xref: /linux/drivers/net/usb/qmi_wwan.c (revision d7f39aee79f04eeaa42085728423501b33ac5be5)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Copyright (c) 2012  Bjørn Mork <bjorn@mork.no>
4  *
5  * The probing code is heavily inspired by cdc_ether, which is:
6  * Copyright (C) 2003-2005 by David Brownell
7  * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
8  */
9 
10 #include <linux/module.h>
11 #include <linux/sched/signal.h>
12 #include <linux/netdevice.h>
13 #include <linux/ethtool.h>
14 #include <linux/etherdevice.h>
15 #include <linux/if_arp.h>
16 #include <linux/kstrtox.h>
17 #include <linux/mii.h>
18 #include <linux/rtnetlink.h>
19 #include <linux/usb.h>
20 #include <linux/usb/cdc.h>
21 #include <linux/usb/usbnet.h>
22 #include <linux/usb/cdc-wdm.h>
23 #include <linux/u64_stats_sync.h>
24 
25 /* This driver supports wwan (3G/LTE/?) devices using a vendor
26  * specific management protocol called Qualcomm MSM Interface (QMI) -
27  * in addition to the more common AT commands over serial interface
28  * management
29  *
30  * QMI is wrapped in CDC, using CDC encapsulated commands on the
31  * control ("master") interface of a two-interface CDC Union
32  * resembling standard CDC ECM.  The devices do not use the control
33  * interface for any other CDC messages.  Most likely because the
34  * management protocol is used in place of the standard CDC
35  * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
36  *
37  * Alternatively, control and data functions can be combined in a
38  * single USB interface.
39  *
40  * Handling a protocol like QMI is out of the scope for any driver.
41  * It is exported as a character device using the cdc-wdm driver as
42  * a subdriver, enabling userspace applications ("modem managers") to
43  * handle it.
44  *
45  * These devices may alternatively/additionally be configured using AT
46  * commands on a serial interface
47  */
48 
49 /* driver specific data */
50 struct qmi_wwan_state {
51 	struct usb_driver *subdriver;
52 	atomic_t pmcount;
53 	unsigned long flags;
54 	struct usb_interface *control;
55 	struct usb_interface *data;
56 };
57 
58 enum qmi_wwan_flags {
59 	QMI_WWAN_FLAG_RAWIP = 1 << 0,
60 	QMI_WWAN_FLAG_MUX = 1 << 1,
61 	QMI_WWAN_FLAG_PASS_THROUGH = 1 << 2,
62 };
63 
64 enum qmi_wwan_quirks {
65 	QMI_WWAN_QUIRK_DTR = 1 << 0,	/* needs "set DTR" request */
66 };
67 
68 struct qmimux_hdr {
69 	u8 pad;
70 	u8 mux_id;
71 	__be16 pkt_len;
72 };
73 
74 struct qmimux_priv {
75 	struct net_device *real_dev;
76 	u8 mux_id;
77 };
78 
79 static int qmimux_open(struct net_device *dev)
80 {
81 	struct qmimux_priv *priv = netdev_priv(dev);
82 	struct net_device *real_dev = priv->real_dev;
83 
84 	if (!(priv->real_dev->flags & IFF_UP))
85 		return -ENETDOWN;
86 
87 	if (netif_carrier_ok(real_dev))
88 		netif_carrier_on(dev);
89 	return 0;
90 }
91 
92 static int qmimux_stop(struct net_device *dev)
93 {
94 	netif_carrier_off(dev);
95 	return 0;
96 }
97 
98 static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
99 {
100 	struct qmimux_priv *priv = netdev_priv(dev);
101 	unsigned int len = skb->len;
102 	struct qmimux_hdr *hdr;
103 	netdev_tx_t ret;
104 
105 	hdr = skb_push(skb, sizeof(struct qmimux_hdr));
106 	hdr->pad = 0;
107 	hdr->mux_id = priv->mux_id;
108 	hdr->pkt_len = cpu_to_be16(len);
109 	skb->dev = priv->real_dev;
110 	ret = dev_queue_xmit(skb);
111 
112 	if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN))
113 		dev_sw_netstats_tx_add(dev, 1, len);
114 	else
115 		dev->stats.tx_dropped++;
116 
117 	return ret;
118 }
119 
120 static const struct net_device_ops qmimux_netdev_ops = {
121 	.ndo_open        = qmimux_open,
122 	.ndo_stop        = qmimux_stop,
123 	.ndo_start_xmit  = qmimux_start_xmit,
124 };
125 
126 static void qmimux_setup(struct net_device *dev)
127 {
128 	dev->header_ops      = NULL;  /* No header */
129 	dev->type            = ARPHRD_NONE;
130 	dev->hard_header_len = 0;
131 	dev->addr_len        = 0;
132 	dev->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
133 	dev->netdev_ops      = &qmimux_netdev_ops;
134 	dev->mtu             = 1500;
135 	dev->pcpu_stat_type  = NETDEV_PCPU_STAT_TSTATS;
136 	dev->needs_free_netdev = true;
137 }
138 
139 static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
140 {
141 	struct qmimux_priv *priv;
142 	struct list_head *iter;
143 	struct net_device *ldev;
144 
145 	rcu_read_lock();
146 	netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
147 		priv = netdev_priv(ldev);
148 		if (priv->mux_id == mux_id) {
149 			rcu_read_unlock();
150 			return ldev;
151 		}
152 	}
153 	rcu_read_unlock();
154 	return NULL;
155 }
156 
157 static bool qmimux_has_slaves(struct usbnet *dev)
158 {
159 	return !list_empty(&dev->net->adj_list.upper);
160 }
161 
162 static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
163 {
164 	unsigned int len, offset = 0, pad_len, pkt_len;
165 	struct qmimux_hdr *hdr;
166 	struct net_device *net;
167 	struct sk_buff *skbn;
168 	u8 qmimux_hdr_sz = sizeof(*hdr);
169 
170 	while (offset + qmimux_hdr_sz < skb->len) {
171 		hdr = (struct qmimux_hdr *)(skb->data + offset);
172 		len = be16_to_cpu(hdr->pkt_len);
173 
174 		/* drop the packet, bogus length */
175 		if (offset + len + qmimux_hdr_sz > skb->len)
176 			return 0;
177 
178 		/* control packet, we do not know what to do */
179 		if (hdr->pad & 0x80)
180 			goto skip;
181 
182 		/* extract padding length and check for valid length info */
183 		pad_len = hdr->pad & 0x3f;
184 		if (len == 0 || pad_len >= len)
185 			goto skip;
186 		pkt_len = len - pad_len;
187 
188 		net = qmimux_find_dev(dev, hdr->mux_id);
189 		if (!net)
190 			goto skip;
191 		skbn = netdev_alloc_skb(net, pkt_len + LL_MAX_HEADER);
192 		if (!skbn)
193 			return 0;
194 
195 		switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
196 		case 0x40:
197 			skbn->protocol = htons(ETH_P_IP);
198 			break;
199 		case 0x60:
200 			skbn->protocol = htons(ETH_P_IPV6);
201 			break;
202 		default:
203 			/* not ip - do not know what to do */
204 			goto skip;
205 		}
206 
207 		skb_reserve(skbn, LL_MAX_HEADER);
208 		skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
209 		if (netif_rx(skbn) != NET_RX_SUCCESS) {
210 			net->stats.rx_errors++;
211 			return 0;
212 		} else {
213 			dev_sw_netstats_rx_add(net, pkt_len);
214 		}
215 
216 skip:
217 		offset += len + qmimux_hdr_sz;
218 	}
219 	return 1;
220 }
221 
222 static ssize_t mux_id_show(struct device *d, struct device_attribute *attr, char *buf)
223 {
224 	struct net_device *dev = to_net_dev(d);
225 	struct qmimux_priv *priv;
226 
227 	priv = netdev_priv(dev);
228 
229 	return sysfs_emit(buf, "0x%02x\n", priv->mux_id);
230 }
231 
232 static DEVICE_ATTR_RO(mux_id);
233 
234 static struct attribute *qmi_wwan_sysfs_qmimux_attrs[] = {
235 	&dev_attr_mux_id.attr,
236 	NULL,
237 };
238 
239 static struct attribute_group qmi_wwan_sysfs_qmimux_attr_group = {
240 	.name = "qmap",
241 	.attrs = qmi_wwan_sysfs_qmimux_attrs,
242 };
243 
244 static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
245 {
246 	struct net_device *new_dev;
247 	struct qmimux_priv *priv;
248 	int err;
249 
250 	new_dev = alloc_netdev(sizeof(struct qmimux_priv),
251 			       "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
252 	if (!new_dev)
253 		return -ENOBUFS;
254 
255 	dev_net_set(new_dev, dev_net(real_dev));
256 	priv = netdev_priv(new_dev);
257 	priv->mux_id = mux_id;
258 	priv->real_dev = real_dev;
259 
260 	new_dev->sysfs_groups[0] = &qmi_wwan_sysfs_qmimux_attr_group;
261 
262 	err = register_netdevice(new_dev);
263 	if (err < 0)
264 		goto out_free_newdev;
265 
266 	/* Account for reference in struct qmimux_priv_priv */
