 2)},	/* ZTE MF60 */
1255	{QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1256	{QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1257	{QMI_FIXED_INTF(0x19d2, 0x1426, 2)},	/* ZTE MF91 */
1258	{QMI_FIXED_INTF(0x19d2, 0x1428, 2)},	/* Telewell TW-LTE 4G v2 */
1259	{QMI_FIXED_INTF(0x19d2, 0x1432, 3)},	/* ZTE ME3620 */
1260	{QMI_FIXED_INTF(0x19d2, 0x2002, 4)},	/* ZTE (Vodafone) K3765-Z */
1261	{QMI_FIXED_INTF(0x2001, 0x7e16, 3)},	/* D-Link DWM-221 */
1262	{QMI_FIXED_INTF(0x2001, 0x7e19, 4)},	/* D-Link DWM-221 B1 */
1263	{QMI_FIXED_INTF(0x2001, 0x7e35, 4)},	/* D-Link DWM-222 */
1264	{QMI_FIXED_INTF(0x2001, 0x7e3d, 4)},	/* D-Link DWM-222 A2 */
1265	{QMI_FIXED_INTF(0x2020, 0x2031, 4)},	/* Olicard 600 */
1266	{QMI_FIXED_INTF(0x2020, 0x2033, 4)},	/* BroadMobi BM806U */
1267	{QMI_QUIRK_SET_DTR(0x2020, 0x2060, 4)},	/* BroadMobi BM818 */
1268	{QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)},    /* Sierra Wireless MC7700 */
1269	{QMI_FIXED_INTF(0x114f, 0x68a2, 8)},    /* Sierra Wireless MC7750 */
1270	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)},	/* Sierra Wireless MC7710 in QMI mode */
1271	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)},	/* Sierra Wireless MC7710 in QMI mode */
1272	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)},	/* Sierra Wireless MC7304/MC7354, WP76xx */
1273	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1274	{QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
1275	{QMI_FIXED_INTF(0x1199, 0x901f, 8)},    /* Sierra Wireless EM7355 */
1276	{QMI_FIXED_INTF(0x1199, 0x9041, 8)},	/* Sierra Wireless MC7305/MC7355 */
1277	{QMI_FIXED_INTF(0x1199, 0x9041, 10)},	/* Sierra Wireless MC7305/MC7355 */
1278	{QMI_FIXED_INTF(0x1199, 0x9051, 8)},	/* Netgear AirCard 340U */
1279	{QMI_FIXED_INTF(0x1199, 0x9053, 8)},	/* Sierra Wireless Modem */
1280	{QMI_FIXED_INTF(0x1199, 0x9054, 8)},	/* Sierra Wireless Modem */
1281	{QMI_FIXED_INTF(0x1199, 0x9055, 8)},	/* Netgear AirCard 341U */
1282	{QMI_FIXED_INTF(0x1199, 0x9056, 8)},	/* Sierra Wireless Modem */
1283	{QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1284	{QMI_FIXED_INTF(0x1199, 0x9061, 8)},	/* Sierra Wireless Modem */
1285	{QMI_FIXED_INTF(0x1199, 0x9063, 8)},	/* Sierra Wireless EM7305 */
1286	{QMI_FIXED_INTF(0x1199, 0x9063, 10)},	/* Sierra Wireless EM7305 */
1287	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)},	/* Sierra Wireless MC74xx */
1288	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1289	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)},	/* Sierra Wireless EM74xx */
1290	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1291	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)},	/* Sierra Wireless EM74xx */
1292	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1293	{QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)},	/* Sierra Wireless EM7565 */
1294	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},	/* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1295	{QMI_FIXED_INTF(0x1bbb, 0x0203, 2)},	/* Alcatel L800MA */
1296	{QMI_FIXED_INTF(0x2357, 0x0201, 4)},	/* TP-LINK HSUPA Modem MA180 */
1297	{QMI_FIXED_INTF(0x2357, 0x9000, 4)},	/* TP-LINK MA260 */
1298	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1299	{QMI_QUIRK_SET_DTR(0x1bc7, 0x103a, 0)}, /* Telit LE910C4-WWX */
