cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

qmi_wwan.c (56025B)


      1// SPDX-License-Identifier: GPL-2.0-only
      2/*
      3 * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
      4 *
      5 * The probing code is heavily inspired by cdc_ether, which is:
      6 * Copyright (C) 2003-2005 by David Brownell
      7 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
      8 */
      9
     10#include <linux/module.h>
     11#include <linux/sched/signal.h>
     12#include <linux/netdevice.h>
     13#include <linux/ethtool.h>
     14#include <linux/etherdevice.h>
     15#include <linux/if_arp.h>
     16#include <linux/mii.h>
     17#include <linux/rtnetlink.h>
     18#include <linux/usb.h>
     19#include <linux/usb/cdc.h>
     20#include <linux/usb/usbnet.h>
     21#include <linux/usb/cdc-wdm.h>
     22#include <linux/u64_stats_sync.h>
     23
     24/* This driver supports wwan (3G/LTE/?) devices using a vendor
     25 * specific management protocol called Qualcomm MSM Interface (QMI) -
     26 * in addition to the more common AT commands over serial interface
     27 * management
     28 *
     29 * QMI is wrapped in CDC, using CDC encapsulated commands on the
     30 * control ("master") interface of a two-interface CDC Union
     31 * resembling standard CDC ECM.  The devices do not use the control
     32 * interface for any other CDC messages.  Most likely because the
     33 * management protocol is used in place of the standard CDC
     34 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
     35 *
     36 * Alternatively, control and data functions can be combined in a
     37 * single USB interface.
     38 *
     39 * Handling a protocol like QMI is out of the scope for any driver.
     40 * It is exported as a character device using the cdc-wdm driver as
     41 * a subdriver, enabling userspace applications ("modem managers") to
     42 * handle it.
     43 *
     44 * These devices may alternatively/additionally be configured using AT
     45 * commands on a serial interface
     46 */
     47
     48/* driver specific data */
     49struct qmi_wwan_state {
     50	struct usb_driver *subdriver;
     51	atomic_t pmcount;
     52	unsigned long flags;
     53	struct usb_interface *control;
     54	struct usb_interface *data;
     55};
     56
     57enum qmi_wwan_flags {
     58	QMI_WWAN_FLAG_RAWIP = 1 << 0,
     59	QMI_WWAN_FLAG_MUX = 1 << 1,
     60	QMI_WWAN_FLAG_PASS_THROUGH = 1 << 2,
     61};
     62
     63enum qmi_wwan_quirks {
     64	QMI_WWAN_QUIRK_DTR = 1 << 0,	/* needs "set DTR" request */
     65};
     66
     67struct qmimux_hdr {
     68	u8 pad;
     69	u8 mux_id;
     70	__be16 pkt_len;
     71};
     72
     73struct qmimux_priv {
     74	struct net_device *real_dev;
     75	u8 mux_id;
     76};
     77
     78static int qmimux_open(struct net_device *dev)
     79{
     80	struct qmimux_priv *priv = netdev_priv(dev);
     81	struct net_device *real_dev = priv->real_dev;
     82
     83	if (!(priv->real_dev->flags & IFF_UP))
     84		return -ENETDOWN;
     85
     86	if (netif_carrier_ok(real_dev))
     87		netif_carrier_on(dev);
     88	return 0;
     89}
     90
     91static int qmimux_stop(struct net_device *dev)
     92{
     93	netif_carrier_off(dev);
     94	return 0;
     95}
     96
     97static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
     98{
     99	struct qmimux_priv *priv = netdev_priv(dev);
    100	unsigned int len = skb->len;
    101	struct qmimux_hdr *hdr;
    102	netdev_tx_t ret;
    103
    104	hdr = skb_push(skb, sizeof(struct qmimux_hdr));
    105	hdr->pad = 0;
    106	hdr->mux_id = priv->mux_id;
    107	hdr->pkt_len = cpu_to_be16(len);
    108	skb->dev = priv->real_dev;
    109	ret = dev_queue_xmit(skb);
    110
    111	if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN))
    112		dev_sw_netstats_tx_add(dev, 1, len);
    113	else
    114		dev->stats.tx_dropped++;
    115
    116	return ret;
    117}
    118
    119static const struct net_device_ops qmimux_netdev_ops = {
    120	.ndo_open        = qmimux_open,
    121	.ndo_stop        = qmimux_stop,
    122	.ndo_start_xmit  = qmimux_start_xmit,
    123	.ndo_get_stats64 = dev_get_tstats64,
    124};
    125
    126static void qmimux_setup(struct net_device *dev)
    127{
    128	dev->header_ops      = NULL;  /* No header */
    129	dev->type            = ARPHRD_NONE;
    130	dev->hard_header_len = 0;
    131	dev->addr_len        = 0;
    132	dev->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
    133	dev->netdev_ops      = &qmimux_netdev_ops;
    134	dev->mtu             = 1500;
    135	dev->needs_free_netdev = true;
    136}
    137
    138static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
    139{
    140	struct qmimux_priv *priv;
    141	struct list_head *iter;
    142	struct net_device *ldev;
    143
    144	rcu_read_lock();
    145	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
    146		priv = netdev_priv(ldev);
    147		if (priv->mux_id == mux_id) {
    148			rcu_read_unlock();
    149			return ldev;
    150		}
    151	}
    152	rcu_read_unlock();
    153	return NULL;
    154}
    155
    156static bool qmimux_has_slaves(struct usbnet *dev)
    157{
    158	return !list_empty(&dev->net->adj_list.upper);
    159}
    160
    161static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
    162{
    163	unsigned int len, offset = 0, pad_len, pkt_len;
    164	struct qmimux_hdr *hdr;
    165	struct net_device *net;
    166	struct sk_buff *skbn;
    167	u8 qmimux_hdr_sz = sizeof(*hdr);
    168
    169	while (offset + qmimux_hdr_sz < skb->len) {
    170		hdr = (struct qmimux_hdr *)(skb->data + offset);
    171		len = be16_to_cpu(hdr->pkt_len);
    172
    173		/* drop the packet, bogus length */
    174		if (offset + len + qmimux_hdr_sz > skb->len)
    175			return 0;
    176
    177		/* control packet, we do not know what to do */
    178		if (hdr->pad & 0x80)
    179			goto skip;
    180
    181		/* extract padding length and check for valid length info */
    182		pad_len = hdr->pad & 0x3f;
    183		if (len == 0 || pad_len >= len)
    184			goto skip;
    185		pkt_len = len - pad_len;
    186
    187		net = qmimux_find_dev(dev, hdr->mux_id);
    188		if (!net)
    189			goto skip;
    190		skbn = netdev_alloc_skb(net, pkt_len + LL_MAX_HEADER);
    191		if (!skbn)
    192			return 0;
    193
    194		switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
    195		case 0x40:
    196			skbn->protocol = htons(ETH_P_IP);
    197			break;
    198		case 0x60:
    199			skbn->protocol = htons(ETH_P_IPV6);
    200			break;
    201		default:
    202			/* not ip - do not know what to do */
    203			goto skip;
    204		}
    205
    206		skb_reserve(skbn, LL_MAX_HEADER);
    207		skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
    208		if (netif_rx(skbn) != NET_RX_SUCCESS) {
    209			net->stats.rx_errors++;
    210			return 0;
    211		} else {
    212			dev_sw_netstats_rx_add(net, pkt_len);
    213		}
    214
    215skip:
    216		offset += len + qmimux_hdr_sz;
    217	}
    218	return 1;
    219}
    220
    221static ssize_t mux_id_show(struct device *d, struct device_attribute *attr, char *buf)
    222{
    223	struct net_device *dev = to_net_dev(d);
    224	struct qmimux_priv *priv;
    225
    226	priv = netdev_priv(dev);
    227
    228	return sysfs_emit(buf, "0x%02x\n", priv->mux_id);
    229}
    230
    231static DEVICE_ATTR_RO(mux_id);
    232
    233static struct attribute *qmi_wwan_sysfs_qmimux_attrs[] = {
    234	&dev_attr_mux_id.attr,
    235	NULL,
    236};
    237
    238static struct attribute_group qmi_wwan_sysfs_qmimux_attr_group = {
    239	.name = "qmap",
    240	.attrs = qmi_wwan_sysfs_qmimux_attrs,
    241};
    242
    243static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
    244{
    245	struct net_device *new_dev;
    246	struct qmimux_priv *priv;
    247	int err;
    248
    249	new_dev = alloc_netdev(sizeof(struct qmimux_priv),
    250			       "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
    251	if (!new_dev)
    252		return -ENOBUFS;
    253
    254	dev_net_set(new_dev, dev_net(real_dev));
    255	priv = netdev_priv(new_dev);
    256	priv->mux_id = mux_id;
    257	priv->real_dev = real_dev;
    258
    259	new_dev->tstats = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
    260	if (!new_dev->tstats) {
    261		err = -ENOBUFS;
    262		goto out_free_newdev;
    263	}
    264
    265	new_dev->sysfs_groups[0] = &qmi_wwan_sysfs_qmimux_attr_group;
    266
    267	err = register_netdevice(new_dev);
