From nobody Fri Sep 25 16:01:28 2026 Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azon11011048.outbound.protection.outlook.com [52.101.57.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 35D3A5427E5; Thu, 10 Sep 2026 17:03:34 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.57.48 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059828; cv=fail; b=eMcMcjrvl5h1yGzU2bnl3Fs+W9Bjt0C+m08PDCGXbRWn0GisJFnBt13RoVE/KmJXgRJ05OhCrzR7h/mp0X/8AWxY/ddC3PGvuehwPww7dt6PDBENoauG2PPbJoLBAvG+3PtoWdxomcjLsUQc4GgDSfiiCFAnNhd676RqBw+rgtY= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059828; c=relaxed/simple; bh=NK5Jw5ZEdhSU6mORn/5tpxzrywaxyi3AoLZi5RCAADY=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=Prv8A81qwn5apsGpBZth+eD4aB3vgpIbm/LyhP0H5aq52NYvBv8ToXvw6mV1zwnPVqVBllruXk4MEWnueoqKRqYL1FVS1gJhpn5OL7qB5PR7HkUXvV8JZD4Lt36euKKluY49TE3GlzM639oDQZjPFCj/tOTdgpprMWr/RwXo49Q= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=fuUy7U6A; arc=fail smtp.client-ip=52.101.57.48 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="fuUy7U6A" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=mHIcf/2ewDkR8ZE/jm1pAi2BVG2hZntQZ3D1OL7+TyIlZ8UJhIJze1L3CxK/3uoiTFjTRRM5qbLZpu2jReg840FekI2YVAAiLXwRwQ80GwuZwtJx2YyecNxuV71NmizZ6cbUOUqkwxrChm/USeCwREhNuwnbVhZQFeLSU7oJZyD/XAJ7npcCAqIbqhiCKVL5P79TtOGvp25+45j58cPrnIPzwZbbKRaXOQa7PPugsMmMyT5hiGb5KdhWPIr9keDL5HbOcnTiDGoTRGnsoNYip6icWS7jodniVCmIBqs7108lKwG8+oQpkwE7bPFQOcRhG4vKu+TmD1OJsMQGA5h9kw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Fv0buWwAo/g+R6dCYWOlcMz+W11muRGyXpUOXytQozw=; b=q3gsbJI3Ow7LeiOcUv6VTGZmBzW+yB/Bmu/NsSN2z9nTtT4H8keDsNfUsxz/hRkay0uDKIWfttGx5eAcOvq+IW/aZr9gmdNHq86TWGWEnpMtOesyHWQnODgjZH+Df4aPyZveePraN1kWMk4JbKqdi//iwSdoap7uiUYu3adMrUO09uSd6DgLsTv9Gxl5mZxTAPThp7nhYjiFtR+HYWdKuz6ifLaEoMADPusdx9L2dXH+VM+sUJ7ZRPmf/7Q5bwwR7o0TkLx76J08nOQUKjNCyBBMVjT9D0ilvSmADSAXzGcFefIzjLLs54oXLaIHSdCVtT5GzDz8eH+aGrACHzriHg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Fv0buWwAo/g+R6dCYWOlcMz+W11muRGyXpUOXytQozw=; b=fuUy7U6ATD2zyDpnl23dLbqnnkVDp+fCLPBBNxEAQH3v8rknQZf10vIBUcpIbKrNkmol3Rjq24AIv80/jvrHCr6XuIiyq2ETII0CGkUIvVpaJngMbYnzT9Kw10IyGAYPfzsJ/xPZZxiqua8MwCdPxbEDNppF2dLxuwMp9x5YWkM= Received: from CH0PR04CA0014.namprd04.prod.outlook.com (2603:10b6:610:76::19) by SA1PR12MB9248.namprd12.prod.outlook.com (2603:10b6:806:3a3::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:02:21 +0000 Received: from CH1PEPF0000AD78.namprd04.prod.outlook.com (2603:10b6:610:76:cafe::2) by CH0PR04CA0014.outlook.office365.com (2603:10b6:610:76::19) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:02:20 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH1PEPF0000AD78.mail.protection.outlook.com (10.167.244.56) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:02:20 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:02:19 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 1/7] firmware_loader: Stop pinning modules on registration Date: Thu, 10 Sep 2026 17:01:56 +0000 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD78:EE_|SA1PR12MB9248:EE_ X-MS-Office365-Filtering-Correlation-Id: f5a4433a-d5ee-402f-8e29-08df0f5d46c5 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|7416014|376014|36860700016|82310400026|22082099003|18002099003|11063799006|56012099006|10067099003; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(7416014)(376014)(36860700016)(82310400026)(22082099003)(18002099003)(11063799006)(56012099006)(10067099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: GXGwWTb8RczZwxHIkvIJANvuefmUNDm3VvOngLqQ2r03aKq9hqI1d+1A0as7rmj3aFYd/e6vq5iLB9ksX+dJpMOI443AJ+mCuZy3B8hfy6jJgcR2qmePoeyKH8qXuzWbHKXyr4RjvxuNNx4VKzhr2wdzawuoc5AM3pmANcKDvhOyG/BQ0Good+MbA+qkqZNOm1BhUmlggBwxB4erxiVloWpgVazUhPxpvjecsX0jSb/8l4UOVslQf/tay4HsAKjhYGvKduYpYieCZttvUJw+BSBatRR3SLs0FrtmpFxAcjL604TNkOn/AVMEiINTvm2/N9jMwAGqJywXZOFCUkwiIVNK2q7wO+8/1piYCmm7jnJHP3QGW1wyzl3JV1G1IsCU+WWd2NCdJKv3s6mZdo/vioFo48NhAr88Xb3GK2qsut/AT19NcPHRdu7I88LasvLM X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:02:20.3324 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: f5a4433a-d5ee-402f-8e29-08df0f5d46c5 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH1PEPF0000AD78.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR12MB9248 Content-Type: text/plain; charset="utf-8" From: Dan Williams The module reference counting can result in callers pinning themselves in a circular loop. The module reference counting is unnecessary. firmware_upload_unregister() must be able to guarantee that all ops are idle at return. All ops are either called from sysfs or the workqueue, so unregister sysfs to stop submissions, cancel any started transfers, flush cancelled transfers, and then release the device. This also solves a theoretical race of new submissions starting between flush_work() and device_unregister(). The module reference was not protecting against that race. Cc: Luis Chamberlain Cc: Russ Weight Cc: Danilo Krummrich Cc: Greg Kroah-Hartman Cc: "Rafael J. Wysocki" Reported-by: Chao Gao Tested-by: Chao Gao Closes: https://sashiko.dev/#/patchset/20260326084448.29947-1-chao.gao%40in= tel.com?patch=3D10705 Fixes: 97730bbb242c ("firmware_loader: Add firmware-upload support") Signed-off-by: Dan Williams Signed-off-by: Pratik R. Sampat --- drivers/base/firmware_loader/sysfs_upload.c | 31 ++++++++++----------- 1 file changed, 14 insertions(+), 17 deletions(-) diff --git a/drivers/base/firmware_loader/sysfs_upload.c b/drivers/base/fir= mware_loader/sysfs_upload.c index efc33294212f..6f2123538682 100644 --- a/drivers/base/firmware_loader/sysfs_upload.c +++ b/drivers/base/firmware_loader/sysfs_upload.c @@ -312,14 +312,9 @@ firmware_upload_register(struct module *module, struct= device *parent, return ERR_PTR(-EINVAL); } =20 - if (!try_module_get(module)) - return ERR_PTR(-EFAULT); - fw_upload =3D kzalloc_obj(*fw_upload); - if (!fw_upload) { - ret =3D -ENOMEM; - goto exit_module_put; - } + if (!fw_upload) + return ERR_PTR(-ENOMEM); =20 fw_upload_priv =3D kzalloc_obj(*fw_upload_priv); if (!fw_upload_priv) { @@ -361,7 +356,7 @@ firmware_upload_register(struct module *module, struct = device *parent, if (ret) { dev_err(fw_dev, "%s: device_register failed\n", __func__); put_device(fw_dev); - goto exit_module_put; + return ERR_PTR(ret); } =20 return fw_upload; @@ -372,9 +367,6 @@ firmware_upload_register(struct module *module, struct = device *parent, free_fw_upload: kfree(fw_upload); =20 -exit_module_put: - module_put(module); - return ERR_PTR(ret); } EXPORT_SYMBOL_GPL(firmware_upload_register); @@ -386,23 +378,28 @@ EXPORT_SYMBOL_GPL(firmware_upload_register); void firmware_upload_unregister(struct fw_upload *fw_upload) { struct fw_sysfs *fw_sysfs =3D fw_upload->priv; + struct device *parent =3D fw_sysfs->dev.parent; struct fw_upload_priv *fw_upload_priv =3D fw_sysfs->fw_upload_priv; - struct module *module =3D fw_upload_priv->module; + + /* hold a parent reference while child is unregistered */ + get_device(parent); + + /* shutdown the sysfs interface to block new requests */ + device_del(&fw_sysfs->dev); =20 mutex_lock(&fw_upload_priv->lock); if (fw_upload_priv->progress =3D=3D FW_UPLOAD_PROG_IDLE) { mutex_unlock(&fw_upload_priv->lock); - goto unregister; + goto release; } =20 fw_upload_priv->ops->cancel(fw_upload); mutex_unlock(&fw_upload_priv->lock); =20 +release: /* Ensure lower-level device-driver is finished */ flush_work(&fw_upload_priv->work); - -unregister: - device_unregister(&fw_sysfs->dev); - module_put(module); + put_device(&fw_sysfs->dev); + put_device(parent); } EXPORT_SYMBOL_GPL(firmware_upload_unregister); --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from DM1PR04CU001.outbound.protection.outlook.com (mail-centralusazon11010028.outbound.protection.outlook.com [52.101.61.