netdev - Panic in ieee_80211_ibss_add_sta when trying to join ad-hoc network (rt2500pci)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20070515152842.GA26481@charon.n2.diac24.net>
Date:	Tue, 15 May 2007 17:28:42 +0200
From:	David LAMPARTER <lists@...c24.net>
To:	linux-wireless@...r.kernel.org
Cc:	netdev@...r.kernel.org
Subject: Panic in ieee_80211_ibss_add_sta when trying to join ad-hoc network (rt2500pci)

Hello,


while trying to get my wireless to work (a Ralink RT2560, as
sold in a Fujitsu-Siemens Amilo A 1630), I've been hitting the
following Panic twice:

BUG: unable to handle kernel NULL pointer derference at virtual address 00000218
[...]
EIP is at ieee80211_ibss_add_sta+0xae/0x130
[...]
EIP: [<c05773fe>] ieee_80211_ibss_add_sta+0xae/0x130 SS:ESP 0068:f641dc38
Kernel panic - not syncing: Fatal exception in interrupt

The bug seems to be triggered as soon as the stack tries to
join my router's ad-hoc; it happen either directly when
doing "ip l s wlan0 up" as well as when doing
"iwconfig wlan0 essid equinox" (when it did not immediately
find the network).

Kernel version is 2.6.21-ge42d23f4 (git checkout from
git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-dev,
about a few hours old.)

Full information set available at http://celeste.diac24.net/rtpanic/
(includes pictures of the panics, in case I have a typo somewhere)
Requests for more information / patches welcome, but expect delayed
response.

More information attached.


Greetings,

David Lamparter




View attachment "bugtext" of type "text/plain" (2030 bytes)

View attachment "proc_version" of type "text/plain" (107 bytes)

View attachment "lspci" of type "text/plain" (12945 bytes)

Download attachment "proc_config.gz" of type "application/x-gunzip" (12947 bytes)

View attachment "relevant_config" of type "text/plain" (443 bytes)