kernel crashes with ndis & -CURRENT

[Adam K Kirchhoff]

In an attempt to get the native drivers working on a particular
wireless network at work I updated to -CURRENT to see if I'd have any
more luck ( http://www.freebsd.org/cgi/query-pr.cgi?pr=131153&cat= ).

Unfortunately, that didn't work out so I was decided to revert to the
ndis drivers.  I created a new module using the same sys and inf file
that mostly worked on -STABLE (with frequent UP and DOWN messages, but
better than nothing).  Unfortunately, now I get a complete kernel panic.  

Please let me know if this is a better question for freebsd-current.
Here's the backtrace:

[ root at scroll - /var/crash ]: kgdb /boot/kernel/kernel vmcore.3 
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd"...

Unread portion of the kernel message buffer:
panic: no radiotap setup
cpuid = 0
KDB: enter: panic
Uptime: 19s
Physical memory: 1511 MB
Dumping 86 MB: 71 55 39 23 7

Reading symbols from /boot/kernel/linux.ko...Reading symbols from /boot/kernel/linux.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linux.ko
Reading symbols from /boot/kernel/accf_http.ko...Reading symbols from /boot/kernel/accf_http.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/accf_http.ko
Reading symbols from /boot/kernel/aio.ko...Reading symbols from /boot/kernel/aio.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/aio.ko
Reading symbols from /boot/kernel/linprocfs.ko...Reading symbols from /boot/kernel/linprocfs.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/linprocfs.ko
Reading symbols from /boot/modules/w29n51_sys.ko...done.
Loaded symbols for /boot/modules/w29n51_sys.ko
Reading symbols from /boot/kernel/if_ndis.ko...Reading symbols from /boot/kernel/if_ndis.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/if_ndis.ko
Reading symbols from /boot/kernel/ndis.ko...Reading symbols from /boot/kernel/ndis.ko.symbols...done.
done.
Loaded symbols for /boot/kernel/ndis.ko
#0  doadump () at pcpu.h:246
246	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt
#0  doadump () at pcpu.h:246
#1  0xc085ddce in boot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:420
#2  0xc085e0a2 in panic (fmt=Variable "fmt" is not available.
) at /usr/src/sys/kern/kern_shutdown.c:576
#3  0xc093bca2 in ieee80211_radiotap_vattach (vap=0x0) at /usr/src/sys/net80211/ieee80211_radiotap.c:105
#4  0xc0915d4d in ieee80211_vap_setup (ic=0xc5ea1000, vap=0xc5938000, name=0xc0be3e47 "wlan", unit=0, opmode=1, 
    flags=Variable "flags" is not available.
) at /usr/src/sys/net80211/ieee80211.c:468
#5  0xc58a987c in ndis_vap_create (ic=0xc5ea1000, name=0xc0be3e47 "wlan", unit=0, opmode=1, flags=0, 
    bssid=0xe7553b14 "", mac=0xc52ac49d "") at /usr/src/sys/modules/if_ndis/../../dev/if_ndis/if_ndis.c:992
#6  0xc0920824 in wlan_clone_create (ifc=0xc0d24900, unit=0, params=0x8064f60 <Address 0x8064f60 out of bounds>)
    at /usr/src/sys/net80211/ieee80211_freebsd.c:140
#7  0xc0904bd7 in ifc_simple_create (ifc=0xc0d24900, name=0xc5e9f440 "wlan0", len=16, 
    params=0x8064f60 <Address 0x8064f60 out of bounds>) at /usr/src/sys/net/if_clone.c:582
#8  0xc0904521 in if_clone_createif (ifc=0xc0d24900, name=0xc5e9f440 "wlan0", len=16, 
    params=0x8064f60 <Address 0x8064f60 out of bounds>) at /usr/src/sys/net/if_clone.c:193
#9  0xc090478c in if_clone_create (name=0xc5e9f440 "wlan0", len=16, 
    params=0x8064f60 <Address 0x8064f60 out of bounds>) at /usr/src/sys/net/if_clone.c:178
#10 0xc0904087 in ifioctl (so=0xc5596948, cmd=3223349628, data=0xc5e9f440 "wlan0", td=0xc51f1000)
    at /usr/src/sys/net/if.c:2291
#11 0xc08a6377 in soo_ioctl (fp=0xc51a5690, cmd=3223349628, data=0xc5e9f440, active_cred=0xc4d41500, 
    td=0xc51f1000) at /usr/src/sys/kern/sys_socket.c:205
#12 0xc08a0ced in kern_ioctl (td=0xc51f1000, fd=3, com=3223349628, data=0xc5e9f440 "wlan0") at file.h:262
#13 0xc08a0e74 in ioctl (td=0xc51f1000, uap=0xe7553cf8) at /usr/src/sys/kern/sys_generic.c:677
#14 0xc0b66153 in syscall (frame=0xe7553d38) at /usr/src/sys/i386/i386/trap.c:1073
#15 0xc0b493c0 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:261
#16 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) quit