System Panic Due to Null Pointer Dereference in aacraid Module

Issue

• System crashed with the following signature:

aacraid: Host adapter abort request (0,1,3,0)
aacraid: Host adapter reset request. SCSI hang ?
aacraid: Host adapter abort request (0,1,3,0)
general protection fault: 0000 [1] SMP 
last sysfs file: /class/fc_remote_ports/rport-2:0-1/roles
CPU 4 
Modules linked in: ipmi_si ipmi_devintf ipmi_msghandler mptctl mptbase oracleasm(U) bonding ipv6 xfrm_nalgo crypto_api emcpdm(PU) emcpgpx(PU) emcpmpx(PU) emcp(PU) dm_multipath scsi_dh video backlight sbs i2c_ec button battery asus_acpi acpi_memhotplug ac parport_pc lp parport joydev sr_mod ide_cd bnx2 cdrom sg i2c_piix4 serio_raw pcspkr k8temp i2c_core hwmon k8_edac edac_mc dm_raid45 dm_message dm_region_hash dm_mem_cache dm_snapshot dm_zero dm_mirror dm_log dm_mod usb_storage qla2xxx scsi_transport_fc shpchp aacraid sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd
Pid: 657, comm: scsi_eh_0 Tainted: P      2.6.18-164.el5 #1
RIP: 0010:[<ffffffff880b625d>]  [<ffffffff880b625d>] :aacraid:aac_eh_abort+0x117/0x156
RSP: 0018:ffff81031f25bd50  EFLAGS: 00010202
RAX: 000e2d4102060f4a RBX: ffff8101512a36c0 RCX: 0000000005c40523
RDX: ffff81019f403f00 RSI: 000000000000007e RDI: 0000000000002002
RBP: ffff81019fa494f8 R08: ffff81019fb02800 R09: 0000000000000039
R10: ffff81031f25b9f0 R11: 0000000000000000 R12: ffff81019fa49000
R13: ffff81019fa49000 R14: ffff8101512a371c R15: ffff8101512a3780
FS:  00002aca04c792d0(0000) GS:ffff810221d2e440(0000) knlGS:00000000f30ffb90
CS:  0010 DS: 0018 ES: 0018 CR0: 000000008005003b
CR2: 00002b4248b88000 CR3: 0000000221cc1000 CR4: 00000000000006e0
Process scsi_eh_0 (pid: 657, threadinfo ffff81031f25a000, task ffff810221d0f820)
Stack:  0000000000000000 ffff8101512a36c0 ffff81031f25bdb0 ffffffff880783a5
 0000271000000000 0000000200000000 0000006006000001 ffff810152b95bc0
 0000000000000286 ffff81031f25bdc0 ffff8101512a36c0 ffffffff8005bae8
Call Trace:
 [<ffffffff880783a5>] :scsi_mod:scsi_send_eh_cmnd+0x2b3/0x3cb
 [<ffffffff8005bae8>] del_timer_sync+0xc/0x16
 [<ffffffff8807853f>] :scsi_mod:scsi_eh_tur+0x28/0x77
 [<ffffffff88078a72>] :scsi_mod:scsi_eh_ready_devs+0x3cf/0x493
 [<ffffffff8009f4a9>] keventd_create_kthread+0x0/0xc4
 [<ffffffff88079237>] :scsi_mod:scsi_error_handler+0x323/0x4ac
 [<ffffffff88078f14>] :scsi_mod:scsi_error_handler+0x0/0x4ac
 [<ffffffff8009f4a9>] keventd_create_kthread+0x0/0xc4
 [<ffffffff8003298b>] kthread+0xfe/0x132
 [<ffffffff8005dfb1>] child_rip+0xa/0x11
 [<ffffffff8009f4a9>] keventd_create_kthread+0x0/0xc4
 [<ffffffff8003288d>] kthread+0x0/0x132
 [<ffffffff8005dfa7>] child_rip+0x0/0x11


Code: 4c 39 00 75 1b 83 c9 01 48 39 d8 89 4a 50 c7 80 60 01 00 00 
RIP  [<ffffffff880b625d>] :aacraid:aac_eh_abort+0x117/0x156
 RSP <ffff81031f25bd50>