https://bugzilla.kernel.org/show_bug.cgi?id=95101 Joe Lawrence <joe.lawrence@xxxxxxxxxxx> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |joe.lawrence@xxxxxxxxxxx --- Comment #1 from Joe Lawrence <joe.lawrence@xxxxxxxxxxx> --- >From the /var/log/messages attachment: Mar 16 01:13:10 RHEL63 kernel: mpt2sas1: _base_fault_reset_work: Running mpt2sas_dead_ioc thread success !!!! ... Mar 16 01:13:20 RHEL63 kernel: mpt2sas1: _scsih_ir_shutdown: timeout Mar 16 01:13:20 RHEL63 kernel: mpt2sas1: removing handle(0x0024), wwid(0x0c4e8a1c03a9b742) indicates that _scsih_remove was called when the driver's watchdog detected that the device was misbehaving. Driver device removal invokes: mpt2sas_base_detach mpt2sas_base_free_resources iounmap(ioc->chip) setting the stage for the crash: Mar 16 01:13:37 RHEL63 kernel: BUG: unable to handle kernel paging request at ffffc900171e0000 Mar 16 01:13:37 RHEL63 kernel: IP: [<ffffffffa00502e0>] mpt2sas_base_get_iocstate+0x10/0x30 [mpt2sas] ... Mar 16 01:13:37 RHEL63 kernel: RAX: ffffc900171e0000 RBX: ffff88105a0aa788 RCX: 0000000000004fdc where mpt2sas_base_get_iocstate was probably calling readl(&ioc->chip->Doorbell) So it would seem that the mpt2sas ioctl code (step 5, I think) isn't synchronized against device removal. -- You are receiving this mail because: You are on the CC list for the bug. -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html