On Fri, Nov 20, 2015 at 12:57 PM, James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx> wrote: > > It's done under the scan mutex, so there can only be one thread in that > code at once. Hmm. Looking at the call chain seems to confirm that. But looking at the call chain I _also_ see that we have scsi_free_host_dev() there, which seems to be some stale frame data from a previous scan. I'm wondering if that is a clue. I find exactly two callers of that functions, both in the gdth driver. Maybe this is some odd refcount bug, brought on by reuse of a sdev. Would that make more sense? Why is that scsi_free_host_dev() used only by that one driver, and nobody else wants it or needs it? Linus -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html