1300	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)},	/* Telit LE922A */
1301	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)},	/* Telit FN980 */
1302	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1060, 2)},	/* Telit LN920 */
1303	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1070, 2)},	/* Telit FN990 */
1304	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1080, 2)}, /* Telit FE990 */
1305	{QMI_FIXED_INTF(0x1bc7, 0x1100, 3)},	/* Telit ME910 */
1306	{QMI_FIXED_INTF(0x1bc7, 0x1101, 3)},	/* Telit ME910 dual modem */
1307	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},	/* Telit LE920 */
1308	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)},	/* Telit LE920, LE920A4 */
1309	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1230, 2)},	/* Telit LE910Cx */
1310	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)},	/* Telit LE910Cx */
1311	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)},	/* Telit LE910Cx */
1312	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)},	/* Telit LN940 series */
1313	{QMI_FIXED_INTF(0x1c9e, 0x9801, 3)},	/* Telewell TW-3G HSPA+ */
1314	{QMI_FIXED_INTF(0x1c9e, 0x9803, 4)},	/* Telewell TW-3G HSPA+ */
1315	{QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)},	/* XS Stick W100-2 from 4G Systems */
1316	{QMI_FIXED_INTF(0x0b3c, 0xc000, 4)},	/* Olivetti Olicard 100 */
1317	{QMI_FIXED_INTF(0x0b3c, 0xc001, 4)},	/* Olivetti Olicard 120 */
1318	{QMI_FIXED_INTF(0x0b3c, 0xc002, 4)},	/* Olivetti Olicard 140 */
1319	{QMI_FIXED_INTF(0x0b3c, 0xc004, 6)},	/* Olivetti Olicard 155 */
1320	{QMI_FIXED_INTF(0x0b3c, 0xc005, 6)},	/* Olivetti Olicard 200 */
1321	{QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)},	/* Olivetti Olicard 160 */
1322	{QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)},	/* Olivetti Olicard 500 */
1323	{QMI_FIXED_INTF(0x1e2d, 0x0060, 4)},	/* Cinterion PLxx */
1324	{QMI_QUIRK_SET_DTR(0x1e2d, 0x006f, 8)}, /* Cinterion PLS83/PLS63 */
1325	{QMI_FIXED_INTF(0x1e2d, 0x0053, 4)},	/* Cinterion PHxx,PXxx */
1326	{QMI_FIXED_INTF(0x1e2d, 0x0063, 10)},	/* Cinterion ALASxx (1 RmNet) */
1327	{QMI_FIXED_INTF(0x1e2d, 0x0082, 4)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1328	{QMI_FIXED_INTF(0x1e2d, 0x0082, 5)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1329	{QMI_FIXED_INTF(0x1e2d, 0x0083, 4)},	/* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1330	{QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)},	/* Cinterion CLS8 */
1331	{QMI_FIXED_INTF(0x1e2d, 0x00b7, 0)},	/* Cinterion MV31 RmNet */
1332	{QMI_FIXED_INTF(0x413c, 0x81a2, 8)},	/* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1333	{QMI_FIXED_INTF(0x413c, 0x81a3, 8)},	/* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1334	{QMI_FIXED_INTF(0x413c, 0x81a4, 8)},	/* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1335	{QMI_FIXED_INTF(0x413c, 0x81a8, 8)},	/* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1336	{QMI_FIXED_INTF(0x413c, 0x81a9, 8)},	/* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1337	{QMI_FIXED_INTF(0x413c, 0x81b1, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1338	{QMI_FIXED_INTF(0x413c, 0x81b3, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1339	{QMI_FIXED_INTF(0x413c, 0x81b6, 8)},	/* Dell Wireless 5811e */
