All, I'm not suggesting here a patch, but rather asking for your feedback All the lines numbers are for *iscsi_target.c* (branch 4.9 at LXR) 0. In the case function == ISCSI_TM_FUNC_TASK_REASSIGN is handed over, *core_tmr_alloc_req()* won't be called (due to the wrapping if statement at line 1975) 1. At line 2032. se_tmr local variable holds now a garbage 2. se_tmr->reference at line 2070 will lead to a crash TIA, -Moshe -- To unsubscribe from this list: send the line "unsubscribe target-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html