Bart, > There is a TOCTOU race in ufshcd_compl_one_cqe(): > hba->dev_cmd.complete may be cleared from another thread after it has > been checked and before it is used. Fix this race by moving the device > command completion from the stack of the device command submitter into > struct ufs_hba. This patch fixes the following kernel crash: Applied to 6.15/scsi-staging, thanks! -- Martin K. Petersen Oracle Linux Engineering