    268	if (err < 0)
    269		goto out_free_newdev;
    270
    271	/* Account for reference in struct qmimux_priv_priv */
    272	dev_hold(real_dev);
    273
    274	err = netdev_upper_dev_link(real_dev, new_dev, NULL);
    275	if (err)
    276		goto out_unregister_netdev;
    277
    278	netif_stacked_transfer_operstate(real_dev, new_dev);
    279
    280	return 0;
    281
    282out_unregister_netdev:
    283	unregister_netdevice(new_dev);
    284	dev_put(real_dev);
    285
    286out_free_newdev:
    287	free_netdev(new_dev);
    288	return err;
    289}
    290
    291static void qmimux_unregister_device(struct net_device *dev,
    292				     struct list_head *head)
    293{
    294	struct qmimux_priv *priv = netdev_priv(dev);
    295	struct net_device *real_dev = priv->real_dev;
    296
    297	free_percpu(dev->tstats);
    298	netdev_upper_dev_unlink(real_dev, dev);
    299	unregister_netdevice_queue(dev, head);
    300
    301	/* Get rid of the reference to real_dev */
    302	dev_put(real_dev);
    303}
    304
    305static void qmi_wwan_netdev_setup(struct net_device *net)
    306{
    307	struct usbnet *dev = netdev_priv(net);
    308	struct qmi_wwan_state *info = (void *)&dev->data;
    309
    310	if (info->flags & QMI_WWAN_FLAG_RAWIP) {
    311		net->header_ops      = NULL;  /* No header */
    312		net->type            = ARPHRD_NONE;
    313		net->hard_header_len = 0;
    314		net->addr_len        = 0;
    315		net->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
    316		set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
    317		netdev_dbg(net, "mode: raw IP\n");
    318	} else if (!net->header_ops) { /* don't bother if already set */
    319		ether_setup(net);
    320		/* Restoring min/max mtu values set originally by usbnet */
    321		net->min_mtu = 0;
    322		net->max_mtu = ETH_MAX_MTU;
    323		clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
    324		netdev_dbg(net, "mode: Ethernet\n");
    325	}
    326
    327	/* recalculate buffers after changing hard_header_len */
    328	usbnet_change_mtu(net, net->mtu);
    329}
    330
    331static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
    332{
    333	struct usbnet *dev = netdev_priv(to_net_dev(d));
    334	struct qmi_wwan_state *info = (void *)&dev->data;
    335
    336	return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
    337}
    338
    339static ssize_t raw_ip_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
    340{
    341	struct usbnet *dev = netdev_priv(to_net_dev(d));
    342	struct qmi_wwan_state *info = (void *)&dev->data;
    343	bool enable;
    344	int ret;
    345
    346	if (strtobool(buf, &enable))
    347		return -EINVAL;
    348
    349	/* no change? */
    350	if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
    351		return len;
    352
    353	/* ip mode cannot be cleared when pass through mode is set */
    354	if (!enable && (info->flags & QMI_WWAN_FLAG_PASS_THROUGH)) {
    355		netdev_err(dev->net,
    356			   "Cannot clear ip mode on pass through device\n");
    357		return -EINVAL;
    358	}
    359
    360	if (!rtnl_trylock())
    361		return restart_syscall();
    362
    363	/* we don't want to modify a running netdev */
    364	if (netif_running(dev->net)) {
    365		netdev_err(dev->net, "Cannot change a running device\n");
    366		ret = -EBUSY;
    367		goto err;
    368	}
    369
    370	/* let other drivers deny the change */
    371	ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
    372	ret = notifier_to_errno(ret);
    373	if (ret) {
    374		netdev_err(dev->net, "Type change was refused\n");
    375		goto err;
    376	}
    377
    378	if (enable)
    379		info->flags |= QMI_WWAN_FLAG_RAWIP;
    380	else
    381		info->flags &= ~QMI_WWAN_FLAG_RAWIP;
    382	qmi_wwan_netdev_setup(dev->net);
    383	call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
    384	ret = len;
    385err:
    386	rtnl_unlock();
    387	return ret;
    388}
    389
    390static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
    391{
    392	struct net_device *dev = to_net_dev(d);
    393	struct qmimux_priv *priv;
    394	struct list_head *iter;
    395	struct net_device *ldev;
    396	ssize_t count = 0;
    397
    398	rcu_read_lock();
    399	netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
    400		priv = netdev_priv(ldev);
    401		count += scnprintf(&buf[count], PAGE_SIZE - count,
    402				   "0x%02x\n", priv->mux_id);
    403	}
    404	rcu_read_unlock();
    405	return count;
    406}
    407
    408static ssize_t add_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
    409{
    410	struct usbnet *dev = netdev_priv(to_net_dev(d));
    411	struct qmi_wwan_state *info = (void *)&dev->data;
    412	u8 mux_id;
    413	int ret;
    414
    415	if (kstrtou8(buf, 0, &mux_id))
    416		return -EINVAL;
    417
    418	/* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
    419	if (mux_id < 1 || mux_id > 254)
    420		return -EINVAL;
    421
    422	if (!rtnl_trylock())
    423		return restart_syscall();
    424
    425	if (qmimux_find_dev(dev, mux_id)) {
    426		netdev_err(dev->net, "mux_id already present\n");
    427		ret = -EINVAL;
    428		goto err;
    429	}
    430
    431	ret = qmimux_register_device(dev->net, mux_id);
    432	if (!ret) {
    433		info->flags |= QMI_WWAN_FLAG_MUX;
    434		ret = len;
    435	}
    436err:
    437	rtnl_unlock();
    438	return ret;
    439}
    440
    441static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
    442{
    443	return add_mux_show(d, attr, buf);
    444}
    445
    446static ssize_t del_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
    447{
    448	struct usbnet *dev = netdev_priv(to_net_dev(d));
    449	struct qmi_wwan_state *info = (void *)&dev->data;
    450	struct net_device *del_dev;
    451	u8 mux_id;
    452	int ret = 0;
    453
    454	if (kstrtou8(buf, 0, &mux_id))
    455		return -EINVAL;
    456
    457	if (!rtnl_trylock())
    458		return restart_syscall();
    459
    460	del_dev = qmimux_find_dev(dev, mux_id);
    461	if (!del_dev) {
    462		netdev_err(dev->net, "mux_id not present\n");
    463		ret = -EINVAL;
    464		goto err;
    465	}
    466	qmimux_unregister_device(del_dev, NULL);
    467
    468	if (!qmimux_has_slaves(dev))
    469		info->flags &= ~QMI_WWAN_FLAG_MUX;
    470	ret = len;
    471err:
    472	rtnl_unlock();
    473	return ret;
    474}
    475
    476static ssize_t pass_through_show(struct device *d,
    477				 struct device_attribute *attr, char *buf)
    478{
    479	struct usbnet *dev = netdev_priv(to_net_dev(d));
    480	struct qmi_wwan_state *info;
    481
    482	info = (void *)&dev->data;
    483	return sprintf(buf, "%c\n",
    484		       info->flags & QMI_WWAN_FLAG_PASS_THROUGH ? 'Y' : 'N');
    485}
    486
    487static ssize_t pass_through_store(struct device *d,
    488				  struct device_attribute *attr,
    489				  const char *buf, size_t len)
    490{
    491	struct usbnet *dev = netdev_priv(to_net_dev(d));
    492	struct qmi_wwan_state *info;
    493	bool enable;
    494
    495	if (strtobool(buf, &enable))
    496		return -EINVAL;
    497
    498	info = (void *)&dev->data;
    499
    500	/* no change? */
    501	if (enable == (info->flags & QMI_WWAN_FLAG_PASS_THROUGH))
    502		return len;
    503
    504	/* pass through mode can be set for raw ip devices only */
    505	if (!(info->flags & QMI_WWAN_FLAG_RAWIP)) {
    506		netdev_err(dev->net,
    507			   "Cannot set pass through mode on non ip device\n");
    508		return -EINVAL;
    509	}
    510
    511	if (enable)
    512		info->flags |= QMI_WWAN_FLAG_PASS_THROUGH;
    513	else
    514		info->flags &= ~QMI_WWAN_FLAG_PASS_THROUGH;
    515
    516	return len;
    517}
    518
    519static DEVICE_ATTR_RW(raw_ip);
    520static DEVICE_ATTR_RW(add_mux);
    521static DEVICE_ATTR_RW(del_mux);
    522static DEVICE_ATTR_RW(pass_through);
    523
    524static struct attribute *qmi_wwan_sysfs_attrs[] = {
    525	&dev_attr_raw_ip.attr,
    526	&dev_attr_add_mux.attr,
    527	&dev_attr_del_mux.attr,
    528	&dev_attr_pass_through.attr,
    529	NULL,
    530};
    531
    532static struct attribute_group qmi_wwan_sysfs_attr_group = {
    533	.name = "qmi",
    534	.attrs = qmi_wwan_sysfs_attrs,
    535};
    536
    537/* default ethernet address used by the modem */
    538static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
    539
    540static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
    541
    542/* Make up an ethernet header if the packet doesn't have one.
