11aa: barf on teardown

[twpedersen]

[58440.829805] BUG: unable to handle kernel NULL pointer dereference at 0000000000000008 [58440.829966] IP: [] skb_dequeue+0x52/0x80 [58440.830013] PGD 5efdd067 PUD 1a5eb067 PMD 0 [58440.830013] Oops: 0002 [#1] SMP [58440.830013] CPU 3 [58440.830013] Modules linked in: ath9k ath9k_htc ath9k_common ath9k_hw ath mac80211 cfg80211 r8169 [58440.830013] [58440.830013] Pid: 22928, comm: ip Not tainted 3.5.0-5ca2e19+ #412 To Be Filled By O.E.M. To Be Filled By O.E.M./To be filled by O.E.M. [58440.830013] RIP: 0010:[] [] skb_dequeue+0x52/0x80 [58440.830013] RSP: 0018:ffff88001b0e7648 EFLAGS: 00010002 [58440.830013] RAX: 0000000000000286 RBX: ffff880068365f00 RCX: 0000000000000000 [58440.830013] RDX: 0000000000000000 RSI: ffffea0001a0d940 RDI: ffff8800796f4fbc [58440.830013] RBP: ffff88001b0e7668 R08: ffff880068365c00 R09: 000000018010000e [58440.830013] R10: ffffffff815bfe57 R11: ffffffffffffffe2 R12: ffff8800796f4fa8 [58440.830013] R13: ffff8800796f4fbc R14: 0000000000000000 R15: 0000000000000100 [58440.830013] FS: 00007fb2f23f0700(0000) GS:ffff88007f380000(0000) knlGS:0000000000000000 [58440.830013] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b [58440.830013] CR2: 0000000000000008 CR3: 000000001a604000 CR4: 00000000000007e0 [58440.830013] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [58440.830013] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [58440.830013] Process ip (pid: 22928, threadinfo ffff88001b0e6000, task ffff88007bb7e180) [58440.830013] Stack: [58440.830013] ffffffff815bea44 ffff8800796f4fa8 ffff8800796f4480 ffff8800796f5210 [58440.830013] ffff88001b0e7688 ffffffff815c02b8 ffff88001b0e76a8 0000000000000001 [58440.830013] ffff88001b0e76a8 ffffffffa00d6997 ffff88007c0ba6c0 ffff8800796f4480 [58440.830013] Call Trace: [58440.830013] [] ? skb_dequeue+0x74/0x80 [58440.830013] [] skb_queue_purge+0x28/0x40 [58440.830013] [] ieee80211_clear_tx_pending+0x37/0x50 [mac80211] [58440.830013] [] ieee80211_do_stop+0x2b9/0x7c0 [mac80211]