Comment 49 for bug 345710

cfg80211: Using static regulatory domain info
cfg80211: Regulatory domain: US
 (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp)
 (2402000 KHz - 2472000 KHz @ 40000 KHz), (600 mBi, 2700 mBm)
 (5170000 KHz - 5190000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
 (5190000 KHz - 5210000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
 (5210000 KHz - 5230000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
 (5230000 KHz - 5330000 KHz @ 40000 KHz), (600 mBi, 2300 mBm)
 (5735000 KHz - 5835000 KHz @ 40000 KHz), (600 mBi, 3000 mBm)
cfg80211: Calling CRDA for country: US
lib80211: common routines for IEEE802.11 drivers
iwl3945: Intel(R) PRO/Wireless 3945ABG/BG Network Connection driver for Linux, 1.2.26kds
iwl3945: Copyright(c) 2003-2008 Intel Corporation
iwl3945 0000:06:00.0: PCI INT A -> GSI 18 (level, low) -> IRQ 18
iwl3945: Tunable channels: 11 802.11bg, 13 802.11a channels
iwl3945: Detected Intel Wireless WiFi Link 3945ABG
wmaster0 (iwl3945): not using net_device_ops yet
wlan0 (iwl3945): not using net_device_ops yet
iwl3945 0000:06:00.0: firmware: requesting iwlwifi-3945-2.ucode
iwl3945 loaded firmware version 15.28.2.8
Registered led device: iwl-phy0:radio
Registered led device: iwl-phy0:assoc
Registered led device: iwl-phy0:RX
Registered led device: iwl-phy0:TX
ADDRCONF(NETDEV_UP): wlan0: link is not ready
------------[ cut here ]------------
WARNING: at lib/list_debug.c:30 __list_add+0x44/0x5c() (Not tainted)
Hardware name: VGN-FE570G
list_add corruption. prev->next should be next (c0977c34), but was (null). (prev=f4774adc).
Modules linked in: iwl3945 mac80211 lib80211 cfg80211 netconsole configfs i915 drm i2c_algo_bit rfcomm sco bridge stp bnep l2cap autofs4 sunrpc nf_conntrack_netbios_ns ip6t_REJECT ip6table_filter ip6_tables ipv6 cpufreq_ondemand acpi_cpufreq dm_multipath uinput snd_hda_codec_idt snd_hda_intel snd_hda_codec snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device arc4 gspca_vc032x snd_pcm_oss snd_mixer_oss firewire_ohci snd_pcm gspca_main ecb tifm_7xx1 firewire_core iTCO_vendor_support snd_timer videodev yenta_socket tifm_core crc_itu_t snd rsrc_nonstatic v4l1_compat soundcore e100 mii i2c_i801 i2c_core btusb pcspkr serio_raw joydev snd_page_alloc bluetooth sony_laptop video output ata_generic pata_acpi [last unloaded: cfg80211]
Pid: 3000, comm: iwl3945/0 Not tainted 2.6.29.2-52.fc10.i686 #1
Call Trace:
 [<c042e5c4>] warn_slowpath+0x77/0xb4
 [<c0410063>] ? speedstep_detect_processor+0xf4/0x1fd
 [<c06d7a61>] ? _spin_lock_irqsave+0x2b/0x32
 [<c04369a9>] ? lock_timer_base+0x1f/0x3e
 [<c0436a10>] ? try_to_del_timer_sync+0x48/0x4f
 [<c0436a24>] ? del_timer_sync+0xd/0x18
 [<c041b455>] ? default_spin_lock_flags+0x8/0xb
 [<c06d7a61>] ? _spin_lock_irqsave+0x2b/0x32
 [<c0436b5a>] ? __mod_timer+0x9d/0xa8
 [<c043c8bf>] ? queue_delayed_work_on+0xad/0xba
 [<c0421da5>] ? update_curr+0x94/0x1a8
 [<c05356b0>] __list_add+0x44/0x5c
 [<c04362d1>] internal_add_timer+0x88/0x8c
 [<c0436b50>] __mod_timer+0x93/0xa8
 [<c06d6564>] schedule_timeout+0x98/0xbc
 [<f8e85c75>] ? iwl3945_enqueue_hcmd+0x27e/0x2ae [iwl3945]
 [<c04366af>] ? process_timeout+0x0/0xa
 [<c0436ad0>] ? __mod_timer+0x13/0xa8
 [<f8e85dc2>] iwl3945_send_cmd_sync+0x11d/0x292 [iwl3945]
 [<c043f137>] ? autoremove_wake_function+0x0/0x33
 [<f8e8632a>] iwl3945_send_scan_abort+0x4e/0xcb [iwl3945]
 [<f8e86485>] iwl3945_bg_abort_scan+0x44/0x50 [iwl3945]
 [<c043c10a>] run_workqueue+0x89/0x113
 [<f8e86441>] ? iwl3945_bg_abort_scan+0x0/0x50 [iwl3945]
 [<c043c24a>] worker_thread+0xb6/0xc2
 [<c043f137>] ? autoremove_wake_function+0x0/0x33
 [<c043c194>] ? worker_thread+0x0/0xc2
 [<c043ee6b>] kthread+0x3b/0x61
 [<c043ee30>] ? kthread+0x0/0x61
 [<c040463f>] kernel_thread_helper+0x7/0x10
---[ end trace 20471da268e13da2 ]---
------------[ cut here ]------------
kernel BUG at kernel/workqueue.c:241!