    543 *
    544 * A firmware bug common among several devices cause them to send raw
    545 * IP packets under some circumstances.  There is no way for the
    546 * driver/host to know when this will happen.  And even when the bug
    547 * hits, some packets will still arrive with an intact header.
    548 *
    549 * The supported devices are only capably of sending IPv4, IPv6 and
    550 * ARP packets on a point-to-point link. Any packet with an ethernet
    551 * header will have either our address or a broadcast/multicast
    552 * address as destination.  ARP packets will always have a header.
    553 *
    554 * This means that this function will reliably add the appropriate
    555 * header iff necessary, provided our hardware address does not start
    556 * with 4 or 6.
    557 *
    558 * Another common firmware bug results in all packets being addressed
    559 * to 00:a0:c6:00:00:00 despite the host address being different.
    560 * This function will also fixup such packets.
    561 */
    562static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
    563{
    564	struct qmi_wwan_state *info = (void *)&dev->data;
    565	bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
    566	__be16 proto;
    567
    568	/* This check is no longer done by usbnet */
    569	if (skb->len < dev->net->hard_header_len)
    570		return 0;
    571
    572	if (info->flags & QMI_WWAN_FLAG_MUX)
    573		return qmimux_rx_fixup(dev, skb);
    574
    575	if (info->flags & QMI_WWAN_FLAG_PASS_THROUGH) {
    576		skb->protocol = htons(ETH_P_MAP);
    577		return 1;
    578	}
    579
    580	switch (skb->data[0] & 0xf0) {
    581	case 0x40:
    582		proto = htons(ETH_P_IP);
    583		break;
    584	case 0x60:
    585		proto = htons(ETH_P_IPV6);
    586		break;
    587	case 0x00:
    588		if (rawip)
    589			return 0;
    590		if (is_multicast_ether_addr(skb->data))
    591			return 1;
    592		/* possibly bogus destination - rewrite just in case */
    593		skb_reset_mac_header(skb);
    594		goto fix_dest;
    595	default:
    596		if (rawip)
    597			return 0;
    598		/* pass along other packets without modifications */
    599		return 1;
    600	}
    601	if (rawip) {
    602		skb_reset_mac_header(skb);
    603		skb->dev = dev->net; /* normally set by eth_type_trans */
    604		skb->protocol = proto;
    605		return 1;
    606	}
    607
    608	if (skb_headroom(skb) < ETH_HLEN)
    609		return 0;
    610	skb_push(skb, ETH_HLEN);
    611	skb_reset_mac_header(skb);
    612	eth_hdr(skb)->h_proto = proto;
    613	eth_zero_addr(eth_hdr(skb)->h_source);
    614fix_dest:
    615	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
    616	return 1;
    617}
    618
    619/* very simplistic detection of IPv4 or IPv6 headers */
    620static bool possibly_iphdr(const char *data)
    621{
    622	return (data[0] & 0xd0) == 0x40;
    623}
    624
    625/* disallow addresses which may be confused with IP headers */
    626static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
    627{
    628	int ret;
    629	struct sockaddr *addr = p;
    630
    631	ret = eth_prepare_mac_addr_change(dev, p);
    632	if (ret < 0)
    633		return ret;
    634	if (possibly_iphdr(addr->sa_data))
    635		return -EADDRNOTAVAIL;
    636	eth_commit_mac_addr_change(dev, p);
    637	return 0;
    638}
    639
    640static const struct net_device_ops qmi_wwan_netdev_ops = {
    641	.ndo_open		= usbnet_open,
    642	.ndo_stop		= usbnet_stop,
    643	.ndo_start_xmit		= usbnet_start_xmit,
    644	.ndo_tx_timeout		= usbnet_tx_timeout,
    645	.ndo_change_mtu		= usbnet_change_mtu,
    646	.ndo_get_stats64	= dev_get_tstats64,
    647	.ndo_set_mac_address	= qmi_wwan_mac_addr,
    648	.ndo_validate_addr	= eth_validate_addr,
    649};
    650
    651/* using a counter to merge subdriver requests with our own into a
    652 * combined state
    653 */
    654static int qmi_wwan_manage_power(struct usbnet *dev, int on)
    655{
    656	struct qmi_wwan_state *info = (void *)&dev->data;
    657	int rv;
    658
    659	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
    660		atomic_read(&info->pmcount), on);
    661
    662	if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
    663	    (!on && atomic_dec_and_test(&info->pmcount))) {
    664		/* need autopm_get/put here to ensure the usbcore sees
    665		 * the new value
    666		 */
    667		rv = usb_autopm_get_interface(dev->intf);
    668		dev->intf->needs_remote_wakeup = on;
    669		if (!rv)
    670			usb_autopm_put_interface(dev->intf);
    671	}
    672	return 0;
    673}
    674
    675static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
    676{
    677	struct usbnet *dev = usb_get_intfdata(intf);
    678
    679	/* can be called while disconnecting */
    680	if (!dev)
    681		return 0;
    682	return qmi_wwan_manage_power(dev, on);
    683}
    684
    685/* collect all three endpoints and register subdriver */
    686static int qmi_wwan_register_subdriver(struct usbnet *dev)
    687{
    688	int rv;
    689	struct usb_driver *subdriver = NULL;
    690	struct qmi_wwan_state *info = (void *)&dev->data;
    691
    692	/* collect bulk endpoints */
    693	rv = usbnet_get_endpoints(dev, info->data);
    694	if (rv < 0)
    695		goto err;
    696
    697	/* update status endpoint if separate control interface */
    698	if (info->control != info->data)
    699		dev->status = &info->control->cur_altsetting->endpoint[0];
    700
    701	/* require interrupt endpoint for subdriver */
    702	if (!dev->status) {
    703		rv = -EINVAL;
    704		goto err;
    705	}
    706
    707	/* for subdriver power management */
    708	atomic_set(&info->pmcount, 0);
    709
    710	/* register subdriver */
    711	subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
    712					 4096, WWAN_PORT_QMI,
    713					 &qmi_wwan_cdc_wdm_manage_power);
    714	if (IS_ERR(subdriver)) {
    715		dev_err(&info->control->dev, "subdriver registration failed\n");
    716		rv = PTR_ERR(subdriver);
    717		goto err;
    718	}
    719
    720	/* prevent usbnet from using status endpoint */
    721	dev->status = NULL;
    722
    723	/* save subdriver struct for suspend/resume wrappers */
    724	info->subdriver = subdriver;
    725
    726err:
    727	return rv;
    728}
    729
    730/* Send CDC SetControlLineState request, setting or clearing the DTR.
