Christian, I changed the section in p54_tx_qos_accounting_free() to be the following: @@ -223,7 +235,10 @@ static void p54_tx_qos_accounting_free(s struct p54_hdr *hdr = (void *) skb->data; struct p54_tx_data *data = (void *) hdr->data; - priv->tx_stats[data->hw_queue].len--; + if (priv->tx_stats[data->hw_queue].len) + priv->tx_stats[data->hw_queue].len--; + else + dump_stack(); } p54_wake_queues(priv); } In a 1 hour period running a 'make ARCH=i386 -j6' with the kernel sources on an NFS mounted volume, I got the following sequence of "failures": a. dump_stack() with call from p54_find_and_unlock_skb() b. dump_stack() with call from p54_find_and_unlock_skb() c. disassociation error d. dump_stack() with call from p54_find_and_unlock_skb() e. dump_stack() with call from p54_find_and_unlock_skb() f. dump_stack() with call from p54_find_and_unlock_skb() g. disassociation error h. disassociation error i. disassociation error j. disassociation error k. dump_stack() with call from p54_find_and_unlock_skb() l. disassociation error m. disassociation error When the dump_stack() occurs, the interface keeps going as long as the queue len never goes negative. With the disassociation error, the device must be powered cycled by unplugging and replugging it. The driver does not need to be reloaded. If I run the kernel make with -j1 rather than -j6, the builds have always completed. Neither of the errors show up. A "paper over the problem" workaround for the queue len < 0 would be - priv->tx_stats[data->hw_queue].len--; + if (priv->tx_stats[data->hw_queue].len) + priv->tx_stats[data->hw_queue].len--; but it doesn't properly fix the problem. How sure are you of the locking? It seems that the more threads that I'm using, the more likely that it is to happen. Similarly, the disassociation errors could be overloading the firmware by adding too many entries. Of course, it could result from a firmware error when the device is driven hard. I've only given it one trial, but p54usb only survived for 24 minutes running my other torture test with repeating tcpperf in one terminal and a flood ping in a second. This one got the disassociation error and also a "failure to remove key" (error code -95) and two "failed to uodate LEDs" (error code -12). -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html