719 	struct cxl_mbox_transfer_fw *transfer;  in cxl_mem_abort_fw_xfer()  local
723 	transfer = kzalloc(struct_size(transfer, data, 0), GFP_KERNEL);  in cxl_mem_abort_fw_xfer()
724 	if (!transfer)  in cxl_mem_abort_fw_xfer()
730 		.size_in = sizeof(*transfer),  in cxl_mem_abort_fw_xfer()
731 		.payload_in = transfer,  in cxl_mem_abort_fw_xfer()
736 	transfer->action = CXL_FW_TRANSFER_ACTION_ABORT;  in cxl_mem_abort_fw_xfer()
739 	kfree(transfer);  in cxl_mem_abort_fw_xfer()
768 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_prepare()  local
773 	mds->fw.oneshot = struct_size(transfer, data, size) <  in cxl_fw_prepare()
795 	struct cxl_mbox_transfer_fw *transfer;  in cxl_fw_write()  local
817 	cur_size = min_t(size_t, size, mds->payload_size - sizeof(*transfer));  in cxl_fw_write()
820 	size_in = struct_size(transfer, data, cur_size);  in cxl_fw_write()
833 	transfer = kzalloc(size_in, GFP_KERNEL);  in cxl_fw_write()
834 	if (!transfer)  in cxl_fw_write()
837 	transfer->offset = cpu_to_le32(offset / CXL_FW_TRANSFER_ALIGNMENT);  in cxl_fw_write()
838 	memcpy(transfer->data, data + offset, cur_size);  in cxl_fw_write()
840 		transfer->action = CXL_FW_TRANSFER_ACTION_FULL;  in cxl_fw_write()
841 		transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
844 			transfer->action = CXL_FW_TRANSFER_ACTION_INITIATE;  in cxl_fw_write()
846 			transfer->action = CXL_FW_TRANSFER_ACTION_END;  in cxl_fw_write()
847 			transfer->slot = mds->fw.next_slot;  in cxl_fw_write()
849 			transfer->action = CXL_FW_TRANSFER_ACTION_CONTINUE;  in cxl_fw_write()
856 		.payload_in = transfer,  in cxl_fw_write()
885 	kfree(transfer);  in cxl_fw_write()