From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 1CB02C624D4 for ; Thu, 3 Sep 2026 06:38:17 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:MIME-Version:Reply-To:List-Subscribe: List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:Message-Id:Date: References:In-Reply-To:Cc:To:Subject:From:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=E5V0YdMTejCDbaiMiut8ngO5NVnI80Y/XtjMO0+EAd0=; b=zzkYFpBzdDvjUc pKaDf8sMxu04cnwfZOTcAWItIqx6a8Hch7H8y2+9tMf4sI9Sk+Ti+frWOf7d2Vynul94Y90gtIiuM 501daCDSgAou5UIwb1qn2aP52dADe5E+79CZprB9DAKOJZFVdf10Blf8/k3GWvdLwReUupCBgs1sd 5rArUD5t2yFDNr+Zgm0Q21DZNaBxNNOsyFHKqVV0bsctSTOyiyLqPQWoAXVtUTR4sM4MzccTxgAcc /ozFllrfPTocpxjRi66qktU6OPCiCEEGdZLvE3SjMeXHRg+wALT3qNTYRfkVCtJFykj34sCLen81v rKTj8O3g0LPoF/3LJk8Q==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1x215U-0000000GV4e-33tS; Thu, 03 Sep 2026 06:38:16 +0000 Received: from tor.source.kernel.org ([172.105.4.254]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1x215T-0000000GV4V-1lFt for linux-i3c@lists.infradead.org; Thu, 03 Sep 2026 06:38:15 +0000 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) by tor.source.kernel.org (Postfix) with ESMTP id 98C8C600D1; Thu, 3 Sep 2026 06:38:14 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id E500D1F000E9; Thu, 3 Sep 2026 06:38:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1788417494; bh=Qm9nhcL1MmIbPlZqcmKfH5kj0lKMQg5FV2EYkIO9WoQ=; h=From:Subject:Reply-To:To:Cc:In-Reply-To:References:Date; b=lMkl4a31HcU7FtAxj/3mXWy0Zrk98TaVzh/fVRbUvPcFdo61jDgswNICGSlGe1oAe KAWxK0j/1YRHJOMKOD97j6ZQeMTG2odaS6RBwJYze8ALeAYXfDfeuTWLlAoRCpkMsB rmabzVYvaMRk8qAkxQ+/WAayKzy4aBPuY+cpTU3YzfLaWiDfa96EMB32Q6U79mZauw pEiM8cFgkYAMq1MN3T1uq8NECsdksrfQT7RUQ5zLQN+VrfvBrJpC+bpct0kzr46Mzi J+BubTRf1NKzEwaCwf89J5nYbV1sjtdDQFTg8yM6IYWkF1ta/gmcT1OSe+d5Ho/OAS 65YHIp0H4zOag== From: sashiko-bot@kernel.org Subject: Re: [PATCH v18 6/8] i3c: hub: Add support for the I3C interface in the I3C hub To: "Lakshay Piplani" Cc: Frank.Li@kernel.org, "Alexandre Belloni" , robh@kernel.org, linux-i3c@lists.infradead.org, devicetree@vger.kernel.org, conor+dt@kernel.org In-Reply-To: <20260903062108.2712296-7-lakshay.piplani@nxp.com> References: <20260903062108.2712296-1-lakshay.piplani@nxp.com> <20260903062108.2712296-7-lakshay.piplani@nxp.com> Date: Thu, 03 Sep 2026 06:38:13 +0000 Message-Id: <20260903063813.E500D1F000E9@smtp.kernel.org> X-BeenThere: linux-i3c@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: sashiko-reviews@lists.linux.dev MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "linux-i3c" Errors-To: linux-i3c-bounces+linux-i3c=archiver.kernel.org@lists.infradead.org