From owner-freebsd-net@FreeBSD.ORG  Wed Oct  7 22:02:35 2009
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 61950106568B
	for <freebsd-net@freebsd.org>; Wed,  7 Oct 2009 22:02:35 +0000 (UTC)
	(envelope-from lstewart@freebsd.org)
Received: from lauren.room52.net (lauren.room52.net [210.50.193.198])
	by mx1.freebsd.org (Postfix) with ESMTP id F01FA8FC16
	for <freebsd-net@freebsd.org>; Wed,  7 Oct 2009 22:02:34 +0000 (UTC)
Received: from lstewart-laptop.caia.swin.edu.au (216-239-45-4.google.com
	[216.239.45.4]) (authenticated bits=0)
	by lauren.room52.net (8.14.3/8.14.3) with ESMTP id n97M2Q3I064702
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <freebsd-net@freebsd.org>; Thu, 8 Oct 2009 09:02:27 +1100 (EST)
	(envelope-from lstewart@freebsd.org)
Message-ID: <4ACD0FEE.2040902@freebsd.org>
Date: Wed, 07 Oct 2009 15:02:22 -0700
From: Lawrence Stewart <lstewart@freebsd.org>
User-Agent: Thunderbird 2.0.0.23 (X11/20090909)
MIME-Version: 1.0
To: freebsd-net@freebsd.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00,RDNS_DYNAMIC,
	SPF_SOFTFAIL autolearn=disabled version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on lauren.room52.net
Subject: Reproducible if_wpi panic "not enough data, data_len 2 space 1" on
 FreeBSD 9-CURRENT with WPA
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Oct 2009 22:02:35 -0000

Hi All,

I have an Intel 3945ABG in my Toshiba R600 laptop which fairly reliably 
panics a while after I associate it with a WPA AP. It will happily 
associate and pass packets for some time (10's of minutes) and then 
panic. I have managed to trigger it both times I've tried to associate 
with this particular AP (some sort of NetGear 802.11n capable unit).

Plenty of details here:

http://people.freebsd.org/~lstewart/misc/wpi_debug/core.txt
http://people.freebsd.org/~lstewart/misc/wpi_debug/kgdb_output.txt

My /etc/wpa_supplicant.conf:

##########
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel
network={
         ssid="X"
         proto=WPA
         psk="Y"
}
##########


Suggestions most welcome. In particular, the comment above the KASSERT 
that is firing in frame 10 seems to indicate that some prodding at the 
logic in the michael_mic() function may be required.


Cheers,
Lawrence