From nobody@FreeBSD.org  Sat Mar 21 01:33:42 2009
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id EB48C106564A
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 21 Mar 2009 01:33:42 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id BF2B68FC0A
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 21 Mar 2009 01:33:42 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n2L1Xf5D061745
	for <freebsd-gnats-submit@FreeBSD.org>; Sat, 21 Mar 2009 01:33:41 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id n2L1Xfs1061744;
	Sat, 21 Mar 2009 01:33:41 GMT
	(envelope-from nobody)
Message-Id: <200903210133.n2L1Xfs1061744@www.freebsd.org>
Date: Sat, 21 Mar 2009 01:33:41 GMT
From: Miroslav Drbal <mdrbal@nymfe.net>
To: freebsd-gnats-submit@FreeBSD.org
Subject: NDIS kernel crash on load BCM4321 AGN driver
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         132889
>Category:       kern
>Synopsis:       [ndis] [panic] NDIS kernel crash on load BCM4321 AGN driver
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-net
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Mar 21 01:40:00 UTC 2009
>Closed-Date:    
>Last-Modified:  Mon Mar 23 23:40:03 UTC 2009
>Originator:     Miroslav Drbal
>Release:        7.2-PRERELEASE
>Organization:
Student
>Environment:
FreeBSD killer 7.2-PRERELEASE FreeBSD 7.2-PRERELEASE #2: Fri Mar 20 15:53:26 CET 2009     apoc@killer:/usr/obj/usr/src/sys/KILLER  i386

>Description:
Crash on kldload ndis driver for Broadcom 4321 AGN wireless card.

DUMP:
#0  doadump () at pcpu.h:196
#1  0xc07bb998 in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:418
#2  0xc07bbc75 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:574
#3  0xc0a275e4 in trap_fatal (frame=0xea5d7810, eva=60)
    at /usr/src/sys/i386/i386/trap.c:939
#4  0xc0a27855 in trap_pfault (frame=0xea5d7810, usermode=0, eva=60)
    at /usr/src/sys/i386/i386/trap.c:852
#5  0xc0a281dd in trap (frame=0xea5d7810) at /usr/src/sys/i386/i386/trap.c:530
#6  0xc0a0d9ab in calltrap () at /usr/src/sys/i386/i386/exception.s:159
#7  0xc07ed24a in taskqueue_drain (queue=0x0, task=0xc73b05a0)
    at /usr/src/sys/kern/subr_taskqueue.c:299
#8  0xc168259f in ndis_detach (dev=0xc5e8d280)
    at /usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:1017
#9  0xc16828ec in ndis_attach (dev=0xc5e8d280)
    at /usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:975
#10 0xc1686432 in ndis_attach_pci (dev=0xc5e8d280)
    at /usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis_pci.c:330
#11 0xc07e0546 in device_attach (dev=0xc5e8d280) at device_if.h:178
#12 0xc07e1449 in device_probe_and_attach (dev=0xc5e8d280)
    at /usr/src/sys/kern/subr_bus.c:2366
#13 0xc0688a1f in pci_driver_added (dev=0xc5e8d300, driver=0xc73ae5a8)
    at /usr/src/sys/dev/pci/pci.c:2778
#14 0xc07df4c0 in devclass_add_driver (dc=0xc5c85880, driver=0xc73ae5a8)
---Type <return> to continue, or q <return> to quit---
    at bus_if.h:183
#15 0xc07e011c in driver_module_handler (mod=0xc70f5d80, what=0,
    arg=0xc73ae594) at /usr/src/sys/kern/subr_bus.c:3847
#16 0xc07ad5c6 in module_register_init (arg=0xc73ae534)
    at /usr/src/sys/kern/kern_module.c:124
#17 0xc07a6ab4 in linker_load_module (kldname=Variable "kldname" is not available.
)
    at /usr/src/sys/kern/kern_linker.c:232
#18 0xc07a6fad in kern_kldload (td=0xc66c2460,
    file=0xc5e18000 "./bcmwl5_sys.ko", fileid=0xea5d7c70)
    at /usr/src/sys/kern/kern_linker.c:1000
#19 0xc07a707f in kldload (td=0xc66c2460, uap=0xea5d7cfc)
    at /usr/src/sys/kern/kern_linker.c:1027
#20 0xc0a27b96 in syscall (frame=0xea5d7d38)
    at /usr/src/sys/i386/i386/trap.c:1090
#21 0xc0a0da10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:255
#22 0x00000033 in ?? ()

>How-To-Repeat:
Driver downloaded here: http://www.wireless-driver.com/driver/broadcom/Broadcom.4321.802.11n.rar

ndisgen bcmwl5.inf bcmwl5.sys
kldload ./bcmwl5_sys.ko

kernel crash.
>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-bugs->freebsd-net 
Responsible-Changed-By: linimon 
Responsible-Changed-When: Sat Mar 21 15:25:09 UTC 2009 
Responsible-Changed-Why:  
Over to maintainer(s). 

http://www.freebsd.org/cgi/query-pr.cgi?pr=132889 

From: Miroslav Drbal <mdrbal@nymfe.net>
To: bug-followup@freebsd.org,
 mdrbal@nymfe.net
Cc:  
Subject: Re: kern/132889: [ndis] [panic] NDIS kernel crash on load BCM4321 AGN driver
Date: Tue, 24 Mar 2009 00:38:31 +0100

 Additional debug info:
 Unread portion of the kernel message buffer:
 ndis0: <Broadcom 802.11n Network Adapter> mem 
 0xf1efc000-0xf1efffff,0xf0000000-0xf00fffff irq 17 at device 0.0 on pci11
 ndis0: [ITHREAD]
 ndis0: NDIS API version: 5.1
 ndis0: NDIS ERROR: c000138d (unknown error)
 ndis0: init handler failed
>Unformatted:
