i386/120966: kernel panic with if_rum and WPA encryption

[Oliver Herold]

>Number:         120966
>Category:       i386
>Synopsis:       kernel panic with if_rum and WPA encryption
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 22 11:00:05 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Oliver Herold
>Release:        FreeBSD 7, RELENG_7
>Organization:
>Environment:
FreeBSD asgard.home 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #1: Thu Feb 21 23:38:31 CET 2008     acheron at asgard.home:/usr/obj/usr/src/sys/ASGARD  i386
>Description:
I've tested two Wifi usb sticks (manufacturer Hama and Edimax). Both of them are from the same OEM manufacturer.

rum0: <Ralink 802.11 bg WLAN, class 0/0, rev 2.00/0.01, addr 2> on uhub1
rum0: MAC/BBP RT2573 (rev 0x2573a), RF RT2528
rum0: Ethernet address: 00:0e:2e:b2:86:36
rum0: if_start running deferred for Giant

I can use it without any problems while using WEP encryption or without any encryption, but this is not a long-term option. So after bringing if_rum up with WPA it takes just about some (5-10 usually) minutes to render a kernel panic.



Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address   = 0x12
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0xc06d1570
stack pointer           = 0x28:0xef0fac04
frame pointer           = 0x28:0xef0fac20
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 27 (irq22: ehci0+)
trap number             = 12
panic: page fault
cpuid = 1
Uptime: 11m8s
Physical memory: 3051 MB
>How-To-Repeat:
Just use if_rum with WPA encryption, this will lead to a kernel panic after some minutes.
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: