Loading...
1/*
2 * Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
3 *
4 * The probing code is heavily inspired by cdc_ether, which is:
5 * Copyright (C) 2003-2005 by David Brownell
6 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
7 *
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * version 2 as published by the Free Software Foundation.
11 */
12
13#include <linux/module.h>
14#include <linux/sched/signal.h>
15#include <linux/netdevice.h>
16#include <linux/ethtool.h>
17#include <linux/etherdevice.h>
18#include <linux/if_arp.h>
19#include <linux/mii.h>
20#include <linux/rtnetlink.h>
21#include <linux/usb.h>
22#include <linux/usb/cdc.h>
23#include <linux/usb/usbnet.h>
24#include <linux/usb/cdc-wdm.h>
25
26/* This driver supports wwan (3G/LTE/?) devices using a vendor
27 * specific management protocol called Qualcomm MSM Interface (QMI) -
28 * in addition to the more common AT commands over serial interface
29 * management
30 *
31 * QMI is wrapped in CDC, using CDC encapsulated commands on the
32 * control ("master") interface of a two-interface CDC Union
33 * resembling standard CDC ECM. The devices do not use the control
34 * interface for any other CDC messages. Most likely because the
35 * management protocol is used in place of the standard CDC
36 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
37 *
38 * Alternatively, control and data functions can be combined in a
39 * single USB interface.
40 *
41 * Handling a protocol like QMI is out of the scope for any driver.
42 * It is exported as a character device using the cdc-wdm driver as
43 * a subdriver, enabling userspace applications ("modem managers") to
44 * handle it.
45 *
46 * These devices may alternatively/additionally be configured using AT
47 * commands on a serial interface
48 */
49
50/* driver specific data */
51struct qmi_wwan_state {
52 struct usb_driver *subdriver;
53 atomic_t pmcount;
54 unsigned long flags;
55 struct usb_interface *control;
56 struct usb_interface *data;
57};
58
59enum qmi_wwan_flags {
60 QMI_WWAN_FLAG_RAWIP = 1 << 0,
61 QMI_WWAN_FLAG_MUX = 1 << 1,
62};
63
64enum qmi_wwan_quirks {
65 QMI_WWAN_QUIRK_DTR = 1 << 0, /* needs "set DTR" request */
66};
67
68struct qmimux_hdr {
69 u8 pad;
70 u8 mux_id;
71 __be16 pkt_len;
72};
73
74struct qmimux_priv {
75 struct net_device *real_dev;
76 u8 mux_id;
77};
78
79static int qmimux_open(struct net_device *dev)
80{
81 struct qmimux_priv *priv = netdev_priv(dev);
82 struct net_device *real_dev = priv->real_dev;
83
84 if (!(priv->real_dev->flags & IFF_UP))
85 return -ENETDOWN;
86
87 if (netif_carrier_ok(real_dev))
88 netif_carrier_on(dev);
89 return 0;
90}
91
92static int qmimux_stop(struct net_device *dev)
93{
94 netif_carrier_off(dev);
95 return 0;
96}
97
98static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
99{
100 struct qmimux_priv *priv = netdev_priv(dev);
101 unsigned int len = skb->len;
102 struct qmimux_hdr *hdr;
103
104 hdr = skb_push(skb, sizeof(struct qmimux_hdr));
105 hdr->pad = 0;
106 hdr->mux_id = priv->mux_id;
107 hdr->pkt_len = cpu_to_be16(len);
108 skb->dev = priv->real_dev;
109 return dev_queue_xmit(skb);
110}
111
112static const struct net_device_ops qmimux_netdev_ops = {
113 .ndo_open = qmimux_open,
114 .ndo_stop = qmimux_stop,
115 .ndo_start_xmit = qmimux_start_xmit,
116};
117
118static void qmimux_setup(struct net_device *dev)
119{
120 dev->header_ops = NULL; /* No header */
121 dev->type = ARPHRD_NONE;
122 dev->hard_header_len = 0;
123 dev->addr_len = 0;
124 dev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
125 dev->netdev_ops = &qmimux_netdev_ops;
126 dev->needs_free_netdev = true;
127}
128
129static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
130{
131 struct qmimux_priv *priv;
132 struct list_head *iter;
133 struct net_device *ldev;
134
135 rcu_read_lock();
136 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
137 priv = netdev_priv(ldev);
138 if (priv->mux_id == mux_id) {
139 rcu_read_unlock();
140 return ldev;
141 }
142 }
143 rcu_read_unlock();
144 return NULL;
145}
146
147static bool qmimux_has_slaves(struct usbnet *dev)
148{
149 return !list_empty(&dev->net->adj_list.upper);
150}
151
152static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
153{
154 unsigned int len, offset = sizeof(struct qmimux_hdr);
155 struct qmimux_hdr *hdr;
156 struct net_device *net;
157 struct sk_buff *skbn;
158
159 while (offset < skb->len) {
160 hdr = (struct qmimux_hdr *)skb->data;
161 len = be16_to_cpu(hdr->pkt_len);
162
163 /* drop the packet, bogus length */
164 if (offset + len > skb->len)
165 return 0;
166
167 /* control packet, we do not know what to do */
168 if (hdr->pad & 0x80)
169 goto skip;
170
171 net = qmimux_find_dev(dev, hdr->mux_id);
172 if (!net)
173 goto skip;
174 skbn = netdev_alloc_skb(net, len);
175 if (!skbn)
176 return 0;
177 skbn->dev = net;
178
179 switch (skb->data[offset] & 0xf0) {
180 case 0x40:
181 skbn->protocol = htons(ETH_P_IP);
182 break;
183 case 0x60:
184 skbn->protocol = htons(ETH_P_IPV6);
185 break;
186 default:
187 /* not ip - do not know what to do */
188 goto skip;
189 }
190
191 skb_put_data(skbn, skb->data + offset, len);
192 if (netif_rx(skbn) != NET_RX_SUCCESS)
193 return 0;
194
195skip:
196 offset += len + sizeof(struct qmimux_hdr);
197 }
198 return 1;
199}
200
201static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
202{
203 struct net_device *new_dev;
204 struct qmimux_priv *priv;
205 int err;
206
207 new_dev = alloc_netdev(sizeof(struct qmimux_priv),
208 "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
209 if (!new_dev)
210 return -ENOBUFS;
211
212 dev_net_set(new_dev, dev_net(real_dev));
213 priv = netdev_priv(new_dev);
214 priv->mux_id = mux_id;
215 priv->real_dev = real_dev;
216
217 err = register_netdevice(new_dev);
218 if (err < 0)
219 goto out_free_newdev;
220
221 /* Account for reference in struct qmimux_priv_priv */
222 dev_hold(real_dev);
223
224 err = netdev_upper_dev_link(real_dev, new_dev, NULL);
225 if (err)
226 goto out_unregister_netdev;
227
228 netif_stacked_transfer_operstate(real_dev, new_dev);
229
230 return 0;
231
232out_unregister_netdev:
233 unregister_netdevice(new_dev);
234 dev_put(real_dev);
235
236out_free_newdev:
237 free_netdev(new_dev);
238 return err;
239}
240
241static void qmimux_unregister_device(struct net_device *dev)
242{
243 struct qmimux_priv *priv = netdev_priv(dev);
244 struct net_device *real_dev = priv->real_dev;
245
246 netdev_upper_dev_unlink(real_dev, dev);
247 unregister_netdevice(dev);
248
249 /* Get rid of the reference to real_dev */
250 dev_put(real_dev);
251}
252
253static void qmi_wwan_netdev_setup(struct net_device *net)
254{
255 struct usbnet *dev = netdev_priv(net);
256 struct qmi_wwan_state *info = (void *)&dev->data;
257
258 if (info->flags & QMI_WWAN_FLAG_RAWIP) {
259 net->header_ops = NULL; /* No header */
260 net->type = ARPHRD_NONE;
261 net->hard_header_len = 0;
262 net->addr_len = 0;
263 net->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
264 set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
265 netdev_dbg(net, "mode: raw IP\n");
266 } else if (!net->header_ops) { /* don't bother if already set */
267 ether_setup(net);
268 clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
269 netdev_dbg(net, "mode: Ethernet\n");
270 }
271
272 /* recalculate buffers after changing hard_header_len */
273 usbnet_change_mtu(net, net->mtu);
274}
275
276static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
277{
278 struct usbnet *dev = netdev_priv(to_net_dev(d));
279 struct qmi_wwan_state *info = (void *)&dev->data;
280
281 return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
282}
283
284static ssize_t raw_ip_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
285{
286 struct usbnet *dev = netdev_priv(to_net_dev(d));
287 struct qmi_wwan_state *info = (void *)&dev->data;
288 bool enable;
289 int ret;
290
291 if (strtobool(buf, &enable))
292 return -EINVAL;
293
294 /* no change? */
295 if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
296 return len;
297
298 if (!rtnl_trylock())
299 return restart_syscall();
300
301 /* we don't want to modify a running netdev */
302 if (netif_running(dev->net)) {
303 netdev_err(dev->net, "Cannot change a running device\n");
304 ret = -EBUSY;
305 goto err;
306 }
307
308 /* let other drivers deny the change */
309 ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
310 ret = notifier_to_errno(ret);
311 if (ret) {
312 netdev_err(dev->net, "Type change was refused\n");
313 goto err;
314 }
315
316 if (enable)
317 info->flags |= QMI_WWAN_FLAG_RAWIP;
318 else
319 info->flags &= ~QMI_WWAN_FLAG_RAWIP;
320 qmi_wwan_netdev_setup(dev->net);
321 call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
322 ret = len;
323err:
324 rtnl_unlock();
325 return ret;
326}
327
328static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
329{
330 struct net_device *dev = to_net_dev(d);
331 struct qmimux_priv *priv;
332 struct list_head *iter;
333 struct net_device *ldev;
334 ssize_t count = 0;
335
336 rcu_read_lock();
337 netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
338 priv = netdev_priv(ldev);
339 count += scnprintf(&buf[count], PAGE_SIZE - count,
340 "0x%02x\n", priv->mux_id);
341 }
342 rcu_read_unlock();
343 return count;
344}
345
346static ssize_t add_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
347{
348 struct usbnet *dev = netdev_priv(to_net_dev(d));
349 struct qmi_wwan_state *info = (void *)&dev->data;
350 u8 mux_id;
351 int ret;
352
353 if (kstrtou8(buf, 0, &mux_id))
354 return -EINVAL;
355
356 /* mux_id [1 - 0x7f] range empirically found */
357 if (mux_id < 1 || mux_id > 0x7f)
358 return -EINVAL;
359
360 if (!rtnl_trylock())
361 return restart_syscall();
362
363 if (qmimux_find_dev(dev, mux_id)) {
364 netdev_err(dev->net, "mux_id already present\n");
365 ret = -EINVAL;
366 goto err;
367 }
368
369 /* we don't want to modify a running netdev */
370 if (netif_running(dev->net)) {
371 netdev_err(dev->net, "Cannot change a running device\n");
372 ret = -EBUSY;
373 goto err;
374 }
375
376 ret = qmimux_register_device(dev->net, mux_id);
377 if (!ret) {
378 info->flags |= QMI_WWAN_FLAG_MUX;
379 ret = len;
380 }
381err:
382 rtnl_unlock();
383 return ret;
384}
385
386static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
387{
388 return add_mux_show(d, attr, buf);
389}
390
391static ssize_t del_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
392{
393 struct usbnet *dev = netdev_priv(to_net_dev(d));
394 struct qmi_wwan_state *info = (void *)&dev->data;
395 struct net_device *del_dev;
396 u8 mux_id;
397 int ret = 0;
398
399 if (kstrtou8(buf, 0, &mux_id))
400 return -EINVAL;
401
402 if (!rtnl_trylock())
403 return restart_syscall();
404
405 /* we don't want to modify a running netdev */
406 if (netif_running(dev->net)) {
407 netdev_err(dev->net, "Cannot change a running device\n");
408 ret = -EBUSY;
409 goto err;
410 }
411
412 del_dev = qmimux_find_dev(dev, mux_id);
413 if (!del_dev) {
414 netdev_err(dev->net, "mux_id not present\n");
415 ret = -EINVAL;
416 goto err;
417 }
418 qmimux_unregister_device(del_dev);
419
420 if (!qmimux_has_slaves(dev))
421 info->flags &= ~QMI_WWAN_FLAG_MUX;
422 ret = len;
423err:
424 rtnl_unlock();
425 return ret;
426}
427
428static DEVICE_ATTR_RW(raw_ip);
429static DEVICE_ATTR_RW(add_mux);
430static DEVICE_ATTR_RW(del_mux);
431
432static struct attribute *qmi_wwan_sysfs_attrs[] = {
433 &dev_attr_raw_ip.attr,
434 &dev_attr_add_mux.attr,
435 &dev_attr_del_mux.attr,
436 NULL,
437};
438
439static struct attribute_group qmi_wwan_sysfs_attr_group = {
440 .name = "qmi",
441 .attrs = qmi_wwan_sysfs_attrs,
442};
443
444/* default ethernet address used by the modem */
445static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
446
447static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
448
449/* Make up an ethernet header if the packet doesn't have one.
450 *
451 * A firmware bug common among several devices cause them to send raw
452 * IP packets under some circumstances. There is no way for the
453 * driver/host to know when this will happen. And even when the bug
454 * hits, some packets will still arrive with an intact header.
455 *
456 * The supported devices are only capably of sending IPv4, IPv6 and
457 * ARP packets on a point-to-point link. Any packet with an ethernet
458 * header will have either our address or a broadcast/multicast
459 * address as destination. ARP packets will always have a header.
460 *
461 * This means that this function will reliably add the appropriate
462 * header iff necessary, provided our hardware address does not start
463 * with 4 or 6.
464 *
465 * Another common firmware bug results in all packets being addressed
466 * to 00:a0:c6:00:00:00 despite the host address being different.
467 * This function will also fixup such packets.
468 */
469static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
470{
471 struct qmi_wwan_state *info = (void *)&dev->data;
472 bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
473 __be16 proto;
474
475 /* This check is no longer done by usbnet */
476 if (skb->len < dev->net->hard_header_len)
477 return 0;
478
479 if (info->flags & QMI_WWAN_FLAG_MUX)
480 return qmimux_rx_fixup(dev, skb);
481
482 switch (skb->data[0] & 0xf0) {
483 case 0x40:
484 proto = htons(ETH_P_IP);
485 break;
486 case 0x60:
487 proto = htons(ETH_P_IPV6);
488 break;
489 case 0x00:
490 if (rawip)
491 return 0;
492 if (is_multicast_ether_addr(skb->data))
493 return 1;
494 /* possibly bogus destination - rewrite just in case */
495 skb_reset_mac_header(skb);
496 goto fix_dest;
497 default:
498 if (rawip)
499 return 0;
500 /* pass along other packets without modifications */
501 return 1;
502 }
503 if (rawip) {
504 skb_reset_mac_header(skb);
505 skb->dev = dev->net; /* normally set by eth_type_trans */
506 skb->protocol = proto;
507 return 1;
508 }
509
510 if (skb_headroom(skb) < ETH_HLEN)
511 return 0;
512 skb_push(skb, ETH_HLEN);
513 skb_reset_mac_header(skb);
514 eth_hdr(skb)->h_proto = proto;
515 eth_zero_addr(eth_hdr(skb)->h_source);
516fix_dest:
517 memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
518 return 1;
519}
520
521/* very simplistic detection of IPv4 or IPv6 headers */
522static bool possibly_iphdr(const char *data)
523{
524 return (data[0] & 0xd0) == 0x40;
525}
526
527/* disallow addresses which may be confused with IP headers */
528static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
529{
530 int ret;
531 struct sockaddr *addr = p;
532
533 ret = eth_prepare_mac_addr_change(dev, p);
534 if (ret < 0)
535 return ret;
536 if (possibly_iphdr(addr->sa_data))
537 return -EADDRNOTAVAIL;
538 eth_commit_mac_addr_change(dev, p);
539 return 0;
540}
541
542static const struct net_device_ops qmi_wwan_netdev_ops = {
543 .ndo_open = usbnet_open,
544 .ndo_stop = usbnet_stop,
545 .ndo_start_xmit = usbnet_start_xmit,
546 .ndo_tx_timeout = usbnet_tx_timeout,
547 .ndo_change_mtu = usbnet_change_mtu,
548 .ndo_get_stats64 = usbnet_get_stats64,
549 .ndo_set_mac_address = qmi_wwan_mac_addr,
550 .ndo_validate_addr = eth_validate_addr,
551};
552
553/* using a counter to merge subdriver requests with our own into a
554 * combined state
555 */
556static int qmi_wwan_manage_power(struct usbnet *dev, int on)
557{
558 struct qmi_wwan_state *info = (void *)&dev->data;
559 int rv;
560
561 dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
562 atomic_read(&info->pmcount), on);
563
564 if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
565 (!on && atomic_dec_and_test(&info->pmcount))) {
566 /* need autopm_get/put here to ensure the usbcore sees
567 * the new value
568 */
569 rv = usb_autopm_get_interface(dev->intf);
570 dev->intf->needs_remote_wakeup = on;
571 if (!rv)
572 usb_autopm_put_interface(dev->intf);
573 }
574 return 0;
575}
576
577static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
578{
579 struct usbnet *dev = usb_get_intfdata(intf);
580
581 /* can be called while disconnecting */
582 if (!dev)
583 return 0;
584 return qmi_wwan_manage_power(dev, on);
585}
586
587/* collect all three endpoints and register subdriver */
588static int qmi_wwan_register_subdriver(struct usbnet *dev)
589{
590 int rv;
591 struct usb_driver *subdriver = NULL;
592 struct qmi_wwan_state *info = (void *)&dev->data;
593
594 /* collect bulk endpoints */
595 rv = usbnet_get_endpoints(dev, info->data);
596 if (rv < 0)
597 goto err;
598
599 /* update status endpoint if separate control interface */
600 if (info->control != info->data)
601 dev->status = &info->control->cur_altsetting->endpoint[0];
602
603 /* require interrupt endpoint for subdriver */
604 if (!dev->status) {
605 rv = -EINVAL;
606 goto err;
607 }
608
609 /* for subdriver power management */
610 atomic_set(&info->pmcount, 0);
611
612 /* register subdriver */
613 subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
614 4096, &qmi_wwan_cdc_wdm_manage_power);
615 if (IS_ERR(subdriver)) {
616 dev_err(&info->control->dev, "subdriver registration failed\n");
617 rv = PTR_ERR(subdriver);
618 goto err;
619 }
620
621 /* prevent usbnet from using status endpoint */
622 dev->status = NULL;
623
624 /* save subdriver struct for suspend/resume wrappers */
625 info->subdriver = subdriver;
626
627err:
628 return rv;
629}
630
631/* Send CDC SetControlLineState request, setting or clearing the DTR.
632 * "Required for Autoconnect and 9x30 to wake up" according to the
633 * GobiNet driver. The requirement has been verified on an MDM9230
634 * based Sierra Wireless MC7455
635 */
636static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
637{
638 u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
639
640 return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
641 USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
642 on ? 0x01 : 0x00, intf, NULL, 0);
643}
644
645static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
646{
647 int status = -1;
648 u8 *buf = intf->cur_altsetting->extra;
649 int len = intf->cur_altsetting->extralen;
650 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
651 struct usb_cdc_union_desc *cdc_union;
652 struct usb_cdc_ether_desc *cdc_ether;
653 struct usb_driver *driver = driver_of(intf);
654 struct qmi_wwan_state *info = (void *)&dev->data;
655 struct usb_cdc_parsed_header hdr;
656
657 BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
658 sizeof(struct qmi_wwan_state)));
659
660 /* set up initial state */
661 info->control = intf;
662 info->data = intf;
663
664 /* and a number of CDC descriptors */
665 cdc_parse_cdc_header(&hdr, intf, buf, len);
666 cdc_union = hdr.usb_cdc_union_desc;
667 cdc_ether = hdr.usb_cdc_ether_desc;
668
669 /* Use separate control and data interfaces if we found a CDC Union */
670 if (cdc_union) {
671 info->data = usb_ifnum_to_if(dev->udev,
672 cdc_union->bSlaveInterface0);
673 if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
674 !info->data) {
675 dev_err(&intf->dev,
676 "bogus CDC Union: master=%u, slave=%u\n",
677 cdc_union->bMasterInterface0,
678 cdc_union->bSlaveInterface0);
679
680 /* ignore and continue... */
681 cdc_union = NULL;
682 info->data = intf;
683 }
684 }
685
686 /* errors aren't fatal - we can live with the dynamic address */
687 if (cdc_ether && cdc_ether->wMaxSegmentSize) {
688 dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
689 usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
690 }
691
692 /* claim data interface and set it up */
693 if (info->control != info->data) {
694 status = usb_driver_claim_interface(driver, info->data, dev);
695 if (status < 0)
696 goto err;
697 }
698
699 status = qmi_wwan_register_subdriver(dev);
700 if (status < 0 && info->control != info->data) {
701 usb_set_intfdata(info->data, NULL);
702 usb_driver_release_interface(driver, info->data);
703 }
704
705 /* disabling remote wakeup on MDM9x30 devices has the same
706 * effect as clearing DTR. The device will not respond to QMI
707 * requests until we set DTR again. This is similar to a
708 * QMI_CTL SYNC request, clearing a lot of firmware state
709 * including the client ID allocations.
710 *
711 * Our usage model allows a session to span multiple
712 * open/close events, so we must prevent the firmware from
713 * clearing out state the clients might need.
714 *
715 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
716 * this fact to enable the quirk for all USB3 devices.
717 *
718 * There are also chipsets with the same "set DTR" requirement
719 * but without USB3 support. Devices based on these chips
720 * need a quirk flag in the device ID table.
721 */
722 if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
723 le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
724 qmi_wwan_manage_power(dev, 1);
725 qmi_wwan_change_dtr(dev, true);
726 }
727
728 /* Never use the same address on both ends of the link, even if the
729 * buggy firmware told us to. Or, if device is assigned the well-known
730 * buggy firmware MAC address, replace it with a random address,
731 */
732 if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
733 ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
734 eth_hw_addr_random(dev->net);
735
736 /* make MAC addr easily distinguishable from an IP header */
737 if (possibly_iphdr(dev->net->dev_addr)) {
738 dev->net->dev_addr[0] |= 0x02; /* set local assignment bit */
739 dev->net->dev_addr[0] &= 0xbf; /* clear "IP" bit */
740 }
741 dev->net->netdev_ops = &qmi_wwan_netdev_ops;
742 dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
743err:
744 return status;
745}
746
747static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
748{
749 struct qmi_wwan_state *info = (void *)&dev->data;
750 struct usb_driver *driver = driver_of(intf);
751 struct usb_interface *other;
752
753 if (info->subdriver && info->subdriver->disconnect)
754 info->subdriver->disconnect(info->control);
755
756 /* disable MDM9x30 quirk */
757 if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
758 qmi_wwan_change_dtr(dev, false);
759 qmi_wwan_manage_power(dev, 0);
760 }
761
762 /* allow user to unbind using either control or data */
763 if (intf == info->control)
764 other = info->data;
765 else
766 other = info->control;
767
768 /* only if not shared */
769 if (other && intf != other) {
770 usb_set_intfdata(other, NULL);
771 usb_driver_release_interface(driver, other);
772 }
773
774 info->subdriver = NULL;
775 info->data = NULL;
776 info->control = NULL;
777}
778
779/* suspend/resume wrappers calling both usbnet and the cdc-wdm
780 * subdriver if present.
781 *
782 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
783 * wrappers for those without adding usbnet reset support first.
784 */
785static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
786{
787 struct usbnet *dev = usb_get_intfdata(intf);
788 struct qmi_wwan_state *info = (void *)&dev->data;
789 int ret;
790
791 /* Both usbnet_suspend() and subdriver->suspend() MUST return 0
792 * in system sleep context, otherwise, the resume callback has
793 * to recover device from previous suspend failure.
794 */
795 ret = usbnet_suspend(intf, message);
796 if (ret < 0)
797 goto err;
798
799 if (intf == info->control && info->subdriver &&
800 info->subdriver->suspend)
801 ret = info->subdriver->suspend(intf, message);
802 if (ret < 0)
803 usbnet_resume(intf);
804err:
805 return ret;
806}
807
808static int qmi_wwan_resume(struct usb_interface *intf)
809{
810 struct usbnet *dev = usb_get_intfdata(intf);
811 struct qmi_wwan_state *info = (void *)&dev->data;
812 int ret = 0;
813 bool callsub = (intf == info->control && info->subdriver &&
814 info->subdriver->resume);
815
816 if (callsub)
817 ret = info->subdriver->resume(intf);
818 if (ret < 0)
819 goto err;
820 ret = usbnet_resume(intf);
821 if (ret < 0 && callsub)
822 info->subdriver->suspend(intf, PMSG_SUSPEND);
823err:
824 return ret;
825}
826
827static const struct driver_info qmi_wwan_info = {
828 .description = "WWAN/QMI device",
829 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
830 .bind = qmi_wwan_bind,
831 .unbind = qmi_wwan_unbind,
832 .manage_power = qmi_wwan_manage_power,
833 .rx_fixup = qmi_wwan_rx_fixup,
834};
835
836static const struct driver_info qmi_wwan_info_quirk_dtr = {
837 .description = "WWAN/QMI device",
838 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
839 .bind = qmi_wwan_bind,
840 .unbind = qmi_wwan_unbind,
841 .manage_power = qmi_wwan_manage_power,
842 .rx_fixup = qmi_wwan_rx_fixup,
843 .data = QMI_WWAN_QUIRK_DTR,
844};
845
846#define HUAWEI_VENDOR_ID 0x12D1
847
848/* map QMI/wwan function by a fixed interface number */
849#define QMI_FIXED_INTF(vend, prod, num) \
850 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
851 .driver_info = (unsigned long)&qmi_wwan_info
852
853/* devices requiring "set DTR" quirk */
854#define QMI_QUIRK_SET_DTR(vend, prod, num) \
855 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
856 .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
857
858/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
859#define QMI_GOBI1K_DEVICE(vend, prod) \
860 QMI_FIXED_INTF(vend, prod, 3)
861
862/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
863#define QMI_GOBI_DEVICE(vend, prod) \
864 QMI_FIXED_INTF(vend, prod, 0)
865
866static const struct usb_device_id products[] = {
867 /* 1. CDC ECM like devices match on the control interface */
868 { /* Huawei E392, E398 and possibly others sharing both device id and more... */
869 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
870 .driver_info = (unsigned long)&qmi_wwan_info,
871 },
872 { /* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
873 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
874 .driver_info = (unsigned long)&qmi_wwan_info,
875 },
876 { /* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
877 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
878 .driver_info = (unsigned long)&qmi_wwan_info,
879 },
880 { /* Motorola Mapphone devices with MDM6600 */
881 USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
882 .driver_info = (unsigned long)&qmi_wwan_info,
883 },
884
885 /* 2. Combined interface devices matching on class+protocol */
886 { /* Huawei E367 and possibly others in "Windows mode" */
887 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
888 .driver_info = (unsigned long)&qmi_wwan_info,
889 },
890 { /* Huawei E392, E398 and possibly others in "Windows mode" */
891 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
892 .driver_info = (unsigned long)&qmi_wwan_info,
893 },
894 { /* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
895 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
896 .driver_info = (unsigned long)&qmi_wwan_info,
897 },
898 { /* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
899 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
900 .driver_info = (unsigned long)&qmi_wwan_info,
901 },
902 { /* Pantech UML290, P4200 and more */
903 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
904 .driver_info = (unsigned long)&qmi_wwan_info,
905 },
906 { /* Pantech UML290 - newer firmware */
907 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
908 .driver_info = (unsigned long)&qmi_wwan_info,
909 },
910 { /* Novatel USB551L and MC551 */
911 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
912 USB_CLASS_COMM,
913 USB_CDC_SUBCLASS_ETHERNET,
914 USB_CDC_PROTO_NONE),
915 .driver_info = (unsigned long)&qmi_wwan_info,
916 },
917 { /* Novatel E362 */
918 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
919 USB_CLASS_COMM,
920 USB_CDC_SUBCLASS_ETHERNET,
921 USB_CDC_PROTO_NONE),
922 .driver_info = (unsigned long)&qmi_wwan_info,
923 },
924 { /* Novatel Expedite E371 */
925 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
926 USB_CLASS_COMM,
927 USB_CDC_SUBCLASS_ETHERNET,
928 USB_CDC_PROTO_NONE),
929 .driver_info = (unsigned long)&qmi_wwan_info,
930 },
931 { /* Dell Wireless 5800 (Novatel E362) */
932 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
933 USB_CLASS_COMM,
934 USB_CDC_SUBCLASS_ETHERNET,
935 USB_CDC_PROTO_NONE),
936 .driver_info = (unsigned long)&qmi_wwan_info,
937 },
938 { /* Dell Wireless 5800 V2 (Novatel E362) */
939 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
940 USB_CLASS_COMM,
941 USB_CDC_SUBCLASS_ETHERNET,
942 USB_CDC_PROTO_NONE),
943 .driver_info = (unsigned long)&qmi_wwan_info,
944 },
945 { /* Dell Wireless 5804 (Novatel E371) */
946 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
947 USB_CLASS_COMM,
948 USB_CDC_SUBCLASS_ETHERNET,
949 USB_CDC_PROTO_NONE),
950 .driver_info = (unsigned long)&qmi_wwan_info,
951 },
952 { /* ADU960S */
953 USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
954 USB_CLASS_COMM,
955 USB_CDC_SUBCLASS_ETHERNET,
956 USB_CDC_PROTO_NONE),
957 .driver_info = (unsigned long)&qmi_wwan_info,
958 },
959 { /* HP lt2523 (Novatel E371) */
960 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
961 USB_CLASS_COMM,
962 USB_CDC_SUBCLASS_ETHERNET,
963 USB_CDC_PROTO_NONE),
964 .driver_info = (unsigned long)&qmi_wwan_info,
965 },
966 { /* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
967 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
968 .driver_info = (unsigned long)&qmi_wwan_info,
969 },
970
971 /* 3. Combined interface devices matching on interface number */
972 {QMI_FIXED_INTF(0x0408, 0xea42, 4)}, /* Yota / Megafon M100-1 */
973 {QMI_FIXED_INTF(0x05c6, 0x6001, 3)}, /* 4G LTE usb-modem U901 */
974 {QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
975 {QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
976 {QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
977 {QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
978 {QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
979 {QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
980 {QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
981 {QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
982 {QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
983 {QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
984 {QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
985 {QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
986 {QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
987 {QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
988 {QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
989 {QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
990 {QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
991 {QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
992 {QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
993 {QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
994 {QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
995 {QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
996 {QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
997 {QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
998 {QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
999 {QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1000 {QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1001 {QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1002 {QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1003 {QMI_FIXED_INTF(0x05c6, 0x9025, 4)}, /* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1004 {QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1005 {QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1006 {QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1007 {QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1008 {QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1009 {QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1010 {QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1011 {QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1012 {QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1013 {QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1014 {QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1015 {QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1016 {QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1017 {QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1018 {QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1019 {QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1020 {QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1021 {QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1022 {QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1023 {QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1024 {QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1025 {QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1026 {QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1027 {QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1028 {QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1029 {QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1030 {QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1031 {QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1032 {QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1033 {QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1034 {QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1035 {QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1036 {QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1037 {QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1038 {QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1039 {QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1040 {QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1041 {QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1042 {QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1043 {QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1044 {QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1045 {QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1046 {QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1047 {QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1048 {QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1049 {QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1050 {QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1051 {QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1052 {QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1053 {QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1054 {QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1055 {QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1056 {QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1057 {QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1058 {QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1059 {QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1060 {QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1061 {QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1062 {QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1063 {QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1064 {QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1065 {QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1066 {QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1067 {QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1068 {QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1069 {QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1070 {QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1071 {QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1072 {QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1073 {QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1074 {QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1075 {QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1076 {QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1077 {QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1078 {QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1079 {QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1080 {QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1081 {QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1082 {QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1083 {QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1084 {QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1085 {QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1086 {QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1087 {QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1088 {QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1089 {QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1090 {QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1091 {QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1092 {QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1093 {QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1094 {QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1095 {QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1096 {QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1097 {QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1098 {QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1099 {QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1100 {QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1101 {QMI_FIXED_INTF(0x05c6, 0x90b2, 3)}, /* ublox R410M */
