Re: [PATCH] accel/qaic: Cancel Sahara read data work on removal

From: Jeff Hugo

Date: Tue Oct 13 2026 - 15:40:50 EST


On 9/17/2026 1:25 PM, Myeonghun Pak wrote:
Sahara removal cancels fw_work and dump_work, but leaves read_data_work
pending or running. The latter accesses the firmware and the device-managed
context and transfer buffer, which are released during removal.

Cancel read_data_work after fw_work, which can schedule it, and before
releasing the firmware. The MHI core suspends and resets the channels
before invoking the driver's remove callback.

This issue was identified during our ongoing static-analysis research
while reviewing kernel code. The same omission was also reported by the
Sashiko bot while reviewing the Sahara relocation series.

Fixes: 7fb19ea1ec6a ("accel/qaic: Support the new READ_DATA implementation")
Cc: stable@xxxxxxxxxxxxxxx
Link: https://lore.kernel.org/all/20260701105055.8D4371F00A3A@xxxxxxxxxxxxxxx/
Assisted-by: LLM
Co-developed-by: Ijae Kim <ae878000@xxxxxxxxx>
Signed-off-by: Ijae Kim <ae878000@xxxxxxxxx>
Signed-off-by: Myeonghun Pak <mhun512@xxxxxxxxx>

Pushed to drm-misc-next

-Jeff