267 	dev_hold(real_dev);
268 
269 	err = netdev_upper_dev_link(real_dev, new_dev, NULL);
270 	if (err)
271 		goto out_unregister_netdev;
272 
273 	netif_stacked_transfer_operstate(real_dev, new_dev);
274 
275 	return 0;
276 
277 out_unregister_netdev:
278 	unregister_netdevice(new_dev);
279 	dev_put(real_dev);
280 
281 out_free_newdev:
282 	free_netdev(new_dev);
283 	return err;
284 }
285 
286 static void qmimux_unregister_device(struct net_device *dev,
287 				     struct list_head *head)
288 {
289 	struct qmimux_priv *priv = netdev_priv(dev);
290 	struct net_device *real_dev = priv->real_dev;
291 
292 	netdev_upper_dev_unlink(real_dev, dev);
293 	unregister_netdevice_queue(dev, head);
294 
295 	/* Get rid of the reference to real_dev */
296 	dev_put(real_dev);
297 }
298 
299 static void qmi_wwan_netdev_setup(struct net_device *net)
300 {
301 	struct usbnet *dev = netdev_priv(net);
302 	struct qmi_wwan_state *info = (void *)&dev->data;
303 
304 	if (info->flags & QMI_WWAN_FLAG_RAWIP) {
305 		net->header_ops      = NULL;  /* No header */
306 		net->type            = ARPHRD_NONE;
307 		net->hard_header_len = 0;
308 		net->addr_len        = 0;
309 		net->flags           = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
310 		set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
311 		netdev_dbg(net, "mode: raw IP\n");
312 	} else if (!net->header_ops) { /* don't bother if already set */
313 		ether_setup(net);
314 		/* Restoring min/max mtu values set originally by usbnet */
315 		net->min_mtu = 0;
316 		net->max_mtu = ETH_MAX_MTU;
317 		clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
318 		netdev_dbg(net, "mode: Ethernet\n");
319 	}
320 
321 	/* recalculate buffers after changing hard_header_len */
322 	usbnet_change_mtu(net, net->mtu);
323 }
324 
325 static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
326 {
327 	struct usbnet *dev = netdev_priv(to_net_dev(d));
328 	struct qmi_wwan_state *info = (void *)&dev->data;
329 
330 	return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
331 }
332 
333 static ssize_t raw_ip_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
334 {
335 	struct usbnet *dev = netdev_priv(to_net_dev(d));
336 	struct qmi_wwan_state *info = (void *)&dev->data;
337 	bool enable;
338 	int ret;
339 
340 	if (kstrtobool(buf, &enable))
341 		return -EINVAL;
342 
343 	/* no change? */
344 	if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
345 		return len;
346 
347 	/* ip mode cannot be cleared when pass through mode is set */
348 	if (!enable && (info->flags & QMI_WWAN_FLAG_PASS_THROUGH)) {
349 		netdev_err(dev->net,
350 			   "Cannot clear ip mode on pass through device\n");
351 		return -EINVAL;
352 	}
353 
354 	if (!rtnl_trylock())
355 		return restart_syscall();
356 
357 	/* we don't want to modify a running netdev */
358 	if (netif_running(dev->net)) {
359 		netdev_err(dev->net, "Cannot change a running device\n");
360 		ret = -EBUSY;
361 		goto err;
362 	}
363 
364 	/* let other drivers deny the change */
365 	ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
366 	ret = notifier_to_errno(ret);
367 	if (ret) {
368 		netdev_err(dev->net, "Type change was refused\n");
369 		goto err;
370 	}
371 
372 	if (enable)
373 		info->flags |= QMI_WWAN_FLAG_RAWIP;
374 	else
375 		info->flags &= ~QMI_WWAN_FLAG_RAWIP;
376 	qmi_wwan_netdev_setup(dev->net);
377 	call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
378 	ret = len;
379 err:
380 	rtnl_unlock();
381 	return ret;
382 }
383 
384 static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
385 {
386 	struct net_device *dev = to_net_dev(d);
387 	struct qmimux_priv *priv;
388 	struct list_head *iter;
389 	struct net_device *ldev;
390 	ssize_t count = 0;
391 
392 	rcu_read_lock();
393 	netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
394 		priv = netdev_priv(ldev);
395 		count += scnprintf(&buf[count], PAGE_SIZE - count,
396 				   "0x%02x\n", priv->mux_id);
397 	}
398 	rcu_read_unlock();
399 	return count;
400 }
401 
402 static ssize_t add_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
403 {
404 	struct usbnet *dev = netdev_priv(to_net_dev(d));
405 	struct qmi_wwan_state *info = (void *)&dev->data;
406 	u8 mux_id;
407 	int ret;
408 
409 	if (kstrtou8(buf, 0, &mux_id))
410 		return -EINVAL;
411 
412 	/* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
413 	if (mux_id < 1 || mux_id > 254)
414 		return -EINVAL;
415 
416 	if (!rtnl_trylock())
417 		return restart_syscall();
418 
419 	if (qmimux_find_dev(dev, mux_id)) {
420 		netdev_err(dev->net, "mux_id already present\n");
421 		ret = -EINVAL;
422 		goto err;
423 	}
424 
425 	ret = qmimux_register_device(dev->net, mux_id);
426 	if (!ret) {
427 		info->flags |= QMI_WWAN_FLAG_MUX;
428 		ret = len;
429 	}
430 err:
431 	rtnl_unlock();
432 	return ret;
433 }
434 
435 static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
436 {
437 	return add_mux_show(d, attr, buf);
438 }
439 
440 static ssize_t del_mux_store(struct device *d,  struct device_attribute *attr, const char *buf, size_t len)
441 {
442 	struct usbnet *dev = netdev_priv(to_net_dev(d));
443 	struct qmi_wwan_state *info = (void *)&dev->data;
444 	struct net_device *del_dev;
445 	u8 mux_id;
446 	int ret = 0;
447 
448 	if (kstrtou8(buf, 0, &mux_id))
449 		return -EINVAL;
450 
451 	if (!rtnl_trylock())
452 		return restart_syscall();
453 
454 	del_dev = qmimux_find_dev(dev, mux_id);
455 	if (!del_dev) {
456 		netdev_err(dev->net, "mux_id not present\n");
457 		ret = -EINVAL;
458 		goto err;
459 	}
460 	qmimux_unregister_device(del_dev, NULL);
461 
462 	if (!qmimux_has_slaves(dev))
463 		info->flags &= ~QMI_WWAN_FLAG_MUX;
464 	ret = len;
465 err:
466 	rtnl_unlock();
467 	return ret;
468 }
469 
470 static ssize_t pass_through_show(struct device *d,
471 				 struct device_attribute *attr, char *buf)
472 {
473 	struct usbnet *dev = netdev_priv(to_net_dev(d));
474 	struct qmi_wwan_state *info;
475 
476 	info = (void *)&dev->data;
477 	return sprintf(buf, "%c\n",
478 		       info->flags & QMI_WWAN_FLAG_PASS_THROUGH ? 'Y' : 'N');
479 }
480 
481 static ssize_t pass_through_store(struct device *d,
482 				  struct device_attribute *attr,
483 				  const char *buf, size_t len)
484 {
485 	struct usbnet *dev = netdev_priv(to_net_dev(d));
486 	struct qmi_wwan_state *info;
487 	bool enable;
488 
489 	if (kstrtobool(buf, &enable))
490 		return -EINVAL;
491 
492 	info = (void *)&dev->data;
493 
494 	/* no change? */
495 	if (enable == (info->flags & QMI_WWAN_FLAG_PASS_THROUGH))
496 		return len;
497 
498 	/* pass through mode can be set for raw ip devices only */
499 	if (!(info->flags & QMI_WWAN_FLAG_RAWIP)) {
500 		netdev_err(dev->net,
501 			   "Cannot set pass through mode on non ip device\n");
502 		return -EINVAL;
503 	}
504 
505 	if (enable)
506 		info->flags |= QMI_WWAN_FLAG_PASS_THROUGH;
507 	else
508 		info->flags &= ~QMI_WWAN_FLAG_PASS_THROUGH;
509 
510 	return len;
511 }
512 
513 static DEVICE_ATTR_RW(raw_ip);
514 static DEVICE_ATTR_RW(add_mux);
515 static DEVICE_ATTR_RW(del_mux);
516 static DEVICE_ATTR_RW(pass_through);
517 
518 static struct attribute *qmi_wwan_sysfs_attrs[] = {
519 	&dev_attr_raw_ip.attr,
520 	&dev_attr_add_mux.attr,
521 	&dev_attr_del_mux.attr,
522 	&dev_attr_pass_through.attr,
523 	NULL,
524 };
525 
526 static struct attribute_group qmi_wwan_sysfs_attr_group = {
527 	.name = "qmi",
528 	.attrs = qmi_wwan_sysfs_attrs,
529 };
530 
531 /* default ethernet address used by the modem */
532 static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
533 
534 static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
535 
536 /* Make up an ethernet header if the packet doesn't have one.