1102 {QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1103 {QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1104 {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1105 {QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1106 {QMI_FIXED_INTF(0x0846, 0x68d3, 8)}, /* Netgear Aircard 779S */
1107 {QMI_FIXED_INTF(0x12d1, 0x140c, 1)}, /* Huawei E173 */
1108 {QMI_FIXED_INTF(0x12d1, 0x14ac, 1)}, /* Huawei E1820 */
1109 {QMI_FIXED_INTF(0x1435, 0xd181, 3)}, /* Wistron NeWeb D18Q1 */
1110 {QMI_FIXED_INTF(0x1435, 0xd181, 4)}, /* Wistron NeWeb D18Q1 */
1111 {QMI_FIXED_INTF(0x1435, 0xd181, 5)}, /* Wistron NeWeb D18Q1 */
1112 {QMI_FIXED_INTF(0x1435, 0xd191, 4)}, /* Wistron NeWeb D19Q1 */
1113 {QMI_FIXED_INTF(0x16d8, 0x6003, 0)}, /* CMOTech 6003 */
1114 {QMI_FIXED_INTF(0x16d8, 0x6007, 0)}, /* CMOTech CHE-628S */
1115 {QMI_FIXED_INTF(0x16d8, 0x6008, 0)}, /* CMOTech CMU-301 */
1116 {QMI_FIXED_INTF(0x16d8, 0x6280, 0)}, /* CMOTech CHU-628 */
1117 {QMI_FIXED_INTF(0x16d8, 0x7001, 0)}, /* CMOTech CHU-720S */
1118 {QMI_FIXED_INTF(0x16d8, 0x7002, 0)}, /* CMOTech 7002 */
1119 {QMI_FIXED_INTF(0x16d8, 0x7003, 4)}, /* CMOTech CHU-629K */
1120 {QMI_FIXED_INTF(0x16d8, 0x7004, 3)}, /* CMOTech 7004 */
1121 {QMI_FIXED_INTF(0x16d8, 0x7006, 5)}, /* CMOTech CGU-629 */
1122 {QMI_FIXED_INTF(0x16d8, 0x700a, 4)}, /* CMOTech CHU-629S */
1123 {QMI_FIXED_INTF(0x16d8, 0x7211, 0)}, /* CMOTech CHU-720I */
1124 {QMI_FIXED_INTF(0x16d8, 0x7212, 0)}, /* CMOTech 7212 */
1125 {QMI_FIXED_INTF(0x16d8, 0x7213, 0)}, /* CMOTech 7213 */
1126 {QMI_FIXED_INTF(0x16d8, 0x7251, 1)}, /* CMOTech 7251 */
1127 {QMI_FIXED_INTF(0x16d8, 0x7252, 1)}, /* CMOTech 7252 */
1128 {QMI_FIXED_INTF(0x16d8, 0x7253, 1)}, /* CMOTech 7253 */
1129 {QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1130 {QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1131 {QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1132 {QMI_FIXED_INTF(0x19d2, 0x0019, 3)}, /* ONDA MT689DC */
1133 {QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1134 {QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1135 {QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1136 {QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1137 {QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1138 {QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1139 {QMI_FIXED_INTF(0x19d2, 0x0055, 1)}, /* ZTE (Vodafone) K3520-Z */
1140 {QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1141 {QMI_FIXED_INTF(0x19d2, 0x0063, 4)}, /* ZTE (Vodafone) K3565-Z */
1142 {QMI_FIXED_INTF(0x19d2, 0x0104, 4)}, /* ZTE (Vodafone) K4505-Z */
1143 {QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1144 {QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1145 {QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1146 {QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1147 {QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1148 {QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1149 {QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1150 {QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1151 {QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1152 {QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1153 {QMI_FIXED_INTF(0x19d2, 0x0157, 5)}, /* ZTE MF683 */
1154 {QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1155 {QMI_FIXED_INTF(0x19d2, 0x0167, 4)}, /* ZTE MF820D */
1156 {QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1157 {QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1158 {QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1159 {QMI_FIXED_INTF(0x19d2, 0x0191, 4)}, /* ZTE EuFi890 */
1160 {QMI_FIXED_INTF(0x19d2, 0x0199, 1)}, /* ZTE MF820S */
1161 {QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1162 {QMI_FIXED_INTF(0x19d2, 0x0257, 3)}, /* ZTE MF821 */
1163 {QMI_FIXED_INTF(0x19d2, 0x0265, 4)}, /* ONDA MT8205 4G LTE */
1164 {QMI_FIXED_INTF(0x19d2, 0x0284, 4)}, /* ZTE MF880 */
1165 {QMI_FIXED_INTF(0x19d2, 0x0326, 4)}, /* ZTE MF821D */
1166 {QMI_FIXED_INTF(0x19d2, 0x0412, 4)}, /* Telewell TW-LTE 4G */
1167 {QMI_FIXED_INTF(0x19d2, 0x1008, 4)}, /* ZTE (Vodafone) K3570-Z */
1168 {QMI_FIXED_INTF(0x19d2, 0x1010, 4)}, /* ZTE (Vodafone) K3571-Z */
1169 {QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1170 {QMI_FIXED_INTF(0x19d2, 0x1018, 3)}, /* ZTE (Vodafone) K5006-Z */
1171 {QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1172 {QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1173 {QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1174 {QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1175 {QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1176 {QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1177 {QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1178 {QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1179 {QMI_FIXED_INTF(0x19d2, 0x1270, 5)}, /* ZTE MF667 */
1180 {QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1181 {QMI_FIXED_INTF(0x19d2, 0x1402, 2)}, /* ZTE MF60 */
1182 {QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1183 {QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1184 {QMI_FIXED_INTF(0x19d2, 0x1426, 2)}, /* ZTE MF91 */
1185 {QMI_FIXED_INTF(0x19d2, 0x1428, 2)}, /* Telewell TW-LTE 4G v2 */
1186 {QMI_FIXED_INTF(0x19d2, 0x2002, 4)}, /* ZTE (Vodafone) K3765-Z */
1187 {QMI_FIXED_INTF(0x2001, 0x7e19, 4)}, /* D-Link DWM-221 B1 */
1188 {QMI_FIXED_INTF(0x2001, 0x7e35, 4)}, /* D-Link DWM-222 */
1189 {QMI_FIXED_INTF(0x2020, 0x2033, 4)}, /* BroadMobi BM806U */
1190 {QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)}, /* Sierra Wireless MC7700 */
1191 {QMI_FIXED_INTF(0x114f, 0x68a2, 8)}, /* Sierra Wireless MC7750 */
1192 {QMI_FIXED_INTF(0x1199, 0x68a2, 8)}, /* Sierra Wireless MC7710 in QMI mode */
1193 {QMI_FIXED_INTF(0x1199, 0x68a2, 19)}, /* Sierra Wireless MC7710 in QMI mode */
1194 {QMI_FIXED_INTF(0x1199, 0x68c0, 8)}, /* Sierra Wireless MC7304/MC7354 */
1195 {QMI_FIXED_INTF(0x1199, 0x68c0, 10)}, /* Sierra Wireless MC7304/MC7354 */
1196 {QMI_FIXED_INTF(0x1199, 0x901c, 8)}, /* Sierra Wireless EM7700 */
1197 {QMI_FIXED_INTF(0x1199, 0x901f, 8)}, /* Sierra Wireless EM7355 */
1198 {QMI_FIXED_INTF(0x1199, 0x9041, 8)}, /* Sierra Wireless MC7305/MC7355 */
1199 {QMI_FIXED_INTF(0x1199, 0x9041, 10)}, /* Sierra Wireless MC7305/MC7355 */
1200 {QMI_FIXED_INTF(0x1199, 0x9051, 8)}, /* Netgear AirCard 340U */
1201 {QMI_FIXED_INTF(0x1199, 0x9053, 8)}, /* Sierra Wireless Modem */
1202 {QMI_FIXED_INTF(0x1199, 0x9054, 8)}, /* Sierra Wireless Modem */
1203 {QMI_FIXED_INTF(0x1199, 0x9055, 8)}, /* Netgear AirCard 341U */
1204 {QMI_FIXED_INTF(0x1199, 0x9056, 8)}, /* Sierra Wireless Modem */
1205 {QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1206 {QMI_FIXED_INTF(0x1199, 0x9061, 8)}, /* Sierra Wireless Modem */
1207 {QMI_FIXED_INTF(0x1199, 0x9063, 8)}, /* Sierra Wireless EM7305 */
1208 {QMI_FIXED_INTF(0x1199, 0x9063, 10)}, /* Sierra Wireless EM7305 */
1209 {QMI_FIXED_INTF(0x1199, 0x9071, 8)}, /* Sierra Wireless MC74xx */
1210 {QMI_FIXED_INTF(0x1199, 0x9071, 10)}, /* Sierra Wireless MC74xx */
1211 {QMI_FIXED_INTF(0x1199, 0x9079, 8)}, /* Sierra Wireless EM74xx */
1212 {QMI_FIXED_INTF(0x1199, 0x9079, 10)}, /* Sierra Wireless EM74xx */
1213 {QMI_FIXED_INTF(0x1199, 0x907b, 8)}, /* Sierra Wireless EM74xx */
1214 {QMI_FIXED_INTF(0x1199, 0x907b, 10)}, /* Sierra Wireless EM74xx */
1215 {QMI_FIXED_INTF(0x1199, 0x9091, 8)}, /* Sierra Wireless EM7565 */
1216 {QMI_FIXED_INTF(0x1bbb, 0x011e, 4)}, /* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1217 {QMI_FIXED_INTF(0x1bbb, 0x0203, 2)}, /* Alcatel L800MA */
1218 {QMI_FIXED_INTF(0x2357, 0x0201, 4)}, /* TP-LINK HSUPA Modem MA180 */
1219 {QMI_FIXED_INTF(0x2357, 0x9000, 4)}, /* TP-LINK MA260 */
1220 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)}, /* Telit LE922A */
1221 {QMI_FIXED_INTF(0x1bc7, 0x1100, 3)}, /* Telit ME910 */
1222 {QMI_FIXED_INTF(0x1bc7, 0x1101, 3)}, /* Telit ME910 dual modem */
1223 {QMI_FIXED_INTF(0x1bc7, 0x1200, 5)}, /* Telit LE920 */
1224 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)}, /* Telit LE920, LE920A4 */
1225 {QMI_FIXED_INTF(0x1c9e, 0x9801, 3)}, /* Telewell TW-3G HSPA+ */
1226 {QMI_FIXED_INTF(0x1c9e, 0x9803, 4)}, /* Telewell TW-3G HSPA+ */
1227 {QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)}, /* XS Stick W100-2 from 4G Systems */
1228 {QMI_FIXED_INTF(0x0b3c, 0xc000, 4)}, /* Olivetti Olicard 100 */
1229 {QMI_FIXED_INTF(0x0b3c, 0xc001, 4)}, /* Olivetti Olicard 120 */
1230 {QMI_FIXED_INTF(0x0b3c, 0xc002, 4)}, /* Olivetti Olicard 140 */
1231 {QMI_FIXED_INTF(0x0b3c, 0xc004, 6)}, /* Olivetti Olicard 155 */
1232 {QMI_FIXED_INTF(0x0b3c, 0xc005, 6)}, /* Olivetti Olicard 200 */
1233 {QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)}, /* Olivetti Olicard 160 */
1234 {QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)}, /* Olivetti Olicard 500 */
1235 {QMI_FIXED_INTF(0x1e2d, 0x0060, 4)}, /* Cinterion PLxx */
1236 {QMI_FIXED_INTF(0x1e2d, 0x0053, 4)}, /* Cinterion PHxx,PXxx */
1237 {QMI_FIXED_INTF(0x1e2d, 0x0082, 4)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1238 {QMI_FIXED_INTF(0x1e2d, 0x0082, 5)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1239 {QMI_FIXED_INTF(0x1e2d, 0x0083, 4)}, /* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1240 {QMI_FIXED_INTF(0x413c, 0x81a2, 8)}, /* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1241 {QMI_FIXED_INTF(0x413c, 0x81a3, 8)}, /* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1242 {QMI_FIXED_INTF(0x413c, 0x81a4, 8)}, /* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1243 {QMI_FIXED_INTF(0x413c, 0x81a8, 8)}, /* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1244 {QMI_FIXED_INTF(0x413c, 0x81a9, 8)}, /* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1245 {QMI_FIXED_INTF(0x413c, 0x81b1, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1246 {QMI_FIXED_INTF(0x413c, 0x81b3, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1247 {QMI_FIXED_INTF(0x413c, 0x81b6, 8)}, /* Dell Wireless 5811e */
1248 {QMI_FIXED_INTF(0x413c, 0x81b6, 10)}, /* Dell Wireless 5811e */
1249 {QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)}, /* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1250 {QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)}, /* HP lt4120 Snapdragon X5 LTE */
1251 {QMI_FIXED_INTF(0x22de, 0x9061, 3)}, /* WeTelecom WPD-600N */
1252 {QMI_FIXED_INTF(0x1e0e, 0x9001, 5)}, /* SIMCom 7230E */
1253 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0125, 4)}, /* Quectel EC25, EC20 R2.0 Mini PCIe */
1254 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)}, /* Quectel EC21 Mini PCIe */
1255 {QMI_FIXED_INTF(0x2c7c, 0x0296, 4)}, /* Quectel BG96 */
1256 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0306, 4)}, /* Quectel EP06 Mini PCIe */
1257
1258 /* 4. Gobi 1000 devices */
1259 {QMI_GOBI1K_DEVICE(0x05c6, 0x9212)}, /* Acer Gobi Modem Device */
1260 {QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)}, /* HP un2400 Gobi Modem Device */
1261 {QMI_GOBI1K_DEVICE(0x04da, 0x250d)}, /* Panasonic Gobi Modem device */
1262 {QMI_GOBI1K_DEVICE(0x413c, 0x8172)}, /* Dell Gobi Modem device */
1263 {QMI_GOBI1K_DEVICE(0x1410, 0xa001)}, /* Novatel/Verizon USB-1000 */
1264 {QMI_GOBI1K_DEVICE(0x1410, 0xa002)}, /* Novatel Gobi Modem device */
1265 {QMI_GOBI1K_DEVICE(0x1410, 0xa003)}, /* Novatel Gobi Modem device */
1266 {QMI_GOBI1K_DEVICE(0x1410, 0xa004)}, /* Novatel Gobi Modem device */
1267 {QMI_GOBI1K_DEVICE(0x1410, 0xa005)}, /* Novatel Gobi Modem device */
1268 {QMI_GOBI1K_DEVICE(0x1410, 0xa006)}, /* Novatel Gobi Modem device */
1269 {QMI_GOBI1K_DEVICE(0x1410, 0xa007)}, /* Novatel Gobi Modem device */
1270 {QMI_GOBI1K_DEVICE(0x0b05, 0x1776)}, /* Asus Gobi Modem device */
1271 {QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)}, /* ONDA Gobi Modem device */
1272 {QMI_GOBI1K_DEVICE(0x05c6, 0x9001)}, /* Generic Gobi Modem device */
1273 {QMI_GOBI1K_DEVICE(0x05c6, 0x9002)}, /* Generic Gobi Modem device */
1274 {QMI_GOBI1K_DEVICE(0x05c6, 0x9202)}, /* Generic Gobi Modem device */
1275 {QMI_GOBI1K_DEVICE(0x05c6, 0x9203)}, /* Generic Gobi Modem device */
1276 {QMI_GOBI1K_DEVICE(0x05c6, 0x9222)}, /* Generic Gobi Modem device */
1277 {QMI_GOBI1K_DEVICE(0x05c6, 0x9009)}, /* Generic Gobi Modem device */
1278
1279 /* 5. Gobi 2000 and 3000 devices */
1280 {QMI_GOBI_DEVICE(0x413c, 0x8186)}, /* Dell Gobi 2000 Modem device (N0218, VU936) */
1281 {QMI_GOBI_DEVICE(0x413c, 0x8194)}, /* Dell Gobi 3000 Composite */
1282 {QMI_GOBI_DEVICE(0x05c6, 0x920b)}, /* Generic Gobi 2000 Modem device */
1283 {QMI_GOBI_DEVICE(0x05c6, 0x9225)}, /* Sony Gobi 2000 Modem device (N0279, VU730) */
1284 {QMI_GOBI_DEVICE(0x05c6, 0x9245)}, /* Samsung Gobi 2000 Modem device (VL176) */
1285 {QMI_GOBI_DEVICE(0x03f0, 0x251d)}, /* HP Gobi 2000 Modem device (VP412) */
1286 {QMI_GOBI_DEVICE(0x05c6, 0x9215)}, /* Acer Gobi 2000 Modem device (VP413) */
1287 {QMI_FIXED_INTF(0x05c6, 0x9215, 4)}, /* Quectel EC20 Mini PCIe */
1288 {QMI_GOBI_DEVICE(0x05c6, 0x9265)}, /* Asus Gobi 2000 Modem device (VR305) */
1289 {QMI_GOBI_DEVICE(0x05c6, 0x9235)}, /* Top Global Gobi 2000 Modem device (VR306) */
1290 {QMI_GOBI_DEVICE(0x05c6, 0x9275)}, /* iRex Technologies Gobi 2000 Modem device (VR307) */
1291 {QMI_GOBI_DEVICE(0x0af0, 0x8120)}, /* Option GTM681W */
1292 {QMI_GOBI_DEVICE(0x1199, 0x68a5)}, /* Sierra Wireless Modem */
1293 {QMI_GOBI_DEVICE(0x1199, 0x68a9)}, /* Sierra Wireless Modem */
1294 {QMI_GOBI_DEVICE(0x1199, 0x9001)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1295 {QMI_GOBI_DEVICE(0x1199, 0x9002)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1296 {QMI_GOBI_DEVICE(0x1199, 0x9003)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1297 {QMI_GOBI_DEVICE(0x1199, 0x9004)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1298 {QMI_GOBI_DEVICE(0x1199, 0x9005)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1299 {QMI_GOBI_DEVICE(0x1199, 0x9006)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1300 {QMI_GOBI_DEVICE(0x1199, 0x9007)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1301 {QMI_GOBI_DEVICE(0x1199, 0x9008)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1302 {QMI_GOBI_DEVICE(0x1199, 0x9009)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1303 {QMI_GOBI_DEVICE(0x1199, 0x900a)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1304 {QMI_GOBI_DEVICE(0x1199, 0x9011)}, /* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1305 {QMI_GOBI_DEVICE(0x16d8, 0x8002)}, /* CMDTech Gobi 2000 Modem device (VU922) */
1306 {QMI_GOBI_DEVICE(0x05c6, 0x9205)}, /* Gobi 2000 Modem device */
1307 {QMI_GOBI_DEVICE(0x1199, 0x9013)}, /* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1308 {QMI_GOBI_DEVICE(0x03f0, 0x371d)}, /* HP un2430 Mobile Broadband Module */
1309 {QMI_GOBI_DEVICE(0x1199, 0x9015)}, /* Sierra Wireless Gobi 3000 Modem device */
1310 {QMI_GOBI_DEVICE(0x1199, 0x9019)}, /* Sierra Wireless Gobi 3000 Modem device */
1311 {QMI_GOBI_DEVICE(0x1199, 0x901b)}, /* Sierra Wireless MC7770 */
1312 {QMI_GOBI_DEVICE(0x12d1, 0x14f1)}, /* Sony Gobi 3000 Composite */
1313 {QMI_GOBI_DEVICE(0x1410, 0xa021)}, /* Foxconn Gobi 3000 Modem device (Novatel E396) */
1314
