From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 3DDEA35E956 for ; Fri, 12 Jun 2026 08:01:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=192.198.163.15 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781251294; cv=none; b=fGUQ11XiKXBm7tYG13IGw9KovmOA/fJ2ZthnyKr0zfKvaRb1ZAqbbS8qyiETffcEJMMe2Zsh9z2gK3ybPV0oA5uNaKkjktUvwfKJ/nsXodJ0kBCYFKvuroekfWz4Mbx7PNgs+H2LjiQzeZ8FWsgDnYCc0n7v7WA8UbEu1pCPhxI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781251294; c=relaxed/simple; bh=pvwSj2+sH7Rn37+lFRx+bP4U1caEPkCvYPv5x0EzYWE=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=owCzLrI9hRnbOULu5zNLzyR1N2TQkBaStCLv3N/i26lAlqbR5qfjT8TaoVjyoWUA9UCQ5fTx3pXeO6xZtxbwoPehWimMtFcFngfYZRrMvI/AckcXAPoQ91vaxJThvYWUyUjiJwP1BjxKAkGA4RB6UANa5COWQuiv43K5YlnpayM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com; spf=pass smtp.mailfrom=intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=gofm5mSe; arc=none smtp.client-ip=192.198.163.15 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=intel.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="gofm5mSe" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1781251291; x=1812787291; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=pvwSj2+sH7Rn37+lFRx+bP4U1caEPkCvYPv5x0EzYWE=; b=gofm5mSe4rHIcrfKvxFTsba4Q4XMslnwJoSO+u8eKfUPH6SvVEkX53ut 4WwydXSZaWdg7uwci7zD4CiZw5atiQMxrwHpdzMZ8WmZFa3jC/WiBbDfw 3Gw/n0eIFNZnHzeBf2XMIx1qEi8jmydOmFb4Pcs45+xGOrnL4RwyHuomH gPUPiN/KevYZdQZdTBrVxRyRyfbf0PxVqn+wib4L76+4qvDQy4qEU4UJJ Y+Gds415yVzG0SQG7zWT8TPeS5DZNHnPNM8qMG1cfSTej051Y16QeHTZJ R8XDZ85Mh1jeLVJMBY2+isqHU5M+FRKZV+Aq7pxGDsV3xq4rsKWiVFZEI A==; X-CSE-ConnectionGUID: SiPUk1dXSsW7cR2ozavlOw== X-CSE-MsgGUID: yVujL6LrS8KOECQ83dEm/g== X-IronPort-AV: E=McAfee;i="6800,10657,11813"; a="82186727" X-IronPort-AV: E=Sophos;i="6.24,200,1774335600"; d="scan'208";a="82186727" Received: from orviesa008.jf.intel.com ([10.64.159.148]) by fmvoesa109.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Jun 2026 01:01:18 -0700 X-CSE-ConnectionGUID: /Zxye9UDRgO++dndNDK6gw== X-CSE-MsgGUID: 3X8CLNgYQ4KSfxI6iT7fnw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.24,200,1774335600"; d="scan'208";a="246630330" Received: from vpanait-mobl.ger.corp.intel.com (HELO ahunter6-desk) ([10.245.245.41]) by orviesa008-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Jun 2026 01:01:16 -0700 From: Adrian Hunter To: alexandre.belloni@bootlin.com Cc: Frank.Li@nxp.com, linux-i3c@lists.infradead.org, linux-kernel@vger.kernel.org Subject: [PATCH V4 0/7] i3c: Fix IBI race, address handling, and reconcile DAA Date: Fri, 12 Jun 2026 11:01:00 +0300 Message-ID: <20260612080107.11606-1-adrian.hunter@intel.com> X-Mailer: git-send-email 2.51.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Organization: Intel Finland Oy, Registered Address: c/o Alberga Business Park, 6 krs, Bertel Jungin Aukio 5, 02600 Espoo, Business Identity Code: 0357606 - 4, Domiciled in Helsinki Content-Transfer-Encoding: 8bit Hi Note all patches have now been reviewed by Frank. Patches 1-2 fix a use-after-free race in the MIPI I3C HCI driver's IBI handling and make IBI teardown resilient to DISEC failures. Patches 3-7 fix address management issues in the I3C core and HCI driver that arise when Dynamic Address Assignment (DAA) does not complete cleanly, culminating in a reconciliation step that detects and resolves inconsistencies between assigned address slots and registered devices. Patches are based on top of: [PATCH V3 0/8] i3c: Hot-Join improvements and MIPI HCI Hot-Join support https://lore.kernel.org/linux-i3c/20260608054312.10604-1-adrian.hunter@intel.com which, in turn, applies on top of: [PATCH V5 00/17] i3c: mipi-i3c-hci: DMA abort, recovery and related improvements https://lore.kernel.org/linux-i3c/20260603090754.16252-1-adrian.hunter@intel.com Changes in V4: i3c: master: Prevent reuse of dynamic address on device add failure i3c: master: Reconcile dynamic addresses after DAA Add Frank's Rev'd-by Changes in V3: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c: mipi-i3c-hci: Ignore DISEC failures when disabling IBIs Add Frank's Rev'd-by i3c: master: Prevent reuse of dynamic address on device add failure Add note to commit message about Direct RSTDAA deprecation i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA i3c: master: Make i3c_master_add_i3c_dev_locked() return void i3c: master: Move DAA API functions after i3c_master_add_i3c_dev_locked() Add Frank's Rev'd-by i3c: master: Reconcile dynamic addresses after DAA Add comment about the source of I3C_DEV_PROBE_* macro values. Also account for static_addr in i3c_master_reconcile_dyn_addrs() Changes in V2: i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Factor out __i3c_hci_disable_ibi() to facilitate also clearing ibi_devs[dat_idx] upon IBI free, and update commit message accordingly. Demote a message in PIO and DMA IBI handling, and update commit message accordingly. i3c: mipi-i3c-hci: Ignore DISEC failures when disabling IBIs Re-base due to changes in previous patch. i3c: master: Prevent reuse of dynamic address on device add failure Fix 'if (IS_ERR(newdev)' error path. Be defensive and do not change the addr_slot_status if it is not free, and update commit message accordingly. Amend commit message to note removal of unnecesary 'if (!master)' check. Add Fixes tag. i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA None i3c: master: Make i3c_master_add_i3c_dev_locked() return void Re-base due to changes in previous patches. i3c: master: Move DAA API functions after i3c_master_add_i3c_dev_locked() None i3c: master: Reconcile dynamic addresses after DAA Add bitmap.h include for bitmap_zero() etc. Re-base due to changes in previous patches. Adrian Hunter (7): i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() i3c: mipi-i3c-hci: Ignore DISEC failures when disabling IBIs i3c: master: Prevent reuse of dynamic address on device add failure i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA i3c: master: Make i3c_master_add_i3c_dev_locked() return void i3c: master: Move DAA API functions after i3c_master_add_i3c_dev_locked() i3c: master: Reconcile dynamic addresses after DAA drivers/i3c/master.c | 279 ++++++++++++++++++++++--------- drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/i3c/master/mipi-i3c-hci/core.c | 45 ++++- drivers/i3c/master/mipi-i3c-hci/dma.c | 7 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- include/linux/i3c/master.h | 3 +- 9 files changed, 254 insertions(+), 109 deletions(-) Regards Adrian