537  *
538  * A firmware bug common among several devices cause them to send raw
539  * IP packets under some circumstances.  There is no way for the
540  * driver/host to know when this will happen.  And even when the bug
541  * hits, some packets will still arrive with an intact header.
542  *
543  * The supported devices are only capably of sending IPv4, IPv6 and
544  * ARP packets on a point-to-point link. Any packet with an ethernet
545  * header will have either our address or a broadcast/multicast
546  * address as destination.  ARP packets will always have a header.
547  *
548  * This means that this function will reliably add the appropriate
549  * header iff necessary, provided our hardware address does not start
550  * with 4 or 6.
551  *
552  * Another common firmware bug results in all packets being addressed
553  * to 00:a0:c6:00:00:00 despite the host address being different.
554  * This function will also fixup such packets.
555  */
556 static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
557 {
558 	struct qmi_wwan_state *info = (void *)&dev->data;
559 	bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
560 	__be16 proto;
561 
562 	/* This check is no longer done by usbnet */
563 	if (skb->len < dev->net->hard_header_len)
564 		return 0;
565 
566 	if (info->flags & QMI_WWAN_FLAG_MUX)
567 		return qmimux_rx_fixup(dev, skb);
568 
569 	if (info->flags & QMI_WWAN_FLAG_PASS_THROUGH) {
570 		skb->protocol = htons(ETH_P_MAP);
571 		return 1;
572 	}
573 
574 	switch (skb->data[0] & 0xf0) {
575 	case 0x40:
576 		proto = htons(ETH_P_IP);
577 		break;
578 	case 0x60:
579 		proto = htons(ETH_P_IPV6);
580 		break;
581 	case 0x00:
582 		if (rawip)
583 			return 0;
584 		if (is_multicast_ether_addr(skb->data))
585 			return 1;
586 		/* possibly bogus destination - rewrite just in case */
587 		skb_reset_mac_header(skb);
588 		goto fix_dest;
589 	default:
590 		if (rawip)
591 			return 0;
592 		/* pass along other packets without modifications */
593 		return 1;
594 	}
595 	if (rawip) {
596 		skb_reset_mac_header(skb);
597 		skb->dev = dev->net; /* normally set by eth_type_trans */
598 		skb->protocol = proto;
599 		return 1;
600 	}
601 
602 	if (skb_headroom(skb) < ETH_HLEN)
603 		return 0;
604 	skb_push(skb, ETH_HLEN);
605 	skb_reset_mac_header(skb);
606 	eth_hdr(skb)->h_proto = proto;
607 	eth_zero_addr(eth_hdr(skb)->h_source);
608 fix_dest:
609 	memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
610 	return 1;
611 }
612 
613 /* very simplistic detection of IPv4 or IPv6 headers */
614 static bool possibly_iphdr(const char *data)
615 {
616 	return (data[0] & 0xd0) == 0x40;
617 }
618 
619 /* disallow addresses which may be confused with IP headers */
620 static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
621 {
622 	int ret;
623 	struct sockaddr *addr = p;
624 
625 	ret = eth_prepare_mac_addr_change(dev, p);
626 	if (ret < 0)
627 		return ret;
628 	if (possibly_iphdr(addr->sa_data))
629 		return -EADDRNOTAVAIL;
630 	eth_commit_mac_addr_change(dev, p);
631 	return 0;
632 }
633 
634 static const struct net_device_ops qmi_wwan_netdev_ops = {
635 	.ndo_open		= usbnet_open,
636 	.ndo_stop		= usbnet_stop,
637 	.ndo_start_xmit		= usbnet_start_xmit,
638 	.ndo_tx_timeout		= usbnet_tx_timeout,
639 	.ndo_change_mtu		= usbnet_change_mtu,
640 	.ndo_set_mac_address	= qmi_wwan_mac_addr,
641 	.ndo_validate_addr	= eth_validate_addr,
642 };
643 
644 /* using a counter to merge subdriver requests with our own into a
645  * combined state
646  */
647 static int qmi_wwan_manage_power(struct usbnet *dev, int on)
648 {
649 	struct qmi_wwan_state *info = (void *)&dev->data;
650 	int rv;
651 
652 	dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
653 		atomic_read(&info->pmcount), on);
654 
655 	if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
656 	    (!on && atomic_dec_and_test(&info->pmcount))) {
657 		/* need autopm_get/put here to ensure the usbcore sees
658 		 * the new value
659 		 */
660 		rv = usb_autopm_get_interface(dev->intf);
661 		dev->intf->needs_remote_wakeup = on;
662 		if (!rv)
663 			usb_autopm_put_interface(dev->intf);
664 	}
665 	return 0;
666 }
667 
668 static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
669 {
670 	struct usbnet *dev = usb_get_intfdata(intf);
671 
672 	/* can be called while disconnecting */
673 	if (!dev)
674 		return 0;
675 	return qmi_wwan_manage_power(dev, on);
676 }
677 
678 /* collect all three endpoints and register subdriver */
679 static int qmi_wwan_register_subdriver(struct usbnet *dev)
680 {
681 	int rv;
682 	struct usb_driver *subdriver = NULL;
683 	struct qmi_wwan_state *info = (void *)&dev->data;
684 
685 	/* collect bulk endpoints */
686 	rv = usbnet_get_endpoints(dev, info->data);
687 	if (rv < 0)
688 		goto err;
689 
690 	/* update status endpoint if separate control interface */
691 	if (info->control != info->data)
692 		dev->status = &info->control->cur_altsetting->endpoint[0];
693 
694 	/* require interrupt endpoint for subdriver */
695 	if (!dev->status) {
696 		rv = -EINVAL;
697 		goto err;
698 	}
699 
700 	/* for subdriver power management */
701 	atomic_set(&info->pmcount, 0);
702 
703 	/* register subdriver */
704 	subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
705 					 4096, WWAN_PORT_QMI,
706 					 &qmi_wwan_cdc_wdm_manage_power);
707 	if (IS_ERR(subdriver)) {
708 		dev_err(&info->control->dev, "subdriver registration failed\n");
709 		rv = PTR_ERR(subdriver);
710 		goto err;
711 	}
712 
713 	/* prevent usbnet from using status endpoint */
714 	dev->status = NULL;
715 
716 	/* save subdriver struct for suspend/resume wrappers */
717 	info->subdriver = subdriver;
718 
719 err:
720 	return rv;
721 }
722 
723 /* Send CDC SetControlLineState request, setting or clearing the DTR.
724  * "Required for Autoconnect and 9x30 to wake up" according to the
725  * GobiNet driver. The requirement has been verified on an MDM9230
726  * based Sierra Wireless MC7455
727  */
728 static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
729 {
730 	u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
731 
732 	return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
733 				USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
734 				on ? 0x01 : 0x00, intf, NULL, 0);
735 }
736 
737 static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
738 {
739 	int status;
740 	u8 *buf = intf->cur_altsetting->extra;
741 	int len = intf->cur_altsetting->extralen;
742 	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
743 	struct usb_cdc_union_desc *cdc_union;
744 	struct usb_cdc_ether_desc *cdc_ether;
745 	struct usb_driver *driver = driver_of(intf);
746 	struct qmi_wwan_state *info = (void *)&dev->data;
747 	struct usb_cdc_parsed_header hdr;
748 
749 	BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
750 		      sizeof(struct qmi_wwan_state)));
751 
752 	/* set up initial state */
753 	info->control = intf;
754 	info->data = intf;
755 
756 	/* and a number of CDC descriptors */
757 	cdc_parse_cdc_header(&hdr, intf, buf, len);
758 	cdc_union = hdr.usb_cdc_union_desc;
759 	cdc_ether = hdr.usb_cdc_ether_desc;
760 
761 	/* Use separate control and data interfaces if we found a CDC Union */
762 	if (cdc_union) {
763 		info->data = usb_ifnum_to_if(dev->udev,
764 					     cdc_union->bSlaveInterface0);
765 		if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
766 		    !info->data) {
767 			dev_err(&intf->dev,
768 				"bogus CDC Union: master=%u, slave=%u\n",
769 				cdc_union->bMasterInterface0,
770 				cdc_union->bSlaveInterface0);
771 
772 			/* ignore and continue... */
773 			cdc_union = NULL;
774 			info->data = intf;
775 		}
776 	}
777 
778 	/* errors aren't fatal - we can live with the dynamic address */
779 	if (cdc_ether && cdc_ether->wMaxSegmentSize) {
780 		dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
781 		usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
782 	}
783 
784 	/* claim data interface and set it up */
785 	if (info->control != info->data) {
786 		status = usb_driver_claim_interface(driver, info->data, dev);
787 		if (status < 0)
788 			goto err;
789 	}
790 
791 	status = qmi_wwan_register_subdriver(dev);
792 	if (status < 0 && info->control != info->data) {
793 		usb_set_intfdata(info->data, NULL);
794 		usb_driver_release_interface(driver, info->data);
795 	}
796 
797 	/* disabling remote wakeup on MDM9x30 devices has the same
798 	 * effect as clearing DTR. The device will not respond to QMI
799 	 * requests until we set DTR again.  This is similar to a
800 	 * QMI_CTL SYNC request, clearing a lot of firmware state
801 	 * including the client ID allocations.
