Hi, On Thu, 25 Oct 2018 10:03:00 +0800, zhengliang wrote: > Thank you very much for your help. > I need a few days to test this patch. > I will feedback the test results to you later. With which kernel version are you able to trigger the use-after-free? I've been trying to reproduce it from a hack r2t-dropping-initiator[1] which drops the connection at around the same time as the dataout timeout but am yet to hit this with mainline. Cheers, David 1. https://github.com/ddiss/libiscsi/tree/hack-lio-trigger-dataout-timeout-v2