On Mon, 06 Nov 2023 15:51:17 +0800, peter.wang@mediatek.com wrote:
If command timeout happen and cq complete irq raise at the same time, ufshcd_mcq_abort null the lprb->cmd and NULL poiner KE in ISR. Below is error log.
ufshcd_abort: Device abort task at tag 18 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000108 pc : [0xffffffe27ef867ac] scsi_dma_unmap+0xc/0x44 lr : [0xffffffe27f1b898c] ufshcd_release_scsi_cmd+0x24/0x114
[...]
Applied to 6.7/scsi-fixes, thanks!
[1/1] ufs: core: fix racing issue between ufshcd_mcq_abort and ISR https://git.kernel.org/mkp/scsi/c/27900d7119c4