vgsp: m163 lost-H2D copy integrity (drain injected pins before CE op resolution; hold failed device-copy ops) + m164 CLASS-2 GR no-capture entry hold + m165 pool release applies at fresh-pin time + m166 timeout-ladder warm-sem fail-fast; scanner: first-class pool VA resolution + periodic re-assert + demand routing

1 files changed, 27 insertions, 0 deletions

diff --git a/kernel/gsp_phys_booter.c b/kernel/gsp_phys_booter.c
index f54a0dc..d21c5ea 100644
--- a/kernel/gsp_phys_booter.c
+++ b/kernel/gsp_phys_booter.c
@@ -17192,6 +17192,7 @@ int gsp_phys_backend_guest_gr_submit(const struct gsp_phys_gr_submit *req,
 	u8 *qmd_dst_mem = NULL;
 	u32 qmd_rel_off = 0, ch_rel_off = 0;
 	u32 poll = 0, w0 = 0, w1 = 0, grpoll_n = 0;
+	bool sem_gated = false;
 	static u32 sked_prev[11];
 	static u32 sked_sample[11];
 	static u32 sked_tick;
@@ -18277,6 +18278,32 @@ gr_page_unmapped:
 					rr);
 			}
 			/*
+			 * m166: liveness gate before spending the fresh-entry
+			 * retries. The m156 warm sem push (the stage-4 GR sem
+			 * block) is the only proven "engine alive" probe; if
+			 * it times out, the engine is wedged for the boot and
+			 * every further retry is futile - fail fast instead of
+			 * burning ~20 s with the single-inflight slot held
+			 * (r167 memset2d: 8 internal ladder timeouts over 31 s
+			 * for an entry the front-end never fetched). The probe
+			 * itself is bounded by the sem push's own poll.
+			 */
+			if (!sem_gated) {
+				int sp_ret;
+
+				sem_gated = true;
+				mutex_lock(&gsp_phys_rm_lock);
+				sp_ret = gsp_phys_rmcall_gr_sem_push_locked(bar0);
+				mutex_unlock(&gsp_phys_rm_lock);
+				if (sp_ret) {
+					gsp_phys_gr_sem_wedged++;
+					pr_info("vgsp-gr: timeout ladder: warm sem WEDGED (rc=%d) - failing fast instead of fresh-entry retries\n",
+						sp_ret);
+					break;
+				}
+				pr_info("vgsp-gr: timeout ladder: warm sem ALIVE - continuing fresh-entry retries\n");
+			}
+			/*
 			 * The re-arm above only replays the schedule verbs; if the
 			 * entry was already fetched or the front-end never latched
 			 * it, that cannot make the QMD run. Re-publish a FRESH ring