Jack, > The tmf timeout timer may trigger at the same time when the response > from a controller is being handled. When this happens the sas task may > get freed before the response processing is finished. > > Fix this by calling complete() only when SAS_TASK_STATE_DONE is not set. > > Similar race condition was fixed in commit b90cd6f2b905 > ("scsi: libsas: fix a race condition when smp task timeout") Please review. Thanks! -- Martin K. Petersen Oracle Linux Engineering