[linux-dvb] 2.6.10-rc3 + cvs dvb-kernel reproducible oops

[syrius.ml@no-log.org]

2 dvb cards: 1 tt ff dvb-s 1.5 (adapter0) and 1 tt budget (adapter1)
dvb-ttpci and budget-ci are loaded by hotplug.
if I remove the budget-ci module (modprobe -r budget-ci) then lauch
vdr, this oops happens.
I guess it happens when vdr checks the number of dvb device by trying
to opening then next one. 

(this a vanilla 2.6.10-rc3 kernel + cvs dvb-kernel (from less than 1H)
 running on a single cpu i386 with nopreempt)

Unable to handle kernel paging request at virtual address c8a8f480
 printing eip:
c89890d6
*pde = 0114d067
*pte = 00000000
Oops: 0000 [#1]
Modules linked in: ipv6 evdev dvb_ttpci dvb_core saa7146_vv video_buf saa7146 v4l1_compat v4l2_common videodev ves1820 stv0299 tda8083 stv0297 sp8870 firmware_class crc32 ves1x93 ttpci_eeprom snd_via82xx snd_ac97_codec snd_pcm snd_timer snd_page_alloc snd_mpu401_uart snd_rawmidi snd_seq_device snd soundcore uhci_hcd usbcore via_agp agpgart parport_pc parport adm1021 eeprom w83781d i2c_sensor i2c_isa i2c_core
CPU:    0
EIP:    0060:[<c89890d6>]    Not tainted VLI
EFLAGS: 00010282   (2.6.10-rc3) 
EIP is at dvb_device_open+0x56/0x120 [dvb_core]
eax: c7e0cde0   ebx: c899c280   ecx: c899c860   edx: c8a8f480
esi: c6c9d100   edi: c768de78   ebp: c60e7efc   esp: c60e7ee4
ds: 007b   es: 007b   ss: 0068
Process vdr (pid: 3717, threadinfo=c60e6000 task=c6092540)
Stack: 00000003 c60e7efc 00000000 c71b8c20 00000000 c6c9d100 c60e7f20 c01536f0 
       c768de78 c6c9d100 00000004 00000001 c6c9d100 c768de78 c1143200 c60e7f40 
       c014a53a c768de78 c6c9d100 ffffffe9 00000000 00000000 c6ac4000 c60e7f9c 
Call Trace:
 [<c010345f>] show_stack+0x7f/0xa0
 [<c0103606>] show_registers+0x156/0x1c0
 [<c01037f8>] die+0xc8/0x150
 [<c0110296>] do_page_fault+0x326/0x6a2
 [<c01030f7>] error_code+0x2b/0x30
 [<c01536f0>] chrdev_open+0xa0/0x150
 [<c014a53a>] dentry_open+0x12a/0x1e0
 [<c014a40d>] filp_open+0x5d/0x60
 [<c014a766>] sys_open+0x46/0x90
 [<c0102f4f>] syscall_call+0x7/0xb
Code: 00 00 8b 48 08 85 c9 0f 84 cf 00 00 00 c7 45 f0 00 00 00 00 8b 5e 10 89 46 7c 8b 50 08 85 d2 0f 84 b0 00 00 00 8b 12 85 d2 74 0f <83> 3a 02 0f 84 a1 00 00 00 ff 82 a0 00 00 00 8b 40 08 89 46 10 


--