I have to agree with Squid, most likely control module related. Toyota designs thier vehicles to be safe, not just for the passenger's sake. There is probably some issue that, if left uncorrected, it would have caused more and larger issues. The control module should have shut it down before a catastrophic (expensive) fix is needed. It does save Toyota money to do this, but it is annoying to be without a vehicle until it's fixed. I'm at 35,700 miles, and I've still got some unaddressed issues, but have the extended bumper to bumper.

__________________
5.7L RC Longbox, 4X4 SR5