    731 * "Required for Autoconnect and 9x30 to wake up" according to the
    732 * GobiNet driver. The requirement has been verified on an MDM9230
    733 * based Sierra Wireless MC7455
    734 */
    735static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
    736{
    737	u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
    738
    739	return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
    740				USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
    741				on ? 0x01 : 0x00, intf, NULL, 0);
    742}
    743
    744static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
    745{
    746	int status;
    747	u8 *buf = intf->cur_altsetting->extra;
    748	int len = intf->cur_altsetting->extralen;
    749	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
    750	struct usb_cdc_union_desc *cdc_union;
    751	struct usb_cdc_ether_desc *cdc_ether;
    752	struct usb_driver *driver = driver_of(intf);
    753	struct qmi_wwan_state *info = (void *)&dev->data;
    754	struct usb_cdc_parsed_header hdr;
    755
    756	BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
    757		      sizeof(struct qmi_wwan_state)));
    758
    759	/* set up initial state */
    760	info->control = intf;
    761	info->data = intf;
    762
    763	/* and a number of CDC descriptors */
    764	cdc_parse_cdc_header(&hdr, intf, buf, len);
    765	cdc_union = hdr.usb_cdc_union_desc;
    766	cdc_ether = hdr.usb_cdc_ether_desc;
    767
    768	/* Use separate control and data interfaces if we found a CDC Union */
    769	if (cdc_union) {
    770		info->data = usb_ifnum_to_if(dev->udev,
    771					     cdc_union->bSlaveInterface0);
    772		if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
    773		    !info->data) {
    774			dev_err(&intf->dev,
    775				"bogus CDC Union: master=%u, slave=%u\n",
    776				cdc_union->bMasterInterface0,
    777				cdc_union->bSlaveInterface0);
    778
    779			/* ignore and continue... */
    780			cdc_union = NULL;
    781			info->data = intf;
    782		}
    783	}
    784
    785	/* errors aren't fatal - we can live with the dynamic address */
    786	if (cdc_ether && cdc_ether->wMaxSegmentSize) {
    787		dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
    788		usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
    789	}
    790
    791	/* claim data interface and set it up */
    792	if (info->control != info->data) {
    793		status = usb_driver_claim_interface(driver, info->data, dev);
    794		if (status < 0)
    795			goto err;
    796	}
    797
    798	status = qmi_wwan_register_subdriver(dev);
    799	if (status < 0 && info->control != info->data) {
    800		usb_set_intfdata(info->data, NULL);
    801		usb_driver_release_interface(driver, info->data);
    802	}
    803
    804	/* disabling remote wakeup on MDM9x30 devices has the same
    805	 * effect as clearing DTR. The device will not respond to QMI
    806	 * requests until we set DTR again.  This is similar to a
    807	 * QMI_CTL SYNC request, clearing a lot of firmware state
    808	 * including the client ID allocations.
    809	 *
    810	 * Our usage model allows a session to span multiple
    811	 * open/close events, so we must prevent the firmware from
    812	 * clearing out state the clients might need.
    813	 *
    814	 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
    815	 * this fact to enable the quirk for all USB3 devices.
    816	 *
    817	 * There are also chipsets with the same "set DTR" requirement
    818	 * but without USB3 support.  Devices based on these chips
    819	 * need a quirk flag in the device ID table.
    820	 */
    821	if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
    822	    le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
    823		qmi_wwan_manage_power(dev, 1);
    824		qmi_wwan_change_dtr(dev, true);
    825	}
    826
    827	/* Never use the same address on both ends of the link, even if the
    828	 * buggy firmware told us to. Or, if device is assigned the well-known
    829	 * buggy firmware MAC address, replace it with a random address,
    830	 */
    831	if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
    832	    ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
    833		eth_hw_addr_random(dev->net);
    834
    835	/* make MAC addr easily distinguishable from an IP header */
    836	if (possibly_iphdr(dev->net->dev_addr)) {
    837		u8 addr = dev->net->dev_addr[0];
    838
    839		addr |= 0x02;	/* set local assignment bit */
    840		addr &= 0xbf;	/* clear "IP" bit */
    841		dev_addr_mod(dev->net, 0, &addr, 1);
    842	}
    843	dev->net->netdev_ops = &qmi_wwan_netdev_ops;
    844	dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
    845err:
    846	return status;
    847}
    848
    849static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
    850{
    851	struct qmi_wwan_state *info = (void *)&dev->data;
    852	struct usb_driver *driver = driver_of(intf);
    853	struct usb_interface *other;
    854
    855	if (info->subdriver && info->subdriver->disconnect)
    856		info->subdriver->disconnect(info->control);
    857
    858	/* disable MDM9x30 quirk */
    859	if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
    860		qmi_wwan_change_dtr(dev, false);
    861		qmi_wwan_manage_power(dev, 0);
    862	}
    863
    864	/* allow user to unbind using either control or data */
    865	if (intf == info->control)
    866		other = info->data;
    867	else
    868		other = info->control;
    869
    870	/* only if not shared */
    871	if (other && intf != other) {
    872		usb_set_intfdata(other, NULL);
    873		usb_driver_release_interface(driver, other);
    874	}
    875
    876	info->subdriver = NULL;
    877	info->data = NULL;
    878	info->control = NULL;
    879}
    880
    881/* suspend/resume wrappers calling both usbnet and the cdc-wdm
    882 * subdriver if present.
    883 *
    884 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
    885 * wrappers for those without adding usbnet reset support first.
    886 */
    887static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
    888{
    889	struct usbnet *dev = usb_get_intfdata(intf);
    890	struct qmi_wwan_state *info = (void *)&dev->data;
    891	int ret;
    892
    893	/* Both usbnet_suspend() and subdriver->suspend() MUST return 0
    894	 * in system sleep context, otherwise, the resume callback has
    895	 * to recover device from previous suspend failure.
    896	 */
    897	ret = usbnet_suspend(intf, message);
    898	if (ret < 0)
    899		goto err;
    900
    901	if (intf == info->control && info->subdriver &&
    902	    info->subdriver->suspend)
    903		ret = info->subdriver->suspend(intf, message);
    904	if (ret < 0)
    905		usbnet_resume(intf);
    906err:
    907	return ret;
    908}
    909
    910static int qmi_wwan_resume(struct usb_interface *intf)
    911{
    912	struct usbnet *dev = usb_get_intfdata(intf);
    913	struct qmi_wwan_state *info = (void *)&dev->data;
    914	int ret = 0;
    915	bool callsub = (intf == info->control && info->subdriver &&
    916			info->subdriver->resume);
    917
    918	if (callsub)
    919		ret = info->subdriver->resume(intf);
    920	if (ret < 0)
    921		goto err;
    922	ret = usbnet_resume(intf);
    923	if (ret < 0 && callsub)
    924		info->subdriver->suspend(intf, PMSG_SUSPEND);
    925err:
    926	return ret;
    927}
    928
    929static const struct driver_info	qmi_wwan_info = {
    930	.description	= "WWAN/QMI device",
    931	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
    932	.bind		= qmi_wwan_bind,
    933	.unbind		= qmi_wwan_unbind,
    934	.manage_power	= qmi_wwan_manage_power,
    935	.rx_fixup       = qmi_wwan_rx_fixup,
    936};
    937
    938static const struct driver_info	qmi_wwan_info_quirk_dtr = {
    939	.description	= "WWAN/QMI device",
    940	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
    941	.bind		= qmi_wwan_bind,
    942	.unbind		= qmi_wwan_unbind,
    943	.manage_power	= qmi_wwan_manage_power,
    944	.rx_fixup       = qmi_wwan_rx_fixup,
    945	.data           = QMI_WWAN_QUIRK_DTR,
    946};
    947
    948#define HUAWEI_VENDOR_ID	0x12D1
    949
    950/* map QMI/wwan function by a fixed interface number */
    951#define QMI_FIXED_INTF(vend, prod, num) \
    952	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
    953	.driver_info = (unsigned long)&qmi_wwan_info
    954
    955/* devices requiring "set DTR" quirk */
    956#define QMI_QUIRK_SET_DTR(vend, prod, num) \
    957	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
    958	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
    959
    960/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
    961#define QMI_GOBI1K_DEVICE(vend, prod) \
    962	QMI_FIXED_INTF(vend, prod, 3)
    963
    964/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
    965#define QMI_GOBI_DEVICE(vend, prod) \
    966	QMI_FIXED_INTF(vend, prod, 0)
    967
    968/* Many devices have QMI and DIAG functions which are distinguishable
    969 * from other vendor specific functions by class, subclass and
    970 * protocol all being 0xff. The DIAG function has exactly 2 endpoints
    971 * and is silently rejected when probed.
    972 *
    973 * This makes it possible to match dynamically numbered QMI functions
    974 * as seen on e.g. many Quectel modems.
