Hello,

I've got the following BUG when I rmmod snd-ens1371. 

BUG: unable to handle kernel paging request at virtual address 6b6b6b6b
 printing eip:
c016f1d2
*pde = 00000000
Oops: 0000 [#1]
last sysfs file: /block/hdd/removable
Modules linked in: snd_ens1371 gameport snd_rawmidi snd_seq_device snd_ac97_codec snd_ac97_bus snd_pcm snd_timer snd soundcore snd_page_alloc ide_cd cdrom loop aes dm_crypt nls_iso8859_1 nls_cp850 vfat fat reiser4 reiserfs raid1 md_mod via_agp agpgart video joydev ohci1394 ieee1394 usbhid uhci_hcd usbcore dm_mirror dm_mod
CPU:    0
EIP:    0060:[<c016f1d2>]    Not tainted VLI
EFLAGS: 00010286   (2.6.16-rc5-mm2 #120) 
EIP is at remove_proc_entry+0x2e/0x150
eax: 00000000   ebx: dcb56720   ecx: ffffffff   edx: dcb56720
esi: ddfdf090   edi: 6b6b6b6b   ebp: dbe7fe30   esp: dbe7fe18
ds: 007b   es: 007b   ss: 0068
Process rmmod (pid: 1219, threadinfo=dbe7f000 task=dbe5ba90)
Stack: <0>22222222 dcb56720 6b6b6b6b dcb56720 ddfdf090 00000001 dbe7fe38 e0c28f99 
       dbe7fe48 e0c294e3 dfbda8a4 c168c05c dbe7fe54 e0d95e70 dfbda8a4 dbe7fe68 
       e0d95e9b c168c03c c168c03c c168c104 dbe7fe74 e0d8e1d1 e0d9d5ec dbe7fe8c 
Call Trace:
 [<c0103a46>] show_stack_log_lvl+0xa0/0xab
 [<c0103b7f>] show_registers+0x12e/0x194
 [<c0103e5e>] die+0x14e/0x1db
 [<c0111666>] do_page_fault+0x468/0x55f
 [<c01034db>] error_code+0x4f/0x54
 [<e0c28f99>] snd_remove_proc_entry+0x13/0x15 [snd]
 [<e0c294e3>] snd_info_unregister+0x31/0x48 [snd]
 [<e0d95e70>] snd_pcm_lib_preallocate_free+0x34/0x43 [snd_pcm]
 [<e0d95e9b>] snd_pcm_lib_preallocate_free_for_all+0x1c/0x30 [snd_pcm]
 [<e0d8e1d1>] snd_pcm_free+0x19/0x3b [snd_pcm]
 [<e0d8e9df>] snd_pcm_dev_unregister+0xd3/0xd9 [snd_pcm]
 [<e0c2bbda>] snd_device_free+0x59/0xad [snd]
 [<e0c2bc5e>] snd_device_free_all+0x30/0x4f [snd]
 [<e0c28a4e>] snd_card_free+0xc1/0x156 [snd]
 [<e0d820ca>] snd_audiopci_remove+0x12/0x1f [snd_ens1371]
 [<c01aafd3>] pci_device_remove+0x19/0x2c
 [<c0204c51>] __device_release_driver+0x56/0x6c
 [<c0204f0d>] driver_detach+0x82/0xb3
 [<c02047bf>] bus_remove_driver+0x5a/0x76
 [<c02051e6>] driver_unregister+0xe/0x18
 [<c01aaf12>] pci_unregister_driver+0xf/0x62
 [<e0d82d29>] alsa_card_ens137x_exit+0xd/0x15 [snd_ens1371]
 [<c012a6bc>] sys_delete_module+0x161/0x191
 [<c01029bb>] sysenter_past_esp+0x54/0x75
Code: 57 56 53 83 ec 0c 85 d2 89 55 ec 89 45 f0 75 13 8d 4d f0 8d 55 ec e8 4d fe ff ff 85 c0 0f 85 22 01 00 00 8b 7d f0 31 c0 83 c9 ff <f2> ae f7 d1 49 8b 7d ec 8b 75 f0 89 4d e8 83 c7 34 e9 fa 00 00 
 BUG: rmmod/1219, lock held at task exit time!
 [e0c309c0] {info_mutex}
.. held by:             rmmod: 1219 [dbe5ba90, 116]
... acquired at:               snd_info_unregister+0x27/0x48 [snd]


Scenario:
- boot to runlevel 1
- modprobe snd-ens1371
- rmmod snd-ens1371

I'm pretty sure it appeared on 2.6.16-rc5-mm2 when I set 
CONFIG_DEBUG_SLAB=y. I mean I previously built 2.6.16-rc5-mm2 
without CONFIG_DEBUG_SLAB and this BUG wasn't triggered. I 
can't remember if I changed another option when I set 
CONFIG_DEBUG_SLAB to y (I don't think so). 

This BUG still exists on 2.6.16-rc5-mm3.

attached:
- config
- almost complete dmesg

~~
laurent