[avahi] avahi-daemon crashing with r6040 device driver

[Mike Miller]

Hello,

I'm having a problem with the avahi-daemon that I'm hoping someone can 
help me with or possibly point me in the right direction. I'm trying to 
run it on a PC-104 single board computer (SBC).  Everything works fine 
on Debian etch, but on anything higher (lenny, sid) I'm getting a kernel 
panic.  It's only happening with the r6040 driver that comes with the 
SBC for its on-board network card.  The avahi-daemon runs fine with the 
asix driver on a second ethernet adapter that's connected via USB.

Here's the kernel panic message:

DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 5
DHCPOFFER from 192.168.0.1
DHCPREQUEST on eth0 to 255.255.255.255 port 67
DHCPACK from 192.168.0.1
[  160.781618] BUG: unable to handle kernel NULL pointer dereference at 
00000004
[  160.784061] IP: [<d0806923>] :r6040:r6040_multicast_list+0x1c3/0x2a0
[  160.786621] *pde = 00000000
[  160.787634] Oops: 0000 [#1]
[  160.788391] Modules linked in: ipv6 loop evdev r6040 mii usb_storage 
scsi_mod ohci_hcd ehci_hcd usbcore
[  160.788391]
[  160.788391] Pid: 3064, comm: avahi-daemon Not tainted 
(2.6.27.9-vortex86dx #1)
[  160.788391] EIP: 0060:[<d0806923>] EFLAGS: 00000202 CPU: 0
[  160.788391] EIP is at r6040_multicast_list+0x1c3/0x2a0 [r6040]
[  160.788391] EAX: 00000200 EBX: 00000005 ECX: 0001ee66 EDX: cf299800
[  160.788391] ESI: 0001ee70 EDI: 00000000 EBP: 00000000 ESP: cf93dcd8
[  160.788391]  DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068
[  160.788391] Process avahi-daemon (pid: 3064, ti=cf93c000 
task=cf829b00 task.ti=cf93c000)
[  160.788391] Stack: cf299800 0001ee00 01008000 02004000 cf299800 
cf93dd18 cf299800 cf93dd18
[  160.788391]        c023bbb0 00000000 c023fa86 cf3c8180 cf33b300 
cf299800 c027ddba 00000000
[  160.788391]        005e0001 fb00fb00 00000000 00000000 00000000 
00000000 00000000 00000246
[  160.788391] Call Trace:
[  160.788391]  [<c023bbb0>] __dev_set_rx_mode+0x20/0x90
[  160.788391]  [<c023fa86>] dev_mc_add+0x36/0x50
[  160.788391]  [<c027ddba>] igmp_group_added+0xda/0xf0
[  160.788391]  [<c027df4a>] ip_mc_inc_group+0x10a/0x1c0
[  160.788391]  [<c027e0ed>] ip_mc_join_group+0xed/0xf0
[  160.788391]  [<c02599ae>] do_ip_setsockopt+0x8ce/0xb20
[  160.788391]  [<c013d7b1>] find_get_page+0x11/0x50
[  160.788391]  [<c013dc8b>] find_lock_page+0x1b/0x50
[  160.788391]  [<c013e369>] filemap_fault+0x1f9/0x3c0
[  160.788391]  [<c0149ac9>] __do_fault+0x179/0x360
[  160.788391]  [<c013e170>] filemap_fault+0x0/0x3c0
[  160.788391]  [<c014aeb0>] handle_mm_fault+0x140/0x510
[  160.788391]  [<c01675fb>] __path_lookup_intent_open+0x6b/0x90
[  160.788391]  [<c016762f>] path_lookup_open+0xf/0x20
[  160.788391]  [<c01680df>] do_filp_open+0x7f/0x7e0
[  160.788391]  [<c0259c29>] ip_setsockopt+0x29/0x80
[  160.788391]  [<c0232762>] sock_common_setsockopt+0x12/0x20
[  160.788391]  [<c023097b>] sys_setsockopt+0x4b/0x90
[  160.788391]  [<c0232288>] sys_socketcall+0xf8/0x240
[  160.788391]  [<c0102f32>] syscall_call+0x7/0xb
[  160.788391]  =======================
[  160.788391] Code: 54 24 04 66 8b 44 24 0e 83 c2 66 25 ff ff 00 00 e8 
43 27 9d ef 8b 14 24 8b 9a 00 01 00 00 85 db 7e 57 8b 74 24 04 31 ff 83 
c6 70 <66> 8b 45 04 89 f2 25 ff ff 00 00 8d 5d 04 e8 1a 27 9d ef 8d 56
[  160.788391] EIP: [<d0806923>] r6040_multicast_list+0x1c3/0x2a0 
[r6040] SS:ESP 0068:cf93dcd8
[  160.788606] Kernel panic - not syncing: Fatal exception in interrupt

Any help would be greatly appreciated.

Thanks,

Mike