1340	{QMI_FIXED_INTF(0x413c, 0x81b6, 10)},	/* Dell Wireless 5811e */
1341	{QMI_FIXED_INTF(0x413c, 0x81c2, 8)},	/* Dell Wireless 5811e */
1342	{QMI_FIXED_INTF(0x413c, 0x81cc, 8)},	/* Dell Wireless 5816e */
1343	{QMI_FIXED_INTF(0x413c, 0x81d7, 0)},	/* Dell Wireless 5821e */
1344	{QMI_FIXED_INTF(0x413c, 0x81d7, 1)},	/* Dell Wireless 5821e preproduction config */
1345	{QMI_FIXED_INTF(0x413c, 0x81e0, 0)},	/* Dell Wireless 5821e with eSIM support*/
1346	{QMI_FIXED_INTF(0x413c, 0x81e4, 0)},	/* Dell Wireless 5829e with eSIM support*/
1347	{QMI_FIXED_INTF(0x413c, 0x81e6, 0)},	/* Dell Wireless 5829e */
1348	{QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)},	/* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1349	{QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)},	/* HP lt4120 Snapdragon X5 LTE */
1350	{QMI_FIXED_INTF(0x22de, 0x9061, 3)},	/* WeTelecom WPD-600N */
1351	{QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)},	/* SIMCom 7100E, 7230E, 7600E ++ */
1352	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)},	/* Quectel EC21 Mini PCIe */
1353	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)},	/* Quectel EG91 */
1354	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)},	/* Quectel EG95 */
1355	{QMI_FIXED_INTF(0x2c7c, 0x0296, 4)},	/* Quectel BG96 */
1356	{QMI_QUIRK_SET_DTR(0x2c7c, 0x030e, 4)},	/* Quectel EM05GV2 */
1357	{QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)},	/* Fibocom NL678 series */
1358	{QMI_FIXED_INTF(0x0489, 0xe0b4, 0)},	/* Foxconn T77W968 LTE */
1359	{QMI_FIXED_INTF(0x0489, 0xe0b5, 0)},	/* Foxconn T77W968 LTE with eSIM support*/
1360	{QMI_FIXED_INTF(0x2692, 0x9025, 4)},    /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1361	{QMI_QUIRK_SET_DTR(0x1546, 0x1342, 4)},	/* u-blox LARA-L6 */
1362
1363	/* 4. Gobi 1000 devices */
1364	{QMI_GOBI1K_DEVICE(0x05c6, 0x9212)},	/* Acer Gobi Modem Device */
1365	{QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)},	/* HP un2400 Gobi Modem Device */
1366	{QMI_GOBI1K_DEVICE(0x04da, 0x250d)},	/* Panasonic Gobi Modem device */
1367	{QMI_GOBI1K_DEVICE(0x413c, 0x8172)},	/* Dell Gobi Modem device */
1368	{QMI_GOBI1K_DEVICE(0x1410, 0xa001)},	/* Novatel/Verizon USB-1000 */
1369	{QMI_GOBI1K_DEVICE(0x1410, 0xa002)},	/* Novatel Gobi Modem device */
1370	{QMI_GOBI1K_DEVICE(0x1410, 0xa003)},	/* Novatel Gobi Modem device */
1371	{QMI_GOBI1K_DEVICE(0x1410, 0xa004)},	/* Novatel Gobi Modem device */
1372	{QMI_GOBI1K_DEVICE(0x1410, 0xa005)},	/* Novatel Gobi Modem device */
1373	{QMI_GOBI1K_DEVICE(0x1410, 0xa006)},	/* Novatel Gobi Modem device */
1374	{QMI_GOBI1K_DEVICE(0x1410, 0xa007)},	/* Novatel Gobi Modem device */
1375	{QMI_GOBI1K_DEVICE(0x0b05, 0x1776)},	/* Asus Gobi Modem device */
1376	{QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)},	/* ONDA Gobi Modem device */
1377	{QMI_GOBI1K_DEVICE(0x05c6, 0x9001)},	/* Generic Gobi Modem device */
1378	{QMI_GOBI1K_DEVICE(0x05c6, 0x9002)},	/* Generic Gobi Modem device */
1379	{QMI_GOBI1K_DEVICE(0x05c6, 0x9202)},	/* Generic Gobi Modem device */
1380	{QMI_GOBI1K_DEVICE(0x05c6, 0x9203)},	/* Generic Gobi Modem device */
1381	{QMI_GOBI1K_DEVICE(0x05c6, 0x9222)},	/* Generic Gobi Modem device */
1382	{QMI_GOBI1K_DEVICE(0x05c6, 0x9009)},	/* Generic Gobi Modem device */
