On Mon, 10 Jan 2022 10:47:36 -0800, Matthias Kaehlcke wrote:
> From: Sujit Kautkar <sujitka@chromium.org>
> 
> struct rpmsg_ctrldev contains a struct cdev. The current code frees
> the rpmsg_ctrldev struct in rpmsg_ctrldev_release_device(), but the
> cdev is a managed object, therefore its release is not predictable
> and the rpmsg_ctrldev could be freed before the cdev is entirely
> released, as in the backtrace below.
> 
> [...]

Applied, thanks!

[1/2] rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev
      commit: b7fb2dad571d1e21173c06cef0bced77b323990a
[2/2] rpmsg: char: Fix race between the release of rpmsg_eptdev and cdev
      commit: 7a534ae89e34e9b51acb5a63dd0f88308178b46a

Best regards,
-- 
Bjorn Andersson <bjorn.andersson@linaro.org>