On Wed, May 25, 2011 at 4:00 PM, Parag Warudkar <parag.lkml@xxxxxxxxx> wrote: > > It doesn't seem to help. Machine locked up and I was dropped to text > console. I could only capture the oops by a camera. Hmm. That's a different oops. It is now in scsi_prep_state_check(). At the beginning of it too. You can't see the "Code: " line in the pictures, but the only dereference I see there is "sdev" itself being NULL. And %cr2 is 0x640, which would seem to agree (the 'sdev' structure is absolutely disgustingly big, and sdev->sdev_state is indeed at an offset in that region. That 'sdev' comes from scsi_prep_fn() doing struct scsi_device *sdev = q->queuedata; is that queuedata perhaps cleared even if the queue itself stays around due to refcounts? Linus -- To unsubscribe from this list: send the line "unsubscribe linux-scsi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html