802 	 *
803 	 * Our usage model allows a session to span multiple
804 	 * open/close events, so we must prevent the firmware from
805 	 * clearing out state the clients might need.
806 	 *
807 	 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
808 	 * this fact to enable the quirk for all USB3 devices.
809 	 *
810 	 * There are also chipsets with the same "set DTR" requirement
811 	 * but without USB3 support.  Devices based on these chips
812 	 * need a quirk flag in the device ID table.
813 	 */
814 	if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
815 	    le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
816 		qmi_wwan_manage_power(dev, 1);
817 		qmi_wwan_change_dtr(dev, true);
818 	}
819 
820 	/* Never use the same address on both ends of the link, even if the
821 	 * buggy firmware told us to. Or, if device is assigned the well-known
822 	 * buggy firmware MAC address, replace it with a random address,
823 	 */
824 	if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
825 	    ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
826 		eth_hw_addr_random(dev->net);
827 
828 	/* make MAC addr easily distinguishable from an IP header */
829 	if (possibly_iphdr(dev->net->dev_addr)) {
830 		u8 addr = dev->net->dev_addr[0];
831 
832 		addr |= 0x02;	/* set local assignment bit */
833 		addr &= 0xbf;	/* clear "IP" bit */
834 		dev_addr_mod(dev->net, 0, &addr, 1);
835 	}
836 	dev->net->netdev_ops = &qmi_wwan_netdev_ops;
837 	dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
838 err:
839 	return status;
840 }
841 
842 static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
843 {
844 	struct qmi_wwan_state *info = (void *)&dev->data;
845 	struct usb_driver *driver = driver_of(intf);
846 	struct usb_interface *other;
847 
848 	if (info->subdriver && info->subdriver->disconnect)
849 		info->subdriver->disconnect(info->control);
850 
851 	/* disable MDM9x30 quirk */
852 	if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
853 		qmi_wwan_change_dtr(dev, false);
854 		qmi_wwan_manage_power(dev, 0);
855 	}
856 
857 	/* allow user to unbind using either control or data */
858 	if (intf == info->control)
859 		other = info->data;
860 	else
861 		other = info->control;
862 
863 	/* only if not shared */
864 	if (other && intf != other) {
865 		usb_set_intfdata(other, NULL);
866 		usb_driver_release_interface(driver, other);
867 	}
868 
869 	info->subdriver = NULL;
870 	info->data = NULL;
871 	info->control = NULL;
872 }
873 
874 /* suspend/resume wrappers calling both usbnet and the cdc-wdm
875  * subdriver if present.
876  *
877  * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
878  * wrappers for those without adding usbnet reset support first.
879  */
880 static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
881 {
882 	struct usbnet *dev = usb_get_intfdata(intf);
883 	struct qmi_wwan_state *info = (void *)&dev->data;
884 	int ret;
885 
886 	/* Both usbnet_suspend() and subdriver->suspend() MUST return 0
887 	 * in system sleep context, otherwise, the resume callback has
888 	 * to recover device from previous suspend failure.
889 	 */
890 	ret = usbnet_suspend(intf, message);
891 	if (ret < 0)
892 		goto err;
893 
894 	if (intf == info->control && info->subdriver &&
895 	    info->subdriver->suspend)
896 		ret = info->subdriver->suspend(intf, message);
897 	if (ret < 0)
898 		usbnet_resume(intf);
899 err:
900 	return ret;
901 }
902 
903 static int qmi_wwan_resume(struct usb_interface *intf)
904 {
905 	struct usbnet *dev = usb_get_intfdata(intf);
906 	struct qmi_wwan_state *info = (void *)&dev->data;
907 	int ret = 0;
908 	bool callsub = (intf == info->control && info->subdriver &&
909 			info->subdriver->resume);
910 
911 	if (callsub)
912 		ret = info->subdriver->resume(intf);
913 	if (ret < 0)
914 		goto err;
915 	ret = usbnet_resume(intf);
916 	if (ret < 0 && callsub)
917 		info->subdriver->suspend(intf, PMSG_SUSPEND);
918 err:
919 	return ret;
920 }
921 
922 static const struct driver_info	qmi_wwan_info = {
923 	.description	= "WWAN/QMI device",
924 	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
925 	.bind		= qmi_wwan_bind,
926 	.unbind		= qmi_wwan_unbind,
927 	.manage_power	= qmi_wwan_manage_power,
928 	.rx_fixup       = qmi_wwan_rx_fixup,
929 };
930 
931 static const struct driver_info	qmi_wwan_info_quirk_dtr = {
932 	.description	= "WWAN/QMI device",
933 	.flags		= FLAG_WWAN | FLAG_SEND_ZLP,
934 	.bind		= qmi_wwan_bind,
935 	.unbind		= qmi_wwan_unbind,
936 	.manage_power	= qmi_wwan_manage_power,
937 	.rx_fixup       = qmi_wwan_rx_fixup,
938 	.data           = QMI_WWAN_QUIRK_DTR,
939 };
940 
941 #define HUAWEI_VENDOR_ID	0x12D1
942 
943 /* map QMI/wwan function by a fixed interface number */
944 #define QMI_FIXED_INTF(vend, prod, num) \
945 	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
946 	.driver_info = (unsigned long)&qmi_wwan_info
947 
948 /* devices requiring "set DTR" quirk */
949 #define QMI_QUIRK_SET_DTR(vend, prod, num) \
950 	USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
951 	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
952 
953 /* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
954 #define QMI_GOBI1K_DEVICE(vend, prod) \
955 	QMI_FIXED_INTF(vend, prod, 3)
956 
957 /* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
958 #define QMI_GOBI_DEVICE(vend, prod) \
959 	QMI_FIXED_INTF(vend, prod, 0)
960 
961 /* Many devices have QMI and DIAG functions which are distinguishable
962  * from other vendor specific functions by class, subclass and
963  * protocol all being 0xff. The DIAG function has exactly 2 endpoints
964  * and is silently rejected when probed.
965  *
966  * This makes it possible to match dynamically numbered QMI functions
967  * as seen on e.g. many Quectel modems.
