Re: [PATCH] scsi: let __scsi_remove_device do the blk_put_queue in one place

[Bart Van Assche <Bart.VanAssche@xxxxxxx>]

On Wed, 2018-06-20 at 11:57 +0200, anthoine.bourgeois@xxxxxxxxx wrote:
> The function scsi_device_dev_release_usercontext calls blk_put_queue
> with request_queue then set request_queue to NULL. If the function
> scsi_device_dev_release_usercontext is racy then the next call to
> blk_put_queue will trigger the NULL pointer dereference below.

How did you trigger this bug? Which SCSI LLD drivers were involved, and
which scenario or workload triggered this kernel oops?

Thanks,

Bart.