    975 */
    976#define QMI_MATCH_FF_FF_FF(vend, prod) \
    977	USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
    978				      USB_SUBCLASS_VENDOR_SPEC, 0xff), \
    979	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
    980
    981static const struct usb_device_id products[] = {
    982	/* 1. CDC ECM like devices match on the control interface */
    983	{	/* Huawei E392, E398 and possibly others sharing both device id and more... */
    984		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
    985		.driver_info        = (unsigned long)&qmi_wwan_info,
    986	},
    987	{	/* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
    988		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
    989		.driver_info        = (unsigned long)&qmi_wwan_info,
    990	},
    991	{	/* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
    992		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
    993		.driver_info        = (unsigned long)&qmi_wwan_info,
    994	},
    995	{	/* Motorola Mapphone devices with MDM6600 */
    996		USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
    997		.driver_info        = (unsigned long)&qmi_wwan_info,
    998	},
    999
   1000	/* 2. Combined interface devices matching on class+protocol */
   1001	{	/* Huawei E367 and possibly others in "Windows mode" */
   1002		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
   1003		.driver_info        = (unsigned long)&qmi_wwan_info,
   1004	},
   1005	{	/* Huawei E392, E398 and possibly others in "Windows mode" */
   1006		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
   1007		.driver_info        = (unsigned long)&qmi_wwan_info,
   1008	},
   1009	{	/* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
   1010		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
   1011		.driver_info        = (unsigned long)&qmi_wwan_info,
   1012	},
   1013	{	/* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
   1014		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
   1015		.driver_info        = (unsigned long)&qmi_wwan_info,
   1016	},
   1017	{	/* Pantech UML290, P4200 and more */
   1018		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
   1019		.driver_info        = (unsigned long)&qmi_wwan_info,
   1020	},
   1021	{	/* Pantech UML290 - newer firmware */
   1022		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
   1023		.driver_info        = (unsigned long)&qmi_wwan_info,
   1024	},
   1025	{	/* Novatel USB551L and MC551 */
   1026		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
   1027		                              USB_CLASS_COMM,
   1028		                              USB_CDC_SUBCLASS_ETHERNET,
   1029		                              USB_CDC_PROTO_NONE),
   1030		.driver_info        = (unsigned long)&qmi_wwan_info,
   1031	},
   1032	{	/* Novatel E362 */
   1033		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
   1034		                              USB_CLASS_COMM,
   1035		                              USB_CDC_SUBCLASS_ETHERNET,
   1036		                              USB_CDC_PROTO_NONE),
   1037		.driver_info        = (unsigned long)&qmi_wwan_info,
   1038	},
   1039	{	/* Novatel Expedite E371 */
   1040		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
   1041		                              USB_CLASS_COMM,
   1042		                              USB_CDC_SUBCLASS_ETHERNET,
   1043		                              USB_CDC_PROTO_NONE),
   1044		.driver_info        = (unsigned long)&qmi_wwan_info,
   1045	},
   1046	{	/* Dell Wireless 5800 (Novatel E362) */
   1047		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
   1048					      USB_CLASS_COMM,
   1049					      USB_CDC_SUBCLASS_ETHERNET,
   1050					      USB_CDC_PROTO_NONE),
   1051		.driver_info        = (unsigned long)&qmi_wwan_info,
   1052	},
   1053	{	/* Dell Wireless 5800 V2 (Novatel E362) */
   1054		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
   1055					      USB_CLASS_COMM,
   1056					      USB_CDC_SUBCLASS_ETHERNET,
   1057					      USB_CDC_PROTO_NONE),
   1058		.driver_info        = (unsigned long)&qmi_wwan_info,
   1059	},
   1060	{	/* Dell Wireless 5804 (Novatel E371) */
   1061		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
   1062					      USB_CLASS_COMM,
   1063					      USB_CDC_SUBCLASS_ETHERNET,
   1064					      USB_CDC_PROTO_NONE),
   1065		.driver_info        = (unsigned long)&qmi_wwan_info,
   1066	},
   1067	{	/* ADU960S */
   1068		USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
   1069					      USB_CLASS_COMM,
   1070					      USB_CDC_SUBCLASS_ETHERNET,
   1071					      USB_CDC_PROTO_NONE),
   1072		.driver_info        = (unsigned long)&qmi_wwan_info,
   1073	},
   1074	{	/* HP lt2523 (Novatel E371) */
   1075		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
   1076					      USB_CLASS_COMM,
   1077					      USB_CDC_SUBCLASS_ETHERNET,
   1078					      USB_CDC_PROTO_NONE),
   1079		.driver_info        = (unsigned long)&qmi_wwan_info,
   1080	},
   1081	{	/* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
   1082		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
   1083		.driver_info = (unsigned long)&qmi_wwan_info,
   1084	},
   1085	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)},	/* Quectel EC25, EC20 R2.0  Mini PCIe */
   1086	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)},	/* Quectel EP06/EG06/EM06 */
   1087	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)},	/* Quectel EG12/EM12 */
   1088	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0620)},	/* Quectel EM160R-GL */
   1089	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)},	/* Quectel RM500Q-GL */
   1090
   1091	/* 3. Combined interface devices matching on interface number */
   1092	{QMI_FIXED_INTF(0x0408, 0xea42, 4)},	/* Yota / Megafon M100-1 */
   1093	{QMI_FIXED_INTF(0x05c6, 0x6001, 3)},	/* 4G LTE usb-modem U901 */
   1094	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
   1095	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
   1096	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
   1097	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
   1098	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
   1099	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
   1100	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
   1101	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
   1102	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
   1103	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
   1104	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
   1105	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
   1106	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
   1107	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
   1108	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
   1109	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
   1110	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
   1111	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
   1112	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
   1113	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
   1114	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
   1115	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
   1116	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
   1117	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
   1118	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
   1119	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
   1120	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
   1121	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
   1122	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
   1123	{QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)},	/* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
   1124	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
   1125	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
   1126	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
   1127	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
   1128	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
   1129	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
   1130	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
   1131	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
   1132	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
   1133	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
   1134	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
   1135	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
   1136	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
   1137	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
   1138	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
   1139	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
   1140	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
   1141	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
   1142	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
   1143	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
   1144	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
   1145	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
   1146	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
   1147	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