1315 { } /* END */
1316};
1317MODULE_DEVICE_TABLE(usb, products);
1318
1319static bool quectel_ec20_detected(struct usb_interface *intf)
1320{
1321 struct usb_device *dev = interface_to_usbdev(intf);
1322
1323 if (dev->actconfig &&
1324 le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1325 le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1326 dev->actconfig->desc.bNumInterfaces == 5)
1327 return true;
1328
1329 return false;
1330}
1331
1332static int qmi_wwan_probe(struct usb_interface *intf,
1333 const struct usb_device_id *prod)
1334{
1335 struct usb_device_id *id = (struct usb_device_id *)prod;
1336 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1337
1338 /* Workaround to enable dynamic IDs. This disables usbnet
1339 * blacklisting functionality. Which, if required, can be
1340 * reimplemented here by using a magic "blacklist" value
1341 * instead of 0 in the static device id table
1342 */
1343 if (!id->driver_info) {
1344 dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1345 id->driver_info = (unsigned long)&qmi_wwan_info;
1346 }
1347
1348 /* There are devices where the same interface number can be
1349 * configured as different functions. We should only bind to
1350 * vendor specific functions when matching on interface number
1351 */
1352 if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1353 desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1354 dev_dbg(&intf->dev,
1355 "Rejecting interface number match for class %02x\n",
1356 desc->bInterfaceClass);
1357 return -ENODEV;
1358 }
1359
1360 /* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1361 if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1362 dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1363 return -ENODEV;
1364 }
1365
1366 return usbnet_probe(intf, id);
1367}
1368
1369static void qmi_wwan_disconnect(struct usb_interface *intf)
1370{
1371 struct usbnet *dev = usb_get_intfdata(intf);
1372 struct qmi_wwan_state *info;
1373 struct list_head *iter;
1374 struct net_device *ldev;
1375
1376 /* called twice if separate control and data intf */
1377 if (!dev)
1378 return;
1379 info = (void *)&dev->data;
1380 if (info->flags & QMI_WWAN_FLAG_MUX) {
1381 if (!rtnl_trylock()) {
1382 restart_syscall();
1383 return;
1384 }
1385 rcu_read_lock();
1386 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1387 qmimux_unregister_device(ldev);
1388 rcu_read_unlock();
1389 rtnl_unlock();
1390 info->flags &= ~QMI_WWAN_FLAG_MUX;
1391 }
1392 usbnet_disconnect(intf);
1393}
1394
1395static struct usb_driver qmi_wwan_driver = {
1396 .name = "qmi_wwan",
1397 .id_table = products,
1398 .probe = qmi_wwan_probe,
1399 .disconnect = qmi_wwan_disconnect,
1400 .suspend = qmi_wwan_suspend,
1401 .resume = qmi_wwan_resume,
1402 .reset_resume = qmi_wwan_resume,
1403 .supports_autosuspend = 1,
1404 .disable_hub_initiated_lpm = 1,
1405};
1406
1407module_usb_driver(qmi_wwan_driver);
1408
1409MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1410MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1411MODULE_LICENSE("GPL");
1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * Copyright (c) 2012 Bjørn Mork <bjorn@mork.no>
4 *
5 * The probing code is heavily inspired by cdc_ether, which is:
6 * Copyright (C) 2003-2005 by David Brownell
7 * Copyright (C) 2006 by Ole Andre Vadla Ravnas (ActiveSync)
8 */
9
10#include <linux/module.h>
11#include <linux/sched/signal.h>
12#include <linux/netdevice.h>
13#include <linux/ethtool.h>
14#include <linux/etherdevice.h>
15#include <linux/if_arp.h>
16#include <linux/mii.h>
17#include <linux/rtnetlink.h>
18#include <linux/usb.h>
19#include <linux/usb/cdc.h>
20#include <linux/usb/usbnet.h>
21#include <linux/usb/cdc-wdm.h>
22#include <linux/u64_stats_sync.h>
23
24/* This driver supports wwan (3G/LTE/?) devices using a vendor
25 * specific management protocol called Qualcomm MSM Interface (QMI) -
26 * in addition to the more common AT commands over serial interface
27 * management
28 *
29 * QMI is wrapped in CDC, using CDC encapsulated commands on the
30 * control ("master") interface of a two-interface CDC Union
31 * resembling standard CDC ECM. The devices do not use the control
32 * interface for any other CDC messages. Most likely because the
33 * management protocol is used in place of the standard CDC
34 * notifications NOTIFY_NETWORK_CONNECTION and NOTIFY_SPEED_CHANGE
35 *
36 * Alternatively, control and data functions can be combined in a
37 * single USB interface.
38 *
39 * Handling a protocol like QMI is out of the scope for any driver.
40 * It is exported as a character device using the cdc-wdm driver as
41 * a subdriver, enabling userspace applications ("modem managers") to
42 * handle it.
43 *
44 * These devices may alternatively/additionally be configured using AT
45 * commands on a serial interface
46 */
47
48/* driver specific data */
49struct qmi_wwan_state {
50 struct usb_driver *subdriver;
51 atomic_t pmcount;
52 unsigned long flags;
53 struct usb_interface *control;
54 struct usb_interface *data;
55};
56
57enum qmi_wwan_flags {
58 QMI_WWAN_FLAG_RAWIP = 1 << 0,
59 QMI_WWAN_FLAG_MUX = 1 << 1,
60};
61
62enum qmi_wwan_quirks {
63 QMI_WWAN_QUIRK_DTR = 1 << 0, /* needs "set DTR" request */
64};
65
66struct qmimux_hdr {
67 u8 pad;
68 u8 mux_id;
69 __be16 pkt_len;
70};
71
72struct qmimux_priv {
73 struct net_device *real_dev;
74 u8 mux_id;
75 struct pcpu_sw_netstats __percpu *stats64;
76};
77
78static int qmimux_open(struct net_device *dev)
79{
80 struct qmimux_priv *priv = netdev_priv(dev);
81 struct net_device *real_dev = priv->real_dev;
82
83 if (!(priv->real_dev->flags & IFF_UP))
84 return -ENETDOWN;
85
86 if (netif_carrier_ok(real_dev))
87 netif_carrier_on(dev);
88 return 0;
89}
90
91static int qmimux_stop(struct net_device *dev)
92{
93 netif_carrier_off(dev);
94 return 0;
95}
96
97static netdev_tx_t qmimux_start_xmit(struct sk_buff *skb, struct net_device *dev)
98{
99 struct qmimux_priv *priv = netdev_priv(dev);
100 unsigned int len = skb->len;
101 struct qmimux_hdr *hdr;
102 netdev_tx_t ret;
103
104 hdr = skb_push(skb, sizeof(struct qmimux_hdr));
105 hdr->pad = 0;
106 hdr->mux_id = priv->mux_id;
107 hdr->pkt_len = cpu_to_be16(len);
108 skb->dev = priv->real_dev;
109 ret = dev_queue_xmit(skb);
110
111 if (likely(ret == NET_XMIT_SUCCESS || ret == NET_XMIT_CN)) {
112 struct pcpu_sw_netstats *stats64 = this_cpu_ptr(priv->stats64);
113
114 u64_stats_update_begin(&stats64->syncp);
115 stats64->tx_packets++;
116 stats64->tx_bytes += len;
117 u64_stats_update_end(&stats64->syncp);
118 } else {
119 dev->stats.tx_dropped++;
120 }
121
122 return ret;
123}
124
125static void qmimux_get_stats64(struct net_device *net,
126 struct rtnl_link_stats64 *stats)
127{
128 struct qmimux_priv *priv = netdev_priv(net);
129 unsigned int start;
130 int cpu;
131
132 netdev_stats_to_stats64(stats, &net->stats);
133
134 for_each_possible_cpu(cpu) {
135 struct pcpu_sw_netstats *stats64;
136 u64 rx_packets, rx_bytes;
137 u64 tx_packets, tx_bytes;
138
139 stats64 = per_cpu_ptr(priv->stats64, cpu);
140
141 do {
142 start = u64_stats_fetch_begin_irq(&stats64->syncp);
143 rx_packets = stats64->rx_packets;
144 rx_bytes = stats64->rx_bytes;
145 tx_packets = stats64->tx_packets;
146 tx_bytes = stats64->tx_bytes;
147 } while (u64_stats_fetch_retry_irq(&stats64->syncp, start));
148
149 stats->rx_packets += rx_packets;
150 stats->rx_bytes += rx_bytes;
151 stats->tx_packets += tx_packets;
152 stats->tx_bytes += tx_bytes;
153 }
154}
155
156static const struct net_device_ops qmimux_netdev_ops = {
157 .ndo_open = qmimux_open,
158 .ndo_stop = qmimux_stop,
159 .ndo_start_xmit = qmimux_start_xmit,
160 .ndo_get_stats64 = qmimux_get_stats64,
161};
162
163static void qmimux_setup(struct net_device *dev)
164{
165 dev->header_ops = NULL; /* No header */
166 dev->type = ARPHRD_NONE;
167 dev->hard_header_len = 0;
168 dev->addr_len = 0;
169 dev->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
170 dev->netdev_ops = &qmimux_netdev_ops;
171 dev->mtu = 1500;
172 dev->needs_free_netdev = true;
173}
174
175static struct net_device *qmimux_find_dev(struct usbnet *dev, u8 mux_id)
176{
177 struct qmimux_priv *priv;
178 struct list_head *iter;
179 struct net_device *ldev;
180
181 rcu_read_lock();
182 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter) {
183 priv = netdev_priv(ldev);
184 if (priv->mux_id == mux_id) {
185 rcu_read_unlock();
186 return ldev;
187 }
188 }
189 rcu_read_unlock();
190 return NULL;
191}
192
193static bool qmimux_has_slaves(struct usbnet *dev)
194{
195 return !list_empty(&dev->net->adj_list.upper);
196}
197
198static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
199{
200 unsigned int len, offset = 0, pad_len, pkt_len;
201 struct qmimux_hdr *hdr;
202 struct net_device *net;
203 struct sk_buff *skbn;
204 u8 qmimux_hdr_sz = sizeof(*hdr);
205
206 while (offset + qmimux_hdr_sz < skb->len) {
207 hdr = (struct qmimux_hdr *)(skb->data + offset);
208 len = be16_to_cpu(hdr->pkt_len);
209
210 /* drop the packet, bogus length */
211 if (offset + len + qmimux_hdr_sz > skb->len)
212 return 0;
213
214 /* control packet, we do not know what to do */
215 if (hdr->pad & 0x80)
216 goto skip;
217
218 /* extract padding length and check for valid length info */
219 pad_len = hdr->pad & 0x3f;
220 if (len == 0 || pad_len >= len)
221 goto skip;
222 pkt_len = len - pad_len;
223
224 net = qmimux_find_dev(dev, hdr->mux_id);
225 if (!net)
226 goto skip;
227 skbn = netdev_alloc_skb(net, pkt_len);
228 if (!skbn)
229 return 0;
230 skbn->dev = net;
231
232 switch (skb->data[offset + qmimux_hdr_sz] & 0xf0) {
233 case 0x40:
234 skbn->protocol = htons(ETH_P_IP);
235 break;
236 case 0x60:
237 skbn->protocol = htons(ETH_P_IPV6);
238 break;
239 default:
240 /* not ip - do not know what to do */
241 goto skip;
242 }
243
244 skb_put_data(skbn, skb->data + offset + qmimux_hdr_sz, pkt_len);
245 if (netif_rx(skbn) != NET_RX_SUCCESS) {
246 net->stats.rx_errors++;
247 return 0;
248 } else {
249 struct pcpu_sw_netstats *stats64;
250 struct qmimux_priv *priv = netdev_priv(net);
251
252 stats64 = this_cpu_ptr(priv->stats64);
253 u64_stats_update_begin(&stats64->syncp);
254 stats64->rx_packets++;
255 stats64->rx_bytes += pkt_len;
256 u64_stats_update_end(&stats64->syncp);
257 }
258
259skip:
260 offset += len + qmimux_hdr_sz;
261 }
262 return 1;
263}
264
265static int qmimux_register_device(struct net_device *real_dev, u8 mux_id)
266{
267 struct net_device *new_dev;
268 struct qmimux_priv *priv;
269 int err;
270
271 new_dev = alloc_netdev(sizeof(struct qmimux_priv),
272 "qmimux%d", NET_NAME_UNKNOWN, qmimux_setup);
273 if (!new_dev)
274 return -ENOBUFS;
275
276 dev_net_set(new_dev, dev_net(real_dev));
277 priv = netdev_priv(new_dev);
278 priv->mux_id = mux_id;
279 priv->real_dev = real_dev;
280
281 priv->stats64 = netdev_alloc_pcpu_stats(struct pcpu_sw_netstats);
282 if (!priv->stats64) {
283 err = -ENOBUFS;
284 goto out_free_newdev;
285 }
286
287 err = register_netdevice(new_dev);
288 if (err < 0)
289 goto out_free_newdev;
290
291 /* Account for reference in struct qmimux_priv_priv */
292 dev_hold(real_dev);
293
294 err = netdev_upper_dev_link(real_dev, new_dev, NULL);
295 if (err)
296 goto out_unregister_netdev;
297
298 netif_stacked_transfer_operstate(real_dev, new_dev);
299
300 return 0;
301
302out_unregister_netdev:
303 unregister_netdevice(new_dev);
304 dev_put(real_dev);
305
306out_free_newdev:
307 free_netdev(new_dev);
308 return err;
309}
310
311static void qmimux_unregister_device(struct net_device *dev,
312 struct list_head *head)
313{
314 struct qmimux_priv *priv = netdev_priv(dev);
315 struct net_device *real_dev = priv->real_dev;
316
317 free_percpu(priv->stats64);
318 netdev_upper_dev_unlink(real_dev, dev);
319 unregister_netdevice_queue(dev, head);
320
321 /* Get rid of the reference to real_dev */
322 dev_put(real_dev);
323}
324
325static void qmi_wwan_netdev_setup(struct net_device *net)
326{
327 struct usbnet *dev = netdev_priv(net);
328 struct qmi_wwan_state *info = (void *)&dev->data;
329
330 if (info->flags & QMI_WWAN_FLAG_RAWIP) {
331 net->header_ops = NULL; /* No header */
332 net->type = ARPHRD_NONE;
333 net->hard_header_len = 0;
334 net->addr_len = 0;
335 net->flags = IFF_POINTOPOINT | IFF_NOARP | IFF_MULTICAST;
336 set_bit(EVENT_NO_IP_ALIGN, &dev->flags);
337 netdev_dbg(net, "mode: raw IP\n");
338 } else if (!net->header_ops) { /* don't bother if already set */
339 ether_setup(net);
340 /* Restoring min/max mtu values set originally by usbnet */
341 net->min_mtu = 0;
342 net->max_mtu = ETH_MAX_MTU;
343 clear_bit(EVENT_NO_IP_ALIGN, &dev->flags);
344 netdev_dbg(net, "mode: Ethernet\n");
345 }
346
347 /* recalculate buffers after changing hard_header_len */
348 usbnet_change_mtu(net, net->mtu);
349}
350
351static ssize_t raw_ip_show(struct device *d, struct device_attribute *attr, char *buf)
352{
353 struct usbnet *dev = netdev_priv(to_net_dev(d));
354 struct qmi_wwan_state *info = (void *)&dev->data;
355
356 return sprintf(buf, "%c\n", info->flags & QMI_WWAN_FLAG_RAWIP ? 'Y' : 'N');
357}
358
359static ssize_t raw_ip_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
360{
361 struct usbnet *dev = netdev_priv(to_net_dev(d));
362 struct qmi_wwan_state *info = (void *)&dev->data;
363 bool enable;
364 int ret;
365
366 if (strtobool(buf, &enable))
367 return -EINVAL;
368
369 /* no change? */
370 if (enable == (info->flags & QMI_WWAN_FLAG_RAWIP))
371 return len;
372
373 if (!rtnl_trylock())
374 return restart_syscall();
375
376 /* we don't want to modify a running netdev */
377 if (netif_running(dev->net)) {
378 netdev_err(dev->net, "Cannot change a running device\n");
379 ret = -EBUSY;
380 goto err;
381 }
382
383 /* let other drivers deny the change */
384 ret = call_netdevice_notifiers(NETDEV_PRE_TYPE_CHANGE, dev->net);
385 ret = notifier_to_errno(ret);
386 if (ret) {
387 netdev_err(dev->net, "Type change was refused\n");
388 goto err;
389 }
390
391 if (enable)
392 info->flags |= QMI_WWAN_FLAG_RAWIP;
393 else
394 info->flags &= ~QMI_WWAN_FLAG_RAWIP;
395 qmi_wwan_netdev_setup(dev->net);
396 call_netdevice_notifiers(NETDEV_POST_TYPE_CHANGE, dev->net);
397 ret = len;
398err:
399 rtnl_unlock();
400 return ret;
401}
402
403static ssize_t add_mux_show(struct device *d, struct device_attribute *attr, char *buf)
404{
405 struct net_device *dev = to_net_dev(d);
406 struct qmimux_priv *priv;
407 struct list_head *iter;
408 struct net_device *ldev;
409 ssize_t count = 0;
410
411 rcu_read_lock();
412 netdev_for_each_upper_dev_rcu(dev, ldev, iter) {
413 priv = netdev_priv(ldev);
414 count += scnprintf(&buf[count], PAGE_SIZE - count,
415 "0x%02x\n", priv->mux_id);
416 }
417 rcu_read_unlock();
418 return count;
419}
420
421static ssize_t add_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
422{
423 struct usbnet *dev = netdev_priv(to_net_dev(d));
424 struct qmi_wwan_state *info = (void *)&dev->data;
425 u8 mux_id;
426 int ret;
427
428 if (kstrtou8(buf, 0, &mux_id))
429 return -EINVAL;
430
431 /* mux_id [1 - 254] for compatibility with ip(8) and the rmnet driver */
432 if (mux_id < 1 || mux_id > 254)
433 return -EINVAL;
434
435 if (!rtnl_trylock())
436 return restart_syscall();
437
438 if (qmimux_find_dev(dev, mux_id)) {
439 netdev_err(dev->net, "mux_id already present\n");
440 ret = -EINVAL;
441 goto err;
442 }
443
444 /* we don't want to modify a running netdev */
445 if (netif_running(dev->net)) {
446 netdev_err(dev->net, "Cannot change a running device\n");
447 ret = -EBUSY;
448 goto err;
449 }
450
451 ret = qmimux_register_device(dev->net, mux_id);
452 if (!ret) {
453 info->flags |= QMI_WWAN_FLAG_MUX;
454 ret = len;
455 }
456err:
457 rtnl_unlock();
458 return ret;
459}
460
461static ssize_t del_mux_show(struct device *d, struct device_attribute *attr, char *buf)
462{
463 return add_mux_show(d, attr, buf);
464}
465
466static ssize_t del_mux_store(struct device *d, struct device_attribute *attr, const char *buf, size_t len)
467{
468 struct usbnet *dev = netdev_priv(to_net_dev(d));
469 struct qmi_wwan_state *info = (void *)&dev->data;
470 struct net_device *del_dev;
471 u8 mux_id;
472 int ret = 0;
473
474 if (kstrtou8(buf, 0, &mux_id))
475 return -EINVAL;
476
477 if (!rtnl_trylock())
478 return restart_syscall();
479
480 /* we don't want to modify a running netdev */
481 if (netif_running(dev->net)) {
482 netdev_err(dev->net, "Cannot change a running device\n");
483 ret = -EBUSY;
484 goto err;
485 }
486
487 del_dev = qmimux_find_dev(dev, mux_id);
488 if (!del_dev) {
489 netdev_err(dev->net, "mux_id not present\n");
490 ret = -EINVAL;
491 goto err;
492 }
493 qmimux_unregister_device(del_dev, NULL);
494
495 if (!qmimux_has_slaves(dev))
496 info->flags &= ~QMI_WWAN_FLAG_MUX;
497 ret = len;
498err:
499 rtnl_unlock();
500 return ret;
501}
502
503static DEVICE_ATTR_RW(raw_ip);
504static DEVICE_ATTR_RW(add_mux);
505static DEVICE_ATTR_RW(del_mux);
506
507static struct attribute *qmi_wwan_sysfs_attrs[] = {
508 &dev_attr_raw_ip.attr,
509 &dev_attr_add_mux.attr,
510 &dev_attr_del_mux.attr,
511 NULL,
512};
513
514static struct attribute_group qmi_wwan_sysfs_attr_group = {
515 .name = "qmi",
516 .attrs = qmi_wwan_sysfs_attrs,
517};
518
519/* default ethernet address used by the modem */
520static const u8 default_modem_addr[ETH_ALEN] = {0x02, 0x50, 0xf3};
521
522static const u8 buggy_fw_addr[ETH_ALEN] = {0x00, 0xa0, 0xc6, 0x00, 0x00, 0x00};
523
524/* Make up an ethernet header if the packet doesn't have one.
