[Trac #319] Oops on usb8xxx.ko unload

[Zarro Boogs per Child]

#319: Oops on usb8xxx.ko unload
----------------------+-----------------------------------------------------
 Reporter:  dwmw2     |       Owner:  marcelo
     Type:  defect    |      Status:  new    
 Priority:  blocker   |   Milestone:  BTest-1
Component:  wireless  |    Keywords:         
----------------------+-----------------------------------------------------
 {{{
 [root at localhost ~]# rmmod usb8xxx
 usbcore: deregistering interface driver usb8xxx
 BUG: unable to handle kernel NULL pointer dereference at virtual address
 00000000
  printing eip:
 d09c1757
 *pde = 00000000
 Oops: 0002 [#1]
 Modules linked in: usb8xxx autofs4 sunrpc iptable_filter ip_tables
 ip6t_REJECT xt_tcpudp ip6table_filter ip6_tablw
 CPU:    0
 EIP:    0060:[<d09c1757>]    Not tainted VLI
 EFLAGS: 00010296   (2.6.19-rc2 #22)
 EIP is at libertas_sbi_host_to_card+0x47/0x98 [usb8xxx]
 eax: 00000000   ebx: cf1016e0   ecx: ce416028   edx: 000000ff
 esi: ce416028   edi: ce4160f2   ebp: c8e982c0   esp: ce79fac8
 ds: 007b   es: 007b   ss: 0068
 Process avahi-daemon (pid: 1995, ti=ce79f000 task=cf29faa0
 task.ti=ce79f000)
 Stack: 00ca0018 beadc0de c8e982c0 ced712bc ce4160f2 ce416028 d09b83a2
 000000ca
        c85f5440 00000000 00000000 00000018 333300b2 fb000000 00000000
 c8e98000
        c8e982c0 c8e98000 c85f5440 d09b5865 c85f5a40 c85f5440 c06ef9c8
 c8e98000
 Call Trace:
  [<d09b83a2>] SendSinglePacket+0x1b2/0x25c [usb8xxx]
  [<d09b5865>] wlan_hard_start_xmit+0x46/0x5c [usb8xxx]
  [<c05544de>] dev_hard_start_xmit+0x15a/0x1b3
  [<c0560800>] __qdisc_run+0xc6/0x17c
  [<c0555cd3>] dev_queue_xmit+0x104/0x20d
  [<c054fe19>] skb_clone+0x3a/0x1c0
  [<d09deb24>] ip6_output2+0x1f3/0x21f [ipv6]
  [<d09df2ab>] ip6_output+0x75b/0x787 [ipv6]
  [<c0568330>] nf_iterate+0x38/0x6a
  [<c056850b>] nf_hook_slow+0x4d/0xb5
  [<d09de514>] dst_output+0x0/0x7 [ipv6]
  [<d09df739>] ip6_push_pending_frames+0x2dc/0x394 [ipv6]
  [<d09de514>] dst_output+0x0/0x7 [ipv6]
  [<d09ee12d>] udp_v6_push_pending_frames+0x15e/0x181 [ipv6]
  [<d09ef558>] udpv6_sendmsg+0x655/0x8cc [ipv6]
  [<c040c689>] default_wake_function+0x0/0xc
  [<c040c689>] default_wake_function+0x0/0xc
  [<c058d8c9>] inet_sendmsg+0x3b/0x45
  [<c054b88a>] sock_sendmsg+0xd3/0xee
  [<c041ec84>] autoremove_wake_function+0x0/0x35
  [<c041ec84>] autoremove_wake_function+0x0/0x35
  [<c04cf0b4>] copy_from_user+0x3a/0x66
  [<c054ba37>] sys_sendmsg+0x192/0x1f7
  [<c044df4b>] pipe_write+0x3a1/0x3fd
  [<c04486f8>] do_sync_write+0xca/0x10d
  [<c041ec84>] autoremove_wake_function+0x0/0x35
  [<c054c9d1>] sys_socketcall+0x223/0x242
  [<c04cf300>] copy_to_user+0x3a/0x4e
  [<c0402c47>] syscall_call+0x7/0xb
  =======================
 Code: 44 24 04 ce fa 0d f0 c6 85 48 09 00 00 02 8b 43 38 c7 00 ce fa 0d f0
 eb 18 c7 44 24 04 de c0 ad be c6 85 48
 EIP: [<d09c1757>] libertas_sbi_host_to_card+0x47/0x98 [usb8xxx] SS:ESP
 0068:ce79fac8
 }}}

-- 
Ticket URL: <http://dev.laptop.org/ticket/319>
One Laptop Per Child <http://laptop.org/>