[Bug 147105] double free and then oops in madwifi