VGhhbmsgeW91IGZvciB5b3VyIGNvbnRyaWJ1dGlvbiEgU2FzaGlrbyBBSSByZXZpZXcgZm91bmQg MiBwb3RlbnRpYWwgaXNzdWUocykgdG8gY29uc2lkZXI6Ci0gW0hpZ2hdIERvd25zdHJlYW0gZGV2 aWNlcyBkaXNjb3ZlcmVkIHZpYSBFTlREQUEgYXJlIGluY29ycmVjdGx5IGluc3RhbnRpYXRlZCBv biB0aGUgcGFyZW50IGJ1cywgYnlwYXNzaW5nIHRoZSBodWIncyBwb3J0IHJvdXRpbmcgbG9naWMu Ci0gW0hpZ2hdIEludGVudGlvbmFsIFVzZS1BZnRlci1GcmVlIGluIGBpM2NfaHViX2RldGFjaF9p M2NfZGV2YCB3aGVuIGFzeW5jaHJvbm91cyBJQkkgaXMgc3RpbGwgYWN0aXZlLgotLQoKY29tbWl0 IDMxZjNmZWFhN2QxNTY0YTY2NzQ2MWIwNmFhMzZlZDYyZmIzNTNhMGEKQXV0aG9yOiBMYWtzaGF5 IFBpcGxhbmkgPGxha3NoYXkucGlwbGFuaUBueHAuY29tPgoKaTNjOiBodWI6IEFkZCBzdXBwb3J0 IGZvciB0aGUgSTNDIGludGVyZmFjZSBpbiB0aGUgSTNDIGh1YgogICAgClRoaXMgY29tbWl0IGFk ZHMgdmlydHVhbCBJM0MgYnVzIHN1cHBvcnQgZm9yIHRoZSBodWIgYW5kIHByb3ZpZGVzIGFuIGlu dGVyZmFjZQp0byBlbmFibGUgb3IgZGlzYWJsZSBkb3duc3RyZWFtIHBvcnRzLgoKPiBkaWZmIC0t Z2l0IGEvZHJpdmVycy9pM2MvaHViLmMgYi9kcml2ZXJzL2kzYy9odWIuYwo+IG5ldyBmaWxlIG1v ZGUgMTAwNjQ0Cj4gaW5kZXggMDAwMDAwMDAwMDAwMC4uNTM5MDI4NzY4MDg0NAo+IC0tLSAvZGV2 L251bGwKPiArKysgYi9kcml2ZXJzL2kzYy9odWIuYwoKWyAuLi4gXQoKPiArc3RhdGljIHZvaWQg aTNjX2h1Yl9kZXRhY2hfaTNjX2RldihzdHJ1Y3QgaTNjX2Rldl9kZXNjICpkZXYpCj4gK3sKPiAr CXN0cnVjdCBpM2NfaHViX2Rldl9kYXRhICpkYXRhID0gaTNjX2Rldl9nZXRfbWFzdGVyX2RhdGEo ZGV2KTsKPiArCXN0cnVjdCBpM2NfbWFzdGVyX2NvbnRyb2xsZXIgKnBhcmVudDsKPiArCj4gKwlp ZiAoIWRhdGEpCj4gKwkJcmV0dXJuOwo+ICsKPiArCXBhcmVudCA9IGkzY19kZXZfZ2V0X21hc3Rl cigmZGF0YS0+cGFyZW50X2Rlc2MpOwo+ICsKPiArCS8qCj4gKwkgKiBwYXJlbnRfZGVzYy5pYmkg c2hvdWxkIGFscmVhZHkgYmUgY2xlYXJlZCBieSBpM2NfaHViX2ZyZWVfaWJpKCkKPiArCSAqIGJl Zm9yZSB3ZSBnZXQgaGVyZS4gSWYgaXQgaXMgc3RpbGwgc2V0LCB0aGUga2ZyZWUoZGF0YSkgYmVs b3cgZnJlZXMKPiArCSAqIGEgZGVzY3JpcHRvciB0aGUgcGFyZW50IGNvbnRyb2xsZXIgY2FuIHN0 aWxsIHJlYWNoIHZpYSB1bi1mbHVzaGVkCj4gKwkgKiBhc3luY2hyb25vdXMgSUJJIHdvcmsgKHVz ZS1hZnRlci1mcmVlLCBub3QganVzdCBhIGxlYWspLgo+ICsJICovCj4gKwlXQVJOX09OX09OQ0Uo ZGF0YS0+cGFyZW50X2Rlc2MuaWJpKTsKPiArCj4gKwlpZiAocGFyZW50KSB7Cj4gKwkJaTNjX2J1 c19tYWludGVuYW5jZV9sb2NrKCZwYXJlbnQtPmJ1cyk7Cj4gKwkJaTNjX21hc3Rlcl9kZXRhY2hf aTNjX2Rldl9jb250cm9sbGVyX2xvY2tlZCgmZGF0YS0+cGFyZW50X2Rlc2MpOwo+ICsJCWkzY19i dXNfbWFpbnRlbmFuY2VfdW5sb2NrKCZwYXJlbnQtPmJ1cyk7Cj4gKwl9Cj4gKwo+ICsJaTNjX2Rl dl9zZXRfbWFzdGVyX2RhdGEoZGV2LCBOVUxMKTsKPiArCW11dGV4X2Rlc3Ryb3koJmRhdGEtPnBh cmVudF9kZXNjLmliaV9sb2NrKTsKPiArCWtmcmVlKGRhdGEpOwoKW1NldmVyaXR5OiBIaWdoXQpE b2VzIHRoaXMgY29kZSBpbnRyb2R1Y2UgYSB1c2UtYWZ0ZXItZnJlZSBpZiB0aGUgYXN5bmNocm9u b3VzIElCSSB0YXNrIGlzCnN0aWxsIGFjdGl2ZT8KCldoZW4gYSBkb3duc3RyZWFtIGRldmljZSBp cyB1bmJvdW5kIHdoaWxlIGFuIElCSSBpcyBhY3RpdmUsIHRoZSBJM0MgY29yZSBjYWxscwppM2Nf aHViX2RldGFjaF9pM2NfZGV2KCkgd2l0aG91dCBmaXJzdCBmcmVlaW5nIHRoZSBJQkkuIFRoaXMg