525 *
526 * A firmware bug common among several devices cause them to send raw
527 * IP packets under some circumstances. There is no way for the
528 * driver/host to know when this will happen. And even when the bug
529 * hits, some packets will still arrive with an intact header.
530 *
531 * The supported devices are only capably of sending IPv4, IPv6 and
532 * ARP packets on a point-to-point link. Any packet with an ethernet
533 * header will have either our address or a broadcast/multicast
534 * address as destination. ARP packets will always have a header.
535 *
536 * This means that this function will reliably add the appropriate
537 * header iff necessary, provided our hardware address does not start
538 * with 4 or 6.
539 *
540 * Another common firmware bug results in all packets being addressed
541 * to 00:a0:c6:00:00:00 despite the host address being different.
542 * This function will also fixup such packets.
543 */
544static int qmi_wwan_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
545{
546 struct qmi_wwan_state *info = (void *)&dev->data;
547 bool rawip = info->flags & QMI_WWAN_FLAG_RAWIP;
548 __be16 proto;
549
550 /* This check is no longer done by usbnet */
551 if (skb->len < dev->net->hard_header_len)
552 return 0;
553
554 if (info->flags & QMI_WWAN_FLAG_MUX)
555 return qmimux_rx_fixup(dev, skb);
556
557 switch (skb->data[0] & 0xf0) {
558 case 0x40:
559 proto = htons(ETH_P_IP);
560 break;
561 case 0x60:
562 proto = htons(ETH_P_IPV6);
563 break;
564 case 0x00:
565 if (rawip)
566 return 0;
567 if (is_multicast_ether_addr(skb->data))
568 return 1;
569 /* possibly bogus destination - rewrite just in case */
570 skb_reset_mac_header(skb);
571 goto fix_dest;
572 default:
573 if (rawip)
574 return 0;
575 /* pass along other packets without modifications */
576 return 1;
577 }
578 if (rawip) {
579 skb_reset_mac_header(skb);
580 skb->dev = dev->net; /* normally set by eth_type_trans */
581 skb->protocol = proto;
582 return 1;
583 }
584
585 if (skb_headroom(skb) < ETH_HLEN)
586 return 0;
587 skb_push(skb, ETH_HLEN);
588 skb_reset_mac_header(skb);
589 eth_hdr(skb)->h_proto = proto;
590 eth_zero_addr(eth_hdr(skb)->h_source);
591fix_dest:
592 memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
593 return 1;
594}
595
596/* very simplistic detection of IPv4 or IPv6 headers */
597static bool possibly_iphdr(const char *data)
598{
599 return (data[0] & 0xd0) == 0x40;
600}
601
602/* disallow addresses which may be confused with IP headers */
603static int qmi_wwan_mac_addr(struct net_device *dev, void *p)
604{
605 int ret;
606 struct sockaddr *addr = p;
607
608 ret = eth_prepare_mac_addr_change(dev, p);
609 if (ret < 0)
610 return ret;
611 if (possibly_iphdr(addr->sa_data))
612 return -EADDRNOTAVAIL;
613 eth_commit_mac_addr_change(dev, p);
614 return 0;
615}
616
617static const struct net_device_ops qmi_wwan_netdev_ops = {
618 .ndo_open = usbnet_open,
619 .ndo_stop = usbnet_stop,
620 .ndo_start_xmit = usbnet_start_xmit,
621 .ndo_tx_timeout = usbnet_tx_timeout,
622 .ndo_change_mtu = usbnet_change_mtu,
623 .ndo_get_stats64 = usbnet_get_stats64,
624 .ndo_set_mac_address = qmi_wwan_mac_addr,
625 .ndo_validate_addr = eth_validate_addr,
626};
627
628/* using a counter to merge subdriver requests with our own into a
629 * combined state
630 */
631static int qmi_wwan_manage_power(struct usbnet *dev, int on)
632{
633 struct qmi_wwan_state *info = (void *)&dev->data;
634 int rv;
635
636 dev_dbg(&dev->intf->dev, "%s() pmcount=%d, on=%d\n", __func__,
637 atomic_read(&info->pmcount), on);
638
639 if ((on && atomic_add_return(1, &info->pmcount) == 1) ||
640 (!on && atomic_dec_and_test(&info->pmcount))) {
641 /* need autopm_get/put here to ensure the usbcore sees
642 * the new value
643 */
644 rv = usb_autopm_get_interface(dev->intf);
645 dev->intf->needs_remote_wakeup = on;
646 if (!rv)
647 usb_autopm_put_interface(dev->intf);
648 }
649 return 0;
650}
651
652static int qmi_wwan_cdc_wdm_manage_power(struct usb_interface *intf, int on)
653{
654 struct usbnet *dev = usb_get_intfdata(intf);
655
656 /* can be called while disconnecting */
657 if (!dev)
658 return 0;
659 return qmi_wwan_manage_power(dev, on);
660}
661
662/* collect all three endpoints and register subdriver */
663static int qmi_wwan_register_subdriver(struct usbnet *dev)
664{
665 int rv;
666 struct usb_driver *subdriver = NULL;
667 struct qmi_wwan_state *info = (void *)&dev->data;
668
669 /* collect bulk endpoints */
670 rv = usbnet_get_endpoints(dev, info->data);
671 if (rv < 0)
672 goto err;
673
674 /* update status endpoint if separate control interface */
675 if (info->control != info->data)
676 dev->status = &info->control->cur_altsetting->endpoint[0];
677
678 /* require interrupt endpoint for subdriver */
679 if (!dev->status) {
680 rv = -EINVAL;
681 goto err;
682 }
683
684 /* for subdriver power management */
685 atomic_set(&info->pmcount, 0);
686
687 /* register subdriver */
688 subdriver = usb_cdc_wdm_register(info->control, &dev->status->desc,
689 4096, &qmi_wwan_cdc_wdm_manage_power);
690 if (IS_ERR(subdriver)) {
691 dev_err(&info->control->dev, "subdriver registration failed\n");
692 rv = PTR_ERR(subdriver);
693 goto err;
694 }
695
696 /* prevent usbnet from using status endpoint */
697 dev->status = NULL;
698
699 /* save subdriver struct for suspend/resume wrappers */
700 info->subdriver = subdriver;
701
702err:
703 return rv;
704}
705
706/* Send CDC SetControlLineState request, setting or clearing the DTR.
707 * "Required for Autoconnect and 9x30 to wake up" according to the
708 * GobiNet driver. The requirement has been verified on an MDM9230
709 * based Sierra Wireless MC7455
710 */
711static int qmi_wwan_change_dtr(struct usbnet *dev, bool on)
712{
713 u8 intf = dev->intf->cur_altsetting->desc.bInterfaceNumber;
714
715 return usbnet_write_cmd(dev, USB_CDC_REQ_SET_CONTROL_LINE_STATE,
716 USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE,
717 on ? 0x01 : 0x00, intf, NULL, 0);
718}
719
720static int qmi_wwan_bind(struct usbnet *dev, struct usb_interface *intf)
721{
722 int status;
723 u8 *buf = intf->cur_altsetting->extra;
724 int len = intf->cur_altsetting->extralen;
725 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
726 struct usb_cdc_union_desc *cdc_union;
727 struct usb_cdc_ether_desc *cdc_ether;
728 struct usb_driver *driver = driver_of(intf);
729 struct qmi_wwan_state *info = (void *)&dev->data;
730 struct usb_cdc_parsed_header hdr;
731
732 BUILD_BUG_ON((sizeof(((struct usbnet *)0)->data) <
733 sizeof(struct qmi_wwan_state)));
734
735 /* set up initial state */
736 info->control = intf;
737 info->data = intf;
738
739 /* and a number of CDC descriptors */
740 cdc_parse_cdc_header(&hdr, intf, buf, len);
741 cdc_union = hdr.usb_cdc_union_desc;
742 cdc_ether = hdr.usb_cdc_ether_desc;
743
744 /* Use separate control and data interfaces if we found a CDC Union */
745 if (cdc_union) {
746 info->data = usb_ifnum_to_if(dev->udev,
747 cdc_union->bSlaveInterface0);
748 if (desc->bInterfaceNumber != cdc_union->bMasterInterface0 ||
749 !info->data) {
750 dev_err(&intf->dev,
751 "bogus CDC Union: master=%u, slave=%u\n",
752 cdc_union->bMasterInterface0,
753 cdc_union->bSlaveInterface0);
754
755 /* ignore and continue... */
756 cdc_union = NULL;
757 info->data = intf;
758 }
759 }
760
761 /* errors aren't fatal - we can live with the dynamic address */
762 if (cdc_ether && cdc_ether->wMaxSegmentSize) {
763 dev->hard_mtu = le16_to_cpu(cdc_ether->wMaxSegmentSize);
764 usbnet_get_ethernet_addr(dev, cdc_ether->iMACAddress);
765 }
766
767 /* claim data interface and set it up */
768 if (info->control != info->data) {
769 status = usb_driver_claim_interface(driver, info->data, dev);
770 if (status < 0)
771 goto err;
772 }
773
774 status = qmi_wwan_register_subdriver(dev);
775 if (status < 0 && info->control != info->data) {
776 usb_set_intfdata(info->data, NULL);
777 usb_driver_release_interface(driver, info->data);
778 }
779
780 /* disabling remote wakeup on MDM9x30 devices has the same
781 * effect as clearing DTR. The device will not respond to QMI
782 * requests until we set DTR again. This is similar to a
783 * QMI_CTL SYNC request, clearing a lot of firmware state
784 * including the client ID allocations.
785 *
786 * Our usage model allows a session to span multiple
787 * open/close events, so we must prevent the firmware from
788 * clearing out state the clients might need.
789 *
790 * MDM9x30 is the first QMI chipset with USB3 support. Abuse
791 * this fact to enable the quirk for all USB3 devices.
792 *
793 * There are also chipsets with the same "set DTR" requirement
794 * but without USB3 support. Devices based on these chips
795 * need a quirk flag in the device ID table.
796 */
797 if (dev->driver_info->data & QMI_WWAN_QUIRK_DTR ||
798 le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
799 qmi_wwan_manage_power(dev, 1);
800 qmi_wwan_change_dtr(dev, true);
801 }
802
803 /* Never use the same address on both ends of the link, even if the
804 * buggy firmware told us to. Or, if device is assigned the well-known
805 * buggy firmware MAC address, replace it with a random address,
806 */
807 if (ether_addr_equal(dev->net->dev_addr, default_modem_addr) ||
808 ether_addr_equal(dev->net->dev_addr, buggy_fw_addr))
809 eth_hw_addr_random(dev->net);
810
811 /* make MAC addr easily distinguishable from an IP header */
812 if (possibly_iphdr(dev->net->dev_addr)) {
813 dev->net->dev_addr[0] |= 0x02; /* set local assignment bit */
814 dev->net->dev_addr[0] &= 0xbf; /* clear "IP" bit */
815 }
816 dev->net->netdev_ops = &qmi_wwan_netdev_ops;
817 dev->net->sysfs_groups[0] = &qmi_wwan_sysfs_attr_group;
818err:
819 return status;
820}
821
822static void qmi_wwan_unbind(struct usbnet *dev, struct usb_interface *intf)
823{
824 struct qmi_wwan_state *info = (void *)&dev->data;
825 struct usb_driver *driver = driver_of(intf);
826 struct usb_interface *other;
827
828 if (info->subdriver && info->subdriver->disconnect)
829 info->subdriver->disconnect(info->control);
830
831 /* disable MDM9x30 quirk */
832 if (le16_to_cpu(dev->udev->descriptor.bcdUSB) >= 0x0201) {
833 qmi_wwan_change_dtr(dev, false);
834 qmi_wwan_manage_power(dev, 0);
835 }
836
837 /* allow user to unbind using either control or data */
838 if (intf == info->control)
839 other = info->data;
840 else
841 other = info->control;
842
843 /* only if not shared */
844 if (other && intf != other) {
845 usb_set_intfdata(other, NULL);
846 usb_driver_release_interface(driver, other);
847 }
848
849 info->subdriver = NULL;
850 info->data = NULL;
851 info->control = NULL;
852}
853
854/* suspend/resume wrappers calling both usbnet and the cdc-wdm
855 * subdriver if present.
856 *
857 * NOTE: cdc-wdm also supports pre/post_reset, but we cannot provide
858 * wrappers for those without adding usbnet reset support first.
859 */
860static int qmi_wwan_suspend(struct usb_interface *intf, pm_message_t message)
861{
862 struct usbnet *dev = usb_get_intfdata(intf);
863 struct qmi_wwan_state *info = (void *)&dev->data;
864 int ret;
865
866 /* Both usbnet_suspend() and subdriver->suspend() MUST return 0
867 * in system sleep context, otherwise, the resume callback has
868 * to recover device from previous suspend failure.
