i386/116747: FreeBSD 7.0-CURRENT crash

[Roar Pettersen]

>Number:         116747
>Category:       i386
>Synopsis:       FreeBSD 7.0-CURRENT crash
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Sep 29 17:40:01 GMT 2007
>Closed-Date:
>Last-Modified:
>Originator:     Roar Pettersen
>Release:        FreeBSD 7.0-CURRENT Sat Sep 29 18:55:14 CEST 2007
>Organization:
University of Bergen
>Environment:
FreeBSD LapTopp1 7.0-CURRENT FreeBSD 7.0-CURRENT #3: Sat Sep 29 18:55:14 CEST 2007     root at LapTopp1:/usr/obj/usr/src/sys/LAPTOP  i386
>Description:
Trying to get my Dell TrueMobile 1400 wireless card working on my freshly installed FreeBSD 7.0, using "ndisgen" to convert the Windows driver.
Loading the kenel module "bcmwl5_sys.ko", then the system crash :


[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
no match for IoGetDeviceObjectPointer
ndis0: <Dell TrueMobile 1400 Dual Band WLAN Mini-PCI Card> mem 0xdfcfe000-0xdfcfffff irq 17 at device 3.0 on pci3
ndis0: [ITHREAD]
ndis0: NDIS API version: 5.1


Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address   = 0x2
fault code              = supervisor read, page not present
instruction pointer     = 0x20:0x2
stack pointer           = 0x28:0xe62eb78c
frame pointer           = 0x28:0x7b4
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, def32 1, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 1043 (kldload)
trap number             = 12
panic: page fault
cpuid = 0
Uptime: 1m52s
Physical memory: 1007 MB
Dumping 56 MB: 41 25 9

#0  doadump () at pcpu.h:195
195             __asm __volatile("movl %%fs:0,%0" : "=r" (td));
>How-To-Repeat:
# kldload bcmwl5_sys.ko
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: