Damien, > The function mpt3sas_transport_port_remove() called in > _scsih_expander_node_remove() frees the port field of the sas_expander > structure, leading to the following use-after-free splat from Kasan > when the ioc_info() call following that function is executed > (e.g. when doing rmmod of the driver module): Applied to 5.18/scsi-staging, thanks! -- Martin K. Petersen Oracle Linux Engineering