869 */
870 ret = usbnet_suspend(intf, message);
871 if (ret < 0)
872 goto err;
873
874 if (intf == info->control && info->subdriver &&
875 info->subdriver->suspend)
876 ret = info->subdriver->suspend(intf, message);
877 if (ret < 0)
878 usbnet_resume(intf);
879err:
880 return ret;
881}
882
883static int qmi_wwan_resume(struct usb_interface *intf)
884{
885 struct usbnet *dev = usb_get_intfdata(intf);
886 struct qmi_wwan_state *info = (void *)&dev->data;
887 int ret = 0;
888 bool callsub = (intf == info->control && info->subdriver &&
889 info->subdriver->resume);
890
891 if (callsub)
892 ret = info->subdriver->resume(intf);
893 if (ret < 0)
894 goto err;
895 ret = usbnet_resume(intf);
896 if (ret < 0 && callsub)
897 info->subdriver->suspend(intf, PMSG_SUSPEND);
898err:
899 return ret;
900}
901
902static const struct driver_info qmi_wwan_info = {
903 .description = "WWAN/QMI device",
904 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
905 .bind = qmi_wwan_bind,
906 .unbind = qmi_wwan_unbind,
907 .manage_power = qmi_wwan_manage_power,
908 .rx_fixup = qmi_wwan_rx_fixup,
909};
910
911static const struct driver_info qmi_wwan_info_quirk_dtr = {
912 .description = "WWAN/QMI device",
913 .flags = FLAG_WWAN | FLAG_SEND_ZLP,
914 .bind = qmi_wwan_bind,
915 .unbind = qmi_wwan_unbind,
916 .manage_power = qmi_wwan_manage_power,
917 .rx_fixup = qmi_wwan_rx_fixup,
918 .data = QMI_WWAN_QUIRK_DTR,
919};
920
921#define HUAWEI_VENDOR_ID 0x12D1
922
923/* map QMI/wwan function by a fixed interface number */
924#define QMI_FIXED_INTF(vend, prod, num) \
925 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
926 .driver_info = (unsigned long)&qmi_wwan_info
927
928/* devices requiring "set DTR" quirk */
929#define QMI_QUIRK_SET_DTR(vend, prod, num) \
930 USB_DEVICE_INTERFACE_NUMBER(vend, prod, num), \
931 .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
932
933/* Gobi 1000 QMI/wwan interface number is 3 according to qcserial */
934#define QMI_GOBI1K_DEVICE(vend, prod) \
935 QMI_FIXED_INTF(vend, prod, 3)
936
937/* Gobi 2000/3000 QMI/wwan interface number is 0 according to qcserial */
938#define QMI_GOBI_DEVICE(vend, prod) \
939 QMI_FIXED_INTF(vend, prod, 0)
940
941/* Many devices have QMI and DIAG functions which are distinguishable
942 * from other vendor specific functions by class, subclass and
943 * protocol all being 0xff. The DIAG function has exactly 2 endpoints
944 * and is silently rejected when probed.
945 *
946 * This makes it possible to match dynamically numbered QMI functions
947 * as seen on e.g. many Quectel modems.
948 */
949#define QMI_MATCH_FF_FF_FF(vend, prod) \
950 USB_DEVICE_AND_INTERFACE_INFO(vend, prod, USB_CLASS_VENDOR_SPEC, \
951 USB_SUBCLASS_VENDOR_SPEC, 0xff), \
952 .driver_info = (unsigned long)&qmi_wwan_info_quirk_dtr
953
954static const struct usb_device_id products[] = {
955 /* 1. CDC ECM like devices match on the control interface */
956 { /* Huawei E392, E398 and possibly others sharing both device id and more... */
957 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 9),
958 .driver_info = (unsigned long)&qmi_wwan_info,
959 },
960 { /* Vodafone/Huawei K5005 (12d1:14c8) and similar modems */
961 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 57),
962 .driver_info = (unsigned long)&qmi_wwan_info,
963 },
964 { /* HUAWEI_INTERFACE_NDIS_CONTROL_QUALCOMM */
965 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x69),
966 .driver_info = (unsigned long)&qmi_wwan_info,
967 },
968 { /* Motorola Mapphone devices with MDM6600 */
969 USB_VENDOR_AND_INTERFACE_INFO(0x22b8, USB_CLASS_VENDOR_SPEC, 0xfb, 0xff),
970 .driver_info = (unsigned long)&qmi_wwan_info,
971 },
972
973 /* 2. Combined interface devices matching on class+protocol */
974 { /* Huawei E367 and possibly others in "Windows mode" */
975 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 7),
976 .driver_info = (unsigned long)&qmi_wwan_info,
977 },
978 { /* Huawei E392, E398 and possibly others in "Windows mode" */
979 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 1, 17),
980 .driver_info = (unsigned long)&qmi_wwan_info,
981 },
982 { /* HUAWEI_NDIS_SINGLE_INTERFACE_VDF */
983 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x37),
984 .driver_info = (unsigned long)&qmi_wwan_info,
985 },
986 { /* HUAWEI_INTERFACE_NDIS_HW_QUALCOMM */
987 USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, USB_CLASS_VENDOR_SPEC, 0x01, 0x67),
988 .driver_info = (unsigned long)&qmi_wwan_info,
989 },
990 { /* Pantech UML290, P4200 and more */
991 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf0, 0xff),
992 .driver_info = (unsigned long)&qmi_wwan_info,
993 },
994 { /* Pantech UML290 - newer firmware */
995 USB_VENDOR_AND_INTERFACE_INFO(0x106c, USB_CLASS_VENDOR_SPEC, 0xf1, 0xff),
996 .driver_info = (unsigned long)&qmi_wwan_info,
997 },
998 { /* Novatel USB551L and MC551 */
999 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0xb001,
1000 USB_CLASS_COMM,
1001 USB_CDC_SUBCLASS_ETHERNET,
1002 USB_CDC_PROTO_NONE),
1003 .driver_info = (unsigned long)&qmi_wwan_info,
1004 },
1005 { /* Novatel E362 */
1006 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9010,
1007 USB_CLASS_COMM,
1008 USB_CDC_SUBCLASS_ETHERNET,
1009 USB_CDC_PROTO_NONE),
1010 .driver_info = (unsigned long)&qmi_wwan_info,
1011 },
1012 { /* Novatel Expedite E371 */
1013 USB_DEVICE_AND_INTERFACE_INFO(0x1410, 0x9011,
1014 USB_CLASS_COMM,
1015 USB_CDC_SUBCLASS_ETHERNET,
1016 USB_CDC_PROTO_NONE),
1017 .driver_info = (unsigned long)&qmi_wwan_info,
1018 },
1019 { /* Dell Wireless 5800 (Novatel E362) */
1020 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8195,
1021 USB_CLASS_COMM,
1022 USB_CDC_SUBCLASS_ETHERNET,
1023 USB_CDC_PROTO_NONE),
1024 .driver_info = (unsigned long)&qmi_wwan_info,
1025 },
1026 { /* Dell Wireless 5800 V2 (Novatel E362) */
1027 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x8196,
1028 USB_CLASS_COMM,
1029 USB_CDC_SUBCLASS_ETHERNET,
1030 USB_CDC_PROTO_NONE),
1031 .driver_info = (unsigned long)&qmi_wwan_info,
1032 },
1033 { /* Dell Wireless 5804 (Novatel E371) */
1034 USB_DEVICE_AND_INTERFACE_INFO(0x413C, 0x819b,
1035 USB_CLASS_COMM,
1036 USB_CDC_SUBCLASS_ETHERNET,
1037 USB_CDC_PROTO_NONE),
1038 .driver_info = (unsigned long)&qmi_wwan_info,
1039 },
1040 { /* ADU960S */
1041 USB_DEVICE_AND_INTERFACE_INFO(0x16d5, 0x650a,
1042 USB_CLASS_COMM,
1043 USB_CDC_SUBCLASS_ETHERNET,
1044 USB_CDC_PROTO_NONE),
1045 .driver_info = (unsigned long)&qmi_wwan_info,
1046 },
1047 { /* HP lt2523 (Novatel E371) */
1048 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x421d,
1049 USB_CLASS_COMM,
1050 USB_CDC_SUBCLASS_ETHERNET,
1051 USB_CDC_PROTO_NONE),
1052 .driver_info = (unsigned long)&qmi_wwan_info,
1053 },
1054 { /* HP lt4112 LTE/HSPA+ Gobi 4G Module (Huawei me906e) */
1055 USB_DEVICE_AND_INTERFACE_INFO(0x03f0, 0x581d, USB_CLASS_VENDOR_SPEC, 1, 7),
1056 .driver_info = (unsigned long)&qmi_wwan_info,
1057 },
1058 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0125)}, /* Quectel EC25, EC20 R2.0 Mini PCIe */
1059 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0306)}, /* Quectel EP06/EG06/EM06 */
1060 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0512)}, /* Quectel EG12/EM12 */
1061 {QMI_MATCH_FF_FF_FF(0x2c7c, 0x0800)}, /* Quectel RM500Q-GL */
1062
1063 /* 3. Combined interface devices matching on interface number */
1064 {QMI_FIXED_INTF(0x0408, 0xea42, 4)}, /* Yota / Megafon M100-1 */
1065 {QMI_FIXED_INTF(0x05c6, 0x6001, 3)}, /* 4G LTE usb-modem U901 */
1066 {QMI_FIXED_INTF(0x05c6, 0x7000, 0)},
1067 {QMI_FIXED_INTF(0x05c6, 0x7001, 1)},
1068 {QMI_FIXED_INTF(0x05c6, 0x7002, 1)},
1069 {QMI_FIXED_INTF(0x05c6, 0x7101, 1)},
1070 {QMI_FIXED_INTF(0x05c6, 0x7101, 2)},
1071 {QMI_FIXED_INTF(0x05c6, 0x7101, 3)},
1072 {QMI_FIXED_INTF(0x05c6, 0x7102, 1)},
1073 {QMI_FIXED_INTF(0x05c6, 0x7102, 2)},
1074 {QMI_FIXED_INTF(0x05c6, 0x7102, 3)},
1075 {QMI_FIXED_INTF(0x05c6, 0x8000, 7)},
1076 {QMI_FIXED_INTF(0x05c6, 0x8001, 6)},
1077 {QMI_FIXED_INTF(0x05c6, 0x9000, 4)},
1078 {QMI_FIXED_INTF(0x05c6, 0x9003, 4)},
1079 {QMI_FIXED_INTF(0x05c6, 0x9005, 2)},
1080 {QMI_FIXED_INTF(0x05c6, 0x900a, 4)},
1081 {QMI_FIXED_INTF(0x05c6, 0x900b, 2)},
1082 {QMI_FIXED_INTF(0x05c6, 0x900c, 4)},
1083 {QMI_FIXED_INTF(0x05c6, 0x900c, 5)},
1084 {QMI_FIXED_INTF(0x05c6, 0x900c, 6)},
1085 {QMI_FIXED_INTF(0x05c6, 0x900d, 5)},
1086 {QMI_FIXED_INTF(0x05c6, 0x900f, 3)},
1087 {QMI_FIXED_INTF(0x05c6, 0x900f, 4)},
1088 {QMI_FIXED_INTF(0x05c6, 0x900f, 5)},
1089 {QMI_FIXED_INTF(0x05c6, 0x9010, 4)},
1090 {QMI_FIXED_INTF(0x05c6, 0x9010, 5)},
1091 {QMI_FIXED_INTF(0x05c6, 0x9011, 3)},
1092 {QMI_FIXED_INTF(0x05c6, 0x9011, 4)},
1093 {QMI_FIXED_INTF(0x05c6, 0x9021, 1)},
1094 {QMI_FIXED_INTF(0x05c6, 0x9022, 2)},
1095 {QMI_FIXED_INTF(0x05c6, 0x9025, 4)}, /* Alcatel-sbell ASB TL131 TDD LTE (China Mobile) */
1096 {QMI_FIXED_INTF(0x05c6, 0x9026, 3)},
1097 {QMI_FIXED_INTF(0x05c6, 0x902e, 5)},
1098 {QMI_FIXED_INTF(0x05c6, 0x9031, 5)},
1099 {QMI_FIXED_INTF(0x05c6, 0x9032, 4)},
1100 {QMI_FIXED_INTF(0x05c6, 0x9033, 3)},
1101 {QMI_FIXED_INTF(0x05c6, 0x9033, 4)},
1102 {QMI_FIXED_INTF(0x05c6, 0x9033, 5)},
1103 {QMI_FIXED_INTF(0x05c6, 0x9033, 6)},
1104 {QMI_FIXED_INTF(0x05c6, 0x9034, 3)},
1105 {QMI_FIXED_INTF(0x05c6, 0x9034, 4)},
1106 {QMI_FIXED_INTF(0x05c6, 0x9034, 5)},
1107 {QMI_FIXED_INTF(0x05c6, 0x9034, 6)},
1108 {QMI_FIXED_INTF(0x05c6, 0x9034, 7)},
1109 {QMI_FIXED_INTF(0x05c6, 0x9035, 4)},
1110 {QMI_FIXED_INTF(0x05c6, 0x9036, 3)},
1111 {QMI_FIXED_INTF(0x05c6, 0x9037, 5)},
1112 {QMI_FIXED_INTF(0x05c6, 0x9038, 4)},
1113 {QMI_FIXED_INTF(0x05c6, 0x903b, 7)},
1114 {QMI_FIXED_INTF(0x05c6, 0x903c, 6)},
1115 {QMI_FIXED_INTF(0x05c6, 0x903d, 6)},
1116 {QMI_FIXED_INTF(0x05c6, 0x903e, 5)},
1117 {QMI_FIXED_INTF(0x05c6, 0x9043, 3)},
1118 {QMI_FIXED_INTF(0x05c6, 0x9046, 3)},
1119 {QMI_FIXED_INTF(0x05c6, 0x9046, 4)},
1120 {QMI_FIXED_INTF(0x05c6, 0x9046, 5)},
1121 {QMI_FIXED_INTF(0x05c6, 0x9047, 2)},
1122 {QMI_FIXED_INTF(0x05c6, 0x9047, 3)},
1123 {QMI_FIXED_INTF(0x05c6, 0x9047, 4)},
1124 {QMI_FIXED_INTF(0x05c6, 0x9048, 4)},
1125 {QMI_FIXED_INTF(0x05c6, 0x9048, 5)},
1126 {QMI_FIXED_INTF(0x05c6, 0x9048, 6)},
1127 {QMI_FIXED_INTF(0x05c6, 0x9048, 7)},
1128 {QMI_FIXED_INTF(0x05c6, 0x9048, 8)},
1129 {QMI_FIXED_INTF(0x05c6, 0x904c, 5)},
1130 {QMI_FIXED_INTF(0x05c6, 0x904c, 6)},
1131 {QMI_FIXED_INTF(0x05c6, 0x904c, 7)},
1132 {QMI_FIXED_INTF(0x05c6, 0x904c, 8)},
1133 {QMI_FIXED_INTF(0x05c6, 0x9050, 3)},
1134 {QMI_FIXED_INTF(0x05c6, 0x9052, 4)},
1135 {QMI_FIXED_INTF(0x05c6, 0x9053, 6)},
1136 {QMI_FIXED_INTF(0x05c6, 0x9053, 7)},
1137 {QMI_FIXED_INTF(0x05c6, 0x9054, 5)},
1138 {QMI_FIXED_INTF(0x05c6, 0x9054, 6)},
1139 {QMI_FIXED_INTF(0x05c6, 0x9055, 3)},
1140 {QMI_FIXED_INTF(0x05c6, 0x9055, 4)},
1141 {QMI_FIXED_INTF(0x05c6, 0x9055, 5)},
1142 {QMI_FIXED_INTF(0x05c6, 0x9055, 6)},
1143 {QMI_FIXED_INTF(0x05c6, 0x9055, 7)},
1144 {QMI_FIXED_INTF(0x05c6, 0x9056, 3)},
1145 {QMI_FIXED_INTF(0x05c6, 0x9062, 2)},
1146 {QMI_FIXED_INTF(0x05c6, 0x9062, 3)},
1147 {QMI_FIXED_INTF(0x05c6, 0x9062, 4)},
1148 {QMI_FIXED_INTF(0x05c6, 0x9062, 5)},
1149 {QMI_FIXED_INTF(0x05c6, 0x9062, 6)},
