On Tue, 2011-09-27 at 10:00 +0300, Michael S. Tsirkin wrote: > > skb = page_to_skb(vi, page, len); > > ... > > Sorry I don't get it yet. Where is mergeable ignored here? The NULL deref happens in page_to_skb(), before merge buffers are handled. I'll test it and see if it's really the case. -- Sasha. -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html