> functions will occur in line. I also don't see why the sdev reference > couldn't drop to zero here. scsi_request_fn is called under the lock of request_queue->queue_lock. If we drop the sdev reference to zero here, scsi_device_dev_release_usercontext is invoked and make request_queue to NULL. When caller of scsi_request_fn try to unlock request_queue->queue_lock, the oops is occurred. Thanks, Chanho -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html