]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
arm64: dts: qcom: monaco: Reserve full Gunyah metadata region
authorLoic Poulain <loic.poulain@oss.qualcomm.com>
Mon, 2 Mar 2026 14:26:03 +0000 (15:26 +0100)
committerBjorn Andersson <andersson@kernel.org>
Wed, 18 Mar 2026 14:14:48 +0000 (09:14 -0500)
We observe spurious "Synchronous External Abort" exceptions
(ESR=0x96000010) and kernel crashes on Monaco-based platforms.
These faults are caused by the kernel inadvertently accessing
hypervisor-owned memory that is not properly marked as reserved.

>From boot log, The Qualcomm hypervisor reports the memory range
at 0x91a80000 of size 0x80000 (512 KiB) as hypervisor-owned:
qhee_hyp_assign_remove_memory: 0x91a80000/0x80000 -> ret 0

However, the EFI memory map provided by firmware only reserves the
subrange 0x91a40000–0x91a87fff (288 KiB). The remaining portion
(0x91a88000–0x91afffff) is incorrectly reported as conventional
memory (from efi debug):
efi:   0x000091a40000-0x000091a87fff [Reserved...]
efi:   0x000091a88000-0x0000938fffff [Conventional...]

As a result, the allocator may hand out PFNs inside the hypervisor
owned region, causing fatal aborts when the kernel accesses those
addresses.

Add a reserved-memory carveout for the Gunyah hypervisor metadata
at 0x91a80000 (512 KiB) and mark it as no-map so Linux does not
map or allocate from this area.

For the record:
Hyp version: gunyah-e78adb36e debug (2025-11-17 05:38:05 UTC)
UEFI Ver: 6.0.260122.BOOT.MXF.1.0.c1-00449-KODIAKLA-1

Fixes: 7be190e4bdd2 ("arm64: dts: qcom: add QCS8300 platform")
Signed-off-by: Loic Poulain <loic.poulain@oss.qualcomm.com>
Reviewed-by: Konrad Dybcio <konrad.dybcio@oss.qualcomm.com>
Reviewed-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
Link: https://lore.kernel.org/r/20260302142603.1113355-1-loic.poulain@oss.qualcomm.com
Signed-off-by: Bjorn Andersson <andersson@kernel.org>
arch/arm64/boot/dts/qcom/monaco.dtsi

index dbb2273b0ee89b5121864fd5327c00e15ab61151..0cb9fd154b684e61b2323fad5487216a03a0af2f 100644 (file)
                        hwlocks = <&tcsr_mutex 3>;
                };
 
+               gunyah_md_mem: gunyah-md-region@91a80000 {
+                       reg = <0x0 0x91a80000 0x0 0x80000>;
+                       no-map;
+               };
+
                lpass_machine_learning_mem: lpass-machine-learning-region@93b00000 {
                        reg = <0x0 0x93b00000 0x0 0xf00000>;
                        no-map;