1150 {QMI_FIXED_INTF(0x05c6, 0x9062, 7)},
1151 {QMI_FIXED_INTF(0x05c6, 0x9062, 8)},
1152 {QMI_FIXED_INTF(0x05c6, 0x9062, 9)},
1153 {QMI_FIXED_INTF(0x05c6, 0x9064, 3)},
1154 {QMI_FIXED_INTF(0x05c6, 0x9065, 6)},
1155 {QMI_FIXED_INTF(0x05c6, 0x9065, 7)},
1156 {QMI_FIXED_INTF(0x05c6, 0x9066, 5)},
1157 {QMI_FIXED_INTF(0x05c6, 0x9066, 6)},
1158 {QMI_FIXED_INTF(0x05c6, 0x9067, 1)},
1159 {QMI_FIXED_INTF(0x05c6, 0x9068, 2)},
1160 {QMI_FIXED_INTF(0x05c6, 0x9068, 3)},
1161 {QMI_FIXED_INTF(0x05c6, 0x9068, 4)},
1162 {QMI_FIXED_INTF(0x05c6, 0x9068, 5)},
1163 {QMI_FIXED_INTF(0x05c6, 0x9068, 6)},
1164 {QMI_FIXED_INTF(0x05c6, 0x9068, 7)},
1165 {QMI_FIXED_INTF(0x05c6, 0x9069, 5)},
1166 {QMI_FIXED_INTF(0x05c6, 0x9069, 6)},
1167 {QMI_FIXED_INTF(0x05c6, 0x9069, 7)},
1168 {QMI_FIXED_INTF(0x05c6, 0x9069, 8)},
1169 {QMI_FIXED_INTF(0x05c6, 0x9070, 4)},
1170 {QMI_FIXED_INTF(0x05c6, 0x9070, 5)},
1171 {QMI_FIXED_INTF(0x05c6, 0x9075, 5)},
1172 {QMI_FIXED_INTF(0x05c6, 0x9076, 4)},
1173 {QMI_FIXED_INTF(0x05c6, 0x9076, 5)},
1174 {QMI_FIXED_INTF(0x05c6, 0x9076, 6)},
1175 {QMI_FIXED_INTF(0x05c6, 0x9076, 7)},
1176 {QMI_FIXED_INTF(0x05c6, 0x9076, 8)},
1177 {QMI_FIXED_INTF(0x05c6, 0x9077, 3)},
1178 {QMI_FIXED_INTF(0x05c6, 0x9077, 4)},
1179 {QMI_FIXED_INTF(0x05c6, 0x9077, 5)},
1180 {QMI_FIXED_INTF(0x05c6, 0x9077, 6)},
1181 {QMI_FIXED_INTF(0x05c6, 0x9078, 3)},
1182 {QMI_FIXED_INTF(0x05c6, 0x9079, 4)},
1183 {QMI_FIXED_INTF(0x05c6, 0x9079, 5)},
1184 {QMI_FIXED_INTF(0x05c6, 0x9079, 6)},
1185 {QMI_FIXED_INTF(0x05c6, 0x9079, 7)},
1186 {QMI_FIXED_INTF(0x05c6, 0x9079, 8)},
1187 {QMI_FIXED_INTF(0x05c6, 0x9080, 5)},
1188 {QMI_FIXED_INTF(0x05c6, 0x9080, 6)},
1189 {QMI_FIXED_INTF(0x05c6, 0x9080, 7)},
1190 {QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1191 {QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1192 {QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1193 {QMI_FIXED_INTF(0x05c6, 0x90b2, 3)}, /* ublox R410M */
1194 {QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1195 {QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1196 {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1197 {QMI_FIXED_INTF(0x0846, 0x68a2, 8)},
1198 {QMI_FIXED_INTF(0x0846, 0x68d3, 8)}, /* Netgear Aircard 779S */
1199 {QMI_FIXED_INTF(0x12d1, 0x140c, 1)}, /* Huawei E173 */
1200 {QMI_FIXED_INTF(0x12d1, 0x14ac, 1)}, /* Huawei E1820 */
1201 {QMI_FIXED_INTF(0x1435, 0x0918, 3)}, /* Wistron NeWeb D16Q1 */
1202 {QMI_FIXED_INTF(0x1435, 0x0918, 4)}, /* Wistron NeWeb D16Q1 */
1203 {QMI_FIXED_INTF(0x1435, 0x0918, 5)}, /* Wistron NeWeb D16Q1 */
1204 {QMI_FIXED_INTF(0x1435, 0x3185, 4)}, /* Wistron NeWeb M18Q5 */
1205 {QMI_FIXED_INTF(0x1435, 0xd111, 4)}, /* M9615A DM11-1 D51QC */
1206 {QMI_FIXED_INTF(0x1435, 0xd181, 3)}, /* Wistron NeWeb D18Q1 */
1207 {QMI_FIXED_INTF(0x1435, 0xd181, 4)}, /* Wistron NeWeb D18Q1 */
1208 {QMI_FIXED_INTF(0x1435, 0xd181, 5)}, /* Wistron NeWeb D18Q1 */
1209 {QMI_FIXED_INTF(0x1435, 0xd182, 4)}, /* Wistron NeWeb D18 */
1210 {QMI_FIXED_INTF(0x1435, 0xd182, 5)}, /* Wistron NeWeb D18 */
1211 {QMI_FIXED_INTF(0x1435, 0xd191, 4)}, /* Wistron NeWeb D19Q1 */
1212 {QMI_QUIRK_SET_DTR(0x1508, 0x1001, 4)}, /* Fibocom NL668 series */
1213 {QMI_FIXED_INTF(0x1690, 0x7588, 4)}, /* ASKEY WWHC050 */
1214 {QMI_FIXED_INTF(0x16d8, 0x6003, 0)}, /* CMOTech 6003 */
1215 {QMI_FIXED_INTF(0x16d8, 0x6007, 0)}, /* CMOTech CHE-628S */
1216 {QMI_FIXED_INTF(0x16d8, 0x6008, 0)}, /* CMOTech CMU-301 */
1217 {QMI_FIXED_INTF(0x16d8, 0x6280, 0)}, /* CMOTech CHU-628 */
1218 {QMI_FIXED_INTF(0x16d8, 0x7001, 0)}, /* CMOTech CHU-720S */
1219 {QMI_FIXED_INTF(0x16d8, 0x7002, 0)}, /* CMOTech 7002 */
1220 {QMI_FIXED_INTF(0x16d8, 0x7003, 4)}, /* CMOTech CHU-629K */
1221 {QMI_FIXED_INTF(0x16d8, 0x7004, 3)}, /* CMOTech 7004 */
1222 {QMI_FIXED_INTF(0x16d8, 0x7006, 5)}, /* CMOTech CGU-629 */
1223 {QMI_FIXED_INTF(0x16d8, 0x700a, 4)}, /* CMOTech CHU-629S */
1224 {QMI_FIXED_INTF(0x16d8, 0x7211, 0)}, /* CMOTech CHU-720I */
1225 {QMI_FIXED_INTF(0x16d8, 0x7212, 0)}, /* CMOTech 7212 */
1226 {QMI_FIXED_INTF(0x16d8, 0x7213, 0)}, /* CMOTech 7213 */
1227 {QMI_FIXED_INTF(0x16d8, 0x7251, 1)}, /* CMOTech 7251 */
1228 {QMI_FIXED_INTF(0x16d8, 0x7252, 1)}, /* CMOTech 7252 */
1229 {QMI_FIXED_INTF(0x16d8, 0x7253, 1)}, /* CMOTech 7253 */
1230 {QMI_FIXED_INTF(0x19d2, 0x0002, 1)},
1231 {QMI_FIXED_INTF(0x19d2, 0x0012, 1)},
1232 {QMI_FIXED_INTF(0x19d2, 0x0017, 3)},
1233 {QMI_FIXED_INTF(0x19d2, 0x0019, 3)}, /* ONDA MT689DC */
1234 {QMI_FIXED_INTF(0x19d2, 0x0021, 4)},
1235 {QMI_FIXED_INTF(0x19d2, 0x0025, 1)},
1236 {QMI_FIXED_INTF(0x19d2, 0x0031, 4)},
1237 {QMI_FIXED_INTF(0x19d2, 0x0042, 4)},
1238 {QMI_FIXED_INTF(0x19d2, 0x0049, 5)},
1239 {QMI_FIXED_INTF(0x19d2, 0x0052, 4)},
1240 {QMI_FIXED_INTF(0x19d2, 0x0055, 1)}, /* ZTE (Vodafone) K3520-Z */
1241 {QMI_FIXED_INTF(0x19d2, 0x0058, 4)},
1242 {QMI_FIXED_INTF(0x19d2, 0x0063, 4)}, /* ZTE (Vodafone) K3565-Z */
1243 {QMI_FIXED_INTF(0x19d2, 0x0104, 4)}, /* ZTE (Vodafone) K4505-Z */
1244 {QMI_FIXED_INTF(0x19d2, 0x0113, 5)},
1245 {QMI_FIXED_INTF(0x19d2, 0x0118, 5)},
1246 {QMI_FIXED_INTF(0x19d2, 0x0121, 5)},
1247 {QMI_FIXED_INTF(0x19d2, 0x0123, 4)},
1248 {QMI_FIXED_INTF(0x19d2, 0x0124, 5)},
1249 {QMI_FIXED_INTF(0x19d2, 0x0125, 6)},
1250 {QMI_FIXED_INTF(0x19d2, 0x0126, 5)},
1251 {QMI_FIXED_INTF(0x19d2, 0x0130, 1)},
1252 {QMI_FIXED_INTF(0x19d2, 0x0133, 3)},
1253 {QMI_FIXED_INTF(0x19d2, 0x0141, 5)},
1254 {QMI_FIXED_INTF(0x19d2, 0x0157, 5)}, /* ZTE MF683 */
1255 {QMI_FIXED_INTF(0x19d2, 0x0158, 3)},
1256 {QMI_FIXED_INTF(0x19d2, 0x0167, 4)}, /* ZTE MF820D */
1257 {QMI_FIXED_INTF(0x19d2, 0x0168, 4)},
1258 {QMI_FIXED_INTF(0x19d2, 0x0176, 3)},
1259 {QMI_FIXED_INTF(0x19d2, 0x0178, 3)},
1260 {QMI_FIXED_INTF(0x19d2, 0x0191, 4)}, /* ZTE EuFi890 */
1261 {QMI_FIXED_INTF(0x19d2, 0x0199, 1)}, /* ZTE MF820S */
1262 {QMI_FIXED_INTF(0x19d2, 0x0200, 1)},
1263 {QMI_FIXED_INTF(0x19d2, 0x0257, 3)}, /* ZTE MF821 */
1264 {QMI_FIXED_INTF(0x19d2, 0x0265, 4)}, /* ONDA MT8205 4G LTE */
1265 {QMI_FIXED_INTF(0x19d2, 0x0284, 4)}, /* ZTE MF880 */
1266 {QMI_FIXED_INTF(0x19d2, 0x0326, 4)}, /* ZTE MF821D */
1267 {QMI_FIXED_INTF(0x19d2, 0x0396, 3)}, /* ZTE ZM8620 */
1268 {QMI_FIXED_INTF(0x19d2, 0x0412, 4)}, /* Telewell TW-LTE 4G */
1269 {QMI_FIXED_INTF(0x19d2, 0x1008, 4)}, /* ZTE (Vodafone) K3570-Z */
1270 {QMI_FIXED_INTF(0x19d2, 0x1010, 4)}, /* ZTE (Vodafone) K3571-Z */
1271 {QMI_FIXED_INTF(0x19d2, 0x1012, 4)},
1272 {QMI_FIXED_INTF(0x19d2, 0x1018, 3)}, /* ZTE (Vodafone) K5006-Z */
1273 {QMI_FIXED_INTF(0x19d2, 0x1021, 2)},
1274 {QMI_FIXED_INTF(0x19d2, 0x1245, 4)},
1275 {QMI_FIXED_INTF(0x19d2, 0x1247, 4)},
1276 {QMI_FIXED_INTF(0x19d2, 0x1252, 4)},
1277 {QMI_FIXED_INTF(0x19d2, 0x1254, 4)},
1278 {QMI_FIXED_INTF(0x19d2, 0x1255, 3)},
1279 {QMI_FIXED_INTF(0x19d2, 0x1255, 4)},
1280 {QMI_FIXED_INTF(0x19d2, 0x1256, 4)},
1281 {QMI_FIXED_INTF(0x19d2, 0x1270, 5)}, /* ZTE MF667 */
1282 {QMI_FIXED_INTF(0x19d2, 0x1401, 2)},
1283 {QMI_FIXED_INTF(0x19d2, 0x1402, 2)}, /* ZTE MF60 */
1284 {QMI_FIXED_INTF(0x19d2, 0x1424, 2)},
1285 {QMI_FIXED_INTF(0x19d2, 0x1425, 2)},
1286 {QMI_FIXED_INTF(0x19d2, 0x1426, 2)}, /* ZTE MF91 */
1287 {QMI_FIXED_INTF(0x19d2, 0x1428, 2)}, /* Telewell TW-LTE 4G v2 */
1288 {QMI_FIXED_INTF(0x19d2, 0x1432, 3)}, /* ZTE ME3620 */
1289 {QMI_FIXED_INTF(0x19d2, 0x2002, 4)}, /* ZTE (Vodafone) K3765-Z */
1290 {QMI_FIXED_INTF(0x2001, 0x7e16, 3)}, /* D-Link DWM-221 */
1291 {QMI_FIXED_INTF(0x2001, 0x7e19, 4)}, /* D-Link DWM-221 B1 */
1292 {QMI_FIXED_INTF(0x2001, 0x7e35, 4)}, /* D-Link DWM-222 */
1293 {QMI_FIXED_INTF(0x2001, 0x7e3d, 4)}, /* D-Link DWM-222 A2 */
1294 {QMI_FIXED_INTF(0x2020, 0x2031, 4)}, /* Olicard 600 */
1295 {QMI_FIXED_INTF(0x2020, 0x2033, 4)}, /* BroadMobi BM806U */
1296 {QMI_FIXED_INTF(0x2020, 0x2060, 4)}, /* BroadMobi BM818 */
1297 {QMI_FIXED_INTF(0x0f3d, 0x68a2, 8)}, /* Sierra Wireless MC7700 */
1298 {QMI_FIXED_INTF(0x114f, 0x68a2, 8)}, /* Sierra Wireless MC7750 */
1299 {QMI_FIXED_INTF(0x1199, 0x68a2, 8)}, /* Sierra Wireless MC7710 in QMI mode */
1300 {QMI_FIXED_INTF(0x1199, 0x68a2, 19)}, /* Sierra Wireless MC7710 in QMI mode */
1301 {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 8)}, /* Sierra Wireless MC7304/MC7354, WP76xx */
1302 {QMI_QUIRK_SET_DTR(0x1199, 0x68c0, 10)},/* Sierra Wireless MC7304/MC7354 */
1303 {QMI_FIXED_INTF(0x1199, 0x901c, 8)}, /* Sierra Wireless EM7700 */
1304 {QMI_FIXED_INTF(0x1199, 0x901f, 8)}, /* Sierra Wireless EM7355 */
1305 {QMI_FIXED_INTF(0x1199, 0x9041, 8)}, /* Sierra Wireless MC7305/MC7355 */
1306 {QMI_FIXED_INTF(0x1199, 0x9041, 10)}, /* Sierra Wireless MC7305/MC7355 */
1307 {QMI_FIXED_INTF(0x1199, 0x9051, 8)}, /* Netgear AirCard 340U */
1308 {QMI_FIXED_INTF(0x1199, 0x9053, 8)}, /* Sierra Wireless Modem */
1309 {QMI_FIXED_INTF(0x1199, 0x9054, 8)}, /* Sierra Wireless Modem */
1310 {QMI_FIXED_INTF(0x1199, 0x9055, 8)}, /* Netgear AirCard 341U */
1311 {QMI_FIXED_INTF(0x1199, 0x9056, 8)}, /* Sierra Wireless Modem */
1312 {QMI_FIXED_INTF(0x1199, 0x9057, 8)},
1313 {QMI_FIXED_INTF(0x1199, 0x9061, 8)}, /* Sierra Wireless Modem */
1314 {QMI_FIXED_INTF(0x1199, 0x9063, 8)}, /* Sierra Wireless EM7305 */
1315 {QMI_FIXED_INTF(0x1199, 0x9063, 10)}, /* Sierra Wireless EM7305 */
1316 {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 8)}, /* Sierra Wireless MC74xx */
1317 {QMI_QUIRK_SET_DTR(0x1199, 0x9071, 10)},/* Sierra Wireless MC74xx */
1318 {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 8)}, /* Sierra Wireless EM74xx */
1319 {QMI_QUIRK_SET_DTR(0x1199, 0x9079, 10)},/* Sierra Wireless EM74xx */
1320 {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 8)}, /* Sierra Wireless EM74xx */
1321 {QMI_QUIRK_SET_DTR(0x1199, 0x907b, 10)},/* Sierra Wireless EM74xx */
1322 {QMI_QUIRK_SET_DTR(0x1199, 0x9091, 8)}, /* Sierra Wireless EM7565 */
1323 {QMI_FIXED_INTF(0x1bbb, 0x011e, 4)}, /* Telekom Speedstick LTE II (Alcatel One Touch L100V LTE) */
1324 {QMI_FIXED_INTF(0x1bbb, 0x0203, 2)}, /* Alcatel L800MA */
1325 {QMI_FIXED_INTF(0x2357, 0x0201, 4)}, /* TP-LINK HSUPA Modem MA180 */
1326 {QMI_FIXED_INTF(0x2357, 0x9000, 4)}, /* TP-LINK MA260 */
1327 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1031, 3)}, /* Telit LE910C1-EUX */
1328 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1040, 2)}, /* Telit LE922A */
1329 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1050, 2)}, /* Telit FN980 */
1330 {QMI_FIXED_INTF(0x1bc7, 0x1100, 3)}, /* Telit ME910 */
1331 {QMI_FIXED_INTF(0x1bc7, 0x1101, 3)}, /* Telit ME910 dual modem */
1332 {QMI_FIXED_INTF(0x1bc7, 0x1200, 5)}, /* Telit LE920 */
1333 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1201, 2)}, /* Telit LE920, LE920A4 */
1334 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1260, 2)}, /* Telit LE910Cx */
1335 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1261, 2)}, /* Telit LE910Cx */
1336 {QMI_QUIRK_SET_DTR(0x1bc7, 0x1900, 1)}, /* Telit LN940 series */
1337 {QMI_FIXED_INTF(0x1c9e, 0x9801, 3)}, /* Telewell TW-3G HSPA+ */
1338 {QMI_FIXED_INTF(0x1c9e, 0x9803, 4)}, /* Telewell TW-3G HSPA+ */
1339 {QMI_FIXED_INTF(0x1c9e, 0x9b01, 3)}, /* XS Stick W100-2 from 4G Systems */
