void *data;                     /* Data for callback. */
        struct vring_packed_desc *indir_desc; /* Indirect descriptor, if any. */
        u16 num;                        /* Descriptor list length. */
-       u16 next;                       /* The next desc state in a list. */
        u16 last;                       /* The last desc state in a list. */
 };
 
        dma_addr_t addr;                /* Buffer DMA addr. */
        u32 len;                        /* Buffer length. */
        u16 flags;                      /* Descriptor flags. */
+       u16 next;                       /* The next desc state in a list. */
 };
 
 struct vring_virtqueue {
                                1 << VRING_PACKED_DESC_F_USED;
        }
        vq->packed.next_avail_idx = n;
-       vq->free_head = vq->packed.desc_state[id].next;
+       vq->free_head = vq->packed.desc_extra[id].next;
 
        /* Store token and indirect buffer state. */
        vq->packed.desc_state[id].num = 1;
                                        le16_to_cpu(flags);
                        }
                        prev = curr;
-                       curr = vq->packed.desc_state[curr].next;
+                       curr = vq->packed.desc_extra[curr].next;
 
                        if ((unlikely(++i >= vq->packed.vring.num))) {
                                i = 0;
        /* Clear data ptr. */
        state->data = NULL;
 
-       vq->packed.desc_state[state->last].next = vq->free_head;
+       vq->packed.desc_extra[state->last].next = vq->free_head;
        vq->free_head = id;
        vq->vq.num_free += state->num;
 
                for (i = 0; i < state->num; i++) {
                        vring_unmap_state_packed(vq,
                                &vq->packed.desc_extra[curr]);
-                       curr = vq->packed.desc_state[curr].next;
+                       curr = vq->packed.desc_extra[curr].next;
                }
        }
 
 
        /* Put everything in free lists. */
        vq->free_head = 0;
-       for (i = 0; i < num-1; i++)
-               vq->packed.desc_state[i].next = i + 1;
 
        vq->packed.desc_extra = kmalloc_array(num,
                        sizeof(struct vring_desc_extra_packed),
        memset(vq->packed.desc_extra, 0,
                num * sizeof(struct vring_desc_extra_packed));
 
+       for (i = 0; i < num - 1; i++)
+               vq->packed.desc_extra[i].next = i + 1;
+
        /* No callback?  Tell other side not to bother us. */
        if (!callback) {
                vq->packed.event_flags_shadow = VRING_PACKED_EVENT_FLAG_DISABLE;