[ofa-general] i got kernel oops in ib_umad when executing ULPs tests

[Roland Dreier]

So the oops is in

    RIP: 0010:[<ffffffff8837d39f>] <ffffffff8837d39f>{:ib_umad:dequeue_send+26}

ie removing a send from the list of pending userspace sends in
list_del().  The address in RBX, 3f40a6f32b5a2004, looks totally
corrupt.  This is happening from the send_handler() called back from
ib_unregister_mad_agent()... is it possible that there's something
bogus leading to a double callback or something?  I recall we already
saw some bugs in this area before.

 - R.