   1148	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
   1149	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
   1150	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
   1151	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
   1152	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
   1153	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
   1154	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
   1155	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
   1156	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
   1157	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
   1158	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
   1159	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
   1160	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
   1161	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
   1162	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
   1163	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
   1164	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
   1165	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
   1166	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
   1167	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
   1168	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
   1169	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
   1170	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
   1171	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
   1172	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
   1173	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
   1174	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
   1175	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
   1176	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
   1177	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
   1178	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
   1179	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
   1180	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
   1181	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
   1182	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
   1183	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
   1184	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
   1185	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
   1186	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
   1187	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
   1188	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
   1189	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
   1190	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
   1191	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
   1192	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
   1193	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
   1194	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
   1195	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
   1196	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
   1197	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
   1198	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
   1199	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
   1200	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
   1201	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
   1202	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
   1203	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
   1204	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
   1205	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
   1206	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
   1207	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
   1208	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
   1209	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
   1210	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
   1211	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
   1212	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
   1213	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
   1214	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
   1215	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
   1216	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
   1217	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
   1218	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
   1219	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
   1220	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
   1221	{QMI_FIXED_INTF(0x05c6, 0x90b2, 3)},    /* ublox R410M */
   1222	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
   1223	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
   1224	{QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)},	/* YUGA CLM920-NC5 */
   1225	{QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
   1226	{QMI_FIXED_INTF(0x0846, 0x68d3, 8)},	/* Netgear Aircard 779S */
   1227	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)},	/* Huawei E173 */
   1228	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},	/* Huawei E1820 */
   1229	{QMI_FIXED_INTF(0x1435, 0x0918, 3)},	/* Wistron NeWeb D16Q1 */
   1230	{QMI_FIXED_INTF(0x1435, 0x0918, 4)},	/* Wistron NeWeb D16Q1 */
   1231	{QMI_FIXED_INTF(0x1435, 0x0918, 5)},	/* Wistron NeWeb D16Q1 */
   1232	{QMI_FIXED_INTF(0x1435, 0x3185, 4)},	/* Wistron NeWeb M18Q5 */
   1233	{QMI_FIXED_INTF(0x1435, 0xd111, 4)},	/* M9615A DM11-1 D51QC */
   1234	{QMI_FIXED_INTF(0x1435, 0xd181, 3)},	/* Wistron NeWeb D18Q1 */
   1235	{QMI_FIXED_INTF(0x1435, 0xd181, 4)},	/* Wistron NeWeb D18Q1 */
   1236	{QMI_FIXED_INTF(0x1435, 0xd181, 5)},	/* Wistron NeWeb D18Q1 */
   1237	{QMI_FIXED_INTF(0x1435, 0xd182, 4)},	/* Wistron NeWeb D18 */
   1238	{QMI_FIXED_INTF(0x1435, 0xd182, 5)},	/* Wistron NeWeb D18 */
   1239	{QMI_FIXED_INTF(0x1435, 0xd191, 4)},	/* Wistron NeWeb D19Q1 */
   1240	{QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)},	/* Fibocom NL668 series */
   1241	{QMI_FIXED_INTF(0x1690, 0x7588, 4)},    /* ASKEY WWHC050 */
   1242	{QMI_FIXED_INTF(0x16d8, 0x6003, 0)},	/* CMOTech 6003 */
   1243	{QMI_FIXED_INTF(0x16d8, 0x6007, 0)},	/* CMOTech CHE-628S */
   1244	{QMI_FIXED_INTF(0x16d8, 0x6008, 0)},	/* CMOTech CMU-301 */
   1245	{QMI_FIXED_INTF(0x16d8, 0x6280, 0)},	/* CMOTech CHU-628 */
   1246	{QMI_FIXED_INTF(0x16d8, 0x7001, 0)},	/* CMOTech CHU-720S */
   1247	{QMI_FIXED_INTF(0x16d8, 0x7002, 0)},	/* CMOTech 7002 */
   1248	{QMI_FIXED_INTF(0x16d8, 0x7003, 4)},	/* CMOTech CHU-629K */
   1249	{QMI_FIXED_INTF(0x16d8, 0x7004, 3)},	/* CMOTech 7004 */
   1250	{QMI_FIXED_INTF(0x16d8, 0x7006, 5)},	/* CMOTech CGU-629 */
   1251	{QMI_FIXED_INTF(0x16d8, 0x700a, 4)},	/* CMOTech CHU-629S */
   1252	{QMI_FIXED_INTF(0x16d8, 0x7211, 0)},	/* CMOTech CHU-720I */
   1253	{QMI_FIXED_INTF(0x16d8, 0x7212, 0)},	/* CMOTech 7212 */
   1254	{QMI_FIXED_INTF(0x16d8, 0x7213, 0)},	/* CMOTech 7213 */
   1255	{QMI_FIXED_INTF(0x16d8, 0x7251, 1)},	/* CMOTech 7251 */
   1256	{QMI_FIXED_INTF(0x16d8, 0x7252, 1)},	/* CMOTech 7252 */
   1257	{QMI_FIXED_INTF(0x16d8, 0x7253, 1)},	/* CMOTech 7253 */
   1258	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
   1259	{QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
   1260	{QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
   1261	{QMI_FIXED_INTF(0x19d2, 0x0019, 3)},	/* ONDA MT689DC */
   1262	{QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
   1263	{QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
   1264	{QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
   1265	{QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
   1266	{QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
   1267	{QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
   1268	{QMI_FIXED_INTF(0x19d2, 0x0055, 1)},	/* ZTE (Vodafone) K3520-Z */
   1269	{QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
   1270	{QMI_FIXED_INTF(0x19d2, 0x0063, 4)},	/* ZTE (Vodafone) K3565-Z */
   1271	{QMI_FIXED_INTF(0x19d2, 0x0104, 4)},	/* ZTE (Vodafone) K4505-Z */
   1272	{QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
   1273	{QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
   1274	{QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
   1275	{QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
   1276	{QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
   1277	{QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
   1278	{QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
   1279	{QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
   1280	{QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
   1281	{QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
   1282	{QMI_FIXED_INTF(0x19d2, 0x0157, 5)},	/* ZTE MF683 */
   1283	{QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
   1284	{QMI_FIXED_INTF(0x19d2, 0x0167, 4)},	/* ZTE MF820D */
   1285	{QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
   1286	{QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
   1287	{QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
   1288	{QMI_FIXED_INTF(0x19d2, 0x0191, 4)},	/* ZTE EuFi890 */
   1289	{QMI_FIXED_INTF(0x19d2, 0x0199, 1)},	/* ZTE MF820S */
   1290	{QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
   1291	{QMI_FIXED_INTF(0x19d2, 0x0257, 3)},	/* ZTE MF821 */