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id EE93A531AE2; Thu, 10 Sep 2026 17:02:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.61.28 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059771; cv=fail; b=AM4i9zSLnF/C6tv+dkEkZqrP8mQ71hR20Y15lzGfmUPN00kDzy1o60TRyKidE3GV1R2CucZk2s/EmPAWtQOW2HWsBOOkvZY/2eZZ7PMr/Rl108giKhgcet6wVn+6iUvl3H3xOPOUxxMUVlDNeyW48nGAz7UXKrMXxih8Glf7Wh0= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059771; c=relaxed/simple; bh=vXDSKZelxNCKXKbYssSyB4TbWqvFFRO5sr9P11yiqrg=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=TlI5EUW1hsdLRYoMOCPqHMOjnX2Rx8hxMihNXbiX9zxGhvBZLubPB2A1TQZR8ZdzRod4DQMCSUV6+NgRHxrICWtebFAKj6lQYbF9+Z0k2awO5xOh12mPSIaIDNDUZfenZBrbSmlPKX/VfyY0Gnnb1FJ6uQoNrMZRlIJJRBBVRHo= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=maAMbPyv; arc=fail smtp.client-ip=52.101.61.28 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="maAMbPyv" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ns7LjPnM5LUVjEOgnxg+B8P41adcERdoUY5lZVciYKvVeqO8jBdWT6W4OsmxO67RlbRLaG2ml4zllS3pt7YEZwaKMbBR32etXqPow7tHa8feP8KR5UhSnNINibkbJLaTILospENitvgl1Bljqw3XedBhtdWTK7lYDFAZRdR3W3hwgXUE5l3gsaEw2vFi0EcU5iUHSfUDcb2sxw648GLPUj7O4fY1PV2n/O0Wxujj5EaJwoqQUK8JQkzJObVtFBnTN13ubN1dabAwVE/1F2P84Iku7cWDdFikgLM2Eq+gZW0t6r1959QjYEEfOxtke3JEQWOJGoyZg7VQVHXhn9tigA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=bFh2VopaElzfTKLt8aBDjde45autjGvJbfnUGE/+gxU=; b=mzryIWeYWBPN4TEjZ6EFimSkM3T9wii9ASvow7q9U1P3nuklTgtzmQPIBGn52jZvp4uNZS4zIkR9LehopCP6+zIhRddMqK/eZi0PDtzLR24+4mtY/5vGNbJg6iFf5HJST7KoFlVrkmOGdkcvQqfZqA5sZqyD5ANF7bXO5iujrV3rw+wKN/REbFQ3nUK9tLZuLrLrL5voQwaY2LyBgEe/h44u7GQBE3C3mlzmFeOPoMpkSKq5Mv5oesZ+4TIXMzjODNN38cufQ7Pq2Xw/TkQOfue5TodJVEGoUjsyLWPCUKGjgJALXEbak/kjypWGLOjfEKnoPrizmifWS5oVNMQw5g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bFh2VopaElzfTKLt8aBDjde45autjGvJbfnUGE/+gxU=; b=maAMbPyvhkULL4cwH4VouO1Xx2MYvkUaMZkcYxe/WNtbjdyeVAbJ2vdNvbive1/tTYVFA6M6+oWjNp4fjOvha2ZrplwfSfxBBlPRCmufggijDFiO7dt4EXYiOGkaov9JUPpUMveWAJLY6UJ9PMUB0QQ87pLBXCmVHW4NRaaXAvY= Received: from CH0PR03CA0077.namprd03.prod.outlook.com (2603:10b6:610:cc::22) by CY3PR12MB9631.namprd12.prod.outlook.com (2603:10b6:930:ff::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:02:31 +0000 Received: from CH1PEPF0000AD7A.namprd04.prod.outlook.com (2603:10b6:610:cc:cafe::9a) by CH0PR03CA0077.outlook.office365.com (2603:10b6:610:cc::22) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:02:31 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH1PEPF0000AD7A.mail.protection.outlook.com (10.167.244.59) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:02:31 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:02:30 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 2/7] firmware_loader: Stop pinning parent device per workqueue invocation Date: Thu, 10 Sep 2026 17:01:57 +0000 Message-ID: <91ec37f4f318065d91ed03f92f521f02288aa59e.1789059392.git.prsampat@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD7A:EE_|CY3PR12MB9631:EE_ X-MS-Office365-Filtering-Correlation-Id: d21df671-2cef-4e34-698d-08df0f5d4d5d X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|36860700016|7416014|82310400026|23010399003|1800799024|10067099003|22082099003|18002099003|11063799006|56012099006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(36860700016)(7416014)(82310400026)(23010399003)(1800799024)(10067099003)(22082099003)(18002099003)(11063799006)(56012099006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 7UuOECnHlBIGUrSsCUni9cpHP/lNWX2rV4OgXuKDCGQhfb6iDjNpg86XvwsKMklVYzaMlcSpfEjflLH1VlXYDq7r/pUruMNxU2GXHw4QcY8zmcJTFupgM9n3P+hoiBc84UfNrEBVdyk6UPPhKYl32PzrGLYkKzKM38vtUAlqbV85pA8Pyio4QKc1Dmv29RlLEmLjUvGXTjYiaX0ZF2XLrXSkbMzSoRMgcBOyxsl/3Cntgsguzr3NX/9495XCJ6aL2d8RD1N2QFI6i/cx7V9h1fpw8vOakmAlEMB4jTqHZ4IxXlz3ypUv1Or/gC06fr5NOD23TMkzjXN96+PrVxgg62S6ct17Y8xGmn2lHqYw7R3d9s0j9LMhgOEY9rtpENT08+l++oWHTD+jH/BVCcYLn2yBfytcsnkiYqEwHP2YqELNf/44E/J0a+VPol6+6gs2 X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:02:31.3904 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: d21df671-2cef-4e34-698d-08df0f5d4d5d X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH1PEPF0000AD7A.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY3PR12MB9631 Content-Type: text/plain; charset="utf-8" From: Dan Williams The device core pins parent devices while children are registered. As long as all usage of the parent device by the firmware_loader ends at firmware_upload_unregister(), no per queue_work() reference is needed. Now that firmware_upload_unregister() holds its own parent device reference over the child device_del() and flush_work() events, the per queue_work() reference can be deleted. Cc: Luis Chamberlain Cc: Russ Weight Cc: Danilo Krummrich Cc: Greg Kroah-Hartman Cc: "Rafael J. Wysocki" Cc: Chao Gao Signed-off-by: Dan Williams [chao.gao@intel.com: drop unused fw_dev in fw_upload_start()] Signed-off-by: Pratik R. Sampat --- drivers/base/firmware_loader/sysfs_upload.c | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) diff --git a/drivers/base/firmware_loader/sysfs_upload.c b/drivers/base/fir= mware_loader/sysfs_upload.c index 6f2123538682..890a242a7c20 100644 --- a/drivers/base/firmware_loader/sysfs_upload.c +++ b/drivers/base/firmware_loader/sysfs_upload.c @@ -176,7 +176,7 @@ static void fw_upload_main(struct work_struct *work) ret =3D fwlp->ops->prepare(fwl, fwlp->data, fwlp->remaining_size); if (ret !=3D FW_UPLOAD_ERR_NONE) { fw_upload_set_error(fwlp, ret); - goto putdev_exit; + goto out; } =20 fw_upload_update_progress(fwlp, FW_UPLOAD_PROG_TRANSFERRING); @@ -205,9 +205,7 @@ static void fw_upload_main(struct work_struct *work) if (fwlp->ops->cleanup) fwlp->ops->cleanup(fwl); =20 -putdev_exit: - put_device(fw_dev->parent); - +out: /* * Note: fwlp->remaining_size is left unmodified here to provide * additional information on errors. It will be reinitialized when @@ -228,7 +226,6 @@ static void fw_upload_main(struct work_struct *work) int fw_upload_start(struct fw_sysfs *fw_sysfs) { struct fw_priv *fw_priv =3D fw_sysfs->fw_priv; - struct device *fw_dev =3D &fw_sysfs->dev; struct fw_upload_priv *fwlp; =20 if (!fw_sysfs->fw_upload_priv) @@ -249,8 +246,6 @@ int fw_upload_start(struct fw_sysfs *fw_sysfs) return -EBUSY; } =20 - get_device(fw_dev->parent); /* released in fw_upload_main */ - fwlp->progress =3D FW_UPLOAD_PROG_RECEIVING; fwlp->err_code =3D 0; fwlp->remaining_size =3D fw_priv->size; --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from BYAPR05CU005.outbound.protection.outlook.com (mail-westusazon11010006.outbound.protection.outlook.com [52.101.85.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DC6E951C356; Thu, 10 Sep 2026 17:02:53 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.85.6 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059778; cv=fail; b=TPJW1ouh5yCkZS6K2hQSUJzt7/gtxEVFw8ytqZ8sHYhGghHpKKlDnn41uI6vPpJEroqFPR1hEatVz+w4U8zn8DBA8XkyCRAyVrZRPd5Ccf61S4nsmwsCLk7R5UfVyKyovrviKStPiZKQqmK+9wJ3HbCLIbslA7n8fDcl5ZFeSQk= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059778; c=relaxed/simple; bh=ZGtXSeAJZz/yOI1vr+67nkw+LNuTcLgWxze/8OmOf3c=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=MgJ4oCKn3sOz70ltGPvFBp462ulb50Lzfs78zRxGEfhBVkAFIjD/s6eKVqsaYaCeN0leSn9X4PRr/X0sC+k97U4myk6OV/WTHo6ngEblFHXDoiA0O+XSAkw4MMT8ogbScn4YaZVIKIG7dg8dAAjmdNAy8xZuJm+kiNeU5tGy124= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=kUchwPvW; arc=fail smtp.client-ip=52.101.85.6 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="kUchwPvW" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=B5DrDo6GOknUWHmAyGt0TjV80ZX85HqMovnf2wXpxydT/EEeCIZzgx2e0mhD6fq8ROaw7wfCyziYUM2VC6f/Stn0OyaCboA3fHeCogwPocuN8/si313PLVhBQ0edx2U55G+23SVYws/Rxp7sCioAx0kre1pAtk6mNPcGl3xur+T8+UsT1MUJjj16vJafupr6I6JhEv+uk5zb+HTYacTvgtdaGsdKR3W7DGAJqO88XJyanQimlWml7tO/NzU/4ln3ZWvzbXitsZcmQ5IdHG4WA9mTGtjSnndBecISOd1XX4W4/zGUgl7eRQ/tiTXYlu66MqfuKxuLwMU2C9Th1lc4zA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=4/BoV4hqRgwNw7odkh4jDkqTT6DGoZwDLnGcrR92Qn4=; b=rPpNG7DpxCHpv+D3uRrdRiJYlC7eaQwq1tpqdatWV6kJFw5Ua0HpPoejipMreFsXyd5IUbCYg9ZwFX5fmHafD6dxW/lL9gRdKLcLh5f6TXLlj/Apg3dNN+5Zia+R7puZsdPGnTLOEiGjjwpXPJkygZLi0GSsHRTcGlsg6R6EX7ZlnE7t4J9/LB1SP37w1Ns9XnlU0VdySk915s9iFP3RJ63+FfGAtWLKEhjyZl1CvCdHD7Ad6dP6qsxBMzn3ONl0USRNg7Zq8ZrE9k3NbRzgYOnfoODp7P7X31lgj3CGpyV8lQMOsIi0WMJVrWj6DmSR0JFuxQLy5BCGmSWtfcg9bA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4/BoV4hqRgwNw7odkh4jDkqTT6DGoZwDLnGcrR92Qn4=; b=kUchwPvWDYYRq6U2PvD9qRVsneMMxs+mMXMYbge7DoDPvOBMe8cSf7eo2OaNg/2mP20k6VdQmm+2atVgOGWxLCh/0qMgJJ5KqWWbKmNm9QKqi1VPMtxNjSTt/HDuZPHp1EiqFgxPJDiLuYJOpAK8hQizgDEacLSHeavj4GPh2h4= Received: from CH0PR07CA0024.namprd07.prod.outlook.com (2603:10b6:610:32::29) by MN0PR12MB6149.namprd12.prod.outlook.com (2603:10b6:208:3c7::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:02:48 +0000 Received: from CH1PEPF0000AD79.namprd04.prod.outlook.com (2603:10b6:610:32:cafe::61) by CH0PR07CA0024.outlook.office365.com (2603:10b6:610:32::29) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:02:47 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH1PEPF0000AD79.mail.protection.outlook.com (10.167.244.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:02:47 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:02:46 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 3/7] treewide: firmware_loader: Drop the unused @module argument Date: Thu, 10 Sep 2026 17:01:58 +0000 Message-ID: <943a87bf67aa2938da327c3a3e14f972b1933a50.1789059392.git.prsampat@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD79:EE_|MN0PR12MB6149:EE_ X-MS-Office365-Filtering-Correlation-Id: dd170de0-974c-4a9d-9d61-08df0f5d56f9 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|36860700016|7416014|82310400026|1800799024|376014|23010399003|11063799006|56012099006|10067099003|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: fmffVByxccUJQ7TQU8Mt8OCADm5rAjvp0OLH0hcveJHq97tjk1FTOwzEqZoW+9SavNwG4jAnrJo0Af5TPGdDf4aUk3pZ95WN+rv6V1LgYlETVZOV7OtJGFnhk8ypffa2txFGHNtXvevB2MAflPaRCbmy6NDeHAjsm2xYq8zkdCmqNjdyOmqHs223Jr1qISd5B+jiGrLXV8dZkJCr5gOPzgZUqPe+Z3U4uohjQgzMDxmzZjS2mhf1Rl0o3NpvyuXx9vV287NppbLkbkrGIKVre8B2DoPX8gJPLCr24cZM2ggnriMiYPLhDFmLz5kUelQpl6FhtNEQvTOjPYdqobEfsqYrO7F0Kl3CgKsSMhn8QXw4iQASHMPdISKRAaaiqCWHc5bNkczeES2yTT9XmLDwRWiIAQ+eJmVfK3ae22HsWA6Qw3Dtmfk42m1Uk8jvNdUR8K/fTMuq/J3iPKbmKwZgab5r727MTyx5KJ0XLGB6EhwjaMLZ7+fgsRY3upUEJ1hIqJ5xJtUFM/aGF8KOjkfHOErSi/Gof6Na52Fj20LTA1zeUpE58azh79eZ9IgQ2TLNLqZd7F9JhX7EjN2YBFFO8uGePsxUt/cd9PZbTBVoKaXxIt8DNMho8iniw83ga6fYAFFaWtVFvMRrYTape9fGa2jY5HmprwLBDmIQC6rTEHTTi+9fTCuj7ehX6pkUJHn/V/h4CUetudk+Y85NRiXZ+Q== X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(36860700016)(7416014)(82310400026)(1800799024)(376014)(23010399003)(11063799006)(56012099006)(10067099003)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: NPnFFjPRrDm8MNKUJtVynzzd56j521OyMBs0bw4+oQ2cydn6rWY6RX44lm2bXHAkGs7rwh2BfyeQhXJNHf2sIW8YVGRvxVxB2Ol/vpuyqqe4jc/5WHBhBBz/nHFHpky27XvIjO3bQUb2d9f48wJzmLNIh55FIbIL2LVA4gybbCAEZd26y+1LeLws4DuYu71jVW72edKFczq7ehU0RW5jNfiGZ6Qfv9sSWKN039uGjShUQZ+D/Zk6GbrXdplCXJ69BDJqOaQxQ2rBbofQYQaAg3mxNH3ojZCKfBRK30KGT6xIAM0Wdi+mO7/fDUR3xKEqAbG37c4bBdK6ljAVqdpEazyH1DlZtyN2ahQUMp4+DMejuU4OI3m7CvaePKBSomyc9FzuAd195QnKu6R4oRtepIDk5z/F3gmRBtEPCpRe4RHfBSyqWPAfNV2VrrSqZGtQ X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:02:47.4924 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: dd170de0-974c-4a9d-9d61-08df0f5d56f9 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH1PEPF0000AD79.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN0PR12MB6149 Content-Type: text/plain; charset="utf-8" From: Dan Williams Now that the firmware loader properly ceases all operations at firmware_upload_unregister() and no longer takes module references, clean up the unused parameter. Cc: Chao Gao Cc: Luis Chamberlain Cc: Russ Weight Cc: Danilo Krummrich Cc: Greg Kroah-Hartman Cc: "Rafael J. Wysocki" Signed-off-by: Dan Williams Acked-by: Conor Dooley [chao.gao@intel.com: drop leftover fw_upload_priv->module assignment and the unused @module field from struct fw_upload_priv] [prsampat@amd.com: convert the tdx-host caller added since the original posting] Signed-off-by: Pratik R. Sampat --- Documentation/driver-api/firmware/fw_upload.rst | 2 +- drivers/base/firmware_loader/sysfs_upload.c | 10 ++++------ drivers/base/firmware_loader/sysfs_upload.h | 1 - drivers/cxl/core/memdev.c | 4 ++-- drivers/firmware/microchip/mpfs-auto-update.c | 2 +- drivers/fpga/intel-m10-bmc-sec-update.c | 4 ++-- drivers/greybus/gb-beagleplay.c | 2 +- drivers/media/i2c/thp7312.c | 2 +- drivers/net/pse-pd/pd692x0.c | 4 ++-- drivers/virt/coco/tdx-host/tdx-host.c | 4 ++-- include/linux/firmware.h | 15 +++++++-------- lib/test_firmware.c | 3 +-- 12 files changed, 24 insertions(+), 29 deletions(-) diff --git a/Documentation/driver-api/firmware/fw_upload.rst b/Documentatio= n/driver-api/firmware/fw_upload.rst index edf1d0c5e7c3..702b1ed77551 100644 --- a/Documentation/driver-api/firmware/fw_upload.rst +++ b/Documentation/driver-api/firmware/fw_upload.rst @@ -57,7 +57,7 @@ function calls firmware_upload_unregister() such as:: len =3D (truncate) ? truncate - fw_name : strlen(fw_name); sec->fw_name =3D kmemdup_nul(fw_name, len, GFP_KERNEL); =20 - fwl =3D firmware_upload_register(THIS_MODULE, sec->dev, sec->fw_name, + fwl =3D firmware_upload_register(sec->dev, sec->fw_name, &m10bmc_ops, sec); if (IS_ERR(fwl)) { dev_err(sec->dev, "Firmware Upload driver failed to start\n"); diff --git a/drivers/base/firmware_loader/sysfs_upload.c b/drivers/base/fir= mware_loader/sysfs_upload.c index 890a242a7c20..920c4b640f96 100644 --- a/drivers/base/firmware_loader/sysfs_upload.c +++ b/drivers/base/firmware_loader/sysfs_upload.c @@ -273,7 +273,6 @@ void fw_upload_free(struct fw_sysfs *fw_sysfs) =20 /** * firmware_upload_register() - register for the firmware upload sysfs API - * @module: kernel module of this device * @parent: parent device instantiating firmware upload * @name: firmware name to be associated with this device * @ops: pointer to structure of firmware upload ops @@ -285,10 +284,10 @@ void fw_upload_free(struct fw_sysfs *fw_sysfs) * Return: struct fw_upload pointer or ERR_PTR() * **/ -struct fw_upload * -firmware_upload_register(struct module *module, struct device *parent, - const char *name, const struct fw_upload_ops *ops, - void *dd_handle) +struct fw_upload *firmware_upload_register(struct device *parent, + const char *name, + const struct fw_upload_ops *ops, + void *dd_handle) { u32 opt_flags =3D FW_OPT_NOCACHE; struct fw_upload *fw_upload; @@ -320,7 +319,6 @@ firmware_upload_register(struct module *module, struct = device *parent, fw_upload_priv->fw_upload =3D fw_upload; fw_upload_priv->ops =3D ops; mutex_init(&fw_upload_priv->lock); - fw_upload_priv->module =3D module; fw_upload_priv->name =3D name; fw_upload_priv->err_code =3D 0; fw_upload_priv->progress =3D FW_UPLOAD_PROG_IDLE; diff --git a/drivers/base/firmware_loader/sysfs_upload.h b/drivers/base/fir= mware_loader/sysfs_upload.h index 31931ff7808a..dc7ccdceb96f 100644 --- a/drivers/base/firmware_loader/sysfs_upload.h +++ b/drivers/base/firmware_loader/sysfs_upload.h @@ -26,7 +26,6 @@ enum fw_upload_prog { =20 struct fw_upload_priv { struct fw_upload *fw_upload; - struct module *module; const char *name; const struct fw_upload_ops *ops; struct mutex lock; /* protect data structure contents */ diff --git a/drivers/cxl/core/memdev.c b/drivers/cxl/core/memdev.c index b3419df586b9..ee7a97b8b2c8 100644 --- a/drivers/cxl/core/memdev.c +++ b/drivers/cxl/core/memdev.c @@ -1151,8 +1151,8 @@ int devm_cxl_setup_fw_upload(struct device *host, str= uct cxl_memdev_state *mds) if (!test_bit(CXL_MEM_COMMAND_ID_GET_FW_INFO, cxl_mbox->enabled_cmds)) return 0; =20 - fwl =3D firmware_upload_register(THIS_MODULE, dev, dev_name(dev), - &cxl_memdev_fw_ops, mds); + fwl =3D firmware_upload_register(dev, dev_name(dev), &cxl_memdev_fw_ops, + mds); if (IS_ERR(fwl)) return PTR_ERR(fwl); return devm_add_action_or_reset(host, cxl_remove_fw_upload, fwl); diff --git a/drivers/firmware/microchip/mpfs-auto-update.c b/drivers/firmwa= re/microchip/mpfs-auto-update.c index 1211fd8d0463..992088606204 100644 --- a/drivers/firmware/microchip/mpfs-auto-update.c +++ b/drivers/firmware/microchip/mpfs-auto-update.c @@ -437,7 +437,7 @@ static int mpfs_auto_update_probe(struct platform_devic= e *pdev) return dev_err_probe(dev, ret, "The current bitstream does not support auto-update\n"); =20 - fw_uploader =3D firmware_upload_register(THIS_MODULE, dev, "mpfs-auto-upd= ate", + fw_uploader =3D firmware_upload_register(dev, "mpfs-auto-update", &mpfs_auto_update_ops, priv); if (IS_ERR(fw_uploader)) return dev_err_probe(dev, PTR_ERR(fw_uploader), diff --git a/drivers/fpga/intel-m10-bmc-sec-update.c b/drivers/fpga/intel-m= 10-bmc-sec-update.c index 7d23d914df3f..3d318570faba 100644 --- a/drivers/fpga/intel-m10-bmc-sec-update.c +++ b/drivers/fpga/intel-m10-bmc-sec-update.c @@ -712,8 +712,8 @@ static int m10bmc_sec_probe(struct platform_device *pde= v) goto fw_name_fail; } =20 - fwl =3D firmware_upload_register(THIS_MODULE, sec->dev, sec->fw_name, - &m10bmc_ops, sec); + fwl =3D firmware_upload_register(sec->dev, sec->fw_name, &m10bmc_ops, + sec); if (IS_ERR(fwl)) { dev_err(sec->dev, "Firmware Upload driver failed to start\n"); ret =3D PTR_ERR(fwl); diff --git a/drivers/greybus/gb-beagleplay.c b/drivers/greybus/gb-beaglepla= y.c index 244966d56c9b..a097a3b10552 100644 --- a/drivers/greybus/gb-beagleplay.c +++ b/drivers/greybus/gb-beagleplay.c @@ -1172,7 +1172,7 @@ static int gb_fw_init(struct gb_beagleplay *bg) return PTR_ERR(desc); bg->rst_gpio =3D desc; =20 - fwl =3D firmware_upload_register(THIS_MODULE, &bg->sd->dev, "cc1352p7", + fwl =3D firmware_upload_register(&bg->sd->dev, "cc1352p7", &cc1352_bootloader_ops, bg); if (IS_ERR(fwl)) return PTR_ERR(fwl); diff --git a/drivers/media/i2c/thp7312.c b/drivers/media/i2c/thp7312.c index 775cfba188d8..ebbe14393c9f 100644 --- a/drivers/media/i2c/thp7312.c +++ b/drivers/media/i2c/thp7312.c @@ -1909,7 +1909,7 @@ static int thp7312_register_flash_mode(struct thp7312= _device *thp7312) goto error; } =20 - fwl =3D firmware_upload_register(THIS_MODULE, dev, "thp7312-firmware", + fwl =3D firmware_upload_register(dev, "thp7312-firmware", &thp7312_fw_upload_ops, thp7312); if (IS_ERR(fwl)) { ret =3D PTR_ERR(fwl); diff --git a/drivers/net/pse-pd/pd692x0.c b/drivers/net/pse-pd/pd692x0.c index 209de9cec849..5bb91a0f4438 100644 --- a/drivers/net/pse-pd/pd692x0.c +++ b/drivers/net/pse-pd/pd692x0.c @@ -1841,8 +1841,8 @@ static int pd692x0_i2c_probe(struct i2c_client *clien= t) return dev_err_probe(dev, ret, "failed to register PSE controller\n"); =20 - fwl =3D firmware_upload_register(THIS_MODULE, dev, dev_name(dev), - &pd692x0_fw_ops, priv); + fwl =3D firmware_upload_register(dev, dev_name(dev), &pd692x0_fw_ops, + priv); if (IS_ERR(fwl)) return dev_err_probe(dev, PTR_ERR(fwl), "failed to register to the Firmware Upload API\n"); diff --git a/drivers/virt/coco/tdx-host/tdx-host.c b/drivers/virt/coco/tdx-= host/tdx-host.c index e8ed8dfa526e..f11a545d40cf 100644 --- a/drivers/virt/coco/tdx-host/tdx-host.c +++ b/drivers/virt/coco/tdx-host/tdx-host.c @@ -194,8 +194,8 @@ static int seamldr_init(struct device *dev) if (!supports_runtime_update()) return 0; =20 - tdx_fwl =3D firmware_upload_register(THIS_MODULE, dev, "tdx_module", - &tdx_fw_ops, NULL); + tdx_fwl =3D firmware_upload_register(dev, "tdx_module", &tdx_fw_ops, + NULL); if (IS_ERR(tdx_fwl)) return PTR_ERR(tdx_fwl); =20 diff --git a/include/linux/firmware.h b/include/linux/firmware.h index 0fa3b027f02f..aa0333095c10 100644 --- a/include/linux/firmware.h +++ b/include/linux/firmware.h @@ -197,20 +197,19 @@ static inline int request_partial_firmware_into_buf =20 #ifdef CONFIG_FW_UPLOAD =20 -struct fw_upload * -firmware_upload_register(struct module *module, struct device *parent, - const char *name, const struct fw_upload_ops *ops, - void *dd_handle); +struct fw_upload *firmware_upload_register(struct device *parent, + const char *name, + const struct fw_upload_ops *ops, + void *dd_handle); void firmware_upload_unregister(struct fw_upload *fw_upload); =20 #else =20 static inline struct fw_upload * -firmware_upload_register(struct module *module, struct device *parent, - const char *name, const struct fw_upload_ops *ops, - void *dd_handle) +firmware_upload_register(struct device *parent, const char *name, + const struct fw_upload_ops *ops, void *dd_handle) { - return ERR_PTR(-EINVAL); + return ERR_PTR(-EINVAL); } =20 static inline void firmware_upload_unregister(struct fw_upload *fw_upload) diff --git a/lib/test_firmware.c b/lib/test_firmware.c index 7459bba65444..a77a99404fd3 100644 --- a/lib/test_firmware.c +++ b/lib/test_firmware.c @@ -1322,8 +1322,7 @@ static ssize_t upload_register_store(struct device *d= ev, goto free_tst; } =20 - fwl =3D firmware_upload_register(THIS_MODULE, dev, tst->name, - &upload_test_ops, tst); + fwl =3D firmware_upload_register(dev, tst->name, &upload_test_ops, tst); if (IS_ERR(fwl)) { ret =3D PTR_ERR(fwl); goto free_buf; --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from DM5PR21CU001.outbound.protection.outlook.com (mail-centralusazon11011054.outbound.protection.outlook.com [52.101.62.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 17EC555C329; Thu, 10 Sep 2026 17:03:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.62.54 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059805; cv=fail; b=hLeQ6IfaSqhR7S6NC9PJM5cUhsUUzrdtX937QWARzMvVJjmbFBtK5zBQka5mTPvv6118ecaZTjBH0XqgP3Pfy/GevzHziTinxL3kufsKnWcAISRejmFj5JDV7l+4fS8SQiPWOi9BBQVteO72MwutaG6VTr2fZUq8pj5Z0VNecAA= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059805; c=relaxed/simple; bh=GTlLBdeLAgc6tq3dZWi/wBPVSeyahCHz4UI98GE9JqY=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=YFkzFbWfWPq2qyMQtZZ7FgKgnTq97+Ws7VdgdpbU48VProMhfGhFsevF/oszN192+anJonI+mipBxkYxGEr/vSJs7Om9isPDxLD7wRZFAa4W3e3LY3ZMtbbuP4YOBGdS9vupz8oJKn7FM3hF3X57JSVWPeNT5uxZL7edJIzRQlw= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=nS07CA6F; arc=fail smtp.client-ip=52.101.62.54 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="nS07CA6F" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=NRfMsG1FY0y3Z7pCCtf+sK5mz4R2v57qkCEFDanUfqm0XIiIfCxintcI0B9nXUxEqeCgsCmbNOvhhUfkKd+A3e0Bnkpg9NKS4vOxsBndzGyA3ftyxxMNRggNBfDE/WagUDVhG58ADAVuS6Rr0jSrcGwFkCX8ETm32remYTw/gRE67bCUv6bTu97iStqJckSOFM/1WW/v+6tBGbjKCEg34iflLMBOCmqTha6wHOjuVMjJWWE9s21NuSg0eSwzsZRPHlm52akP2xFwMZMtRfWSfodVhIv+tHMHXMXIMJzzsfb24EYN++gZJl4PJRtO7zd9Doxbcl3pbzuqzOmw2Kyu2w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=PSU/TK891p11aT2gEU2Zcn8LN3F1xITGAxP0LT/EZ+4=; b=dt578Hx2keRmyUMyqhfPX9FuT4xrMF17IfRw6K/ZqfvrvzEFkvJG6HvxCSvgerWRSjVkjVKgbWhEZZ7UvVYmphLHymOLfHgBj75b15wVhTMJ58CaFMN5Os2/CkRiqPJnAopxg9ScWhq/LbMgnRDwG/M43VdT03WG/1hmw3eaYz1vxnqXTFdfr3dsckBWLKRjmTXKS55YPsDwwpYyoQr4TLdZt0oRN51A19fYhVKWGkoV02z9s50AQwNMOQDHc0dZunS0egmZL5GU9E1xPyI1e//vhm5nOOH+HjrXRVx2PScFzFSkKiq12ZRCG6OfB5XkruHpgQsss2lzE+ST9lOaGg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=PSU/TK891p11aT2gEU2Zcn8LN3F1xITGAxP0LT/EZ+4=; b=nS07CA6FQUl9whYoYY9cTth2f30C00CP0vuue1f9dKJ4B/WBMvMQKpeAbcvvHIUqsbPKGOLleUvRyduIqVxzhK373ebE2aroE1mIOLtNJQR/Kgr6vzw4khnQZIPJFU4+AoRWIUOxvGopwXWU/Q2wC96O9R2p3P8jBVo1f5SSOCM= Received: from CH0PR07CA0024.namprd07.prod.outlook.com (2603:10b6:610:32::29) by IA1PR12MB6411.namprd12.prod.outlook.com (2603:10b6:208:388::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:02:58 +0000 Received: from CH1PEPF0000AD79.namprd04.prod.outlook.com (2603:10b6:610:32:cafe::6b) by CH0PR07CA0024.outlook.office365.com (2603:10b6:610:32::29) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:02:58 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH1PEPF0000AD79.mail.protection.outlook.com (10.167.244.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:02:58 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:02:57 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 4/7] crypto: ccp - Factor out the release of the SEV firmware buffers Date: Thu, 10 Sep 2026 17:01:59 +0000 Message-ID: <51d7f3c5ddf9f8c5ca0a163a7fba7d26267cdf35.1789059392.git.prsampat@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD79:EE_|IA1PR12MB6411:EE_ X-MS-Office365-Filtering-Correlation-Id: c24b66ec-dcb7-45f8-55ef-08df0f5d5d97 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|82310400026|36860700016|376014|7416014|1800799024|10067099003|6133799003|22082099003|18002099003|56012099006|11063799006|5023799004; X-Microsoft-Antispam-Message-Info: IhrX95fLligJveg/p7ByEc7VxkXk6UUuRb+5t6jtcLLEkq+zncKUU1aEs+bS6aonwI3cujDBhEb58KNb2sA4NhU1CNsWYSfpsInEHcz9gXga9iKiXym4KqAsHYG+LW4ECPtWzK1REMlBblExfClbx3l/u1TuzWNfIWBeaHh75LQykPlKOieyMT2b2pEHWxuANNxS6digHHNB7dYXclUD3/aH1FWAMqJ+CzCd35EZoDt1ITg698cWiqU9el4AQ3wS+uOEtvlRGAhbtCeQh/BZ2JgzFpxdABPF9B37w5Y7YZoO8nOZjzbLDh98Kb2X3B60+RxxQi1XJ7ouKsi2CW6FAGKWNSzV/H00VSv7ksYSla1ZzhQYQzZHvYGozA8HjGlFH9QUtbcqXsuCx8ViD0t6+OsWPIHxiAAjQBodhuw6jz47F80Ih84BECz538o/rAralt1Vr2s2L623HyzNVOmc8oYkQn+iI+artdj6M46caINCaAF2z8N/WjYmY0JvaMRiMl8cr9PYJfvwIKl08hQLu56zehFxwMF+IzJoE1RjcELbK0fXt8oq6EFuzHIuFhJjt0upTa7tZJImFjn/3/9gqdIDgO41rd8TPJ7xg/8mvSc7ocwU5eoSdWbYT3qx/jrZRCCqyGS+bDRjn8mBa3nsmsQL6d9YGclp9lQ+1bfJsjXTapEgQ6Tgid1MWiRiGUm0eaVqLxT+RmFuJ09UoATcLA== X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(23010399003)(82310400026)(36860700016)(376014)(7416014)(1800799024)(10067099003)(6133799003)(22082099003)(18002099003)(56012099006)(11063799006)(5023799004);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: mtqFzjYWfdn4NpBRGQRYHaA2Qb54zx12ATu8K6Iup0hThOD+E239pcGvcLzWxNXl4EmjOcwVja86ZgYbh8U9gqOkp3tnVcgEg1bclza9VkGQua+6x17owo6yGRl7rPaVAXuXROOUWEEp5Fm9EEUL9p1xgYIoGaORrguPPdXgZDPJydCDwkOPp4F5XrVb6ki3RwfKRBjN79tnSU1CWm9V5o6YuaqsDWVbUSa/HctoDWcpzh3MzJB/gtFzoIVKiGbumJlukWebYcNTs6EXjcEEVmZp1t+GWwIFiUc67PvOCsWd0Qzg6iFkGjZ2uDSPcE4a/Gh+bQH7ZwNzsngQF+Y0fz+1BPbsPe0u/mPiFwJGxyzasYys+pX8SN1JVFeaVCc4aMMKnU4qK5Az+0OKUhsdso7U4j/2aL+C+FpM0dBtbVt8p+5F3WZB4VDGPIZL8kL5 X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:02:58.5921 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: c24b66ec-dcb7-45f8-55ef-08df0f5d5d97 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH1PEPF0000AD79.