It is possible that a SCSI LLD invokes scsi_remove_host() after a request has been queued via scsi_host_template.queuecommand() but before scsi_done() has been invoked for that request. This may cause the SCSI error handler to start processing a timeout long after scsi_remove_host() finished. This may even cause LLD error handler functions to be invoked after the LLD kernel module has been removed. Change this behavior such that the SCSI error handler no longer invokes timeout processing after scsi_remove_host() finished. Note: blk_abort_queue() indirectly invokes the SCSI LLD eh_abort_handler. This patch may cause that abort handler to be invoked before the SCSI timeout elapsed. Hence follow-up patches may be necessary to fix race conditions in LLDs that expect that the abort handler is only invoked after the SCSI timeout elapsed. Maybe this is why a similar patch has been reverted about a year ago (see also commit 09c9d4c9b6a2b5909ae3c6265e4cd3820b636863). Signed-off-by: Bart Van Assche <bvanassche@xxxxxxx> Cc: James Bottomley <jbottomley@xxxxxxxxxxxxx> Cc: Mike Christie <michaelc@xxxxxxxxxxx> Cc: Tomas Henzl <thenzl@xxxxxxxxxx> Cc: Mike Snitzer <snitzer@xxxxxxxxxx> Cc: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx> --- drivers/scsi/scsi_sysfs.c | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/drivers/scsi/scsi_sysfs.c b/drivers/scsi/scsi_sysfs.c index f8fc240..a61051d 100644 --- a/drivers/scsi/scsi_sysfs.c +++ b/drivers/scsi/scsi_sysfs.c @@ -963,6 +963,7 @@ void __scsi_remove_device(struct scsi_device *sdev) * scsi_device_dev_release_usercontext(). */ blk_cleanup_queue(q); + blk_abort_queue(q); if (sdev->is_visible) { if (scsi_device_set_state(sdev, SDEV_CANCEL) != 0) -- 1.7.7 -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html