1383
1384	/* 5. Gobi 2000 and 3000 devices */
1385	{QMI_GOBI_DEVICE(0x413c, 0x8186)},	/* Dell Gobi 2000 Modem device (N0218, VU936) */
1386	{QMI_GOBI_DEVICE(0x413c, 0x8194)},	/* Dell Gobi 3000 Composite */
1387	{QMI_GOBI_DEVICE(0x05c6, 0x920b)},	/* Generic Gobi 2000 Modem device */
1388	{QMI_GOBI_DEVICE(0x05c6, 0x9225)},	/* Sony Gobi 2000 Modem device (N0279, VU730) */
1389	{QMI_GOBI_DEVICE(0x05c6, 0x9245)},	/* Samsung Gobi 2000 Modem device (VL176) */
1390	{QMI_GOBI_DEVICE(0x03f0, 0x251d)},	/* HP Gobi 2000 Modem device (VP412) */
1391	{QMI_GOBI_DEVICE(0x05c6, 0x9215)},	/* Acer Gobi 2000 Modem device (VP413) */
1392	{QMI_FIXED_INTF(0x05c6, 0x9215, 4)},	/* Quectel EC20 Mini PCIe */
1393	{QMI_GOBI_DEVICE(0x05c6, 0x9265)},	/* Asus Gobi 2000 Modem device (VR305) */
1394	{QMI_GOBI_DEVICE(0x05c6, 0x9235)},	/* Top Global Gobi 2000 Modem device (VR306) */
1395	{QMI_GOBI_DEVICE(0x05c6, 0x9275)},	/* iRex Technologies Gobi 2000 Modem device (VR307) */
1396	{QMI_GOBI_DEVICE(0x0af0, 0x8120)},	/* Option GTM681W */
1397	{QMI_GOBI_DEVICE(0x1199, 0x68a5)},	/* Sierra Wireless Modem */
1398	{QMI_GOBI_DEVICE(0x1199, 0x68a9)},	/* Sierra Wireless Modem */
1399	{QMI_GOBI_DEVICE(0x1199, 0x9001)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1400	{QMI_GOBI_DEVICE(0x1199, 0x9002)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1401	{QMI_GOBI_DEVICE(0x1199, 0x9003)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1402	{QMI_GOBI_DEVICE(0x1199, 0x9004)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1403	{QMI_GOBI_DEVICE(0x1199, 0x9005)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1404	{QMI_GOBI_DEVICE(0x1199, 0x9006)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1405	{QMI_GOBI_DEVICE(0x1199, 0x9007)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1406	{QMI_GOBI_DEVICE(0x1199, 0x9008)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1407	{QMI_GOBI_DEVICE(0x1199, 0x9009)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1408	{QMI_GOBI_DEVICE(0x1199, 0x900a)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1409	{QMI_GOBI_DEVICE(0x1199, 0x9011)},	/* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1410	{QMI_GOBI_DEVICE(0x16d8, 0x8002)},	/* CMDTech Gobi 2000 Modem device (VU922) */
1411	{QMI_GOBI_DEVICE(0x05c6, 0x9205)},	/* Gobi 2000 Modem device */
1412	{QMI_GOBI_DEVICE(0x1199, 0x9013)},	/* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1413	{QMI_GOBI_DEVICE(0x03f0, 0x371d)},	/* HP un2430 Mobile Broadband Module */
1414	{QMI_GOBI_DEVICE(0x1199, 0x9015)},	/* Sierra Wireless Gobi 3000 Modem device */
1415	{QMI_GOBI_DEVICE(0x1199, 0x9019)},	/* Sierra Wireless Gobi 3000 Modem device */
1416	{QMI_GOBI_DEVICE(0x1199, 0x901b)},	/* Sierra Wireless MC7770 */
1417	{QMI_GOBI_DEVICE(0x12d1, 0x14f1)},	/* Sony Gobi 3000 Composite */
1418	{QMI_GOBI_DEVICE(0x1410, 0xa021)},	/* Foxconn Gobi 3000 Modem device (Novatel E396) */
1419
1420	{ }					/* END */
1421};
1422MODULE_DEVICE_TABLE(usb, products);
1423
1424static bool quectel_ec20_detected(struct usb_interface *intf)
1425{
1426	struct usb_device *dev = interface_to_usbdev(intf);
1427
1428	if (dev->actconfig &&
1429	    le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1430	    le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1431	    dev->actconfig->desc.bNumInterfaces == 5)
