Description of problem:

Install a WN822N (Version 2 7010-9287) TP-LINK for use of a Fedora 16 guest for Wireless.  This will trigger the Fedora Guest to shutdown....see posted bug: (Note it is a different model from the same vendor of Wireless device.)

https://bugzilla.redhat.com/show_bug.cgi?id=772551

Using USB Passthrough on Fedora 16 using a Fedora 16 guest.


Version-Release number of selected component (if applicable):

At this point I tried 3.2.1.

How reproducible:

Not sure if it is reproducible.

Steps to Reproduce:
1.
2.
3.
  
Actual results:

NING: at drivers/net/wireless/ath/ath9k/rc.c:697 ath_rc_get_highest_rix+0x158/0x1f0 [ath9k]()
Hardware name: W840DI
Modules linked in: tcp_lp ppdev parport_pc lp parport fuse ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_CHECKSUM iptable_mangle tun bridge stp llc ir_lirc_codec lirc_dev ir_mce_kbd_decoder ir_sony_decoder ir_jvc_decoder ir_rc6_decoder ir_rc5_decoder ir_nec_decoder rc_rc6_mce mceusb rc_core arc4 ath9k snd_hda_codec_hdmi mac80211 snd_hda_codec_realtek btusb snd_hda_intel uvcvideo snd_hda_codec videodev bluetooth snd_hwdep media v4l2_compat_ioctl32 snd_seq hid_logitech_dj ath9k_common ath9k_hw snd_seq_device snd_pcm ath snd_timer cfg80211 snd pcspkr r592 iTCO_wdt sky2 soundcore joydev i2c_i801 microcode rfkill snd_page_alloc memstick iTCO_vendor_support binfmt_misc video virtio_net kvm_intel kvm uinput mmc_block sdhci_pci sdhci usb_storage mmc_core firewire_ohci firewire_core crc_itu_t radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan]
Pid: 1610, comm: plasma-desktop Tainted: G        W    3.2.1 #1
Call Trace:
 <IRQ>  [<ffffffff8106ca3f>] warn_slowpath_common+0x7f/0xc0
 [<ffffffff8106ca9a>] warn_slowpath_null+0x1a/0x20
 [<ffffffffa0318ec8>] ath_rc_get_highest_rix+0x158/0x1f0 [ath9k]
 [<ffffffff8101b8b9>] ? sched_clock+0x9/0x10
 [<ffffffff81094c45>] ? sched_clock_local+0x25/0x90
 [<ffffffffa031907c>] ath_get_rate+0x8c/0x410 [ath9k]
 [<ffffffffa047ad36>] rate_control_get_rate+0x96/0x170 [mac80211]
 [<ffffffffa04857b7>] invoke_tx_handlers+0x717/0x1110 [mac80211]
 [<ffffffffa04862fa>] ieee80211_tx+0x5a/0xc0 [mac80211]
 [<ffffffffa04863e1>] ieee80211_xmit+0x81/0xd0 [mac80211]
 [<ffffffffa0486a82>] ieee80211_subif_start_xmit+0x3a2/0x9f0 [mac80211]
 [<ffffffff814cf7a2>] dev_hard_start_xmit+0x322/0x6e0
 [<ffffffff814eb65f>] sch_direct_xmit+0xef/0x1c0
 [<ffffffff814cfce4>] dev_queue_xmit+0x184/0x600
 [<ffffffff814f9235>] ? nf_hook_slow+0x75/0x150
 [<ffffffff81508160>] ? ip_fragment+0x810/0x810
 [<ffffffff815082cb>] ip_finish_output+0x16b/0x2f0
 [<ffffffff81508e28>] ip_output+0x98/0xa0
 [<ffffffff815084f4>] ? __ip_local_out+0xa4/0xb0
 [<ffffffff81508529>] ip_local_out+0x29/0x30
 [<ffffffff8150867f>] ip_queue_xmit+0x14f/0x3f0
 [<ffffffff8151faa4>] tcp_transmit_skb+0x3e4/0x8d0
 [<ffffffff81521e7c>] tcp_send_ack+0x8c/0xe0
 [<ffffffff81522632>] tcp_delack_timer+0x132/0x220
 [<ffffffff8107becb>] run_timer_softirq+0x12b/0x3b0
 [<ffffffff812b9404>] ? timerqueue_add+0x74/0xc0
 [<ffffffff81522500>] ? tcp_init_xmit_timers+0x30/0x30
 [<ffffffff810920b9>] ? enqueue_hrtimer+0x39/0xc0
 [<ffffffff81098185>] ? ktime_get+0x65/0xe0
 [<ffffffff81073fd8>] __do_softirq+0xb8/0x230
 [<ffffffff8109f304>] ? tick_program_event+0x24/0x30
 [<ffffffff815e9a6c>] call_softirq+0x1c/0x30
 [<ffffffff810161e5>] do_softirq+0x65/0xa0
 [<ffffffff810743ee>] irq_exit+0x9e/0xc0
 [<ffffffff815ea40e>] smp_apic_timer_interrupt+0x6e/0x99
 [<ffffffff815e82de>] apic_timer_interrupt+0x6e/0x80
 <EOI>  [<ffffffff815e7802>] ? system_call_fastpath+0x16/0x1b
NING: at drivers/net/wireless/ath/ath9k/rc.c:697 ath_rc_get_highest_rix+0x158/0x1f0 [ath9k]()
Hardware name: W840DI
Modules linked in: tcp_lp ppdev parport_pc lp parport fuse ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_CHECKSUM iptable_mangle tun bridge stp llc ir_lirc_codec lirc_dev ir_mce_kbd_decoder ir_sony_decoder ir_jvc_decoder ir_rc6_decoder ir_rc5_decoder ir_nec_decoder rc_rc6_mce mceusb rc_core arc4 ath9k snd_hda_codec_hdmi mac80211 snd_hda_codec_realtek btusb snd_hda_intel uvcvideo snd_hda_codec videodev bluetooth snd_hwdep media v4l2_compat_ioctl32 snd_seq hid_logitech_dj ath9k_common ath9k_hw snd_seq_device snd_pcm ath snd_timer cfg80211 snd pcspkr r592 iTCO_wdt sky2 soundcore joydev i2c_i801 microcode rfkill snd_page_alloc memstick iTCO_vendor_support binfmt_misc video virtio_net kvm_intel kvm uinput mmc_block sdhci_pci sdhci usb_storage mmc_core firewire_ohci firewire_core crc_itu_t radeon ttm drm_kms_helper drm i2c_algo_bit i2c_core [last unloaded: scsi_wait_scan]

Expected results:

Obviously I expected the USB Passthru to work.

Additional info:

I should mention this is the first oops.   What happened is that the device driver continually started oopsing in a nasty loop.  It begin soon after the assertion shutdown described in the bug in 772551.   So, I think after the assert shutdown of the guest, something must happen to corrupt kernel space for the ath9k driver for the host.

-gc