>Number:         35045
>Category:       port-i386
>Synopsis:       Netbsd 4.99.3 panic on ath0 mediaopt change
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-i386-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Nov 13 10:30:00 +0000 2006
>Originator:     veider
>Release:        NetBSD 4.99.3
>Organization:
Darkzone Labs
>Environment:
NetBSD darkzone-mobile 4.99.3 NetBSD 4.99.3 (DARKZONE_MOBILE) #0: Sun Nov 12 22:02:44 MSK 2006  root@darkzone-mobile:/usr/obj/sys/arch/i386/compile/DARKZONE_MOBILE i386
>Description:
When changing mediaopt on ath interface (maybe not only ath) NetBSD 4.99.3 panics:

panic: fixed rate 3 not in rate set
Stopped in pid 1118.1 (ifconfig) ath netbsd:cpu_Debugger 0x4: leave

function stack is as follows:
cpu_Debugger
panic
ath_rate_ctl_reset
ath_newstate
ath_init
ath_media_change
ifmedia_ioctl
ieee80211_ioctl
ath_ioctl
ifioctl
sys_ioctl
syscall_plain
>How-To-Repeat:
# ifconfig ath0 media DS11 mediaopt hostap
# ifconfig ath0 up
# ifconfig ath0 media DS11 mediaopt monitor

panic..
>Fix: