Lin, > in bnx2fc_send_rec and bnx2fc_send_srr, it calls the separate kref_put > on err handle path, we can't release refcount before taking it's > refcount, so avoid calling it inthe err path. Applied to 5.3/scsi-queue, thanks! -- Martin K. Petersen Oracle Linux Engineering