[GIT PULL] ata fixes for 7.0-rc2

[Niklas Cassel <cassel@kernel.org>]

Linus,

The following changes since commit 6de23f81a5e08be8fbf5e8d7e9febc72a5b5f27f:

  Linux 7.0-rc1 (2026-02-22 13:18:59 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux tags/ata-7.0-rc2

for you to fetch changes up to 55db009926634b20955bd8abbee921adbc8d2cb4:

  ata: libata-core: fix cancellation of a port deferred qc work (2026-02-24 09:38:55 +0900)

----------------------------------------------------------------
ata fixes for 7.0-rc2

 - The newly introduced feature that issues a deferred (non-NCQ) command
   from a workqueue, forgot to consider the case where the deferred QC
   times out. Fix the code to take timeouts into consideration, which
   avoids a use after free (Damien)

 - The newly introduced feature that issues a deferred (non-NCQ) command
   from a workqueue, when unloading the module, calls cancel_work_sync(),
   a function that can sleep, while holding a spin lock. Move the function
   call outside the lock (Damien)

----------------------------------------------------------------
Damien Le Moal (2):
      ata: libata-eh: correctly handle deferred qc timeouts
      ata: libata-core: fix cancellation of a port deferred qc work

 drivers/ata/libata-core.c |  8 +++-----
 drivers/ata/libata-eh.c   | 22 +++++++++++++++++++---
 2 files changed, 22 insertions(+), 8 deletions(-)