1432		return true;
1433
1434	return false;
1435}
1436
1437static int qmi_wwan_probe(struct usb_interface *intf,
1438			  const struct usb_device_id *prod)
1439{
1440	struct usb_device_id *id = (struct usb_device_id *)prod;
1441	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1442
1443	/* Workaround to enable dynamic IDs.  This disables usbnet
1444	 * blacklisting functionality.  Which, if required, can be
1445	 * reimplemented here by using a magic "blacklist" value
1446	 * instead of 0 in the static device id table
1447	 */
1448	if (!id->driver_info) {
1449		dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1450		id->driver_info = (unsigned long)&qmi_wwan_info;
1451	}
1452
1453	/* There are devices where the same interface number can be
1454	 * configured as different functions. We should only bind to
1455	 * vendor specific functions when matching on interface number
1456	 */
1457	if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1458	    desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1459		dev_dbg(&intf->dev,
1460			"Rejecting interface number match for class %02x\n",
1461			desc->bInterfaceClass);
1462		return -ENODEV;
1463	}
1464
1465	/* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1466	if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1467		dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1468		return -ENODEV;
1469	}
1470
1471	/* Several Quectel modems supports dynamic interface configuration, so
1472	 * we need to match on class/subclass/protocol. These values are
1473	 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1474	 * different. Ignore the current interface if the number of endpoints
1475	 * equals the number for the diag interface (two).
1476	 */
1477	if (desc->bNumEndpoints == 2)
1478		return -ENODEV;
1479
1480	return usbnet_probe(intf, id);
1481}
1482
1483static void qmi_wwan_disconnect(struct usb_interface *intf)
1484{
1485	struct usbnet *dev = usb_get_intfdata(intf);
1486	struct qmi_wwan_state *info;
1487	struct list_head *iter;
1488	struct net_device *ldev;
1489	LIST_HEAD(list);
1490
1491	/* called twice if separate control and data intf */
1492	if (!dev)
1493		return;
1494	info = (void *)&dev->data;
1495	if (info->flags & QMI_WWAN_FLAG_MUX) {
1496		if (!rtnl_trylock()) {
1497			restart_syscall();
1498			return;
1499		}
1500		rcu_read_lock();
1501		netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1502			qmimux_unregister_device(ldev, &list);
1503		rcu_read_unlock();
1504		unregister_netdevice_many(&list);
1505		rtnl_unlock();
1506		info->flags &= ~QMI_WWAN_FLAG_MUX;
1507	}
1508	usbnet_disconnect(intf);
1509}
1510
1511static struct usb_driver qmi_wwan_driver = {
1512	.name		      = "qmi_wwan",
1513	.id_table	      = products,
1514	.probe		      = qmi_wwan_probe,
1515	.disconnect	      = qmi_wwan_disconnect,
1516	.suspend	      = qmi_wwan_suspend,
1517	.resume		      =	qmi_wwan_resume,
1518	.reset_resume         = qmi_wwan_resume,
1519	.supports_autosuspend = 1,
1520	.disable_hub_initiated_lpm = 1,
1521};
1522
1523module_usb_driver(qmi_wwan_driver);
1524
1525MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1526MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1527MODULE_LICENSE("GPL");
1528