968  */
969 #define QMI_MATCH_FF_FF_FF(vend, prod) \
970 	USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
971 				      USB_SUBCLASS_VENDOR_SPEC, 0xff), \
972 	.driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
973 
974 static const struct usb_device_id products[] = {
975 	/* 1. CDC ECM like devices match on the control interface */
976 	{	/* Huawei E392, E398 and possibly others sharing both device id and more... */
977 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
978 		.driver_info        = (unsigned long)&qmi_wwan_info,
979 	},
980 	{	/* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
981 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
982 		.driver_info        = (unsigned long)&qmi_wwan_info,
983 	},
984 	{	/* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
985 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
986 		.driver_info        = (unsigned long)&qmi_wwan_info,
987 	},
988 	{	/* Motorola Mapphone devices with MDM6600 */
989 		USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
990 		.driver_info        = (unsigned long)&qmi_wwan_info,
991 	},
992 
993 	/* 2. Combined interface devices matching on class+protocol */
994 	{	/* Huawei E367 and possibly others in "Windows mode" */
995 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
996 		.driver_info        = (unsigned long)&qmi_wwan_info,
997 	},
998 	{	/* Huawei E392, E398 and possibly others in "Windows mode" */
999 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
1000 		.driver_info        = (unsigned long)&qmi_wwan_info,
1001 	},
1002 	{	/* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
1003 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
1004 		.driver_info        = (unsigned long)&qmi_wwan_info,
1005 	},
1006 	{	/* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
1007 		USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
1008 		.driver_info        = (unsigned long)&qmi_wwan_info,
1009 	},
1010 	{	/* Pantech UML290, P4200 and more */
1011 		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
1012 		.driver_info        = (unsigned long)&qmi_wwan_info,
1013 	},
1014 	{	/* Pantech UML290 - newer firmware */
1015 		USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
1016 		.driver_info        = (unsigned long)&qmi_wwan_info,
1017 	},
1018 	{	/* Novatel USB551L and MC551 */
1019 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
1020 		                              USB_CLASS_COMM,
1021 		                              USB_CDC_SUBCLASS_ETHERNET,
1022 		                              USB_CDC_PROTO_NONE),
1023 		.driver_info        = (unsigned long)&qmi_wwan_info,
1024 	},
1025 	{	/* Novatel E362 */
1026 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
1027 		                              USB_CLASS_COMM,
1028 		                              USB_CDC_SUBCLASS_ETHERNET,
1029 		                              USB_CDC_PROTO_NONE),
1030 		.driver_info        = (unsigned long)&qmi_wwan_info,
1031 	},
1032 	{	/* Novatel Expedite E371 */
1033 		USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
1034 		                              USB_CLASS_COMM,
1035 		                              USB_CDC_SUBCLASS_ETHERNET,
1036 		                              USB_CDC_PROTO_NONE),
1037 		.driver_info        = (unsigned long)&qmi_wwan_info,
1038 	},
1039 	{	/* Dell Wireless 5800 (Novatel E362) */
1040 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
1041 					      USB_CLASS_COMM,
1042 					      USB_CDC_SUBCLASS_ETHERNET,
1043 					      USB_CDC_PROTO_NONE),
1044 		.driver_info        = (unsigned long)&qmi_wwan_info,
1045 	},
1046 	{	/* Dell Wireless 5800 V2 (Novatel E362) */
1047 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
1048 					      USB_CLASS_COMM,
1049 					      USB_CDC_SUBCLASS_ETHERNET,
1050 					      USB_CDC_PROTO_NONE),
1051 		.driver_info        = (unsigned long)&qmi_wwan_info,
1052 	},
1053 	{	/* Dell Wireless 5804 (Novatel E371) */
1054 		USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1055 					      USB_CLASS_COMM,
1056 					      USB_CDC_SUBCLASS_ETHERNET,
1057 					      USB_CDC_PROTO_NONE),
1058 		.driver_info        = (unsigned long)&qmi_wwan_info,
1059 	},
1060 	{	/* ADU960S */
1061 		USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1062 					      USB_CLASS_COMM,
1063 					      USB_CDC_SUBCLASS_ETHERNET,
1064 					      USB_CDC_PROTO_NONE),
1065 		.driver_info        = (unsigned long)&qmi_wwan_info,
1066 	},
1067 	{	/* HP lt2523 (Novatel E371) */
1068 		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1069 					      USB_CLASS_COMM,
1070 					      USB_CDC_SUBCLASS_ETHERNET,
1071 					      USB_CDC_PROTO_NONE),
1072 		.driver_info        = (unsigned long)&qmi_wwan_info,
1073 	},
1074 	{	/* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1075 		USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1076 		.driver_info = (unsigned long)&qmi_wwan_info,
1077 	},
1078 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)},	/* Quectel EC25, EC20 R2.0  Mini PCIe */
1079 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)},	/* Quectel EP06/EG06/EM06 */
1080 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)},	/* Quectel EG12/EM12 */
1081 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0620)},	/* Quectel EM160R-GL */
1082 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)},	/* Quectel RM500Q-GL */
1083 	{QMI_MATCH_FF_FF_FF(0x2c7c, 0x0801)},	/* Quectel RM520N */
1084 
1085 	/* 3. Combined interface devices matching on interface number */
1086 	{QMI_FIXED_INTF(0x0408, 0xea42, 4)},	/* Yota / Megafon M100-1 */
1087 	{QMI_FIXED_INTF(0x05c6, 0x6001, 3)},	/* 4G LTE usb-modem U901 */
1088 	{QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1089 	{QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1090 	{QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1091 	{QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1092 	{QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1093 	{QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1094 	{QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1095 	{QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1096 	{QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1097 	{QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1098 	{QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1099 	{QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1100 	{QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1101 	{QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1102 	{QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1103 	{QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1104 	{QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1105 	{QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1106 	{QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1107 	{QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1108 	{QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1109 	{QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1110 	{QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1111 	{QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1112 	{QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1113 	{QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1114 	{QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1115 	{QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1116 	{QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1117 	{QMI_QUIRK_SET_DTR(0x05c6, 0x9025, 4)},	/* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1118 	{QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1119 	{QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1120 	{QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1121 	{QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1122 	{QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1123 	{QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1124 	{QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1125 	{QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1126 	{QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1127 	{QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1128 	{QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1129 	{QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1130 	{QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1131 	{QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1132 	{QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1133 	{QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1134 	{QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1135 	{QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1136 	{QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1137 	{QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1138 	{QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1139 	{QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1140 	{QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1141 	{QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1142 	{QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1143 	{QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1144 	{QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1145 	{QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1146 	{QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1147 	{QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1148 	{QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1149 	{QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1150 	{QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1151 	{QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1152 	{QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1153 	{QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1154 	{QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1155 	{QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1156 	{QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1157 	{QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1158 	{QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1159 	{QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1160 	{QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1161 	{QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1162 	{QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1163 	{QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1164 	{QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1165 	{QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1166 	{QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1167 	{QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1168 	{QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1169 	{QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1170 	{QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1171 	{QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1172 	{QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1173 	{QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1174 	{QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1175 	{QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1176 	{QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1177 	{QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1178 	{QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1179 	{QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1180 	{QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1181 	{QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1182 	{QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1183 	{QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1184 	{QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1185 	{QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1186 	{QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1187 	{QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1188 	{QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1189 	{QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1190 	{QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1191 	{QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1192 	{QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1193 	{QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1194 	{QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1195 	{QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1196 	{QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1197 	{QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1198 	{QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1199 	{QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1200 	{QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1201 	{QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1202 	{QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1203 	{QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1204 	{QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1205 	{QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1206 	{QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1207 	{QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1208 	{QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1209 	{QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1210 	{QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1211 	{QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1212 	{QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1213 	{QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1214 	{QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1215 	{QMI_QUIRK_SET_DTR(0x05c6, 0x9091, 2)},	/* Compal RXM-G1 */
1216 	{QMI_FIXED_INTF(0x05c6, 0x90b2, 3)},    /* ublox R410M */
1217 	{QMI_QUIRK_SET_DTR(0x05c6, 0x90db, 2)},	/* Compal RXM-G1 */
1218 	{QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1219 	{QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1220 	{QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)},	/* YUGA CLM920-NC5 */
1221 	{QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1222 	{QMI_FIXED_INTF(0x0846, 0x68d3, 8)},	/* Netgear Aircard 779S */
1223 	{QMI_FIXED_INTF(0x12d1, 0x140c, 1)},	/* Huawei E173 */
1224 	{QMI_FIXED_INTF(0x12d1, 0x14ac, 1)},	/* Huawei E1820 */
1225 	{QMI_FIXED_INTF(0x1435, 0x0918, 3)},	/* Wistron NeWeb D16Q1 */
1226 	{QMI_FIXED_INTF(0x1435, 0x0918, 4)},	/* Wistron NeWeb D16Q1 */
1227 	{QMI_FIXED_INTF(0x1435, 0x0918, 5)},	/* Wistron NeWeb D16Q1 */
1228 	{QMI_FIXED_INTF(0x1435, 0x3185, 4)},	/* Wistron NeWeb M18Q5 */
1229 	{QMI_FIXED_INTF(0x1435, 0xd111, 4)},	/* M9615A DM11-1 D51QC */
1230 	{QMI_FIXED_INTF(0x1435, 0xd181, 3)},	/* Wistron NeWeb D18Q1 */
1231 	{QMI_FIXED_INTF(0x1435, 0xd181, 4)},	/* Wistron NeWeb D18Q1 */
1232 	{QMI_FIXED_INTF(0x1435, 0xd181, 5)},	/* Wistron NeWeb D18Q1 */
1233 	{QMI_FIXED_INTF(0x1435, 0xd182, 4)},	/* Wistron NeWeb D18 */
1234 	{QMI_FIXED_INTF(0x1435, 0xd182, 5)},	/* Wistron NeWeb D18 */
1235 	{QMI_FIXED_INTF(0x1435, 0xd191, 4)},	/* Wistron NeWeb D19Q1 */
1236 	{QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)},	/* Fibocom NL668 series */
1237 	{QMI_FIXED_INTF(0x1690, 0x7588, 4)},    /* ASKEY WWHC050 */
1238 	{QMI_FIXED_INTF(0x16d8, 0x6003, 0)},	/* CMOTech 6003 */
1239 	{QMI_FIXED_INTF(0x16d8, 0x6007, 0)},	/* CMOTech CHE-628S */
1240 	{QMI_FIXED_INTF(0x16d8, 0x6008, 0)},	/* CMOTech CMU-301 */
1241 	{QMI_FIXED_INTF(0x16d8, 0x6280, 0)},	/* CMOTech CHU-628 */
1242 	{QMI_FIXED_INTF(0x16d8, 0x7001, 0)},	/* CMOTech CHU-720S */
1243 	{QMI_FIXED_INTF(0x16d8, 0x7002, 0)},	/* CMOTech 7002 */
1244 	{QMI_FIXED_INTF(0x16d8, 0x7003, 4)},	/* CMOTech CHU-629K */
1245 	{QMI_FIXED_INTF(0x16d8, 0x7004, 3)},	/* CMOTech 7004 */
1246 	{QMI_FIXED_INTF(0x16d8, 0x7006, 5)},	/* CMOTech CGU-629 */
1247 	{QMI_FIXED_INTF(0x16d8, 0x700a, 4)},	/* CMOTech CHU-629S */
1248 	{QMI_FIXED_INTF(0x16d8, 0x7211, 0)},	/* CMOTech CHU-720I */
1249 	{QMI_FIXED_INTF(0x16d8, 0x7212, 0)},	/* CMOTech 7212 */
1250 	{QMI_FIXED_INTF(0x16d8, 0x7213, 0)},	/* CMOTech 7213 */
1251 	{QMI_FIXED_INTF(0x16d8, 0x7251, 1)},	/* CMOTech 7251 */
1252 	{QMI_FIXED_INTF(0x16d8, 0x7252, 1)},	/* CMOTech 7252 */
1253 	{QMI_FIXED_INTF(0x16d8, 0x7253, 1)},	/* CMOTech 7253 */
1254 	{QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1255 	{QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1256 	{QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1257 	{QMI_FIXED_INTF(0x19d2, 0x0019, 3)},	/* ONDA MT689DC */
1258 	{QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1259 	{QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1260 	{QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1261 	{QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1262 	{QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1263 	{QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1264 	{QMI_FIXED_INTF(0x19d2, 0x0055, 1)},	/* ZTE (Vodafone) K3520-Z */
1265 	{QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1266 	{QMI_FIXED_INTF(0x19d2, 0x0063, 4)},	/* ZTE (Vodafone) K3565-Z */
1267 	{QMI_FIXED_INTF(0x19d2, 0x0104, 4)},	/* ZTE (Vodafone) K4505-Z */
1268 	{QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1269 	{QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1270 	{QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1271 	{QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1272 	{QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1273 	{QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1274 	{QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1275 	{QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1276 	{QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1277 	{QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1278 	{QMI_FIXED_INTF(0x19d2, 0x0157, 5)},	/* ZTE MF683 */
1279 	{QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1280 	{QMI_FIXED_INTF(0x19d2, 0x0167, 4)},	/* ZTE MF820D */
1281 	{QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1282 	{QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1283 	{QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1284 	{QMI_FIXED_INTF(0x19d2, 0x0189, 4)},    /* ZTE MF290 */
1285 	{QMI_FIXED_INTF(0x19d2, 0x0191, 4)},	/* ZTE EuFi890 */
1286 	{QMI_FIXED_INTF(0x19d2, 0x0199, 1)},	/* ZTE MF820S */
1287 	{QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1288 	{QMI_FIXED_INTF(0x19d2, 0x0257, 3)},	/* ZTE MF821 */
1289 	{QMI_FIXED_INTF(0x19d2, 0x0265, 4)},	/* ONDA MT8205 4G LTE */
1290 	{QMI_FIXED_INTF(0x19d2, 0x0284, 4)},	/* ZTE MF880 */
1291 	{QMI_FIXED_INTF(0x19d2, 0x0326, 4)},	/* ZTE MF821D */
1292 	{QMI_FIXED_INTF(0x19d2, 0x0396, 3)},	/* ZTE ZM8620 */
1293 	{QMI_FIXED_INTF(0x19d2, 0x0412, 4)},	/* Telewell TW-LTE 4G */
1294 	{QMI_FIXED_INTF(0x19d2, 0x1008, 4)},	/* ZTE (Vodafone) K3570-Z */
1295 	{QMI_FIXED_INTF(0x19d2, 0x1010, 4)},	/* ZTE (Vodafone) K3571-Z */
1296 	{QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1297 	{QMI_FIXED_INTF(0x19d2, 0x1018, 3)},	/* ZTE (Vodafone) K5006-Z */
