[SRU][R/N][PATCH 0/1] firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits
mitchell.augustin at canonical.com
mitchell.augustin at canonical.com
Wed Jul 29 18:29:51 UTC 2026
From: Mitchell Augustin <mitchell.augustin at canonical.com>
BugLink: https://bugs.launchpad.net/bugs/2162012
[ Summary ]
A recent stable-update pulled two v7.1 FF-A commits into the linux-nvidia 7.0
branches, but not the third commit in the chain. The result is that FF-A
fails to initialise on 64K page kernels whose firmware rejects a 64K RX/TX
buffer, taking every FF-A device with it. This backports the missing fix.
### The regression
Stable-updates applied these two, both of which first shipped
upstream in **v7.1**:
| Backport | Upstream | BugLink |
|---|---|---|
| `7bfaed6b412b` firmware: arm_ffa: Use the correct buffer size during RXTX_MAP | `83210251fd70` | LP #2156385 |
| `105dac1d2c92` firmware: arm_ffa: Align RxTx buffer size before mapping | `0399e3f872ca` | LP #2156390 |
The first makes the driver advertise `PAGE_ALIGN(rxtx_bufsz)` to firmware; the
second is its follow-up fix. Both landed in `Ubuntu-nvidia-bos-7.0.0-2016.16`,
the most recent tag on this branch. Earlier tags are not affected.
The third commit in the chain, which fixes the fallout from the first, only
landed upstream in **v7.2-rc4**:
53716a4d745f firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits
[ Impact ]
On a 64K page kernel the driver takes the firmware advertised minimum RX/TX
buffer size, rounds it up to `PAGE_SIZE`, and asks firmware to map that. FF-A
implementations before v1.2 advertise no maximum and may simply reject the
rounded up size. There is no clamp and no retry, so probe fails:
ARM FF-A: Driver version 1.2
ARM FF-A: Firmware version 1.1 found
ARM FF-A: failed to register FFA RxTx buffers
and no FF-A devices are registered at all. Anything sitting on FF-A goes with
it, including TPM over FF-A.
Trigger is `PAGE_SIZE` greater than the advertised minimum, so the 64K
flavours. Platforms with FF-A v1.2 or later firmware are unaffected, since the
advertised maximum is then respected.
[ Fix ]
Backport of `53716a4d745f`. It decodes the maximum buffer size that
FF-A v1.2+ reports, clamps the page aligned minimum to it, and where no maximum
is advertised retries `RXTX_MAP` at the advertised minimum if the rounded size
is rejected with `INVALID_PARAMETERS`.
[ Test Plan ]
Tested on an Arm server reporting FF-A firmware version 1.1, running a 64K page
kernel built from this branch's own `nvidia-bos-64k` flavour annotations.
Before, on the unmodified branch tip:
ARM FF-A: failed to register FFA RxTx buffers
/sys/bus/arm_ffa/devices/ -> empty
After, with this commit applied:
ARM FF-A: Firmware version 1.1 found
ARM FF-A: Failed to create IRQ mapping!
/sys/bus/arm_ffa/devices/ -> arm-ffa-1 .. arm-ffa-5
All five partitions enumerate again. The remaining "Failed to create IRQ
mapping" line is pre-existing and also present on the distro kernel that
predates the regression. No new BUG, WARNING or call traces.
[ Where Problems Could Occur ]
A regression in this fix could cause issues with the ARM FF-A driver's partition enumeration
Seth Forshee (1):
firmware: arm_ffa: Respect firmware advertised RX/TX buffer size
limits
drivers/firmware/arm_ffa/driver.c | 27 ++++++++++++++++++++-------
1 file changed, 20 insertions(+), 7 deletions(-)
--
2.53.0
More information about the kernel-team
mailing list