From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.14]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B0A65352009 for ; Mon, 8 Jun 2026 07:58:24 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.14 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780905507; cv=none; b=Dtu6E2CNI25alLWUcdkQQ/t+zm2098z6PeVQL1U9ZiEvZQHlcHXO1Dt5BdkUMVb4UOZAo0YjWK6SHYesRROzoyZ8e5/Jan5AnDiPReRWFkoTHGNCnNrY/XCftqA3rIAl6cQHN0jnxdBCliOEdEjH+sf9xv9mTkJAYqGVop55YT0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780905507; c=relaxed/simple; bh=UzuDYZPqFX5BPQjO4p3IKnSU0VRRMQU16gwWHZnT7q4=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=KFrNItd/DDwkdt/nJoB2qMpBHTFKkdVKSu88WJRdKmjErcb7WImyBtVTKwCAZ2Z8VToMP68yaIPWDuvx/r7Kt0r+Grx1nJ/sZ4+sxtnGN2V6BALgBZwKC2ThF59Q+CHTR6YrGwUZqgxVsJT59NEPWQ5EL8RP5F+ZrNPgBZwvc0M= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=akZPcK8T; arc=none smtp.client-ip=198.175.65.14 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="akZPcK8T" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1780905505; x=1812441505; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=UzuDYZPqFX5BPQjO4p3IKnSU0VRRMQU16gwWHZnT7q4=; b=akZPcK8TojTSScL6+9csaZEqmvv5ZXx/Gk0B6WxJU40rHlIPc9AiXp7R 0C5b5v+BMfuxv6NA+oF9vdKVrQsiT17vKqCnRLeCISuzylBl0eaZlAhXQ 9LaSxDigDf4P2pW2IAObXT8sqLAFu/02EYQbhRFBg6KOYaFpP5TD8pGPO 4Z27O31Ouv0UOYvukiEZZNF49kfssLVL+kRij0acMrnwWIJDkkSf8QGAb UhS0sOA/PVN08YPlas4z8lAlw7uqXIXY1HZAlYNed1ISWkkQxtrT8FT9t 7iXY1MW0N25D+5wrizYZzYT/bdy32iSKQ/SIzFK7MKzJ8Whk3sb2QOuwV g==; X-CSE-ConnectionGUID: KXk1GjwcSKCI8QywrHifuA== X-CSE-MsgGUID: ApbBf0x8ToOMgi6Vw6YllA== X-IronPort-AV: E=McAfee;i="6800,10657,11810"; a="85520140" X-IronPort-AV: E=Sophos;i="6.24,194,1774335600"; d="scan'208";a="85520140" Received: from fmviesa003.fm.intel.com ([10.60.135.143]) by orvoesa106.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 08 Jun 2026 00:58:25 -0700 X-CSE-ConnectionGUID: Q6bhdM6KSr6llxs42kgvbA== X-CSE-MsgGUID: kCnnKn2rQparrvik99QAtg== X-ExtLoop1: 1 Received: from conormcd-mobl2.ger.corp.intel.com (HELO ahunter6-desk) ([10.245.244.114]) by fmviesa003-auth.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 08 Jun 2026 00:58:22 -0700 From: Adrian Hunter To: alexandre.belloni@bootlin.com Cc: Frank.Li@nxp.com, linux-i3c@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH V2 0/7] i3c: Fix IBI race, address handling, and reconcile DAA Date: Mon, 8 Jun 2026 10:57:53 +0300 Message-ID: <20260608075801.16111-1-adrian.hunter@intel.com> X-Mailer: git-send-email 2.51.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Organization: Intel Finland Oy, Registered Address: c/o Alberga Business Park, 6 krs, Bertel Jungin Aukio 5, 02600 Espoo, Business Identity Code: 0357606 - 4, Domiciled in Helsinki Content-Transfer-Encoding: 8bit Hi Patches 1-2 fix a use-after-free race in the MIPI I3C HCI driver's IBI handling and make IBI teardown resilient to DISEC failures. Patches 3-7 fix address management issues in the I3C core and HCI driver that arise when Dynamic Address Assignment (DAA) does not complete cleanly, culminating in a reconciliation step that detects and resolves inconsistencies between assigned address slots and registered devices. Patches are based on top of: [PATCH V3 0/8] i3c: Hot-Join improvements and MIPI HCI Hot-Join support https://lore.kernel.org/linux-i3c/20260608054312.10604-1-adrian.hunter@intel.com which, in turn, applies on top of: [PATCH V5 00/17] i3c: mipi-i3c-hci: DMA abort, recovery and related improvements https://lore.kernel.org/linux-i3c/20260603090754.16252-1-adrian.hunter@intel.com Changes in V2: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Factor out __i3c_hci_disable_ibi() to facilitate also clearing ibi_devs[dat_idx] upon IBI free, and update commit message accordingly. Demote a message in PIO and DMA IBI handling, and update commit message accordingly. i3c: mipi-i3c-hci: Ignore DISEC failures when disabling IBIs Re-base due to changes in previous patch. i3c: master: Prevent reuse of dynamic address on device add failure Fix 'if (IS_ERR(newdev)' error path. Be defensive and do not change the addr_slot_status if it is not free, and update commit message accordingly. Amend commit message to note removal of unnecesary 'if (!master)' check. Add Fixes tag. i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA None i3c: master: Make i3c_master_add_i3c_dev_locked() return void Re-base due to changes in previous patches. i3c: master: Move DAA API functions after i3c_master_add_i3c_dev_locked() None i3c: master: Reconcile dynamic addresses after DAA Add bitmap.h include for bitmap_zero() etc. Re-base due to changes in previous patches. Adrian Hunter (7): i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c: mipi-i3c-hci: Ignore DISEC failures when disabling IBIs i3c: master: Prevent reuse of dynamic address on device add failure i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA i3c: master: Make i3c_master_add_i3c_dev_locked() return void i3c: master: Move DAA API functions after i3c_master_add_i3c_dev_locked() i3c: master: Reconcile dynamic addresses after DAA drivers/i3c/master.c | 275 ++++++++++++++++++++++--------- drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/i3c/master/mipi-i3c-hci/core.c | 45 ++++- drivers/i3c/master/mipi-i3c-hci/dma.c | 7 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- include/linux/i3c/master.h | 3 +- 9 files changed, 250 insertions(+), 109 deletions(-) Regards Adrian