On Thu, 2008-05-01 at 02:20 -0700, David Miller wrote:
quoted text
> From: Johannes Berg <johannes@sipsolutions.net>
> Date: Thu, 01 May 2008 11:08:06 +0200
>=20
> > > Seems the skb->destructor messes it up.
> >=20
> > Actually, it seems to be outside of mac80211, I put in a WARN_ON() and
> > got this:
>=20
> You're just seeing who freed it last here.
>=20
> It could have had it's ->truesize put into an illegal state
> elsewhere.

Yes, I know, but it doesn't come from my skb_orphan() call. Hence, I
just =EF=BB=BFnetif_rx() the packet which makes it go onto the input_pkt_qu=
eue
and then to netif_receive_skb() which gives it to af_packet and all
others should ignore it since I set =EF=BB=BFPACKET_OTHERHOST.

johannes