On 08/28/12 12:25, Dongsu Park wrote: > By the way, as long as I've observed today, the crash occurs only if > rport_dev_loss_timedout() is called. It means, without device loss, > a simple rport_delete does not make any crash. > > Is that probably because arguments to pr_err() are accessing to invalid > addresses? > > drivers/scsi/scsi_transport_srp.c:275 > > pr_err("SRP transport: dev_loss_tmo (%ds) expired - removing %s.\n", > rport->dev_loss_tmo, dev_name(&rport->dev)); It's not clear to me how that could happen. The dev_loss timer is stopped before the rport device is removed. See also the srp_stop_rport() call (which stops the dev_loss timer) and srp_remove_host() call (which removes the rport) in srp_remove_target(). Bart. -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html