kern/72423: Loading if_ndis for Intel Wireless 2200BG gives panic from kldload on 5.3-BETA6

[Thiemo Nordenholz]

>Number:         72423
>Category:       kern
>Synopsis:       Loading if_ndis for Intel Wireless 2200BG gives panic from kldload on 5.3-BETA6
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Oct 07 14:00:44 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Thiemo Nordenholz
>Release:        5.3-BETA6
>Organization:
>Environment:
FreeBSD feynman.ham01.thiemo.net 5.3-BETA6 FreeBSD 5.3-BETA6 #2: Thu Oct  7 14:59:18 CEST 2004 thiemo at feynman.ham01.thiemo.net:/usr/src/sys/i386/compile/FEYNMAN  i386

Hardware is HP Pavilion zt3312ea, affected interface is:
Intel PRO/Wireless 2200BG Network Connection.

Windows driver used for if_ndis is "w22n51.sys" from intel.
The panic was reproducible in single user mode.
>Description:
Trying to use the NDISulator panics the system.
wlan is statically compiled into kernel, ndis module loads fine.
Trying to kldload if_ndis, though, gives a panic:

Fatal trap 12: page fault while in kernel mode
fault virtual address   = 0x80000002
fault code              = supervisor read, page not present
instruction pointer     = 0x8:0x80000002
stack pointer           = 0x10:0xd5483adc
frame pointer           = 0x10:0xc20842f0
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 63 (kldload)

The kernel debugger shows only a "kernload()" call in the stacktrace.

Complete dmesg output can be found at
    http://www.thiemo.net/misc/feynman/dmesg.out
Kernel configuration file can be found at
    http://www.thiemo.net/misc/feynman/kernconf
>How-To-Repeat:
Install NDISulator as documented, using the Windows driver called "w22n51.sys".
Load if_ndis to panic.
>Fix:
Unknown to me.
>Release-Note:
>Audit-Trail:
>Unformatted: