763 	struct cxl_mbox_transfer_fw *transfer;  in cxl_mem_abort_fw_xfer()  local
767 	transfer = kzalloc(struct_size(transfer, data, 0), GFP_KERNEL);  in cxl_mem_abort_fw_xfer()
768 	if (!transfer)  in cxl_mem_abort_fw_xfer()
774 		.size_in = sizeof(*transfer),  in cxl_mem_abort_fw_xfer()
775 		.payload_in = transfer,  in cxl_mem_abort_fw_xfer()
780 	transfer->action = CXL_FW_TRANSFER_ACTION_ABORT;  in cxl_mem_abort_fw_xfer()
783 	kfree(transfer);  in cxl_mem_abort_fw_xfer()
812 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_prepare()  local
817 	mds->fw.oneshot = struct_size(transfer, data, size) <  in cxl_fw_prepare()
839 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_write()  local
861 	cur_size = min_t(size_t, size, mds->payload_size - sizeof(*transfer));  in cxl_fw_write()
864 	size_in = struct_size(transfer, data, cur_size);  in cxl_fw_write()
877 	transfer = kzalloc(size_in, GFP_KERNEL);  in cxl_fw_write()
878 	if (!transfer)  in cxl_fw_write()
881 	transfer->offset = cpu_to_le32(offset / CXL_FW_TRANSFER_ALIGNMENT);  in cxl_fw_write()
882 	memcpy(transfer->data, data + offset, cur_size);  in cxl_fw_write()
884 		transfer->action = CXL_FW_TRANSFER_ACTION_FULL;  in cxl_fw_write()
885 		transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
888 			transfer->action = CXL_FW_TRANSFER_ACTION_INITIATE;  in cxl_fw_write()
890 			transfer->action = CXL_FW_TRANSFER_ACTION_END;  in cxl_fw_write()
891 			transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
893 			transfer->action = CXL_FW_TRANSFER_ACTION_CONTINUE;  in cxl_fw_write()
900 		.payload_in = transfer,  in cxl_fw_write()
929 	kfree(transfer);  in cxl_fw_write()