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: IA1PR12MB6411 Content-Type: text/plain; charset="utf-8" __sev_firmware_shutdown() reclaims and frees the TMR and the INIT_EX NV area once the platform has been taken down. Move that into a helper so that other paths which de-initialize the platform can reuse the same path. No functional change intended. Suggested-by: Shantanu Sinha Signed-off-by: Pratik R. Sampat --- drivers/crypto/ccp/sev-dev.c | 55 ++++++++++++++++++++---------------- 1 file changed, 30 insertions(+), 25 deletions(-) diff --git a/drivers/crypto/ccp/sev-dev.c b/drivers/crypto/ccp/sev-dev.c index f833cb7e4da3..1ed9e61a95cc 100644 --- a/drivers/crypto/ccp/sev-dev.c +++ b/drivers/crypto/ccp/sev-dev.c @@ -1881,6 +1881,35 @@ static int __sev_platform_shutdown_locked(int *error) return ret; } =20 +static void __sev_release_firmware_buffers(bool panic) +{ + if (sev_es_tmr) { + /* + * The TMR area was encrypted, flush it from the cache. + * + * If invoked during panic handling, local interrupts are + * disabled and all CPUs are stopped, so wbinvd_on_all_cpus() + * can't be used. In that case, wbinvd() is done on remote CPUs + * via the NMI callback, and done for this CPU later during + * SNP shutdown, so wbinvd_on_all_cpus() can be skipped. + */ + if (!panic) + wbinvd_on_all_cpus(); + + __snp_free_firmware_pages(virt_to_page(sev_es_tmr), + get_order(sev_es_tmr_size), + true); + sev_es_tmr =3D NULL; + } + + if (sev_init_ex_buffer) { + __snp_free_firmware_pages(virt_to_page(sev_init_ex_buffer), + get_order(NV_LENGTH), + true); + sev_init_ex_buffer =3D NULL; + } +} + static int sev_get_platform_state(int *state, int *error) { struct sev_user_data_status data; @@ -2906,31 +2935,7 @@ static void __sev_firmware_shutdown(struct sev_devic= e *sev, bool panic) =20 __sev_platform_shutdown_locked(&error); =20 - if (sev_es_tmr) { - /* - * The TMR area was encrypted, flush it from the cache. - * - * If invoked during panic handling, local interrupts are - * disabled and all CPUs are stopped, so wbinvd_on_all_cpus() - * can't be used. In that case, wbinvd() is done on remote CPUs - * via the NMI callback, and done for this CPU later during - * SNP shutdown, so wbinvd_on_all_cpus() can be skipped. - */ - if (!panic) - wbinvd_on_all_cpus(); - - __snp_free_firmware_pages(virt_to_page(sev_es_tmr), - get_order(sev_es_tmr_size), - true); - sev_es_tmr =3D NULL; - } - - if (sev_init_ex_buffer) { - __snp_free_firmware_pages(virt_to_page(sev_init_ex_buffer), - get_order(NV_LENGTH), - true); - sev_init_ex_buffer =3D NULL; - } + __sev_release_firmware_buffers(panic); =20 __sev_snp_shutdown_locked(&error, panic); } --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from BN1PR04CU002.outbound.protection.outlook.com (mail-eastus2azon11010044.outbound.protection.outlook.com [52.101.56.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 39BBD53FD57; Thu, 10 Sep 2026 17:03:18 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.56.44 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059810; cv=fail; b=YOSUB+ytIJmvoTLWlo+8QtZ7S7nmkD+NIEdHmuXnVWBCRP2QgYS8ZAoYub6g7M6iij73zal/a2mbLCTui2WS3VVSla/aDHgh371AXUs5u0YFN7MGvY8KzAOwhQmYV811HhNV48bsLXOkiMZa/H5C1PzB9WVytWpjy9oojRCS4Kk= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059810; c=relaxed/simple; bh=uKnmV2HlF9EYN4PdRrbvCqxWqANVSqx3SdF1X1+CGBY=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=JR1BJ8KbR4uvr/bOzmz3TZtGLd6ffxBVoyH0lhowEndqCaA0SNHMvp5JnYiq35M32PV2vD4QXNy+2CeRbH2KoXCXU+fnXD8QvJ3ZTNjHxdpvgYMNIbLf6bbO9xTsRZX9FqEx54v3yp1X7NbDUGhtG42XutE3iWrug+P9ixQr7sI= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=19vYB8r9; arc=fail smtp.client-ip=52.101.56.44 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="19vYB8r9" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Faj937H1PJSWo0H7XApsvshsCo++09b8/kS4WFilYLAmTzRUdf5tffXhUNKYOzMhSQm4++2cTJXI2SX6PuSmt50sweCy9T+UUd1K+T3qlA+fN65YAeHj2LAedhcevni4L1182CzhCLjYCnHoskgqArX19NoAuYU0Arv6iI2eBK7Lfr9pWbDmenZoq/sk6QXGIM9+5V6Q8D/q25Ew6KCHsiH7pbdLHy4AqBHAXv+FD+98bJi0WC91uriYvIQwmYvLU1SSGaED5RsGc7IkYrJnDsSflv3LjOMyDZvCeu2xxn8zgTQLEiVo9cVRVcshks1VuvnZuCQ6wz727FiejVRpvg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ptMdhHUHcjN+reKW7443y5HNZ0W8AyN/gVAosD6/fiM=; b=c5xgCeVl2KRCjV1ED6Lfurc04WWSzXR+mGVQ2ZeDTY7Dk3vcw/MAnsPmXru14eyxcYX+lTWxCbUJHe7ZNKQtnGjSe9O2QoYrInkzWykdNOSJgxesKpK1pvqDduQFXAu7ZT6WHUt0+Yo0HdCddHoPgwHpmq+PxR8bhjFcfZv0rPZk7O6W2733Yek92E1XK07ANq2iAMzYLRpdZG6QEiMEK2yIxYm+8dijnt5wm5a7UMaySikEjzwpG/yBFY38nlGjPgT15mfZOScfwtv+B4lEk30P98ZzyUcfvY5tYOcB4042wWisLevZ9D3GrW4KceE+te3SQ3AnH5yuL+iuBarggA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ptMdhHUHcjN+reKW7443y5HNZ0W8AyN/gVAosD6/fiM=; b=19vYB8r9owmEdzheWjBKVpUd9ql/gWwYZfFjearEFepBEVKT+6eDlMYm7dwzzg2yGdhNsKiKdVgLzR8fPA9EIGbyf0588bnx6R6rkJG1FbYOmsPDS61YWIk0Zu5wCOZQtG6Oeu3so5Vwcf29VxUEwrBKZ9E57XYYGZV7CnFdwg4= Received: from CH0PR03CA0356.namprd03.prod.outlook.com (2603:10b6:610:11a::34) by SJ2PR12MB9244.namprd12.prod.outlook.com (2603:10b6:a03:574::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:03:13 +0000 Received: from CH1PEPF0000AD76.namprd04.prod.outlook.com (2603:10b6:610:11a:cafe::58) by CH0PR03CA0356.outlook.office365.com (2603:10b6:610:11a::34) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:03:09 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CH1PEPF0000AD76.mail.protection.outlook.com (10.167.244.53) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:03:09 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:03:08 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 5/7] crypto: ccp - Allow SNP platform data to be queried after SNP INIT Date: Thu, 10 Sep 2026 17:02:00 +0000 Message-ID: X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH1PEPF0000AD76:EE_|SJ2PR12MB9244:EE_ X-MS-Office365-Filtering-Correlation-Id: e7f484ab-e8cf-4edf-c952-08df0f5d642f X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|23010399003|82310400026|36860700016|376014|7416014|3023799007|10067099003|18002099003|22082099003|56012099006|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(1800799024)(23010399003)(82310400026)(36860700016)(376014)(7416014)(3023799007)(10067099003)(18002099003)(22082099003)(56012099006)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: z+3Yxs500MhXgWKXKjeggNF1qxmMbanMQP0hz4OlR4SCuUjVRutu2kQExUh1PsdLbnCNYEfrCb3RcfQEEYCNHSP/M38cErEz23qLwondBTuFmTMvkcA7+fw1pStiC71Pmgl24bfq9e4rxrnXN61WF6bi81OwYGjbuNHc9ahstla4TNJViWbfCJw0q3eZ+Uv3KvI68kXYrhD9HMZ95izJTqfri3B42N7HT8sN4GLN71Bmqp9+e3tXVuyAtWRFzaDsWti04JLvavW2sRBwzXfzdqxP832iHfEYiEZRqq0lsUKMYIXMA6H3dITMj34fAeOH2APkHL+c0xJv5HHF3JZjDlWUvXrJF39H/pgwlVJ+RrejjCSZwgJ6B8xoJJkRHEmGdtw2rPwxNY+wJnoRfLHbvqr8yxYeRBrvO3h+POFaeDXxP1MaMPynjiXcxX1uXmWz X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:03:09.6591 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e7f484ab-e8cf-4edf-c952-08df0f5d642f X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CH1PEPF0000AD76.namprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ2PR12MB9244 Content-Type: text/plain; charset="utf-8" In preparation for refreshing the cached SNP platform status and feature information after a successful firmware live update from DOWNLOAD_FIRMWARE_EX, allow snp_get_platform_data() to be called while the SNP firmware is in the INIT state. Once SNP is initialized the firmware requires the output page of both commands to be firmware-owned. sev->snp_plat_status cannot satisfy that as it is embedded in struct sev_device, so use __sev_do_snp_platform_status(), which stages the output through a dedicated page, and mark/reclaim the SNP_FEATURE_INFO page around the command. Co-developed-by: Tycho Andersen (AMD) Signed-off-by: Tycho Andersen (AMD) Signed-off-by: Pratik R. Sampat --- drivers/crypto/ccp/sev-dev.c | 44 ++++++++++++++++++++++++++++-------- 1 file changed, 34 insertions(+), 10 deletions(-) diff --git a/drivers/crypto/ccp/sev-dev.c b/drivers/crypto/ccp/sev-dev.c index 1ed9e61a95cc..e891d6d1c6f0 100644 --- a/drivers/crypto/ccp/sev-dev.c +++ b/drivers/crypto/ccp/sev-dev.c @@ -131,6 +131,8 @@ static void __sev_firmware_shutdown(struct sev_device *= sev, bool panic); =20 static int snp_shutdown_on_panic(struct notifier_block *nb, unsigned long reason, void *arg); +static int __sev_do_snp_platform_status(struct sev_user_data_snp_status *s= tatus, + int *error); =20 static struct notifier_block snp_panic_notifier =3D { .notifier_call =3D snp_shutdown_on_panic, @@ -1261,19 +1263,12 @@ static int snp_get_platform_data(struct sev_device = *sev, int *error) { struct sev_data_snp_feature_info snp_feat_info; struct snp_feature_info *feat_info; - struct sev_data_snp_addr buf; struct page *page; int rc; =20 - /* - * This function is expected to be called before SNP is - * initialized. - */ - if (sev->snp_initialized) - return -EINVAL; - - buf.address =3D __psp_pa(&sev->snp_plat_status); - rc =3D sev_do_cmd(SEV_CMD_SNP_PLATFORM_STATUS, &buf, error); + mutex_lock(&sev_cmd_mutex); + rc =3D __sev_do_snp_platform_status(&sev->snp_plat_status, error); + mutex_unlock(&sev_cmd_mutex); if (rc) { dev_err(sev->dev, "SNP PLATFORM_STATUS command failed, ret =3D %d, error= =3D %#x\n", rc, *error); @@ -1302,17 +1297,46 @@ static int snp_get_platform_data(struct sev_device = *sev, int *error) return -ENOMEM; =20 feat_info =3D page_address(page); + + /* If SNP is initialized, transition to use a firmware-owned page */ + if (sev->snp_initialized) { + if (rmp_mark_pages_firmware(__pa(feat_info), 1, false)) { + *error =3D SEV_RET_NO_FW_CALL; + rc =3D -EFAULT; + goto free_page; + } + } + snp_feat_info.length =3D sizeof(snp_feat_info); snp_feat_info.ecx_in =3D 0; snp_feat_info.feature_info_paddr =3D __psp_pa(feat_info); =20 rc =3D sev_do_cmd(SEV_CMD_SNP_FEATURE_INFO, &snp_feat_info, error); + + /* + * The feature_info page will be in reclaim state on success, or left + * in firmware state on failure. Transition the pages back to + * Hypervisor-owned state. + * + * snp_reclaim_pages() has already pinned the page via snp_leak_pages() + * if it could not do so, which keeps it away from the allocator. The + * reference taken here is dropped either way. + */ + if (sev->snp_initialized) { + if (snp_reclaim_pages(__pa(feat_info), 1, false)) { + *error =3D SEV_RET_NO_FW_CALL; + rc =3D -EFAULT; + goto free_page; + } + } + if (!rc) sev->snp_feat_info_0 =3D *feat_info; else dev_err(sev->dev, "SNP FEATURE_INFO command failed, ret =3D %d, error = =3D %#x\n", rc, *error); =20 +free_page: __free_page(page); =20 return rc; --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from BYAPR05CU005.outbound.protection.outlook.com (mail-westusazon11010065.outbound.protection.outlook.com [52.101.85.65]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id C345C53445B; Thu, 10 Sep 2026 17:03:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.85.65 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059820; cv=fail; b=DfpxpV+cLMCM4kZ7z7AFzDMPJsunQs+3NZQIppdcc6Us69DpJkzyrxlNemxuRhvcEzRjQotXiqcWfco2XpmZVmDJpG2s3mekRwjrNgZXMly/w363X+KINsWplKnPZVnAYrRtnrcvPwsMQoavynuB+7M90sCADIfM0ShYAt90LS8= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059820; c=relaxed/simple; bh=PcM3WgkbFHqYQX9RGfuOxoXJe/706jLCMUh6MMN/rvA=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=hd0YoIevrWk1J6qkgQZUMdBnmU9nNMG9OlYiTGehyX5WhPCPkGiLaJDQU7zKXQWfdRdSg1PtvHJCFkc7HP4oseWJeNPIL+gNz6k+ZatX5sp2SCULpEFvS0pLzNNXXT5YOZQQD4XvDSjioqfhOeZwnCneF01eefRh+dzkVlXT8PE= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=mUM5xgkr; arc=fail smtp.client-ip=52.101.85.65 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="mUM5xgkr" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sdIyLNblrRTYSErj7IYj+YHNr/Yg7+Ce8zC/A1Wy+ErjFT6TDqHxIgmp+BvUU9XHJ8MXckFsIDMP3XeRRyyJ6Sw9uPKT8s68Ogcctzce2oNLrrQ7Qs7zJ4JLDH/5NrsrROft7F+9utU2pcNirJdnT01j6meo91KCqVPj9ndroQOFFKGUyMjXUcCaVgnat7DuIN5IoL16koPcqtk/Pc6fOFmvzilDnwSYi4SAQMC6z8hezDIE266STapRi+rhTpR0/tOeA7l1NoVdVd3znDYKYJkojv6NNd1YGlF52FhQw8o84Wwu3RTyPnXYft7so22dRqyodg0j0okYNzPr8QXIrw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=SC5SKc0KO/zUhaPvCXpQJcWhV0TrvBBfoNeqB7YaK0w=; b=vEEHU7Xt9SHp1dPrFOUgNKoPSQZGz029KGLkpD2IYi3Abss4Ufy7BgYVeFuQiHx41xNztP+EtgMTT9cAjIvSry3nOsl0etmIpNi20U9UzNVZwbF2Bl6/FTYX0gfvVijcYqTFE0NBLEAHp6MrmhM7MgCI4DMZO+YVlK4T6cgYbggiYOGLEojbCRhUdlb7LPwpXc8D4kuPxi8UUEhw8YyTpp/f3Q7eY09X32v1z0GyMwdXN3UXC2/EiatX0YqFMzGPtW+iM4X8j5Z0zBN3MFi7cJGJNM0TQ4Abc+FGt9J2ej85OrZTRVGrxBEogLCeqCWmyoDg/JyyLpdsZQK3Dd/d7A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=SC5SKc0KO/zUhaPvCXpQJcWhV0TrvBBfoNeqB7YaK0w=; b=mUM5xgkrY0ux+HNuMj1K5SmoMl9phu0UVaEWM4eB2Jo8IyGsOLeQbBBw8b6fRhKTma1Z+hi+wQVJU8bgjyxcorLo2WlfHVso1RsVykkzaK40zuo3/3/wnClwhedI599g3dvHW9SuwMwo054K37VpW5Wy5QytWRI3cEeE5yBvmlI= Received: from SJ0PR13CA0193.namprd13.prod.outlook.com (2603:10b6:a03:2c3::18) by LV5PR12MB9754.namprd12.prod.outlook.com (2603:10b6:408:305::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:03:21 +0000 Received: from CY4PEPF0000EE3F.namprd03.prod.outlook.com (2603:10b6:a03:2c3:cafe::12) by SJ0PR13CA0193.outlook.office365.com (2603:10b6:a03:2c3::18) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.428.6 via Frontend Transport; Thu, 10 Sep 2026 17:03:20 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CY4PEPF0000EE3F.mail.protection.outlook.com (10.167.242.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:03:20 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:03:20 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 6/7] crypto/ccp: Register with fw_uploader and always fail Date: Thu, 10 Sep 2026 17:02:01 +0000 Message-ID: <310800f74eace37ffe561b76d40640161be425fb.1789059392.git.prsampat@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CY4PEPF0000EE3F:EE_|LV5PR12MB9754:EE_ X-MS-Office365-Filtering-Correlation-Id: 2b906c8b-49d4-475e-87bd-08df0f5d6ac4 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|376014|7416014|23010399003|82310400026|1800799024|36860700016|3023799007|10067099003|56012099006|11063799006|22082099003|18002099003; X-Microsoft-Antispam-Message-Info: mEf4iv9K9sW2ijzcJbDh2QCEIELTCgZJ5PB/SY6BKAWRvcilklvfdGWOmMAlxeMc0PubIfrseegW3He/1Y1Ftmlj181WfuSAYKl6oplKWfbYSiQjsqzoyG0dFSrvelzaUDmgOmeRYRcrSRlnr3lX4hL3PMmPRsW7j/Wy03gphg24Ip/AUHdKR9AuBSiVLBfOuqZXcMT3Q2Vh25EIIhnWwAQN/ZB3VgYqze1I6awEjQh4+LTdE4JL20zbnX238BxyJAUELYHyP1G3xOp4Xkj2JtA+g5sVm00slMqtdxkd/LiUQ5blYYJxR5f1e7uAR29gKcIP14rPUamYMols7x1TrJU9P6LccH9xvDthCkwYkYk7TuFRTxcq8BYi969NnGvrX51GEe5AIVPjbtDfqu5+i9DLlFbPrU+h597qpwGkRTm6nJWA9cE5p/QKORXKRemGhMkJfahaugTQtOErMI8Fodpud97XB00VMXPHl0dDSs9zUdXksn2EU/1Z19yG0Au2UbJYTiyWKnj9seJhnWknox/ej2znYDikpeWkqh1HWtRPJABQle6CWREnWaKV5pbYOGKndYqq/U5VuFYmpUpRzyibiYB7u6wEUwAhPiMX9d6zZfc0Pz/yGzVPSGrXNrwwuYkTCZW/P7AwTBo1jCG4HA9OWZSNtLi1sW61aHsfdMMvBGIii8v5m05Ozhl3ZVqPJkeKSFEb/Gfb7JhrD1iIaQ== X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(376014)(7416014)(23010399003)(82310400026)(1800799024)(36860700016)(3023799007)(10067099003)(56012099006)(11063799006)(22082099003)(18002099003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: wuN4EVx/gB5OHRT9H8TmQTd4dvIYjQ6iopVRdB2p2PCEHX/Se9WDwcoeu5RYkYw9wtZwihAOOvJxxsRrE2UF1R96qXa3IcopsJ52QpcScQYSAKRO/dshPhCyK287hhP17f+/nR+GKQgnIbqMFN+DW83DGxNRgEh+4+3bYgjbvWW4RxuJ6NqwJn0BWTr0l5JvZsaT8Q9wuEpWmMPP8LrEbLJlexXw7/eEQTFsRCfTwlFXxfXBQG8kzOECYkbkUNhM20QWTGXrUkuE0h9QCLGNyOfQCpVGt6GxiLbGrstwUtmJTYrIYYzzR+ytfBYDSDjAWrFi6xrEOafo3wBIdNx/hF3g4Lcbbe84Azfxv+4MFND/Ep94r4Sps7qldwgVXKX5LIXVU8YaP0CsVHmSU73q3/V+Rl0mmHFoWm5FSayEEJmLo2fbGgQKu1zrAlYT0plH X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:03:20.6905 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2b906c8b-49d4-475e-87bd-08df0f5d6ac4 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CY4PEPF0000EE3F.namprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV5PR12MB9754 Content-Type: text/plain; charset="utf-8" In preparation for SEV-SNP DOWNLOAD_FIRMWARE_EX live firmware update support, add an 'sev' firmware loader that always fails with EBUSY. Co-developed-by: Tycho Andersen (AMD) Signed-off-by: Tycho Andersen (AMD) Signed-off-by: Pratik R. Sampat --- drivers/crypto/ccp/sev-dev.c | 81 ++++++++++++++++++++++++++++++++++++ drivers/crypto/ccp/sev-dev.h | 2 + 2 files changed, 83 insertions(+) diff --git a/drivers/crypto/ccp/sev-dev.c b/drivers/crypto/ccp/sev-dev.c index e891d6d1c6f0..397a797d9312 100644 --- a/drivers/crypto/ccp/sev-dev.c +++ b/drivers/crypto/ccp/sev-dev.c @@ -2239,6 +2239,81 @@ static int sev_update_firmware(struct device *dev) return ret; } =20 +#ifdef CONFIG_FW_UPLOAD +static enum fw_upload_err sev_fw_upload_prepare(struct fw_upload *fw_uploa= d, + const u8 *data, u32 size) +{ + return FW_UPLOAD_ERR_NONE; +} + +static enum fw_upload_err sev_fw_upload_write(struct fw_upload *fw_upload, + const u8 *data, u32 offset, + u32 size, u32 *written) +{ + return FW_UPLOAD_ERR_BUSY; +} + +static enum fw_upload_err sev_fw_upload_poll_complete(struct fw_upload *fw= _upload) +{ + return FW_UPLOAD_ERR_NONE; +} + +static void sev_fw_upload_cancel(struct fw_upload *fw_upload) +{ + /* intentional no-op */ +} + +static const struct fw_upload_ops sev_fw_upload_ops =3D { + .prepare =3D sev_fw_upload_prepare, + .write =3D sev_fw_upload_write, + .poll_complete =3D sev_fw_upload_poll_complete, + .cancel =3D sev_fw_upload_cancel, +}; + +static void register_sev_fw_uploader(struct sev_device *sev) +{ + struct fw_upload *fwl; + + /* + * SNP firmware update is a platform-wide operation; only the master + * PSP issues firmware commands. Register a single global interface. + */ + if (sev->psp !=3D psp_master || sev->fwl) + return; + + fwl =3D firmware_upload_register(sev->dev, "sev", &sev_fw_upload_ops, + sev); + if (IS_ERR(fwl)) { + dev_err(sev->dev, "SEV firmware upload registration failure: %ld\n", + PTR_ERR(fwl)); + return; + } + + sev->fwl =3D fwl; +} + +/* + * The upload ops issue PSP commands, so the interface has to be gone befo= re + * the SEV firmware is shut down and the PSP interrupt handler is cleared. + * devm teardown on sev->dev runs after the driver's remove callback and is + * therefore too late. Both teardown paths call this, so it has to tolerate + * being called twice. + */ +static void unregister_sev_fw_uploader(struct sev_device *sev) +{ + struct fw_upload *fwl =3D sev->fwl; + + if (!fwl) + return; + + sev->fwl =3D NULL; + firmware_upload_unregister(fwl); +} +#else /* CONFIG_FW_UPLOAD */ +static void register_sev_fw_uploader(struct sev_device *sev) { } +static void unregister_sev_fw_uploader(struct sev_device *sev) { } +#endif /* CONFIG_FW_UPLOAD */ + static int __sev_snp_shutdown_locked(int *error, bool panic) { struct psp_device *psp =3D psp_master; @@ -3045,6 +3120,8 @@ void sev_dev_destroy(struct psp_device *psp) if (!sev) return; =20 + unregister_sev_fw_uploader(sev); + sev_firmware_shutdown(sev); =20 if (sev->misc) @@ -3108,6 +3185,8 @@ void sev_pci_init(void) api_major, api_minor, build, sev->api_major, sev->api_minor, sev->build); =20 + register_sev_fw_uploader(sev); + return; =20 err: @@ -3123,6 +3202,8 @@ void sev_pci_exit(void) if (!sev) return; =20 + unregister_sev_fw_uploader(sev); + sev_firmware_shutdown(sev); } =20 diff --git a/drivers/crypto/ccp/sev-dev.h b/drivers/crypto/ccp/sev-dev.h index d5e596606def..7ec692e2147e 100644 --- a/drivers/crypto/ccp/sev-dev.h +++ b/drivers/crypto/ccp/sev-dev.h @@ -69,6 +69,8 @@ struct sev_device { =20 struct tsm_dev *tsmdev; struct sev_tio_status *tio_status; + + struct fw_upload *fwl; }; =20 int sev_dev_init(struct psp_device *psp); --=20 2.43.0 From nobody Fri Sep 25 16:01:28 2026 Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azon11011011.outbound.protection.outlook.com [52.101.57.11]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BBA89560ADE; Thu, 10 Sep 2026 17:03:36 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.57.11 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059832; cv=fail; b=VUViGAYoo44ZU4WSlVEp/k/n6BwQIdXKWo7yYtyPxiDooJwtDSCFBIsm+UkcvIWZvTiZPy4yupY//OGUfi1kxnCjC78rUaLdV8u1OEBxK496rHeneRlBaWqM4lQ3qLYQeeiPZekvghfvB3qamJfUxTghrrtNfX3RV3KqjkHU6+s= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789059832; c=relaxed/simple; bh=nuNX4uyRf0WOPxUFYKSKKuW6NEtLxf/WmNgJJK/yClo=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=elQJHtu5PX4ZSK/hRQJgQ62S00T3TwUDT2uM1gm5cjI9y3p8VPqWWLWgT7oIm3DCVDAa4V3/ea0gw5PAtEBqBDPJgHsxy4fDgjOK1x9J8Sy1j0MOb+G6IbNwroS2WIyXIthg5w2CMVD8rcKgqjJ8b2Q285TKY+Sr4AWkaYqsSTE= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=iSu9E6Vv; arc=fail smtp.client-ip=52.101.57.11 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="iSu9E6Vv" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=g35UP5R6A+N4J9UBIA76+MY12tZ/ejIPlnReb/oFpDsbLYZrSyEjavPoeRcbaTPj3a2aepfV/jwqKsCA5nbzI6DW+lKhxjI6w2hmdyGsW5D6VCJzbXSkugMN0qfexv7nFTjU6typ4VqTO1OV3kSFjWEam7GXQpxBisFv+0KqoRLLSP66Y53GciJQj3fNS7s64kwtAk6rqLyFYyzNSm+6l33QUfqPleA3Cx3vvu/Z989K1c26Jjn4ElaJGdKNS3FbZVpleqn6udCHj/tRHiWyps/PKAVQX/av9D7SEPY9yMHC6wBHCj2co7bOsuEM4miMCotflwW+ohNQfK/165rUYA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=m+r+dUcjoZTsQ81+IVkdCURWGFkllQ7YllzezRtONcM=; b=l26efQ2quxVBQ5+mkHU+edBOoRuLXaE3eptzW+2rgcjolVtZAkDthsPtFrEpmurS+ZaiGFNyuWYzOIJRIzTnkfyG5jIMu1RB7/XJzwoItSuosnDFtM+fmKpWXEAB62IGh1k6bpdVQ5Wc0i7pEZhiXvjwfduE1nryFZIR4kx/QeE1jaj/Mzvgv/CyPz5ErLzCv/mXbbBVVGeY/6ytIfxq8ItQfiHvE5DOP2utkcaZKrjdvVLU31o8avSHUo9vHOV8lU/hjstxoBdSb34DEJ8aywAiYTIEJq+vqV0DGH+PwsdY5ykQWlTRJbZvW3YB3A+BUH7aCNC1eRa9SP/P/33nHg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=m+r+dUcjoZTsQ81+IVkdCURWGFkllQ7YllzezRtONcM=; b=iSu9E6VvVOYZwdhB9HFFIz/+OW413ADxP9zfCbM9OEKIjTcwZp50obCbjVKD1VszAB4PchUBK6X6CpDZo22ZtzBan692+glu9/wYiLM8OdR3KVP0hu8PN5r8YB93q94glZ5xwhXA4kXGB0eKVo5b1k/iR9IysnMqtWiwERZS36U= Received: from PH0P220CA0009.NAMP220.PROD.OUTLOOK.COM (2603:10b6:510:d3::13) by PH0PR12MB999112.namprd12.prod.outlook.com (2603:10b6:510:38c::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.9; Thu, 10 Sep 2026 17:03:32 +0000 Received: from CY4PEPF0000EE39.namprd03.prod.outlook.com (2603:10b6:510:d3:cafe::6c) by PH0P220CA0009.outlook.office365.com (2603:10b6:510:d3::13) with Microsoft SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.406.9 via Frontend Transport; Thu, 10 Sep 2026 17:03:32 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=satlexmb07.amd.com; pr=C Received: from satlexmb07.amd.com (165.204.84.17) by CY4PEPF0000EE39.mail.protection.outlook.com (10.167.242.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.5 via Frontend Transport; Thu, 10 Sep 2026 17:03:31 +0000 Received: from speedway8455host.amd.com (10.180.168.240) by satlexmb07.amd.com (10.181.42.216) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Thu, 10 Sep 2026 12:03:31 -0500 From: "Pratik R. Sampat" To: , , , , , , CC: , , , , , , , , , , Subject: [PATCH 7/7] crypto/ccp: Implement SNP Download Firmware EX Date: Thu, 10 Sep 2026 17:02:02 +0000 Message-ID: <7754d36b3e1123dca15b6abf526b752f28cf1446.1789059392.git.prsampat@amd.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: satlexmb08.amd.com (10.181.42.217) To satlexmb07.amd.com (10.181.42.216) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CY4PEPF0000EE39:EE_|PH0PR12MB999112:EE_ X-MS-Office365-Filtering-Correlation-Id: a26dfbb0-cc0e-4b0b-d61f-08df0f5d7164 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|36860700016|7416014|376014|1800799024|23010399003|10067099003|6133799003|3023799007|22082099003|18002099003|56012099006|5023799004|11063799006; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:satlexmb07.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(36860700016)(7416014)(376014)(1800799024)(23010399003)(10067099003)(6133799003)(3023799007)(22082099003)(18002099003)(56012099006)(5023799004)(11063799006);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 7LL0r/rjg08dgFT/5mcj0As8/ASRaXiTnX6vZnVQlwGQuxQQOUZ2xCneQy3p0L+2N5Y3EhRUNnCWwlSUAJ2t+agQpoX9AIvYNfklX1YV5mGft5OufgCQUfajhHYHiQp5bmH+9A+FwUxRcVNAmZsFgApqCgYR25pQlYI5zTR+vRwAAEO/4ZBcp+go+NWpWYjXn7uCHk1h2u2w1Hrrt1X6Yp26E+ogMyIWDSu40N9zrUpgDKDrMpjY66e6D5IwZcrJz6v7+LSCjCaH1dpu7BxSZMiGRsp3+l5+04Lv2s1/g5Y8MEk3OnqiAt1vEJ94c4l7st0U7A3Sjy5dep7h4verNtTQBd6DA7OHFdBhLAdXKgHE4ow9lZRx/9amDRroIx2xYZGgGSQyMqARThYwujS2SbEU99/1nt6/9ZoZn1r9eta0bOSJPn4BOFOz4lx8go/F X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Sep 2026 17:03:31.7803 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: a26dfbb0-cc0e-4b0b-d61f-08df0f5d7164 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[satlexmb07.amd.com] X-MS-Exchange-CrossTenant-AuthSource: CY4PEPF0000EE39.namprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR12MB999112 Content-Type: text/plain; charset="utf-8" Implement SNP live firmware update using the DOWNLOAD_FIRMWARE_EX command. DOWNLOAD_FIRMWARE_EX requires the legacy SEV platform to be UNINIT. If it is WORKING then legacy guests are running and the update is refused as busy. If it is INIT, shut it down, release the buffers the firmware owns across that shutdown, run the update, and bring the platform back up afterwards. SNP is never taken down, so SNP guests are unaffected. To test run the following with your sbin file in FW: echo 1 > /sys/class/firmware/sev/loading cat > /sys/class/firmware/sev/data echo 0 > /sys/class/firmware/sev/loading The COMMIT bit is left clear, so the image is only loaded provisionally and the admin decides when to make it permanent with ioctl(/dev/sev, SNP_COMMIT). To roll back, do not commit and upload the previous image the same way. Co-developed-by: Tycho Andersen (AMD) Signed-off-by: Tycho Andersen (AMD) Signed-off-by: Pratik R. Sampat --- drivers/crypto/ccp/sev-dev.c | 268 ++++++++++++++++++++++++++++++++++- drivers/crypto/ccp/sev-dev.h | 2 + include/linux/psp-sev.h | 19 +++ 3 files changed, 288 insertions(+), 1 deletion(-) diff --git a/drivers/crypto/ccp/sev-dev.c b/drivers/crypto/ccp/sev-dev.c index 397a797d9312..c95b27275ac2 100644 --- a/drivers/crypto/ccp/sev-dev.c +++ b/drivers/crypto/ccp/sev-dev.c @@ -29,6 +29,7 @@ #include #include #include +#include =20 #include #include @@ -252,6 +253,7 @@ static int sev_cmd_buffer_len(int cmd) case SEV_CMD_SNP_PLATFORM_STATUS: return sizeof(struct sev_data_snp_addr); case SEV_CMD_SNP_GUEST_REQUEST: return sizeof(struct sev_data_snp_guest_= request); case SEV_CMD_SNP_CONFIG: return sizeof(struct sev_user_data_snp_config); + case SEV_CMD_SNP_DOWNLOAD_FIRMWARE_EX: return sizeof(struct sev_data_down= load_firmware_ex); case SEV_CMD_SNP_COMMIT: return sizeof(struct sev_data_snp_commit); case SEV_CMD_SNP_FEATURE_INFO: return sizeof(struct sev_data_snp_feature= _info); case SEV_CMD_SNP_VLEK_LOAD: return sizeof(struct sev_user_data_snp_vlek_= load); @@ -2240,17 +2242,274 @@ static int sev_update_firmware(struct device *dev) } =20 #ifdef CONFIG_FW_UPLOAD +/* Largest image the firmware accepts, anything above is rejected */ +#define SEV_FW_IMAGE_MAX_SIZE SZ_512K + static enum fw_upload_err sev_fw_upload_prepare(struct fw_upload *fw_uploa= d, const u8 *data, u32 size) { + struct sev_device *sev =3D fw_upload->dd_handle; + + if (size > SEV_FW_IMAGE_MAX_SIZE) { + dev_err(sev->dev, "DLFW_EX: image of %u bytes exceeds the %u byte maximu= m\n", + size, SEV_FW_IMAGE_MAX_SIZE); + return FW_UPLOAD_ERR_INVALID_SIZE; + } + return FW_UPLOAD_ERR_NONE; } =20 +static int sev_download_firmware_ex(const u8 *data, u32 size, int *psp_ret) +{ + struct