James,
> scsi_bsg_uring_task_cb() copies the sense data to the submitter's > response_addr with copy_to_user(). It runs as io_uring task work, but > io_uring may also run it with tw.cancel set from other contexts when the > submitting task can't run it: from a kworker when the submitting task > has exited (io_tctx_fallback_work()), or from io_cancel_local_task_work() > when a DEFER_TASKRUN ring is torn down. Applied to 7.4/scsi-fixes, thanks! -- Martin K. Petersen