   1292	{QMI_FIXED_INTF(0x19d2, 0x0265, 4)},	/* ONDA MT8205 4G LTE */
   1293	{QMI_FIXED_INTF(0x19d2, 0x0284, 4)},	/* ZTE MF880 */
   1294	{QMI_FIXED_INTF(0x19d2, 0x0326, 4)},	/* ZTE MF821D */
   1295	{QMI_FIXED_INTF(0x19d2, 0x0396, 3)},	/* ZTE ZM8620 */
   1296	{QMI_FIXED_INTF(0x19d2, 0x0412, 4)},	/* Telewell TW-LTE 4G */
   1297	{QMI_FIXED_INTF(0x19d2, 0x1008, 4)},	/* ZTE (Vodafone) K3570-Z */
   1298	{QMI_FIXED_INTF(0x19d2, 0x1010, 4)},	/* ZTE (Vodafone) K3571-Z */
   1299	{QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
   1300	{QMI_FIXED_INTF(0x19d2, 0x1018, 3)},	/* ZTE (Vodafone) K5006-Z */
   1301	{QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
   1302	{QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
   1303	{QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
   1304	{QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
   1305	{QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
   1306	{QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
   1307	{QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
   1308	{QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
   1309	{QMI_FIXED_INTF(0x19d2, 0x1270, 5)},	/* ZTE MF667 */
   1310	{QMI_FIXED_INTF(0x19d2, 0x1275, 3)},	/* ZTE P685M */
   1311	{QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
   1312	{QMI_FIXED_INTF(0x19d2, 0x1402, 2)},	/* ZTE MF60 */
   1313	{QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
   1314	{QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
   1315	{QMI_FIXED_INTF(0x19d2, 0x1426, 2)},	/* ZTE MF91 */
   1316	{QMI_FIXED_INTF(0x19d2, 0x1428, 2)},	/* Telewell TW-LTE 4G v2 */
   1317	{QMI_FIXED_INTF(0x19d2, 0x1432, 3)},	/* ZTE ME3620 */
   1318	{QMI_FIXED_INTF(0x19d2, 0x1485, 5)},	/* ZTE MF286D */
   1319	{QMI_FIXED_INTF(0x19d2, 0x2002, 4)},	/* ZTE (Vodafone) K3765-Z */
   1320	{QMI_FIXED_INTF(0x2001, 0x7e16, 3)},	/* D-Link DWM-221 */
   1321	{QMI_FIXED_INTF(0x2001, 0x7e19, 4)},	/* D-Link DWM-221 B1 */
   1322	{QMI_FIXED_INTF(0x2001, 0x7e35, 4)},	/* D-Link DWM-222 */
   1323	{QMI_FIXED_INTF(0x2001, 0x7e3d, 4)},	/* D-Link DWM-222 A2 */
   1324	{QMI_FIXED_INTF(0x2020, 0x2031, 4)},	/* Olicard 600 */
   1325	{QMI_FIXED_INTF(0x2020, 0x2033, 4)},	/* BroadMobi BM806U */
   1326	{QMI_FIXED_INTF(0x2020, 0x2060, 4)},	/* BroadMobi BM818 */
   1327	{QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)},    /* Sierra Wireless MC7700 */
   1328	{QMI_FIXED_INTF(0x114f, 0x68a2, 8)},    /* Sierra Wireless MC7750 */
   1329	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)},	/* Sierra Wireless MC7710 in QMI mode */
   1330	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)},	/* Sierra Wireless MC7710 in QMI mode */
   1331	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)},	/* Sierra Wireless MC7304/MC7354, WP76xx */
   1332	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
   1333	{QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
   1334	{QMI_FIXED_INTF(0x1199, 0x901f, 8)},    /* Sierra Wireless EM7355 */
   1335	{QMI_FIXED_INTF(0x1199, 0x9041, 8)},	/* Sierra Wireless MC7305/MC7355 */
   1336	{QMI_FIXED_INTF(0x1199, 0x9041, 10)},	/* Sierra Wireless MC7305/MC7355 */
   1337	{QMI_FIXED_INTF(0x1199, 0x9051, 8)},	/* Netgear AirCard 340U */
   1338	{QMI_FIXED_INTF(0x1199, 0x9053, 8)},	/* Sierra Wireless Modem */
   1339	{QMI_FIXED_INTF(0x1199, 0x9054, 8)},	/* Sierra Wireless Modem */
   1340	{QMI_FIXED_INTF(0x1199, 0x9055, 8)},	/* Netgear AirCard 341U */
   1341	{QMI_FIXED_INTF(0x1199, 0x9056, 8)},	/* Sierra Wireless Modem */
   1342	{QMI_FIXED_INTF(0x1199, 0x9057, 8)},
   1343	{QMI_FIXED_INTF(0x1199, 0x9061, 8)},	/* Sierra Wireless Modem */
   1344	{QMI_FIXED_INTF(0x1199, 0x9063, 8)},	/* Sierra Wireless EM7305 */
   1345	{QMI_FIXED_INTF(0x1199, 0x9063, 10)},	/* Sierra Wireless EM7305 */
   1346	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)},	/* Sierra Wireless MC74xx */
   1347	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
   1348	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)},	/* Sierra Wireless EM74xx */
   1349	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
   1350	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)},	/* Sierra Wireless EM74xx */
   1351	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
   1352	{QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)},	/* Sierra Wireless EM7565 */
   1353	{QMI_QUIRK_SET_DTR(0x1199, 0xc081, 8)},	/* Sierra Wireless EM7590 */
   1354	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},	/* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
   1355	{QMI_FIXED_INTF(0x1bbb, 0x0203, 2)},	/* Alcatel L800MA */
   1356	{QMI_FIXED_INTF(0x2357, 0x0201, 4)},	/* TP-LINK HSUPA Modem MA180 */
   1357	{QMI_FIXED_INTF(0x2357, 0x9000, 4)},	/* TP-LINK MA260 */
   1358	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
   1359	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)},	/* Telit LE922A */
   1360	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)},	/* Telit FN980 */
   1361	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1057, 2)},	/* Telit FN980 */
   1362	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1060, 2)},	/* Telit LN920 */
   1363	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1070, 2)},	/* Telit FN990 */
   1364	{QMI_FIXED_INTF(0x1bc7, 0x1100, 3)},	/* Telit ME910 */
   1365	{QMI_FIXED_INTF(0x1bc7, 0x1101, 3)},	/* Telit ME910 dual modem */
   1366	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},	/* Telit LE920 */
   1367	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)},	/* Telit LE920, LE920A4 */
   1368	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1230, 2)},	/* Telit LE910Cx */
   1369	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1250, 0)},	/* Telit LE910Cx */
   1370	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)},	/* Telit LE910Cx */
   1371	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)},	/* Telit LE910Cx */
   1372	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)},	/* Telit LN940 series */
   1373	{QMI_FIXED_INTF(0x1c9e, 0x9801, 3)},	/* Telewell TW-3G HSPA+ */
   1374	{QMI_FIXED_INTF(0x1c9e, 0x9803, 4)},	/* Telewell TW-3G HSPA+ */
   1375	{QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)},	/* XS Stick W100-2 from 4G Systems */
   1376	{QMI_FIXED_INTF(0x0b3c, 0xc000, 4)},	/* Olivetti Olicard 100 */
   1377	{QMI_FIXED_INTF(0x0b3c, 0xc001, 4)},	/* Olivetti Olicard 120 */
   1378	{QMI_FIXED_INTF(0x0b3c, 0xc002, 4)},	/* Olivetti Olicard 140 */
   1379	{QMI_FIXED_INTF(0x0b3c, 0xc004, 6)},	/* Olivetti Olicard 155 */
   1380	{QMI_FIXED_INTF(0x0b3c, 0xc005, 6)},	/* Olivetti Olicard 200 */
   1381	{QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)},	/* Olivetti Olicard 160 */
   1382	{QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)},	/* Olivetti Olicard 500 */
   1383	{QMI_FIXED_INTF(0x1e2d, 0x0060, 4)},	/* Cinterion PLxx */
   1384	{QMI_QUIRK_SET_DTR(0x1e2d, 0x006f, 8)}, /* Cinterion PLS83/PLS63 */
   1385	{QMI_FIXED_INTF(0x1e2d, 0x0053, 4)},	/* Cinterion PHxx,PXxx */
   1386	{QMI_FIXED_INTF(0x1e2d, 0x0063, 10)},	/* Cinterion ALASxx (1 RmNet) */
   1387	{QMI_FIXED_INTF(0x1e2d, 0x0082, 4)},	/* Cinterion PHxx,PXxx (2 RmNet) */
   1388	{QMI_FIXED_INTF(0x1e2d, 0x0082, 5)},	/* Cinterion PHxx,PXxx (2 RmNet) */
   1389	{QMI_FIXED_INTF(0x1e2d, 0x0083, 4)},	/* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
   1390	{QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)},	/* Cinterion CLS8 */
   1391	{QMI_FIXED_INTF(0x1e2d, 0x00b7, 0)},	/* Cinterion MV31 RmNet */
   1392	{QMI_FIXED_INTF(0x1e2d, 0x00b9, 0)},	/* Cinterion MV31 RmNet based on new baseline */
   1393	{QMI_FIXED_INTF(0x413c, 0x81a2, 8)},	/* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
   1394	{QMI_FIXED_INTF(0x413c, 0x81a3, 8)},	/* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
   1395	{QMI_FIXED_INTF(0x413c, 0x81a4, 8)},	/* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
   1396	{QMI_FIXED_INTF(0x413c, 0x81a8, 8)},	/* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
   1397	{QMI_FIXED_INTF(0x413c, 0x81a9, 8)},	/* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
   1398	{QMI_FIXED_INTF(0x413c, 0x81b1, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
   1399	{QMI_FIXED_INTF(0x413c, 0x81b3, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
   1400	{QMI_FIXED_INTF(0x413c, 0x81b6, 8)},	/* Dell Wireless 5811e */
   1401	{QMI_FIXED_INTF(0x413c, 0x81b6, 10)},	/* Dell Wireless 5811e */
   1402	{QMI_FIXED_INTF(0x413c, 0x81cc, 8)},	/* Dell Wireless 5816e */
   1403	{QMI_FIXED_INTF(0x413c, 0x81d7, 0)},	/* Dell Wireless 5821e */
   1404	{QMI_FIXED_INTF(0x413c, 0x81d7, 1)},	/* Dell Wireless 5821e preproduction config */
   1405	{QMI_FIXED_INTF(0x413c, 0x81e0, 0)},	/* Dell Wireless 5821e with eSIM support*/
   1406	{QMI_FIXED_INTF(0x413c, 0x81e4, 0)},	/* Dell Wireless 5829e with eSIM support*/
   1407	{QMI_FIXED_INTF(0x413c, 0x81e6, 0)},	/* Dell Wireless 5829e */
   1408	{QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)},	/* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
   1409	{QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)},	/* HP lt4120 Snapdragon X5 LTE */
   1410	{QMI_QUIRK_SET_DTR(0x22de, 0x9051, 2)}, /* Hucom Wireless HM-211S/K */
   1411	{QMI_FIXED_INTF(0x22de, 0x9061, 3)},	/* WeTelecom WPD-600N */