sev_data_download_firmware_ex sev_data =3D {0}; + int ret, order; + struct page *p; + void *fw_blob; + + order =3D get_order(size); + p =3D alloc_pages(GFP_KERNEL | __GFP_ZERO, order); + if (!p) + return -ENOMEM; + + fw_blob =3D page_address(p); + memcpy(fw_blob, data, size); + + sev_data.len =3D sizeof(sev_data); + sev_data.fw_paddr =3D __psp_pa(fw_blob); + sev_data.fw_len =3D size; + /* + * Don't commit to the new firmware immediately, perform an explicit + * SNP_COMMIT after + */ + sev_data.commit =3D 0; + + ret =3D __sev_do_cmd_locked(SEV_CMD_SNP_DOWNLOAD_FIRMWARE_EX, &sev_data, + psp_ret); + + __free_pages(p, order); + + return ret; +} + +static enum fw_upload_err sev_fw_upload_handle_err(struct sev_device *sev, + int rc, int psp_ret) +{ + enum fw_upload_err ret =3D FW_UPLOAD_ERR_FW_INVALID; + + if (!rc) + return FW_UPLOAD_ERR_NONE; + + switch (psp_ret) { + case SEV_RET_INVALID_PARAM: + dev_err(sev->dev, "DLFW_EX: Provided image is not well formed\n"); + break; + case SEV_RET_INVALID_LEN: + ret =3D FW_UPLOAD_ERR_INVALID_SIZE; + dev_err(sev->dev, "DLFW_EX: Provided image has an unusable length\n"); + break; + case SEV_RET_SHUTDOWN_REQUIRED: + dev_err(sev->dev, "DLFW_EX: Provided image cannot be live-updated, shutd= own required\n"); + break; + case SEV_RET_BAD_VERSION: + dev_err(sev->dev, "DLFW_EX: Provided image < committed version\n"); + break; + case SEV_RET_INVALID_PLATFORM_STATE: + dev_err(sev->dev, "DLFW_EX: Platform not in UNINIT state\n"); + break; + case SEV_RET_INVALID_ADDRESS: + dev_err(sev->dev, "DLFW_EX: Unaligned address provided\n"); + break; + case SEV_RET_UNSUPPORTED: + dev_err(sev->dev, "DLFW_EX: feature not supported\n"); + break; + case SEV_RET_INVALID_CONFIG: + dev_err(sev->dev, "DLFW_EX: Image rejected, unsupported configuration\n"= ); + break; + case SEV_RET_BAD_SIGNATURE: + dev_err(sev->dev, "DLFW_EX: Bad firmware signature\n"); + break; + case SEV_RET_UPDATE_FAILED: + ret =3D FW_UPLOAD_ERR_HW_ERROR; + dev_err(sev->dev, "DLFW_EX: Upgrade failed, automatically reverted\n"); + break; + case SEV_RET_RESTORE_REQUIRED: + dev_err(sev->dev, "DLFW_EX: live upgrade failed, please roll back\n"); + /* + * Firmware requested a roll-back. Declare the PSP dead so + * nothing else tries to use it, and let the next upload through + * so the admin can restore the previous image. + */ + sev->fwl_rollback_required =3D true; + psp_dead =3D true; + ret =3D FW_UPLOAD_ERR_HW_ERROR; + break; + case SEV_RET_HWSEV_RET_UNSAFE: + dev_err(sev->dev, "DLFW_EX: SEV firmware no longer safe. Reboot recommen= ded\n"); + /* + * Following a return of HARDWARE_UNSAFE, operation of the SEV + * firmware is indeterminate and the recommendation is to reboot + * the platform. Declare the PSP dead so the driver stops + * issuing commands to it while the reboot is pending. + */ + psp_dead =3D true; + ret =3D FW_UPLOAD_ERR_HW_ERROR; + break; + case SEV_RET_NO_FW_CALL: + /* The command never reached the firmware. */ + dev_err(sev->dev, "DLFW_EX: driver error %d\n", rc); + ret =3D FW_UPLOAD_ERR_HW_ERROR; + break; + default: + dev_err(sev->dev, "Unknown SEV firmware err 0x%x\n", psp_ret); + ret =3D FW_UPLOAD_ERR_HW_ERROR; + break; + } + + return ret; +} + +static int sev_fw_upload_shutdown_platform(struct sev_device *sev) +{ + int rc, error =3D SEV_RET_NO_FW_CALL, sev_plat_state; + + lockdep_assert_held(&sev_cmd_mutex); + + rc =3D sev_get_platform_state(&sev_plat_state, &error); + if (rc) { + dev_err(sev->dev, "SEV get platform state failed %d, error %#x\n", + rc, error); + return rc; + } + + switch (sev_plat_state) { + case SEV_STATE_UNINIT: + return 0; + case SEV_STATE_WORKING: + /* Legacy guests are running, the update cannot proceed. */ + return -EBUSY; + case SEV_STATE_INIT: + break; + default: + dev_err(sev->dev, "Unknown SEV firmware state %d\n", sev_plat_state); + return -EINVAL; + } + + rc =3D __sev_platform_shutdown_locked(&error); + if (rc) { + dev_err(sev->dev, "SEV platform shutdown failed %d, error %#x\n", + rc, error); + return rc; + } + + __sev_release_firmware_buffers(false); + + sev->fwl_reinit_required =3D true; + + return 0; +} + +static void sev_fw_upload_reinit_platform(struct sev_device *sev) +{ + int rc, error =3D SEV_RET_NO_FW_CALL; + + lockdep_assert_held(&sev_cmd_mutex); + + if (!sev->fwl_reinit_required) + return; + + rc =3D __sev_platform_init_locked(&error); + if (rc) { + dev_err(sev->dev, "SEV platform re-init failed %d, error %#x\n", + rc, error); + return; + } + + sev->fwl_reinit_required =3D false; +} + +static enum fw_upload_err sev_fw_upload_update(struct sev_device *sev, + const u8 *data, u32 size, + u32 *written) +{ + int rc, error =3D SEV_RET_NO_FW_CALL; + enum fw_upload_err ret; + + guard(mutex)(&sev_cmd_mutex); + + /* + * A PSP declared dead only executes DOWNLOAD_FIRMWARE_EX if it was the + * firmware update that killed it and asked for a rollback. Declared + * dead for any other reason it will not answer until the platform is + * rebooted. + */ + if (psp_dead && !sev->fwl_rollback_required) { + dev_err(sev->dev, "DLFW_EX: PSP is not responding\n"); + return FW_UPLOAD_ERR_HW_ERROR; + } + + /* + * If the last firmware update returned RESTORE_REQUIRED, retry DLFW_EX. + * We being in this state means that the legacy firmware has previously + * been shut down, so no need to do it again. + */ + if (sev->fwl_rollback_required) { + psp_dead =3D false; + } else { + rc =3D sev_fw_upload_shutdown_platform(sev); + if (rc) { + return rc =3D=3D -EBUSY ? FW_UPLOAD_ERR_BUSY + : FW_UPLOAD_ERR_HW_ERROR; + } + } + + rc =3D sev_download_firmware_ex(data, size, &error); + ret =3D sev_fw_upload_handle_err(sev, rc, error); + if (ret =3D=3D FW_UPLOAD_ERR_NONE) { + *written =3D size; + sev->fwl_rollback_required =3D false; + } + + /* A rollback retry failed. PSP now stays dead. */ + if (sev->fwl_rollback_required) + psp_dead =3D true; + + if (!sev->fwl_rollback_required && !psp_dead) + sev_fw_upload_reinit_platform(sev); + + return ret; +} + static enum fw_upload_err sev_fw_upload_write(struct fw_upload *fw_upload, const u8 *data, u32 offset, u32 size, u32 *written) { - return FW_UPLOAD_ERR_BUSY; + struct sev_device *sev =3D fw_upload->dd_handle; + u8 old_major, old_minor, old_build; + enum fw_upload_err ret; + + old_major =3D sev->api_major; + old_minor =3D sev->api_minor; + old_build =3D sev->build; + + ret =3D sev_fw_upload_update(sev, data, size, written); + if (ret !=3D FW_UPLOAD_ERR_NONE) + return ret; + + if (sev_get_api_version()) { + dev_err(sev->dev, "SNP platform data refresh after firmware update faile= d\n"); + return FW_UPLOAD_ERR_HW_ERROR; + } + + if (sev->api_major !=3D old_major || sev->api_minor !=3D old_minor || + sev->build !=3D old_build) { + dev_info(sev->dev, "SEV firmware updated to %d.%d build %d\n", + sev->api_major, sev->api_minor, sev->build); + } else { + dev_info(sev->dev, "SEV firmware version unchanged: %d.%d build %d\n", + sev->api_major, sev->api_minor, sev->build); + } + + return ret; } =20 static enum fw_upload_err sev_fw_upload_poll_complete(struct fw_upload *fw= _upload) @@ -2274,6 +2533,13 @@ static void register_sev_fw_uploader(struct sev_devi= ce *sev) { struct fw_upload *fwl; =20 + /* + * The interface only drives DOWNLOAD_FIRMWARE_EX, which is an SNP + * command, so do not advertise it where SNP is unavailable. + */ + if (!cc_platform_has(CC_ATTR_HOST_SEV_SNP)) + return; + /* * SNP firmware update is a platform-wide operation; only the master * PSP issues firmware commands. Register a single global interface. diff --git a/drivers/crypto/ccp/sev-dev.h b/drivers/crypto/ccp/sev-dev.h index 7ec692e2147e..1e45a08c41da 100644 --- a/drivers/crypto/ccp/sev-dev.h +++ b/drivers/crypto/ccp/sev-dev.h @@ -71,6 +71,8 @@ struct sev_device { struct sev_tio_status *tio_status; =20 struct fw_upload *fwl; + bool fwl_rollback_required; + bool fwl_reinit_required; }; =20 int sev_dev_init(struct psp_device *psp); diff --git a/include/linux/psp-sev.h b/include/linux/psp-sev.h index 03a79786df1d..c6adbd46f05a 100644 --- a/include/linux/psp-sev.h +++ b/include/linux/psp-sev.h @@ -856,6 +856,25 @@ struct sev_platform_init_args { unsigned int max_snp_asid; }; =20 +/** + * struct sev_data_download_firmware_ex - SNP_DOWNLOAD_FIRMWARE_EX structu= re + * + * @len: length of the command buffer read by the PSP + * @rsvd0: reserved + * @fw_paddr: system physical address of the start of the firmware blob + * @fw_len: length of the firmware blob + * @commit: whether to immediately commit the firmware update + * @rsvd1: reserved + */ +struct sev_data_download_firmware_ex { + u32 len; /* In */ + u32 rsvd0; + u64 fw_paddr; /* In */ + u32 fw_len; /* In */ + u32 commit:1; /* In */ + u32 rsvd1:31; +} __packed; + /** * struct sev_data_snp_commit - SNP_COMMIT structure * --=20 2.43.0