b2NjdXJzIGJlY2F1c2UKaTNjX21hc3Rlcl9kZXRhY2hfZnJlZV9kZXZzKCkgZXhlY3V0ZXMgZHVy aW5nIGkzY19tYXN0ZXJfYnVzX2NsZWFudXAoKSB3aXRob3V0CmNsZWFyaW5nIElCSXMuIAoKV2hp bGUgdGhlIHdhcm5pbmcgY29ycmVjdGx5IGRldGVjdHMgdGhpcyBzdGF0ZSwgY2FsbGluZyBrZnJl ZShkYXRhKQp1bmNvbmRpdGlvbmFsbHkgZnJlZXMgdGhlIG1lbW9yeSB3aGlsZSB0aGUgcGFyZW50 IGNvbnRyb2xsZXIncyB1bi1mbHVzaGVkIElCSQp3b3JrcXVldWUgKGkzY19tYXN0ZXJfaGFuZGxl X2liaSkgbWlnaHQgc3RpbGwgZXhlY3V0ZSBhbmQgZGVyZWZlcmVuY2UgdGhlCmZyZWVkIGRhdGEt PnBhcmVudF9kZXNjLgoKV291bGQgaXQgYmUgc2FmZXIgdG8gbGVhayB0aGUgYWxsb2NhdGlvbiBi eSByZXR1cm5pbmcgZWFybHkgcmF0aGVyIHRoYW4gZnJlZWluZwphY3RpdmVseSByZWZlcmVuY2Vk IG1lbW9yeSB0byBhdm9pZCBtZW1vcnkgY29ycnVwdGlvbj8KCj4gK30KClsgLi4uIF0KCj4gK3N0 YXRpYyBpbnQgaTNjX2h1Yl9kb19kYWEoc3RydWN0IGkzY19odWIgKmh1YiwKPiArCQkJICBzdHJ1 Y3QgaTNjX21hc3Rlcl9jb250cm9sbGVyICpjb250cm9sbGVyKQo+ICt7Cj4gKwlzdHJ1Y3QgaTNj X21hc3Rlcl9jb250cm9sbGVyICpwYXJlbnQ7Cj4gKwlpbnQgcmV0OwoKWyAuLi4gXQoKPiArCS8q Cj4gKwkgKiBEb3duc3RyZWFtIGRldmljZXMgcmVhY2hhYmxlIHRocm91Z2ggaHViIHRhcmdldC1w b3J0IHJvdXRlcyBzaGFyZSB0aGUKPiArCSAqIHBhcmVudCBjb250cm9sbGVyJ3MgSTNDIGFkZHJl c3Mgc3BhY2UuIFRoZSBodWIgZ2F0ZXMgYWNjZXNzIHRvIGEKPiArCSAqIHRhcmdldC1wb3J0IG5l dHdvcmssIGJ1dCBpdCBkb2VzIG5vdCBjcmVhdGUgYW4gaW5kZXBlbmRlbnQgZHluYW1pYwo+ICsJ ICogYWRkcmVzcyBkb21haW4gcGVyIHZpcnR1YWwgYnVzLgo+ICsJICoKPiArCSAqIFJ1biBEQUEg b24gdGhlIHBhcmVudCBjb250cm9sbGVyIHNvIGR5bmFtaWMgYWRkcmVzc2VzIHJlbWFpbiB1bmlx dWUKPiArCSAqIGFjcm9zcyBhbGwgZG93bnN0cmVhbSBkZXZpY2VzLCBldmVuIHdoZW4gdGhleSBh cmUgYmVoaW5kIGRpZmZlcmVudAo+ICsJICogdGFyZ2V0IHBvcnRzLgo+ICsJICoKPiArCSAqIFRo ZSBjdXJyZW50IGh1YiBtb2RlbCBzaGFyZXMgdGhlIHBhcmVudCBjb250cm9sbGVyJ3MgZHluYW1p Yy1hZGRyZXNzCj4gKwkgKiBkb21haW4gYW5kIGRvZXMgbm90IHN1cHBvcnQgaW5kZXBlbmRlbnQg cGVyLXBvcnQgREFBIGRvbWFpbnMsIHNvIGEKPiArCSAqIERBQSByZXN1bHQgZG9lcyBub3QgZ28g c3RhbGUgYmVoaW5kIGEgcG9ydCB0b2dnbGUuIEFkZHJlc3NlcyByZXNlcnZlZAo+ICsJICogZnJv bSB0aGUgRGV2aWNlIFRyZWUgYXJlIGhlbGQgZm9yIHRoZSBsaWZldGltZSBvZiB0aGUgcGFyZW50 IGJ1cyBhbmQKPiArCSAqIGFyZSBuZXZlciByZWxlYXNlZCBvbiBhIHBvcnQgdG9nZ2xlLCBzbyBl bmFibGluZyBvciBkaXNhYmxpbmcgYSBwb3J0Cj4gKwkgKiBvbmx5IGdhdGVzIHJlYWNoYWJpbGl0 eSBhbmQgbmV2ZXIgY2F1c2VzIGFuIGFkZHJlc3MgdG8gYmUgaGFuZGVkIG91dAo+ICsJICogdHdp Y2UuCj4gKwkgKi8KPiArCXJldCA9IGkzY19tYXN0ZXJfZG9fZGFhKHBhcmVudCk7CgpbU2V2ZXJp dHk6IEhpZ2hdCkNhbiBkZWxlZ2F0aW5nIERBQSBlbnRpcmVseSB0byB0aGUgcGFyZW50IGNvbnRy b2xsZXIgaGVyZSBjYXVzZSBkb3duc3RyZWFtCmRldmljZXMgdG8gYnlwYXNzIHRoZSBodWIgcG9y dCByb3V0aW5nIGxvZ2ljPwoKSWYgYSBkb3duc3RyZWFtIGRldmljZSBsYWNrcyBhbiBhc3NpZ25l ZC1hZGRyZXNzIG9yIHN0YXRpYyBhZGRyZXNzIGluIERULCBpdAppcyBza2lwcGVkIGJ5IGkzY19t YXN0ZXJfZWFybHlfaTNjX2Rldl9hZGQoKSBhbmQgbGVmdCB0byBiZSBkaXNjb3ZlcmVkCmR5bmFt