830 	struct cxl_mbox_transfer_fw *transfer;  in cxl_mem_abort_fw_xfer()  local
834 	transfer = kzalloc_flex(*transfer, data, 0);  in cxl_mem_abort_fw_xfer()
835 	if (!transfer)  in cxl_mem_abort_fw_xfer()
841 		.size_in = sizeof(*transfer),  in cxl_mem_abort_fw_xfer()
842 		.payload_in = transfer,  in cxl_mem_abort_fw_xfer()
847 	transfer->action = CXL_FW_TRANSFER_ACTION_ABORT;  in cxl_mem_abort_fw_xfer()
850 	kfree(transfer);  in cxl_mem_abort_fw_xfer()
879 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_prepare()  local
885 	mds->fw.oneshot = struct_size(transfer, data, size) <  in cxl_fw_prepare()
908 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_write()  local
930 	cur_size = min_t(size_t, size, cxl_mbox->payload_size - sizeof(*transfer));  in cxl_fw_write()
933 	size_in = struct_size(transfer, data, cur_size);  in cxl_fw_write()
946 	transfer = kzalloc(size_in, GFP_KERNEL);  in cxl_fw_write()
947 	if (!transfer)  in cxl_fw_write()
950 	transfer->offset = cpu_to_le32(offset / CXL_FW_TRANSFER_ALIGNMENT);  in cxl_fw_write()
951 	memcpy(transfer->data, data + offset, cur_size);  in cxl_fw_write()
953 		transfer->action = CXL_FW_TRANSFER_ACTION_FULL;  in cxl_fw_write()
954 		transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
957 			transfer->action = CXL_FW_TRANSFER_ACTION_INITIATE;  in cxl_fw_write()
959 			transfer->action = CXL_FW_TRANSFER_ACTION_END;  in cxl_fw_write()
960 			transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
962 			transfer->action = CXL_FW_TRANSFER_ACTION_CONTINUE;  in cxl_fw_write()
969 		.payload_in = transfer,  in cxl_fw_write()
998 	kfree(transfer);  in cxl_fw_write()