Dmitry, > Currently TMF commands are removed from de_device.dev_tmf_list at the > very end of se_cmd lifecycle. But se_lun unlinks from se_cmd up on a > command status (response) is queued in transport layer. It means that > LUN and backend device can be deleted meantime and at the moment of > repsonse completion a panic is occured: Applied to 5.16/scsi-staging, thanks! -- Martin K. Petersen Oracle Linux Engineering