1340 {QMI_FIXED_INTF(0x0b3c, 0xc000, 4)}, /* Olivetti Olicard 100 */
1341 {QMI_FIXED_INTF(0x0b3c, 0xc001, 4)}, /* Olivetti Olicard 120 */
1342 {QMI_FIXED_INTF(0x0b3c, 0xc002, 4)}, /* Olivetti Olicard 140 */
1343 {QMI_FIXED_INTF(0x0b3c, 0xc004, 6)}, /* Olivetti Olicard 155 */
1344 {QMI_FIXED_INTF(0x0b3c, 0xc005, 6)}, /* Olivetti Olicard 200 */
1345 {QMI_FIXED_INTF(0x0b3c, 0xc00a, 6)}, /* Olivetti Olicard 160 */
1346 {QMI_FIXED_INTF(0x0b3c, 0xc00b, 4)}, /* Olivetti Olicard 500 */
1347 {QMI_FIXED_INTF(0x1e2d, 0x0060, 4)}, /* Cinterion PLxx */
1348 {QMI_FIXED_INTF(0x1e2d, 0x0053, 4)}, /* Cinterion PHxx,PXxx */
1349 {QMI_FIXED_INTF(0x1e2d, 0x0063, 10)}, /* Cinterion ALASxx (1 RmNet) */
1350 {QMI_FIXED_INTF(0x1e2d, 0x0082, 4)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1351 {QMI_FIXED_INTF(0x1e2d, 0x0082, 5)}, /* Cinterion PHxx,PXxx (2 RmNet) */
1352 {QMI_FIXED_INTF(0x1e2d, 0x0083, 4)}, /* Cinterion PHxx,PXxx (1 RmNet + USB Audio)*/
1353 {QMI_QUIRK_SET_DTR(0x1e2d, 0x00b0, 4)}, /* Cinterion CLS8 */
1354 {QMI_FIXED_INTF(0x413c, 0x81a2, 8)}, /* Dell Wireless 5806 Gobi(TM) 4G LTE Mobile Broadband Card */
1355 {QMI_FIXED_INTF(0x413c, 0x81a3, 8)}, /* Dell Wireless 5570 HSPA+ (42Mbps) Mobile Broadband Card */
1356 {QMI_FIXED_INTF(0x413c, 0x81a4, 8)}, /* Dell Wireless 5570e HSPA+ (42Mbps) Mobile Broadband Card */
1357 {QMI_FIXED_INTF(0x413c, 0x81a8, 8)}, /* Dell Wireless 5808 Gobi(TM) 4G LTE Mobile Broadband Card */
1358 {QMI_FIXED_INTF(0x413c, 0x81a9, 8)}, /* Dell Wireless 5808e Gobi(TM) 4G LTE Mobile Broadband Card */
1359 {QMI_FIXED_INTF(0x413c, 0x81b1, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card */
1360 {QMI_FIXED_INTF(0x413c, 0x81b3, 8)}, /* Dell Wireless 5809e Gobi(TM) 4G LTE Mobile Broadband Card (rev3) */
1361 {QMI_FIXED_INTF(0x413c, 0x81b6, 8)}, /* Dell Wireless 5811e */
1362 {QMI_FIXED_INTF(0x413c, 0x81b6, 10)}, /* Dell Wireless 5811e */
1363 {QMI_FIXED_INTF(0x413c, 0x81cc, 8)}, /* Dell Wireless 5816e */
1364 {QMI_FIXED_INTF(0x413c, 0x81d7, 0)}, /* Dell Wireless 5821e */
1365 {QMI_FIXED_INTF(0x413c, 0x81d7, 1)}, /* Dell Wireless 5821e preproduction config */
1366 {QMI_FIXED_INTF(0x413c, 0x81e0, 0)}, /* Dell Wireless 5821e with eSIM support*/
1367 {QMI_FIXED_INTF(0x03f0, 0x4e1d, 8)}, /* HP lt4111 LTE/EV-DO/HSPA+ Gobi 4G Module */
1368 {QMI_FIXED_INTF(0x03f0, 0x9d1d, 1)}, /* HP lt4120 Snapdragon X5 LTE */
1369 {QMI_FIXED_INTF(0x22de, 0x9061, 3)}, /* WeTelecom WPD-600N */
1370 {QMI_QUIRK_SET_DTR(0x1e0e, 0x9001, 5)}, /* SIMCom 7100E, 7230E, 7600E ++ */
1371 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0121, 4)}, /* Quectel EC21 Mini PCIe */
1372 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0191, 4)}, /* Quectel EG91 */
1373 {QMI_QUIRK_SET_DTR(0x2c7c, 0x0195, 4)}, /* Quectel EG95 */
1374 {QMI_FIXED_INTF(0x2c7c, 0x0296, 4)}, /* Quectel BG96 */
1375 {QMI_QUIRK_SET_DTR(0x2cb7, 0x0104, 4)}, /* Fibocom NL678 series */
1376 {QMI_FIXED_INTF(0x0489, 0xe0b4, 0)}, /* Foxconn T77W968 LTE */
1377 {QMI_FIXED_INTF(0x0489, 0xe0b5, 0)}, /* Foxconn T77W968 LTE with eSIM support*/
1378 {QMI_FIXED_INTF(0x2692, 0x9025, 4)}, /* Cellient MPL200 (rebranded Qualcomm 05c6:9025) */
1379
1380 /* 4. Gobi 1000 devices */
1381 {QMI_GOBI1K_DEVICE(0x05c6, 0x9212)}, /* Acer Gobi Modem Device */
1382 {QMI_GOBI1K_DEVICE(0x03f0, 0x1f1d)}, /* HP un2400 Gobi Modem Device */
1383 {QMI_GOBI1K_DEVICE(0x04da, 0x250d)}, /* Panasonic Gobi Modem device */
1384 {QMI_GOBI1K_DEVICE(0x413c, 0x8172)}, /* Dell Gobi Modem device */
1385 {QMI_GOBI1K_DEVICE(0x1410, 0xa001)}, /* Novatel/Verizon USB-1000 */
1386 {QMI_GOBI1K_DEVICE(0x1410, 0xa002)}, /* Novatel Gobi Modem device */
1387 {QMI_GOBI1K_DEVICE(0x1410, 0xa003)}, /* Novatel Gobi Modem device */
1388 {QMI_GOBI1K_DEVICE(0x1410, 0xa004)}, /* Novatel Gobi Modem device */
1389 {QMI_GOBI1K_DEVICE(0x1410, 0xa005)}, /* Novatel Gobi Modem device */
1390 {QMI_GOBI1K_DEVICE(0x1410, 0xa006)}, /* Novatel Gobi Modem device */
1391 {QMI_GOBI1K_DEVICE(0x1410, 0xa007)}, /* Novatel Gobi Modem device */
1392 {QMI_GOBI1K_DEVICE(0x0b05, 0x1776)}, /* Asus Gobi Modem device */
1393 {QMI_GOBI1K_DEVICE(0x19d2, 0xfff3)}, /* ONDA Gobi Modem device */
1394 {QMI_GOBI1K_DEVICE(0x05c6, 0x9001)}, /* Generic Gobi Modem device */
1395 {QMI_GOBI1K_DEVICE(0x05c6, 0x9002)}, /* Generic Gobi Modem device */
1396 {QMI_GOBI1K_DEVICE(0x05c6, 0x9202)}, /* Generic Gobi Modem device */
1397 {QMI_GOBI1K_DEVICE(0x05c6, 0x9203)}, /* Generic Gobi Modem device */
1398 {QMI_GOBI1K_DEVICE(0x05c6, 0x9222)}, /* Generic Gobi Modem device */
1399 {QMI_GOBI1K_DEVICE(0x05c6, 0x9009)}, /* Generic Gobi Modem device */
1400
1401 /* 5. Gobi 2000 and 3000 devices */
1402 {QMI_GOBI_DEVICE(0x413c, 0x8186)}, /* Dell Gobi 2000 Modem device (N0218, VU936) */
1403 {QMI_GOBI_DEVICE(0x413c, 0x8194)}, /* Dell Gobi 3000 Composite */
1404 {QMI_GOBI_DEVICE(0x05c6, 0x920b)}, /* Generic Gobi 2000 Modem device */
1405 {QMI_GOBI_DEVICE(0x05c6, 0x9225)}, /* Sony Gobi 2000 Modem device (N0279, VU730) */
1406 {QMI_GOBI_DEVICE(0x05c6, 0x9245)}, /* Samsung Gobi 2000 Modem device (VL176) */
1407 {QMI_GOBI_DEVICE(0x03f0, 0x251d)}, /* HP Gobi 2000 Modem device (VP412) */
1408 {QMI_GOBI_DEVICE(0x05c6, 0x9215)}, /* Acer Gobi 2000 Modem device (VP413) */
1409 {QMI_FIXED_INTF(0x05c6, 0x9215, 4)}, /* Quectel EC20 Mini PCIe */
1410 {QMI_GOBI_DEVICE(0x05c6, 0x9265)}, /* Asus Gobi 2000 Modem device (VR305) */
1411 {QMI_GOBI_DEVICE(0x05c6, 0x9235)}, /* Top Global Gobi 2000 Modem device (VR306) */
1412 {QMI_GOBI_DEVICE(0x05c6, 0x9275)}, /* iRex Technologies Gobi 2000 Modem device (VR307) */
1413 {QMI_GOBI_DEVICE(0x0af0, 0x8120)}, /* Option GTM681W */
1414 {QMI_GOBI_DEVICE(0x1199, 0x68a5)}, /* Sierra Wireless Modem */
1415 {QMI_GOBI_DEVICE(0x1199, 0x68a9)}, /* Sierra Wireless Modem */
1416 {QMI_GOBI_DEVICE(0x1199, 0x9001)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1417 {QMI_GOBI_DEVICE(0x1199, 0x9002)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1418 {QMI_GOBI_DEVICE(0x1199, 0x9003)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1419 {QMI_GOBI_DEVICE(0x1199, 0x9004)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1420 {QMI_GOBI_DEVICE(0x1199, 0x9005)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1421 {QMI_GOBI_DEVICE(0x1199, 0x9006)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1422 {QMI_GOBI_DEVICE(0x1199, 0x9007)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1423 {QMI_GOBI_DEVICE(0x1199, 0x9008)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1424 {QMI_GOBI_DEVICE(0x1199, 0x9009)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1425 {QMI_GOBI_DEVICE(0x1199, 0x900a)}, /* Sierra Wireless Gobi 2000 Modem device (VT773) */
1426 {QMI_GOBI_DEVICE(0x1199, 0x9011)}, /* Sierra Wireless Gobi 2000 Modem device (MC8305) */
1427 {QMI_GOBI_DEVICE(0x16d8, 0x8002)}, /* CMDTech Gobi 2000 Modem device (VU922) */
1428 {QMI_GOBI_DEVICE(0x05c6, 0x9205)}, /* Gobi 2000 Modem device */
1429 {QMI_GOBI_DEVICE(0x1199, 0x9013)}, /* Sierra Wireless Gobi 3000 Modem device (MC8355) */
1430 {QMI_GOBI_DEVICE(0x03f0, 0x371d)}, /* HP un2430 Mobile Broadband Module */
1431 {QMI_GOBI_DEVICE(0x1199, 0x9015)}, /* Sierra Wireless Gobi 3000 Modem device */
1432 {QMI_GOBI_DEVICE(0x1199, 0x9019)}, /* Sierra Wireless Gobi 3000 Modem device */
1433 {QMI_GOBI_DEVICE(0x1199, 0x901b)}, /* Sierra Wireless MC7770 */
1434 {QMI_GOBI_DEVICE(0x12d1, 0x14f1)}, /* Sony Gobi 3000 Composite */
1435 {QMI_GOBI_DEVICE(0x1410, 0xa021)}, /* Foxconn Gobi 3000 Modem device (Novatel E396) */
1436
1437 { } /* END */
1438};
1439MODULE_DEVICE_TABLE(usb, products);
1440
1441static bool quectel_ec20_detected(struct usb_interface *intf)
1442{
1443 struct usb_device *dev = interface_to_usbdev(intf);
1444
1445 if (dev->actconfig &&
1446 le16_to_cpu(dev->descriptor.idVendor) == 0x05c6 &&
1447 le16_to_cpu(dev->descriptor.idProduct) == 0x9215 &&
1448 dev->actconfig->desc.bNumInterfaces == 5)
1449 return true;
1450
1451 return false;
1452}
1453
1454static int qmi_wwan_probe(struct usb_interface *intf,
1455 const struct usb_device_id *prod)
1456{
1457 struct usb_device_id *id = (struct usb_device_id *)prod;
1458 struct usb_interface_descriptor *desc = &intf->cur_altsetting->desc;
1459
1460 /* Workaround to enable dynamic IDs. This disables usbnet
1461 * blacklisting functionality. Which, if required, can be
1462 * reimplemented here by using a magic "blacklist" value
1463 * instead of 0 in the static device id table
1464 */
1465 if (!id->driver_info) {
1466 dev_dbg(&intf->dev, "setting defaults for dynamic device id\n");
1467 id->driver_info = (unsigned long)&qmi_wwan_info;
1468 }
1469
1470 /* There are devices where the same interface number can be
1471 * configured as different functions. We should only bind to
1472 * vendor specific functions when matching on interface number
1473 */
1474 if (id->match_flags & USB_DEVICE_ID_MATCH_INT_NUMBER &&
1475 desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) {
1476 dev_dbg(&intf->dev,
1477 "Rejecting interface number match for class %02x\n",
1478 desc->bInterfaceClass);
1479 return -ENODEV;
1480 }
1481
1482 /* Quectel EC20 quirk where we've QMI on interface 4 instead of 0 */
1483 if (quectel_ec20_detected(intf) && desc->bInterfaceNumber == 0) {
1484 dev_dbg(&intf->dev, "Quectel EC20 quirk, skipping interface 0\n");
1485 return -ENODEV;
1486 }
1487
1488 /* Several Quectel modems supports dynamic interface configuration, so
1489 * we need to match on class/subclass/protocol. These values are
1490 * identical for the diagnostic- and QMI-interface, but bNumEndpoints is
1491 * different. Ignore the current interface if the number of endpoints
1492 * equals the number for the diag interface (two).
1493 */
1494 if (desc->bNumEndpoints == 2)
1495 return -ENODEV;
1496
1497 return usbnet_probe(intf, id);
1498}
1499
1500static void qmi_wwan_disconnect(struct usb_interface *intf)
1501{
1502 struct usbnet *dev = usb_get_intfdata(intf);
1503 struct qmi_wwan_state *info;
1504 struct list_head *iter;
1505 struct net_device *ldev;
1506 LIST_HEAD(list);
1507
1508 /* called twice if separate control and data intf */
1509 if (!dev)
1510 return;
1511 info = (void *)&dev->data;
1512 if (info->flags & QMI_WWAN_FLAG_MUX) {
1513 if (!rtnl_trylock()) {
1514 restart_syscall();
1515 return;
1516 }
1517 rcu_read_lock();
1518 netdev_for_each_upper_dev_rcu(dev->net, ldev, iter)
1519 qmimux_unregister_device(ldev, &list);
1520 rcu_read_unlock();
1521 unregister_netdevice_many(&list);
1522 rtnl_unlock();
1523 info->flags &= ~QMI_WWAN_FLAG_MUX;
1524 }
1525 usbnet_disconnect(intf);
1526}
1527
1528static struct usb_driver qmi_wwan_driver = {
1529 .name = "qmi_wwan",
1530 .id_table = products,
1531 .probe = qmi_wwan_probe,
1532 .disconnect = qmi_wwan_disconnect,
1533 .suspend = qmi_wwan_suspend,
1534 .resume = qmi_wwan_resume,
1535 .reset_resume = qmi_wwan_resume,
1536 .supports_autosuspend = 1,
1537 .disable_hub_initiated_lpm = 1,
1538};
1539
1540module_usb_driver(qmi_wwan_driver);
1541
1542MODULE_AUTHOR("Bjørn Mork <bjorn@mork.no>");
1543MODULE_DESCRIPTION("Qualcomm MSM Interface (QMI) WWAN driver");
1544MODULE_LICENSE("GPL");