aWNhbGx5LiBXaGVuIGkzY19tYXN0ZXJfZG9fZGFhKCkgZXhlY3V0ZXMgb24gdGhlIHBhcmVudCwg dGhlIHBhcmVudApjb250cm9sbGVyIHBlcmZvcm1zIEVOVERBQSwgZGlzY292ZXJzIHRoZSBkb3du c3RyZWFtIGRldmljZSwgYW5kIGluc3RhbnRpYXRlcwp0aGUgaTNjX2RldmljZSBvbiBwYXJlbnQt PmJ1cy5kZXZzIHJhdGhlciB0aGFuIHRoZSB2aXJ0dWFsIGNvbnRyb2xsZXIncyBidXMuCgpUaGlz IHdvdWxkIGNhdXNlIHRhcmdldCBkcml2ZXJzIHRvIGJpbmQgdG8gdGhlIGRldmljZSBvbiB0aGUg cGFyZW50IGJ1cy4gVGhlaXIKdHJhbnNmZXIgcmVxdWVzdHMgd291bGQgYmUgcm91dGVkIGRpcmVj dGx5IHRvIHRoZSBwYXJlbnQgY29udHJvbGxlciwgY29tcGxldGVseQpieXBhc3NpbmcgaTNjX2h1 Yl9tYXN0ZXJfcHJpdl94ZmVycygpIGFuZCBsZWF2aW5nIHRoZSBodWIgcG9ydCBjbG9zZWQsIHdo aWNoCndvdWxkIGNhdXNlIHdpcmUgdHJhbnNmZXJzIHRvIGZhaWwuCgo+ICsJaTNjX2h1Yl9kaXNh YmxlX3BvcnQoY29udHJvbGxlcik7Cj4gKwltdXRleF91bmxvY2soJmh1Yi0+bG9jayk7Cj4gKwo+ ICsJcmV0dXJuIHJldDsKPiArfQoKLS0gClNhc2hpa28gQUkgcmV2aWV3IMK3IGh0dHBzOi8vc2Fz aGlrby5kZXYvIy9wYXRjaHNldC8yMDI2MDkwMzA2MjEwOC4yNzEyMjk2LTEtbGFrc2hheS5waXBs YW5pQG54cC5jb20/cGFydD02CgotLSAKbGludXgtaTNjIG1haWxpbmcgbGlzdApsaW51eC1pM2NA bGlzdHMuaW5mcmFkZWFkLm9yZwpodHRwOi8vbGlzdHMuaW5mcmFkZWFkLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2xpbnV4LWkzYwo= From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0ED113F23DB for ; Thu, 3 Sep 2026 06:38:16 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788417499; cv=none; b=DcPV9KRUGxkW1SMGzwowvwnxwnfeaA4VM0CG5Q64JOaH9P+2D7fgqrSqgQSx0cp2/4d8JxZYYAdvgi+QiNlWrHwvZgDoqV2Dv+9QYQA/sYLZztziA0luHG2uJhJrYGy1/IquVWA7e7X4pdYC1rEcoyy0AsC4FlsiuWol9fUCLEQ= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1788417499; c=relaxed/simple; bh=V22/oYD6tjp1Mz6jpBfu6fcWmls9WYZNo22RoPecN8s=; h=From:Subject:To:Cc:In-Reply-To:References:Content-Type:Date: Message-Id; b=lfMYrTZvbTDVwWddqui4gjklW/DNooW5NZCBt+UgJxxcYPC7xCa4Dsh047WrlG1y7YyrrqZIgFKWMya+wvWnHg8BvzozkXHgIYVwSOChp6/t06Cre1TBDnBLH/gd2zDoHE3LcRI5m3Bqn67tP8L0L5Ww/Xzh10d6hSAm8/rLwaI= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=lMkl4a31; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="lMkl4a31" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E500D1F000E9; Thu, 3 Sep 2026 06:38:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1788417494; bh=Qm9nhcL1MmIbPlZqcmKfH5kj0lKMQg5FV2EYkIO9WoQ=; h=From:Subject:Reply-To:To:Cc:In-Reply-To:References:Date; b=lMkl4a31HcU7FtAxj/3mXWy0Zrk98TaVzh/fVRbUvPcFdo61jDgswNICGSlGe1oAe KAWxK0j/1YRHJOMKOD97j6ZQeMTG2odaS6RBwJYze8ALeAYXfDfeuTWLlAoRCpkMsB rmabzVYvaMRk8qAkxQ+/WAayKzy4aBPuY+cpTU3YzfLaWiDfa96EMB32Q6U79mZauw pEiM8cFgkYAMq1MN3T1uq8NECsdksrfQT7RUQ5zLQN+VrfvBrJpC+bpct0kzr46Mzi J+BubTRf1NKzEwaCwf89J5nYbV1sjtdDQFTg8yM6IYWkF1ta/gmcT1OSe+d5Ho/OAS 65YHIp0H4zOag== From: sashiko-bot@kernel.org Subject: Re: [PATCH v18 6/8] i3c: hub: Add support for the I3C interface in the I3C hub Reply-To: sashiko-reviews@lists.linux.dev To: "Lakshay Piplani" Cc: Frank.Li@kernel.org, "Alexandre Belloni" , robh@kernel.org, linux-i3c@lists.infradead.org, devicetree@vger.kernel.org, conor+dt@kernel.org In-Reply-To: <20260903062108.2712296-7-lakshay.piplani@nxp.com> References: <20260903062108.2712296-1-lakshay.piplani@nxp.com> <20260903062108.2712296-7-lakshay.piplani@nxp.com> Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Date: Thu, 03 Sep 2026 06:38:13 +0000 Message-Id: <20260903063813.E500D1F000E9@smtp.kernel.org> Precedence: bulk X-Mailing-List: devicetree@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Thank you for your contribution! Sashiko AI review found 2 potential issue(= s) to consider: - [High] Downstream devices discovered via ENTDAA are incorrectly instantia= ted on the parent bus, bypassing the hub's port routing logic. - [High] Intentional Use-After-Free in `i3c_hub_detach_i3c_dev` when asynch= ronous IBI is still active. -- commit 31f3feaa7d1564a667461b06aa36ed62fb353a0a Author: Lakshay Piplani i3c: hub: Add support for the I3C interface in the I3C hub =20 This commit adds virtual I3C bus support for the hub and provides an interf= ace to enable or disable downstream ports. > diff --git a/drivers/i3c/hub.c b/drivers/i3c/hub.c > new file mode 100644 > index 0000000000000..5390287680844 > --- /dev/null > +++ b/drivers/i3c/hub.c [ ... ] > +static void i3c_hub_detach_i3c_dev(struct i3c_dev_desc *dev) > +{ > + struct i3c_hub_dev_data *data =3D i3c_dev_get_master_data(dev); > + struct i3c_master_controller *parent; > + > + if (!data) > + return; > + > + parent =3D i3c_dev_get_master(&data->parent_desc); > + > + /* > + * parent_desc.ibi should already be cleared by i3c_hub_free_ibi() > + * before we get here. If it is still set, the kfree(data) below frees > + * a descriptor the parent controller can still reach via un-flushed > + * asynchronous IBI work (use-after-free, not just a leak). > + */ > + WARN_ON_ONCE(data->parent_desc.ibi); > + > + if (parent) { > + i3c_bus_maintenance_lock(&parent->bus); > + i3c_master_detach_i3c_dev_controller_locked(&data->parent_desc); > + i3c_bus_maintenance_unlock(&parent->bus); > + } > + > + i3c_dev_set_master_data(dev, NULL); > + mutex_destroy(&data->parent_desc.ibi_lock); > + kfree(data); [Severity: High] Does this code introduce a use-after-free if the asynchronous IBI task is still active? When a downstream device is unbound while an IBI is active, the I3C core ca= lls i3c_hub_detach_i3c_dev() without first freeing the IBI. This occurs because i3c_master_detach_free_devs() executes during i3c_master_bus_cleanup() with= out clearing IBIs.