Yup, it was another missing crit_exit(). The new critical section check in the trap and syscall code caught it. Try now. -Matt