if_re panic?

Hi,

I was trying to get wpi-20071102 to work.  After an unsuccesful try, I decided to switch back
to re0.  After doing

# ifconfig re0 up
# dhclient re0

my laptop (8.0-20071103 i386) paniced.  I've attached a backtrace.

I did play with route(8), but didn't change any routes.

Regards,
Rene
-- 
GPG fingerprint = E738 5471 D185 7013 0EE0  4FC8 3C1D 6F83 12E1 84F6 (subkeys.pgp.net)

"It won't fit on the line."
		-- me, 2001


Script started on Sun Nov  4 12:05:11 2007
root_at_195-241-214-37:/var/crash#kgdb -n 38

[GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".

Unread portion of the kernel message buffer:
<5>re0: link state changed to DOWN
panic: vm_fault: fault on nofault entry, addr: deadc000
cpuid = 0
KDB: stack backtrace:
db_trace_self_wrapper(c0656a4d,e56ed800,c04cfd31,c0672efc,0,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0672efc,0,c066b37c,e56ed80c,0,...) at kdb_backtrace+0x29
panic(c066b37c,deadc000,1,e56ed900,e56ed8f0,...) at panic+0x10f
vm_fault(c1071000,deadc000,1,0,deadc0de,...) at vm_fault+0x175
trap_pfault(5,0,c067463e,e56ed9d8,c78a7000,...) at trap_pfault+0x167
trap(e56eda40) at trap+0x3d6
calltrap() at calltrap+0x6
--- trap 0xc, eip = 0xc055fb65, esp = 0xe56eda80, ebp = 0xe56edae8 ---
rtinit(c641e300,1,1,c04f660b,456bc5b,...) at rtinit+0x32
in_ifinit(0,c641e300,0,0,c065facf,...) at in_ifinit+0x775
in_control(c7708ad4,8040691a,c4e18d80,c4e15000,c4f3c440,...) at in_control+0xaa0
ifioctl(c7708ad4,8040691a,c4e18d80,c4f3c440,c4f3c440,...) at ifioctl+0x314
soo_ioctl(c617c870,8040691a,c4e18d80,c4d12100,c4f3c440,...) at soo_ioctl+0x38e
kern_ioctl(c4f3c440,3,8040691a,c4e18d80,0,...) at kern_ioctl+0x246
ioctl(c4f3c440,e56edcfc,c,c06770ce,c,...) at ioctl+0x11d
syscall(e56edd38) at syscall+0x288
Xint0x80_syscall() at Xint0x80_syscall+0x20
--- syscall (54, FreeBSD ELF32, ioctl), eip = 0x2816431b, esp = 0xbfbfe65c, ebp = 0xbfbfe688 ---
KDB: enter: panic
Physical memory: 2039 MB
Dumping 122 MB: 107 91 75 59 43 27 11

#0  doadump () at pcpu.h:195
195	pcpu.h: No such file or directory.
	in pcpu.h
(kgdb) bt f
#0  doadump () at pcpu.h:195
No locals.
#1  0xc044559b in db_fncall (dummy1=-445720968, dummy2=0, dummy3=70, 
    dummy4=0xe56ed5e4 "4vDÀ") at /usr/src/sys/ddb/db_command.c:486
	fn_addr = -1068698790
	args = {-1066755552, -1066755541, -1069257779, -1066755552, 
  -1066757792, 120, -445720936, -445721140, -1069257008, -445720984}
	nargs = 0
	retval = Variable "retval" is not available.
(kgdb) bt
#0  doadump () at pcpu.h:195
#1  0xc044559b in db_fncall (dummy1=-445720968, dummy2=0, dummy3=70, 
    dummy4=0xe56ed5e4 "4vDÀ") at /usr/src/sys/ddb/db_command.c:486
#2  0xc0445acc in db_command_loop () at /usr/src/sys/ddb/db_command.c:401
#3  0xc0447118 in db_trap (type=3, code=0) at /usr/src/sys/ddb/db_main.c:222
#4  0xc04f5c4e in kdb_trap (type=3, code=0, tf=0xe56ed78c)
    at /usr/src/sys/kern/subr_kdb.c:502
#5  0xc06292fb in trap (frame=0xe56ed78c) at /usr/src/sys/i386/i386/trap.c:621
#6  0xc0610eab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7  0xc04f5da7 in kdb_enter (msg=0xc0653d3f "panic") at cpufunc.h:60
#8  0xc04cfd46 in panic (
    fmt=0xc066b37c "vm_fault: fault on nofault entry, addr: %lx")
    at /usr/src/sys/kern/kern_shutdown.c:547
#9  0xc05e3777 in vm_fault (map=0xc1071000, vaddr=3735928832, fault_type=Variable "fault_type" is not available.
)
    at /usr/src/sys/vm/vm_fault.c:275
#10 0xc0628820 in trap_pfault (frame=0xe56eda40, usermode=0, eva=3735929054)
    at /usr/src/sys/i386/i386/trap.c:774
#11 0xc062917c in trap (frame=0xe56eda40) at /usr/src/sys/i386/i386/trap.c:463
#12 0xc0610eab in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#13 0xc055fb65 in rtinit (ifa=0xc641e300, cmd=1, flags=1)
    at /usr/src/sys/net/route.c:1159
#14 0xc0564bdb in in_ifinit (ifp=Variable "ifp" is not available.
) at /usr/src/sys/netinet/in.c:849
#15 0xc0565af3 in in_control (so=0xc7708ad4, cmd=2151704858, 
    data=0xc4e18d80 "re0", ifp=0xc4e15000, td=0xc4f3c440)
    at /usr/src/sys/netinet/in.c:449
#16 0xc055819f in ifioctl (so=0xc7708ad4, cmd=2151704858, 
    data=0xc4e18d80 "re0", td=0xc4f3c440) at /usr/src/sys/net/if.c:1888
#17 0xc050c39d in soo_ioctl (fp=0xc617c870, cmd=2151704858, data=0xc4e18d80, 
    active_cred=0xc4d12100, td=0xc4f3c440)
    at /usr/src/sys/kern/sys_socket.c:191
#18 0xc0506d63 in kern_ioctl (td=0xc4f3c440, fd=3, com=2151704858, 
    data=0xc4e18d80 "re0") at file.h:266
#19 0xc0506e9b in ioctl (td=0xc4f3c440, uap=0xe56edcfc)
    at /usr/src/sys/kern/sys_generic.c:570
#20 0xc0628b27 in syscall (frame=0xe56edd38)
    at /usr/src/sys/i386/i386/trap.c:1008
#21 0xc0610f10 in Xint0x80_syscall () at /usr/src/sys/i386/i386/exception.s:196
#22 0x00000033 in ?? ()
Previous frame inner to this frame (corrupt stack?)