[ 3008.808000] BUG: unable to handle kernel paging request at virtual address f001023f
[ 3008.808000]  printing eip:
[ 3008.808000] c02ff24f
[ 3008.808000] *pde = 00000000
[ 3008.808000] Oops: 0000 [#1]
[ 3008.808000] PREEMPT SMP
[ 3008.808000] Modules linked in: rt61 netconsole eeprom snd_seq_dummy snd_seq_oss snd_seq_midi_even$
[ 3008.808000] CPU:    0
[ 3008.808000] EIP:    0060:[<c02ff24f>]    Not tainted VLI
[ 3008.808000] EFLAGS: 00010293   (2.6.21-rc6-rt61-g64fafdb6 #1) 
[ 3008.808000] EIP is at netif_receive_skb+0x174/0x35a
[ 3008.808000] eax: 00000003   ebx: 00000001   ecx: 00000001   edx: f000ff53
[ 3008.808000] esi: c071aea8   edi: dcba3800   ebp: c04c9f8c   esp: c04c9f58
[ 3008.808000] ds: 007b   es: 007b   fs: 00d8  gs: 0000  ss: 0068
[ 3008.808000] Process swapper (pid: 0, ti=c04c9000 task=c04384e0 task.ti=c046e000)
[ 3008.808000] Stack: c0300d0b 00000001 00000000 00000000 c1699b04 c04c9f8c c0138cb0 c0360ee4
[ 3008.808000]        00000046 dcba3800 00000000 dcba3800 c1699b04 c04c9fb8 c0300d16 c04c9fcc
[ 3008.808000]        c1699b80 00000000 00000040 c1699b00 00295548 00000000 c1699b80 00000000
[ 3008.808000] Call Trace:
[ 3008.808000]  [<c0105134>] show_trace_log_lvl+0x1a/0x30
[ 3008.808000]  [<c01051ef>] show_stack_log_lvl+0xa5/0xca
[ 3008.808000]  [<c010542e>] show_registers+0x21a/0x38e
[ 3008.808000]  [<c01056bd>] die+0x11b/0x251
[ 3008.808000]  [<c0115a6a>] do_page_fault+0x277/0x60d
[ 3008.808000]  [<c0361184>] error_code+0x7c/0x84
[ 3008.808000]  [<c0300d16>] process_backlog+0x99/0x128
[ 3008.808000]  [<c0300fde>] net_rx_action+0xcc/0x288
[ 3008.808000]  [<c0122be9>] __do_softirq+0x7e/0xf9
[ 3008.808000]  [<c0106b96>] do_softirq+0x8f/0xe2
[ 3008.808000]  ======================= 
[ 3008.808000] Code: ff d3 89 c3 8b 7d f0 8b 56 18 89 75 d4 eb b5 bb 01 00 00 00 c7 45 d4 00 00 00 0$
[ 3008.808000] EIP: [<c02ff24f>] netif_receive_skb+0x174/0x35a SS:ESP 0068:c04c9f58
[ 3008.808000] Kernel panic - not syncing: Fatal exception in interrupt

Code:
			// Send copy to monitor interface
			if ((mskb = dev_alloc_skb(skb->len +
						sizeof(wlan_ng_prism2_header)))) {
				skb_reserve(mskb, sizeof(wlan_ng_prism2_header));
				memcpy(mskb->data, skb->data, skb->len);
				memcpy(&mskb->cb, pRxD, 24);
				RxMonitorFrame(pAd, mskb);
			}