2 files changed, 29 insertions, 15 deletions

diff --git a/drivers/scsi/scsi_scan.c b/drivers/scsi/scsi_scan.c
index 2e5fe584aad3..f55e5f166973 100644
--- a/drivers/scsi/scsi_scan.c
+++ b/drivers/scsi/scsi_scan.c
@@ -1717,6 +1717,9 @@ static void scsi_sysfs_add_devices(struct Scsi_Host *shost)
 {
         struct scsi_device *sdev;
         shost_for_each_device(sdev, shost) {
+                /* target removed before the device could be added */
+                if (sdev->sdev_state == SDEV_DEL)
+                        continue;
                 if (!scsi_host_scan_allowed(shost) ||
                     scsi_sysfs_add_sdev(sdev) != 0)
                         __scsi_remove_device(sdev);
diff --git a/drivers/scsi/scsi_sysfs.c b/drivers/scsi/scsi_sysfs.c
index d19d7e99626d..093d4f6a54d2 100644
--- a/drivers/scsi/scsi_sysfs.c
+++ b/drivers/scsi/scsi_sysfs.c
@@ -1005,7 +1005,6 @@ static void __scsi_remove_target(struct scsi_target *starget)
         struct scsi_device *sdev;
 
         spin_lock_irqsave(shost->host_lock, flags);
-        starget->reap_ref++;
  restart:
         list_for_each_entry(sdev, &shost->__devices, siblings) {
                 if (sdev->channel != starget->channel ||
@@ -1019,14 +1018,6 @@ static void __scsi_remove_target(struct scsi_target *starget)
                 goto restart;
         }
         spin_unlock_irqrestore(shost->host_lock, flags);
-        scsi_target_reap(starget);
-}
-
-static int __remove_child (struct device * dev, void * data)
-{
-        if (scsi_is_target_device(dev))
-                __scsi_remove_target(to_scsi_target(dev));
-        return 0;
 }
 
 /**
@@ -1039,14 +1030,34 @@ static int __remove_child (struct device * dev, void * data)
  */
 void scsi_remove_target(struct device *dev)
 {
-        if (scsi_is_target_device(dev)) {
-                __scsi_remove_target(to_scsi_target(dev));
-                return;
+        struct Scsi_Host *shost = dev_to_shost(dev->parent);
+        struct scsi_target *starget, *found;
+        unsigned long flags;
+
+ restart:
+        found = NULL;
+        spin_lock_irqsave(shost->host_lock, flags);
+        list_for_each_entry(starget, &shost->__targets, siblings) {
+                if (starget->state == STARGET_DEL)
+                        continue;
+                if (starget->dev.parent == dev || &starget->dev == dev) {
+                        found = starget;
+                        found->reap_ref++;
+                        break;
+                }
         }
+        spin_unlock_irqrestore(shost->host_lock, flags);
 
-        get_device(dev);
-        device_for_each_child(dev, NULL, __remove_child);
-        put_device(dev);
+        if (found) {
+                __scsi_remove_target(found);
+                scsi_target_reap(found);
+                /* in the case where @dev has multiple starget children,
+                 * continue removing.
+                 *
+                 * FIXME: does such a case exist?
+                 */
+                goto restart;
+        }
 }
 EXPORT_SYMBOL(scsi_remove_target);