1298 	{QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1299 	{QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1300 	{QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1301 	{QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1302 	{QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1303 	{QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1304 	{QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1305 	{QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1306 	{QMI_FIXED_INTF(0x19d2, 0x1270, 5)},	/* ZTE MF667 */
1307 	{QMI_FIXED_INTF(0x19d2, 0x1275, 3)},	/* ZTE P685M */
1308 	{QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1309 	{QMI_FIXED_INTF(0x19d2, 0x1402, 2)},	/* ZTE MF60 */
1310 	{QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1311 	{QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1312 	{QMI_FIXED_INTF(0x19d2, 0x1426, 2)},	/* ZTE MF91 */
1313 	{QMI_FIXED_INTF(0x19d2, 0x1428, 2)},	/* Telewell TW-LTE 4G v2 */
1314 	{QMI_FIXED_INTF(0x19d2, 0x1432, 3)},	/* ZTE ME3620 */
1315 	{QMI_FIXED_INTF(0x19d2, 0x1485, 5)},	/* ZTE MF286D */
1316 	{QMI_FIXED_INTF(0x19d2, 0x2002, 4)},	/* ZTE (Vodafone) K3765-Z */
1317 	{QMI_FIXED_INTF(0x2001, 0x7e16, 3)},	/* D-Link DWM-221 */
1318 	{QMI_FIXED_INTF(0x2001, 0x7e19, 4)},	/* D-Link DWM-221 B1 */
1319 	{QMI_FIXED_INTF(0x2001, 0x7e35, 4)},	/* D-Link DWM-222 */
1320 	{QMI_FIXED_INTF(0x2001, 0x7e3d, 4)},	/* D-Link DWM-222 A2 */
1321 	{QMI_FIXED_INTF(0x2020, 0x2031, 4)},	/* Olicard 600 */
1322 	{QMI_FIXED_INTF(0x2020, 0x2033, 4)},	/* BroadMobi BM806U */
1323 	{QMI_QUIRK_SET_DTR(0x2020, 0x2060, 4)},	/* BroadMobi BM818 */
1324 	{QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)},    /* Sierra Wireless MC7700 */
1325 	{QMI_FIXED_INTF(0x114f, 0x68a2, 8)},    /* Sierra Wireless MC7750 */
1326 	{QMI_FIXED_INTF(0x1199, 0x68a2, 8)},	/* Sierra Wireless MC7710 in QMI mode */
1327 	{QMI_FIXED_INTF(0x1199, 0x68a2, 19)},	/* Sierra Wireless MC7710 in QMI mode */
1328 	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)},	/* Sierra Wireless MC7304/MC7354, WP76xx */
1329 	{QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1330 	{QMI_FIXED_INTF(0x1199, 0x901c, 8)},    /* Sierra Wireless EM7700 */
1331 	{QMI_FIXED_INTF(0x1199, 0x901f, 8)},    /* Sierra Wireless EM7355 */
1332 	{QMI_FIXED_INTF(0x1199, 0x9041, 8)},	/* Sierra Wireless MC7305/MC7355 */
1333 	{QMI_FIXED_INTF(0x1199, 0x9041, 10)},	/* Sierra Wireless MC7305/MC7355 */
1334 	{QMI_FIXED_INTF(0x1199, 0x9051, 8)},	/* Netgear AirCard 340U */
1335 	{QMI_FIXED_INTF(0x1199, 0x9053, 8)},	/* Sierra Wireless Modem */
1336 	{QMI_FIXED_INTF(0x1199, 0x9054, 8)},	/* Sierra Wireless Modem */
1337 	{QMI_FIXED_INTF(0x1199, 0x9055, 8)},	/* Netgear AirCard 341U */
1338 	{QMI_FIXED_INTF(0x1199, 0x9056, 8)},	/* Sierra Wireless Modem */
1339 	{QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1340 	{QMI_FIXED_INTF(0x1199, 0x9061, 8)},	/* Sierra Wireless Modem */
1341 	{QMI_FIXED_INTF(0x1199, 0x9063, 8)},	/* Sierra Wireless EM7305 */
1342 	{QMI_FIXED_INTF(0x1199, 0x9063, 10)},	/* Sierra Wireless EM7305 */
1343 	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)},	/* Sierra Wireless MC74xx */
1344 	{QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1345 	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)},	/* Sierra Wireless EM74xx */
1346 	{QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1347 	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)},	/* Sierra Wireless EM74xx */
1348 	{QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1349 	{QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)},	/* Sierra Wireless EM7565 */
1350 	{QMI_QUIRK_SET_DTR(0x1199, 0xc081, 8)},	/* Sierra Wireless EM7590 */
1351 	{QMI_FIXED_INTF(0x1bbb, 0x011e, 4)},	/* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1352 	{QMI_FIXED_INTF(0x1bbb, 0x0203, 2)},	/* Alcatel L800MA */
1353 	{QMI_FIXED_INTF(0x2357, 0x0201, 4)},	/* TP-LINK HSUPA Modem MA180 */
1354 	{QMI_FIXED_INTF(0x2357, 0x9000, 4)},	/* TP-LINK MA260 */
1355 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1356 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x103a, 0)}, /* Telit LE910C4-WWX */
1357 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)},	/* Telit LE922A */
1358 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)},	/* Telit FN980 */
1359 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1057, 2)},	/* Telit FN980 */
1360 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1060, 2)},	/* Telit LN920 */
1361 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1070, 2)},	/* Telit FN990 */
1362 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1080, 2)}, /* Telit FE990 */
1363 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x10a0, 0)}, /* Telit FN920C04 */
1364 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x10a4, 0)}, /* Telit FN920C04 */
1365 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x10a9, 0)}, /* Telit FN920C04 */
1366 	{QMI_FIXED_INTF(0x1bc7, 0x1100, 3)},	/* Telit ME910 */
1367 	{QMI_FIXED_INTF(0x1bc7, 0x1101, 3)},	/* Telit ME910 dual modem */
1368 	{QMI_FIXED_INTF(0x1bc7, 0x1200, 5)},	/* Telit LE920 */
1369 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)},	/* Telit LE920, LE920A4 */
1370 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1230, 2)},	/* Telit LE910Cx */
1371 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1250, 0)},	/* Telit LE910Cx */
1372 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)},	/* Telit LE910Cx */
1373 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)},	/* Telit LE910Cx */
1374 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)},	/* Telit LN940 series */
1375 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x3000, 0)},	/* Telit FN912 series */
1376 	{QMI_QUIRK_SET_DTR(0x1bc7, 0x3001, 0)},	/* Telit FN912 series */
1377 	{QMI_FIXED_INTF(0x1c9e, 0x9801, 3)},	/* Telewell TW-3G HSPA+ */
1378 	{QMI_FIXED_INTF(0x1c9e, 0x9803, 4)},	/* Telewell TW-3G HSPA+ */
1379 	{QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)},	/* XS Stick W100-2 from 4G Systems */
1380 	{QMI_QUIRK_SET_DTR(0x1c9e, 0x9b05, 4)},	/* Longsung U8300 */
1381 	{QMI_QUIRK_SET_DTR(0x1c9e, 0x9b3c, 4)},	/* Longsung U9300 */
1382 	{QMI_FIXED_INTF(0x0b3c, 0xc000, 4)},	/* Olivetti Olicard 100 */
1383 	{QMI_FIXED_INTF(0x0b3c, 0xc001, 4)},	/* Olivetti Olicard 120 */
1384 	{QMI_FIXED_INTF(0x0b3c, 0xc002, 4)},	/* Olivetti Olicard 140 */
1385 	{QMI_FIXED_INTF(0x0b3c, 0xc004, 6)},	/* Olivetti Olicard 155 */
1386 	{QMI_FIXED_INTF(0x0b3c, 0xc005, 6)},	/* Olivetti Olicard 200 */
1387 	{QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)},	/* Olivetti Olicard 160 */
1388 	{QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)},	/* Olivetti Olicard 500 */
1389 	{QMI_FIXED_INTF(0x1e2d, 0x0060, 4)},	/* Cinterion PLxx */
1390 	{QMI_QUIRK_SET_DTR(0x1e2d, 0x006f, 8)}, /* Cinterion PLS83/PLS63 */
1391 	{QMI_FIXED_INTF(0x1e2d, 0x0053, 4)},	/* Cinterion PHxx,PXxx */
1392 	{QMI_FIXED_INTF(0x1e2d, 0x0063, 10)},	/* Cinterion ALASxx (1 RmNet) */
1393 	{QMI_FIXED_INTF(0x1e2d, 0x0082, 4)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1394 	{QMI_FIXED_INTF(0x1e2d, 0x0082, 5)},	/* Cinterion PHxx,PXxx (2 RmNet) */
1395 	{QMI_FIXED_INTF(0x1e2d, 0x0083, 4)},	/* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1396 	{QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)},	/* Cinterion CLS8 */
1397 	{QMI_FIXED_INTF(0x1e2d, 0x00b7, 0)},	/* Cinterion MV31 RmNet */
1398 	{QMI_FIXED_INTF(0x1e2d, 0x00b9, 0)},	/* Cinterion MV31 RmNet based on new baseline */
1399 	{QMI_FIXED_INTF(0x1e2d, 0x00f3, 0)},	/* Cinterion MV32-W-A RmNet */
1400 	{QMI_FIXED_INTF(0x1e2d, 0x00f4, 0)},	/* Cinterion MV32-W-B RmNet */
1401 	{QMI_FIXED_INTF(0x413c, 0x81a2, 8)},	/* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1402 	{QMI_FIXED_INTF(0x413c, 0x81a3, 8)},	/* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1403 	{QMI_FIXED_INTF(0x413c, 0x81a4, 8)},	/* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1404 	{QMI_FIXED_INTF(0x413c, 0x81a8, 8)},	/* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1405 	{QMI_FIXED_INTF(0x413c, 0x81a9, 8)},	/* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1406 	{QMI_FIXED_INTF(0x413c, 0x81b1, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1407 	{QMI_FIXED_INTF(0x413c, 0x81b3, 8)},	/* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1408 	{QMI_FIXED_INTF(0x413c, 0x81b6, 8)},	/* Dell Wireless 5811e */
1409 	{QMI_FIXED_INTF(0x413c, 0x81b6, 10)},	/* Dell Wireless 5811e */
1410 	{QMI_FIXED_INTF(0x413c, 0x81c2, 8)},	/* Dell Wireless 5811e */
1411 	{QMI_FIXED_INTF(0x413c, 0x81cc, 8)},	/* Dell Wireless 5816e */
1412 	{QMI_FIXED_INTF(0x413c, 0x81d7, 0)},	/* Dell Wireless 5821e */
1413 	{QMI_FIXED_INTF(0x413c, 0x81d7, 1)},	/* Dell Wireless 5821e preproduction config */
1414 	{QMI_FIXED_INTF(0x413c, 0x81e0, 0)},	/* Dell Wireless 5821e with eSIM support*/
1415 	{QMI_FIXED_INTF(0x413c, 0x81e4, 0)},	/* Dell Wireless 5829e with eSIM support*/
1416 	{QMI_FIXED_INTF(0x413c, 0x81e6, 0)},	/* Dell Wireless 5829e */
1417 	{QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)},	/* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1418 	{QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)},	/* HP lt4120 Snapdragon X5 LTE */
1419 	{QMI_QUIRK_SET_DTR(0x22de, 0x9051, 2)}, /* Hucom Wireless HM-211S/K */
