[openib-general][patch review] srp: fmr implementation,

[Roland Dreier]

    Roland> Hmm, it's clearly a use-after-free bug.

(...because 6b is the slab poisoning free value, and the oops is at
6b6b6b6b6b6b6b6b...)