The call to pm8001_ccb_task_free() at the end of
pm8001_mpi_task_abort_resp() already frees the ccb tag. So when the device
NCQ_ABORT_ALL_FLAG is set, the tag should not be freed again.  Also change
the hardcoded 0xBFFFFFFF value to ~NCQ_ABORT_ALL_FLAG as it ought to be.
Link: https://lore.kernel.org/r/20220220031810.738362-19-damien.lemoal@opensource.wdc.com
Reviewed-by: Jack Wang <jinpu.wang@ionos.com>
Signed-off-by: Damien Le Moal <damien.lemoal@opensource.wdc.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
        mb();
 
        if (pm8001_dev->id & NCQ_ABORT_ALL_FLAG) {
-               pm8001_tag_free(pm8001_ha, tag);
                sas_free_task(t);
-               /* clear the flag */
-               pm8001_dev->id &= 0xBFFFFFFF;
-       } else
+               pm8001_dev->id &= ~NCQ_ABORT_ALL_FLAG;
+       } else {
                t->task_done(t);
+       }
 
        return 0;
 }