1420 	{QMI_FIXED_INTF(0x22de, 0x9061, 3)},	/* WeTelecom WPD-600N */
1421 	{QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)},	/* SIMCom 7100E, 7230E, 7600E ++ */
1422 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)},	/* Quectel EC21 Mini PCIe */
1423 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)},	/* Quectel EG91 */
1424 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)},	/* Quectel EG95 */
1425 	{QMI_FIXED_INTF(0x2c7c, 0x0296, 4)},	/* Quectel BG96 */
1426 	{QMI_QUIRK_SET_DTR(0x2c7c, 0x030e, 4)},	/* Quectel EM05GV2 */
1427 	{QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)},	/* Fibocom NL678 series */
1428 	{QMI_FIXED_INTF(0x0489, 0xe0b4, 0)},	/* Foxconn T77W968 LTE */
1429 	{QMI_FIXED_INTF(0x0489, 0xe0b5, 0)},	/* Foxconn T77W968 LTE with eSIM support*/
1430 	{QMI_FIXED_INTF(0x2692, 0x9025, 4)},    /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1431 	{QMI_QUIRK_SET_DTR(0x1546, 0x1312, 4)},	/* u-blox LARA-R6 01B */
1432 	{QMI_QUIRK_SET_DTR(0x1546, 0x1342, 4)},	/* u-blox LARA-L6 */
1433 	{QMI_QUIRK_SET_DTR(0x33f8, 0x0104, 4)}, /* Rolling RW101 RMNET */
1434 
1435 	/* 4. Gobi 1000 devices */
1436 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9212)},	/* Acer Gobi Modem Device */
1437 	{QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)},	/* HP un2400 Gobi Modem Device */
1438 	{QMI_GOBI1K_DEVICE(0x04da, 0x250d)},	/* Panasonic Gobi Modem device */
1439 	{QMI_GOBI1K_DEVICE(0x413c, 0x8172)},	/* Dell Gobi Modem device */
1440 	{QMI_GOBI1K_DEVICE(0x1410, 0xa001)},	/* Novatel/Verizon USB-1000 */
1441 	{QMI_GOBI1K_DEVICE(0x1410, 0xa002)},	/* Novatel Gobi Modem device */
1442 	{QMI_GOBI1K_DEVICE(0x1410, 0xa003)},	/* Novatel Gobi Modem device */
1443 	{QMI_GOBI1K_DEVICE(0x1410, 0xa004)},	/* Novatel Gobi Modem device */
1444 	{QMI_GOBI1K_DEVICE(0x1410, 0xa005)},	/* Novatel Gobi Modem device */
1445 	{QMI_GOBI1K_DEVICE(0x1410, 0xa006)},	/* Novatel Gobi Modem device */
1446 	{QMI_GOBI1K_DEVICE(0x1410, 0xa007)},	/* Novatel Gobi Modem device */
1447 	{QMI_GOBI1K_DEVICE(0x0b05, 0x1776)},	/* Asus Gobi Modem device */
1448 	{QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)},	/* ONDA Gobi Modem device */
1449 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9001)},	/* Generic Gobi Modem device */
1450 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9002)},	/* Generic Gobi Modem device */
1451 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9202)},	/* Generic Gobi Modem device */
1452 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9203)},	/* Generic Gobi Modem device */
1453 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9222)},	/* Generic Gobi Modem device */
1454 	{QMI_GOBI1K_DEVICE(0x05c6, 0x9009)},	/* Generic Gobi Modem device */
1455 
1456 	/* 5. Gobi 2000 and 3000 devices */
1457 	{QMI_GOBI_DEVICE(0x413c, 0x8186)},	/* Dell Gobi 2000 Modem device (N0218, VU936) */
1458 	{QMI_GOBI_DEVICE(0x413c, 0x8194)},	/* Dell Gobi 3000 Composite */
1459 	{QMI_GOBI_DEVICE(0x05c6, 0x920b)},	/* Generic Gobi 2000 Modem device */
1460 	{QMI_GOBI_DEVICE(0x05c6, 0x9225)},	/* Sony Gobi 2000 Modem device (N0279, VU730) */
1461 	{QMI_GOBI_DEVICE(0x05c6, 0x9245)},	/* Samsung Gobi 2000 Modem device (VL176) */
1462 	{QMI_GOBI_DEVICE(0x03f0, 0x251d)},	/* HP Gobi 2000 Modem device (VP412) */
1463 	{QMI_GOBI_DEVICE(0x05c6, 0x9215)},	/* Acer Gobi 2000 Modem device (VP413) */
1464 	{QMI_FIXED_INTF(0x05c6, 0x9215, 4)},	/* Quectel EC20 Mini PCIe */
1465 	{QMI_GOBI_DEVICE(0x05c6, 0x9265)},	/* Asus Gobi 2000 Modem device (VR305) */
1466 	{QMI_GOBI_DEVICE(0x05c6, 0x9235)},	/* Top Global Gobi 2000 Modem device (VR306) */
1467 	{QMI_GOBI_DEVICE(0x05c6, 0x9275)},	/* iRex Technologies Gobi 2000 Modem device (VR307) */
1468 	{QMI_GOBI_DEVICE(0x0af0, 0x8120)},	/* Option GTM681W */
1469 	{QMI_GOBI_DEVICE(0x1199, 0x68a5)},	/* Sierra Wireless Modem */
1470 	{QMI_GOBI_DEVICE(0x1199, 0x68a9)},	/* Sierra Wireless Modem */
1471 	{QMI_GOBI_DEVICE(0x1199, 0x9001)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1472 	{QMI_GOBI_DEVICE(0x1199, 0x9002)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1473 	{QMI_GOBI_DEVICE(0x1199, 0x9003)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1474 	{QMI_GOBI_DEVICE(0x1199, 0x9004)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1475 	{QMI_GOBI_DEVICE(0x1199, 0x9005)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1476 	{QMI_GOBI_DEVICE(0x1199, 0x9006)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1477 	{QMI_GOBI_DEVICE(0x1199, 0x9007)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1478 	{QMI_GOBI_DEVICE(0x1199, 0x9008)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1479 	{QMI_GOBI_DEVICE(0x1199, 0x9009)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1480 	{QMI_GOBI_DEVICE(0x1199, 0x900a)},	/* Sierra Wireless Gobi 2000 Modem device (VT773) */
1481 	{QMI_GOBI_DEVICE(0x1199, 0x9011)},	/* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1482 	{QMI_GOBI_DEVICE(0x16d8, 0x8002)},	/* CMDTech Gobi 2000 Modem device (VU922) */
1483 	{QMI_GOBI_DEVICE(0x05c6, 0x9205)},	/* Gobi 2000 Modem device */
1484 	{QMI_GOBI_DEVICE(0x1199, 0x9013)},	/* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1485 	{QMI_GOBI_DEVICE(0x03f0, 0x371d)},	/* HP un2430 Mobile Broadband Module */
1486 	{QMI_GOBI_DEVICE(0x1199, 0x9015)},	/* Sierra Wireless Gobi 3000 Modem device */
1487 	{QMI_GOBI_DEVICE(0x1199, 0x9019)},	/* Sierra Wireless Gobi 3000 Modem device */
1488 	{QMI_GOBI_DEVICE(0x1199, 0x901b)},	/* Sierra Wireless MC7770 */
1489 	{QMI_GOBI_DEVICE(0x12d1, 0x14f1)},	/* Sony Gobi 3000 Composite */
1490 	{QMI_GOBI_DEVICE(0x1410, 0xa021)},	/* Foxconn Gobi 3000 Modem device (Novatel E396) */
1491 
1492 	{ }					/* END */
1493 };
1494 MODULE_DEVICE_TABLE(usb, products);
1495 
1496 static bool quectel_ec20_detected(struct usb_interface *intf)
1497 {
1498 	struct usb_device *dev = interface_to_usbdev(intf);
1499 
1500 	if (dev->actconfig &&
1501 	    le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1502 	    le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1503 	    dev->actconfig->desc.bNumInterfaces == 5)
1504 		return true;
1505 
1506 	return false;
1507 }
1508 
1509 static int qmi_wwan_probe(struct usb_interface *intf,
1510 			  const struct usb_device_id *prod)
1511 {
1512 	struct usb_device_id *id = (struct usb_device_id *)prod;
1513 	struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1514 
1515 	/* Workaround to enable dynamic IDs.  This disables usbnet
1516 	 * blacklisting functionality.  Which, if required, can be
1517 	 * reimplemented here by using a magic "blacklist" value
1518 	 * instead of 0 in the static device id table
1519 	 */
1520 	if (!id->driver_info) {
1521 		dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1522 		id->driver_info = (unsigned long)&qmi_wwan_info;
1523 	}
1524 
1525 	/* There are devices where the same interface number can be
1526 	 * configured as different functions. We should only bind to
1527 	 * vendor specific functions when matching on interface number
1528 	 */
1529 	if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1530 	    desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1531 		dev_dbg(&intf->dev,
1532 			"Rejecting interface number match for class %02x\n",
1533 			desc->bInterfaceClass);
1534 		return -ENODEV;
1535 	}
1536 
1537 	/* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1538 	if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1539 		dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1540 		return -ENODEV;
1541 	}
1542 
1543 	/* Several Quectel modems supports dynamic interface configuration, so
1544 	 * we need to match on class/subclass/protocol. These values are
1545 	 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1546 	 * different. Ignore the current interface if the number of endpoints
1547 	 * equals the number for the diag interface (two).
1548 	 */
1549 	if (desc->bNumEndpoints == 2)
1550 		return -ENODEV;
1551 
1552 	return usbnet_probe(intf, id);
1553 }
1554 
1555 static void qmi_wwan_disconnect(struct usb_interface *intf)
1556 {
1557 	struct usbnet *dev = usb_get_intfdata(intf);
1558 	struct qmi_wwan_state *info;
1559 	struct list_head *iter;
1560 	struct net_device *ldev;
1561 	LIST_HEAD(list);
1562 
1563 	/* called twice if separate control and data intf */
1564 	if (!dev)
1565 		return;
1566 	info = (void *)&dev->data;
1567 	if (info->flags & QMI_WWAN_FLAG_MUX) {
1568 		if (!rtnl_trylock()) {
1569 			restart_syscall();
1570 			return;
1571 		}
1572 		rcu_read_lock();
1573 		netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1574 			qmimux_unregister_device(ldev, &list);
1575 		rcu_read_unlock();
1576 		unregister_netdevice_many(&list);
1577 		rtnl_unlock();
1578 		info->flags &= ~QMI_WWAN_FLAG_MUX;
1579 	}
1580 	usbnet_disconnect(intf);
1581 }
1582 
1583 static struct usb_driver qmi_wwan_driver = {
1584 	.name		      = "qmi_wwan",
1585 	.id_table	      = products,
1586 	.probe		      = qmi_wwan_probe,
1587 	.disconnect	      = qmi_wwan_disconnect,
1588 	.suspend	      = qmi_wwan_suspend,
1589 	.resume		      =	qmi_wwan_resume,
1590 	.reset_resume         = qmi_wwan_resume,
1591 	.supports_autosuspend = 1,
1592 	.disable_hub_initiated_lpm = 1,
1593 };
1594 
1595 module_usb_driver(qmi_wwan_driver);
1596 
1597 MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1598 MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1599 MODULE_LICENSE("GPL");
1600