   1412	{QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)},	/* SIMCom 7100E, 7230E, 7600E ++ */
   1413	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)},	/* Quectel EC21 Mini PCIe */
   1414	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)},	/* Quectel EG91 */
   1415	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)},	/* Quectel EG95 */
   1416	{QMI_FIXED_INTF(0x2c7c, 0x0296, 4)},	/* Quectel BG96 */
   1417	{QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)},	/* Fibocom NL678 series */
   1418	{QMI_FIXED_INTF(0x0489, 0xe0b4, 0)},	/* Foxconn T77W968 LTE */
   1419	{QMI_FIXED_INTF(0x0489, 0xe0b5, 0)},	/* Foxconn T77W968 LTE with eSIM support*/
   1420	{QMI_FIXED_INTF(0x2692, 0x9025, 4)},    /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
   1421
   1422	/* 4. Gobi 1000 devices */
   1423	{QMI_GOBI1K_DEVICE(0x05c6, 0x9212)},	/* Acer Gobi Modem Device */
   1424	{QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)},	/* HP un2400 Gobi Modem Device */
   1425	{QMI_GOBI1K_DEVICE(0x04da, 0x250d)},	/* Panasonic Gobi Modem device */
   1426	{QMI_GOBI1K_DEVICE(0x413c, 0x8172)},	/* Dell Gobi Modem device */
   1427	{QMI_GOBI1K_DEVICE(0x1410, 0xa001)},	/* Novatel/Verizon USB-1000 */
   1428	{QMI_GOBI1K_DEVICE(0x1410, 0xa002)},	/* Novatel Gobi Modem device */
   1429	{QMI_GOBI1K_DEVICE(0x1410, 0xa003)},	/* Novatel Gobi Modem device */
   1430	{QMI_GOBI1K_DEVICE(0x1410, 0xa004)},	/* Novatel Gobi Modem device */
   1431	{QMI_GOBI1K_DEVICE(0x1410, 0xa005)},	/* Novatel Gobi Modem device */
   1432	{QMI_GOBI1K_DEVICE(0x1410, 0xa006)},	/* Novatel Gobi Modem device */
   1433	{QMI_GOBI1K_DEVICE(0x1410, 0xa007)},	/* Novatel Gobi Modem device */
   1434	{QMI_GOBI1K_DEVICE(0x0b05, 0x1776)},	/* Asus Gobi Modem device */
   1435	{QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)},	/* ONDA Gobi Modem device */
   1436	{QMI_GOBI1K_DEVICE(0x05c6, 0x9001)},	/* Generic Gobi Modem device */
   1437	{QMI_GOBI1K_DEVICE(0x05c6, 0x9002)},	/* Generic Gobi Modem device */
   1438	{QMI_GOBI1K_DEVICE(0x05c6, 0x9202)},	/* Generic Gobi Modem device */
   1439	{QMI_GOBI1K_DEVICE(0x05c6, 0x9203)},	/* Generic Gobi Modem device */
   1440	{QMI_GOBI1K_DEVICE(0x05c6, 0x9222)},	/* Generic Gobi Modem device */
   1441	{QMI_GOBI1K_DEVICE(0x05c6, 0x9009)},	/* Generic Gobi Modem device */
   1442
   1443	/* 5. Gobi 2000 and 3000 devices */
   1444	{QMI_GOBI_DEVICE(0x413c, 0x8186)},	/* Dell Gobi 2000 Modem device (N0218, VU936) */
   1445	{QMI_GOBI_DEVICE(0x413c, 0x8194)},	/* Dell Gobi 3000 Composite */
   1446	{QMI_GOBI_DEVICE(0x05c6, 0x920b)},	/* Generic Gobi 2000 Modem device */
   1447	{QMI_GOBI_DEVICE(0x05c6, 0x9225)},	/* Sony Gobi 2000 Modem device (N0279, VU730) */
   1448	{QMI_GOBI_DEVICE(0x05c6, 0x9245)},	/* Samsung Gobi 2000 Modem device (VL176) */
   1449	{QMI_GOBI_DEVICE(0x03f0, 0x251d)},	/* HP Gobi 2000 Modem device (VP412) */
   1450	{QMI_GOBI_DEVICE(0x05c6, 0x9215)},	/* Acer Gobi 2000 Modem device (VP413) */
   1451	{QMI_FIXED_INTF(0x05c6, 0x9215, 4)},	/* Quectel EC20 Mini PCIe */
   1452	{QMI_GOBI_DEVICE(0x05c6, 0x9265)},	/* Asus Gobi 2000 Modem device (VR305) */
   1453	{QMI_GOBI_DEVICE(0x05c6, 0x9235)},	/* Top Global Gobi 2000 Modem device (VR306) */
   1454	{QMI_GOBI_DEVICE(0x05c6, 0x9275)},	/* iRex Technologies Gobi 2000 Modem device (VR307) */
   1455	{QMI_GOBI_DEVICE(0x0af0, 0x8120)},	/* Option GTM681W */
   1456	{QMI_GOBI_DEVICE(0x1199, 0x68a5)},	/* Sierra Wireless Modem */
   1457	{QMI_GOBI_DEVICE(0x1199, 0x68a9)},	/* Sierra Wireless Modem */
   1458	{QMI_GOBI_DEVICE(0x1199, 0x9001)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1459	{QMI_GOBI_DEVICE(0x1199, 0x9002)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1460	{QMI_GOBI_DEVICE(0x1199, 0x9003)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1461	{QMI_GOBI_DEVICE(0x1199, 0x9004)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1462	{QMI_GOBI_DEVICE(0x1199, 0x9005)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1463	{QMI_GOBI_DEVICE(0x1199, 0x9006)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1464	{QMI_GOBI_DEVICE(0x1199, 0x9007)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1465	{QMI_GOBI_DEVICE(0x1199, 0x9008)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1466	{QMI_GOBI_DEVICE(0x1199, 0x9009)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1467	{QMI_GOBI_DEVICE(0x1199, 0x900a)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
   1468	{QMI_GOBI_DEVICE(0x1199, 0x9011)},	/* Sierra Wireless Gobi 2000 Modem device (MC8305) */
   1469	{QMI_GOBI_DEVICE(0x16d8, 0x8002)},	/* CMDTech Gobi 2000 Modem device (VU922) */
   1470	{QMI_GOBI_DEVICE(0x05c6, 0x9205)},	/* Gobi 2000 Modem device */
   1471	{QMI_GOBI_DEVICE(0x1199, 0x9013)},	/* Sierra Wireless Gobi 3000 Modem device (MC8355) */
   1472	{QMI_GOBI_DEVICE(0x03f0, 0x371d)},	/* HP un2430 Mobile Broadband Module */
   1473	{QMI_GOBI_DEVICE(0x1199, 0x9015)},	/* Sierra Wireless Gobi 3000 Modem device */
   1474	{QMI_GOBI_DEVICE(0x1199, 0x9019)},	/* Sierra Wireless Gobi 3000 Modem device */
   1475	{QMI_GOBI_DEVICE(0x1199, 0x901b)},	/* Sierra Wireless MC7770 */
   1476	{QMI_GOBI_DEVICE(0x12d1, 0x14f1)},	/* Sony Gobi 3000 Composite */
   1477	{QMI_GOBI_DEVICE(0x1410, 0xa021)},	/* Foxconn Gobi 3000 Modem device (Novatel E396) */
   1478
   1479	{ }					/* END */
   1480};
   1481MODULE_DEVICE_TABLE(usb, products);
   1482
   1483static bool quectel_ec20_detected(struct usb_interface *intf)
   1484{
   1485	struct usb_device *dev = interface_to_usbdev(intf);
   1486
   1487	if (dev->actconfig &&
   1488	    le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
   1489	    le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
   1490	    dev->actconfig->desc.bNumInterfaces == 5)
   1491		return true;
   1492
   1493	return false;
   1494}
   1495
   1496static int qmi_wwan_probe(struct usb_interface *intf,
   1497			  const struct usb_device_id *prod)
   1498{
   1499	struct usb_device_id *id = (struct usb_device_id *)prod;
   1500	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
   1501
   1502	/* Workaround to enable dynamic IDs.  This disables usbnet
   1503	 * blacklisting functionality.  Which, if required, can be
   1504	 * reimplemented here by using a magic "blacklist" value
   1505	 * instead of 0 in the static device id table
   1506	 */
   1507	if (!id->driver_info) {
   1508		dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
   1509		id->driver_info = (unsigned long)&qmi_wwan_info;
   1510	}
   1511
   1512	/* There are devices where the same interface number can be
   1513	 * configured as different functions. We should only bind to
   1514	 * vendor specific functions when matching on interface number
   1515	 */
   1516	if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
   1517	    desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
   1518		dev_dbg(&intf->dev,
   1519			"Rejecting interface number match for class %02x\n",
   1520			desc->bInterfaceClass);
   1521		return -ENODEV;
   1522	}
   1523
   1524	/* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
   1525	if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
   1526		dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
   1527		return -ENODEV;
   1528	}
   1529
   1530	/* Several Quectel modems supports dynamic interface configuration, so
   1531	 * we need to match on class/subclass/protocol. These values are
   1532	 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
   1533	 * different. Ignore the current interface if the number of endpoints
   1534	 * equals the number for the diag interface (two).
   1535	 */
   1536	if (desc->bNumEndpoints == 2)
   1537		return -ENODEV;
   1538
   1539	return usbnet_probe(intf, id);
   1540}
   1541
   1542static void qmi_wwan_disconnect(struct usb_interface *intf)
   1543{
   1544	struct usbnet *dev = usb_get_intfdata(intf);
   1545	struct qmi_wwan_state *info;
   1546	struct list_head *iter;
   1547	struct net_device *ldev;
   1548	LIST_HEAD(list);
   1549
   1550	/* called twice if separate control and data intf */
   1551	if (!dev)
   1552		return;
   1553	info = (void *)&dev->data;
   1554	if (info->flags & QMI_WWAN_FLAG_MUX) {
   1555		if (!rtnl_trylock()) {
   1556			restart_syscall();
   1557			return;
   1558		}
   1559		rcu_read_lock();
   1560		netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
   1561			qmimux_unregister_device(ldev, &list);
   1562		rcu_read_unlock();
   1563		unregister_netdevice_many(&list);
   1564		rtnl_unlock();
   1565		info->flags &= ~QMI_WWAN_FLAG_MUX;
   1566	}
   1567	usbnet_disconnect(intf);
   1568}
   1569
   1570static struct usb_driver qmi_wwan_driver = {
   1571	.name		      = "qmi_wwan",
   1572	.id_table	      = products,
   1573	.probe		      = qmi_wwan_probe,
   1574	.disconnect	      = qmi_wwan_disconnect,
   1575	.suspend	      = qmi_wwan_suspend,
   1576	.resume		      =	qmi_wwan_resume,
   1577	.reset_resume         = qmi_wwan_resume,
   1578	.supports_autosuspend = 1,
   1579	.disable_hub_initiated_lpm = 1,
   1580};
   1581
   1582module_usb_driver(qmi_wwan_driver);
   1583
   1584MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
   1585MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
   1586MODULE_LICENSE("GPL");