=20 While the warning correctly detects this state, calling kfree(data) unconditionally frees the memory while the parent controller's un-flushed I= BI workqueue (i3c_master_handle_ibi) might still execute and dereference the freed data->parent_desc. Would it be safer to leak the allocation by returning early rather than fre= eing actively referenced memory to avoid memory corruption? > +} [ ... ] > +static int i3c_hub_do_daa(struct i3c_hub *hub, > + struct i3c_master_controller *controller) > +{ > + struct i3c_master_controller *parent; > + int ret; [ ... ] > + /* > + * Downstream devices reachable through hub target-port routes share the > + * parent controller's I3C address space. The hub gates access to a > + * target-port network, but it does not create an independent dynamic > + * address domain per virtual bus. > + * > + * Run DAA on the parent controller so dynamic addresses remain unique > + * across all downstream devices, even when they are behind different > + * target ports. > + * > + * The current hub model shares the parent controller's dynamic-address > + * domain and does not support independent per-port DAA domains, so a > + * DAA result does not go stale behind a port toggle. Addresses reserved > + * from the Device Tree are held for the lifetime of the parent bus and > + * are never released on a port toggle, so enabling or disabling a port > + * only gates reachability and never causes an address to be handed out > + * twice. > + */ > + ret =3D i3c_master_do_daa(parent); [Severity: High] Can delegating DAA entirely to the parent controller here cause downstream devices to bypass the hub port routing logic? If a downstream device lacks an assigned-address or static address in DT, it is skipped by i3c_master_early_i3c_dev_add() and left to be discovered dynamically. When i3c_master_do_daa() executes on the parent, the parent controller performs ENTDAA, discovers the downstream device, and instantiat= es the i3c_device on parent->bus.devs rather than the virtual controller's bus. This would cause target drivers to bind to the device on the parent bus. Th= eir transfer requests would be routed directly to the parent controller, comple= tely bypassing i3c_hub_master_priv_xfers() and leaving the hub port closed, which would cause wire transfers to fail. > + i3c_hub_disable_port(controller); > + mutex_unlock(&hub->lock); > + > + return ret; > +} --=20 Sashiko AI review =C2=B7 https://sashiko.dev/#/patchset/20260903062108.2712= 296-1-lakshay.piplani@nxp.com?part=3D6