[Trac #454] wireless oops on delay_work_queue_timer_fn

[Zarro Boogs per Child]

#454: wireless oops on delay_work_queue_timer_fn
---------------------+------------------------------------------------------
 Reporter:  marcelo  |       Owner:  dcbw   
     Type:  defect   |      Status:  new    
 Priority:  high     |   Milestone:  BTest-1
Component:  distro   |    Keywords:         
---------------------+------------------------------------------------------
 While attempting to load/unload the usb8xxx module with new driver
 containing Dan's async assoc code.

 delayed_work_timer_fn is trying to access a region of memory which do
 contains a valid pte mapping, thus the kernel tries to enter the pagefault
 handler.

 {{{

 + insmod ./usb8xxx.ko
 [  277.741199] 00 03 03 00 00
 [  277.767650] 28 <7>Enter: if_usb_receive,
 drivers/net/wireless/libertas/if_usb.c:575
 [  277.813605] 80 0c 00 03 00 00 00 03 00 00 00
 [  277.839174] 1a <7>Enter: if_usb_receive,
 drivers/net/wireless/libertas/if_usb.c:575
 [  277.884781] 00 04 00 00 00 02 00 01 00 00 01 02 03 05 06 07 08 09 0a 0b
 0c 00 00
 + sleep 3s
 [  280.289004] 16 <7>Enter: if_usb_receive,
 drivers/net/wireless/libertas/if_usb.c:575
 [  280.332029] 80 8e 00 08 00 00 00 00 00 06 00 01 00 09 00 00 00 00 00 00
 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
 [  281.106696] BUG: unable to handle kernel paging request at virtual
 address c4cc7d1c
 [  281.151188]  printing eip:
 [  281.171935] c011e7e4
 [  281.191588] *pde = 00012067
 [  281.211492] *pte = 04cc7000
 [  281.230843] Oops: 0002 [#1]
 [  281.249784] DEBUG_PAGEALLOC
 [  281.268447] Modules linked in: usb8xxx
 [  281.288196] CPU:    0
 [  281.288212] EIP:    0060:[<c011e7e4>]    Not tainted VLI
 [  281.288234] EFLAGS: 00010086   (2.6.19-rc1 #1)
 [  281.345989] EIP is at __queue_work+0x29/0x51
 [  281.365528] eax: c715bf70   ebx: c715bf38   ecx: c4cc7d1c   edx:
 c528cd1c
 [  281.387866] esi: c528cd18   edi: 00000286   ebp: c03f6fbc   esp:
 c03f6fb0
 [  281.409967] ds: 007b   es: 007b   ss: 0068
 [  281.428948] Process dhclient-script (pid: 2773, ti=c03f6000
 task=c480d5b0 task.ti=c52e0000)
 [  281.452702] Stack: c528cd18 c0404ac0 00000100 c03f6fc4 c011e81b
 c03f6fe4 c01185f2 c011e80c
 [  281.492134]        c03f6fd0 c03f6fd0 00000011 c0404868 0000000a
 c03f6ff8 c0115bd9 c52e0f24
 [  281.531605]        c52e0000 00000046 c52e0f30 c0104e83
 [  281.552496] Call Trace:
 [  281.583867]  [<c010388d>] show_trace_log_lvl+0x12/0x25
 [  281.603711]  [<c010392a>] show_stack_log_lvl+0x8a/0x95
 [  281.623063]  [<c0103c45>] show_registers+0x121/0x1b2
 [  281.641905]  [<c0103e66>] die+0x190/0x298
 [  281.659387]  [<c010d41e>] do_page_fault+0x3fa/0x4c8
 [  281.677511]  [<c02a1ba1>] error_code+0x39/0x40
 [  281.694805]  [<c011e81b>] delayed_work_timer_fn+0xf/0x11
 [  281.712763]  [<c01185f2>] run_timer_softirq+0xed/0x145
 [  281.730651]  [<c0115bd9>] __do_softirq+0x46/0x9c
 [  281.748098]  [<c0104e83>] do_softirq+0x4d/0xab
 [  281.765548]  [<c0115b03>] irq_exit+0x31/0x33
 [  281.782860]  [<c0104fb0>] do_IRQ+0xcf/0xe7
 [  281.800074]  [<c0103641>] common_interrupt+0x25/0x2c
 [  281.818403]  [<c011baef>] sys_rt_sigprocmask+0x9a/0xbd
 [  281.836971]  [<c0102c6f>] syscall_call+0x7/0xb
 [  281.854814]  =======================
 [  281.871567] Code: c0 c3 55 89 e5 57 56 89 d6 53 89 c3 e8 2e 33 18 00 8d
 56 04 89 5e 14 89 c7 8d 43 30 8b 48 04 89 46 04 89 50 04 8d 43 38 89 4a 04
 [  281.937532] EIP: [<c011e7e4>] __queue_work+0x29/0x51 SS:ESP
 0068:c03f6fb0
 [  281.958899]  <0>Kernel panic - not syncing: Fatal exception in
 interrupt
 [  281.980125]

 }}}

-- 
Ticket URL: <http://dev.laptop.org/ticket/454>
One Laptop Per Child <http://laptop.org/>