invalid opcode: 0000 [#1] SMP
last sysfs file: /sys/devices/pci0000:00/0000:00:1c.2/0000:06:00.0/net/wmaster0/flags
Modules linked in: iwl3945 mac80211 lib80211 cfg80211 netconsole configfs i915 drm i2c_algo_bit rfcomm sco bridge stp bnep l2cap autofs4 sunrpc nf_conntrack_netbios_ns ip6t_REJECT ip6table_filter ip6_tables ipv6 cpufreq_ondemand acpi_cpufreq dm_multipath uinput snd_hda_codec_idt snd_hda_intel snd_hda_codec snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device arc4 gspca_vc032x snd_pcm_oss snd_mixer_oss firewire_ohci snd_pcm iTCO_wdt gspca_main ecb tifm_7xx1 firewire_core iTCO_vendor_support snd_timer videodev yenta_socket tifm_core crc_itu_t snd rsrc_nonstatic v4l1_compat soundcore e100 mii i2c_i801 i2c_core btusb pcspkr serio_raw joydev snd_page_alloc bluetooth sony_laptop video output ata_generic pata_acpi [last unloaded: cfg80211]

Pid: 2303, comm: wpa_supplicant Tainted: G W (2.6.29.2-52.fc10.i686 #1) VGN-FE570G
EIP: 0060:[<c043c839>] EFLAGS: 00210282 CPU: 0
EIP is at queue_delayed_work_on+0x27/0xba
EAX: 00000000 EBX: f4774acc ECX: f4774acc EDX: 00000000
ESI: f4770e60 EDI: efb21840 EBP: f3600e08 ESP: f3600df8
 DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Process wpa_supplicant (pid: 2303, ti=f3600000 task=f3643f20 task.ti=f3600000)
Stack:
 ffffffff f47713dc f4770e60 efa8b500 f3600e14 c043cb11 00000993 f3600e24
 f8e857eb 00000000 f47701a0 f3600e54 f8cf46be efa8b500 efa8b000 f47702c4
 c06d7868 00000002 efa8b804 efa8b144 efa8b000 efa8b45c 00001003 f3600e64
Call Trace:
 [<c043cb11>] ? queue_delayed_work+0x1b/0x1e
 [<f8e857eb>] ? iwl3945_mac_stop+0xdf/0x11c [iwl3945]
 [<f8cf46be>] ? ieee80211_stop+0x3d1/0x435 [mac80211]
 [<c06d7868>] ? _spin_unlock_bh+0x11/0x13
 [<c06552e0>] ? dev_close+0x7a/0xa0
 [<c0654ff9>] ? dev_change_flags+0xa5/0x158
 [<c0697882>] ? devinet_ioctl+0x21a/0x494
 [<c069886d>] ? inet_ioctl+0x8e/0xa7
 [<c064899c>] ? sock_ioctl+0x1be/0x1e2
 [<c06487de>] ? sock_ioctl+0x0/0x1e2
 [<c04a626f>] ? vfs_ioctl+0x22/0x69
 [<c04a6a49>] ? do_vfs_ioctl+0x467/0x4a0
 [<c0505aeb>] ? selinux_file_ioctl+0x3e/0x42
 [<c04a6ac2>] ? sys_ioctl+0x40/0x5a
 [<c0403dde>] ? syscall_call+0x7/0xb
Code: ff ff 5d c3 55 89 e5 57 89 d7 56 53 89 cb 83 ec 04 89 45 f0 f0 0f ba 29 00 19 c0 31 d2 85 c0 0f 85 91 00 00 00 83 79 10 00 74 04 <0f> 0b eb fe 8d 41 04 39 41 04 74 04 0f 0b eb fe 8b 55 04 8d 71
EIP: [<c043c839>] queue_delayed_work_on+0x27/0xba SS:ESP 0068:f3600df8
---[ end trace 20471da268e13da3 ]---