On Tue, Aug 09, 2011 at 11:45:13AM +0200, Johannes Berg wrote: > > > > Then if ieee80211_reconfig() is called, we schedule > > > > sta_cleanup timer. After that, when sysfs drop reference counter we > > > > free rdev. Then sta_info_cleanup() crash kernel. > > > > > > Ok let me get this straight -- even after device_del() we get a resume > > > callback from the core subsystem? That doesn't seem right. > > > > No, ieee80211_reconfig() is called before device_del() (but can be > > called right after ieee80211_unregister_hw() and perhaps > > ieee80211_free_hw). > > Ah so it's racy. > > But I think you meant to say resume() is called before device_del()? Yes, but __ieee80211_resume() calls directly ieee80211_reconfig(). Stanislaw -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html