From owner-freebsd-current@FreeBSD.ORG  Thu Nov 10 10:54:46 2005
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
X-Original-To: freebsd-current@freebsd.org
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E2CC516A41F;
	Thu, 10 Nov 2005 10:54:46 +0000 (GMT)
	(envelope-from snezhko@indorsoft.ru)
Received: from indor.net.tomline.ru (indor.net.tomline.ru [213.183.100.90])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CCFFB43D45;
	Thu, 10 Nov 2005 10:54:44 +0000 (GMT)
	(envelope-from snezhko@indorsoft.ru)
Received: from SNEZHKO by indorsoft.ru (MDaemon.PRO.v7.2.2.R)
	with ESMTP id md50000029061.msg; Thu, 10 Nov 2005 16:54:35 +0600
X-AntiVirus: Checked by Dr.Web [version: 4.32b, engine: 4.32b,
	virus records: 127012, updated:  9.11.2005]
To: bug-followup@freebsd.org
References: <uy83x3hon.fsf@indorsoft.ru>
From: Victor Snezhko <snezhko@indorsoft.ru>
Date: Thu, 10 Nov 2005 16:54:34 +0600
Message-ID: <uslu4ydqt.fsf@indorsoft.ru>
User-Agent: Gnus/5.110002 (No Gnus v0.2) Emacs/21.3 (windows-nt)
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=-=-="
X-Spam-Processed: indor.net.tomline.ru, Thu, 10 Nov 2005 16:54:35 +0600
	(not processed: spam filter disabled)
X-Return-Path: snezhko@indorsoft.ru
X-VVS-Spam: false
Cc: Max, freebsd-current@freebsd.org, Laier <max@love2party.net>
Subject: Re: kern/88725: /usr/sbin/ppp panic with 2005.10.21 netinet6 changes
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 10 Nov 2005 10:54:47 -0000


--=-=-=

Mark Tinguely has found the offending timer.

The following patch fixes the problem for me:


--=-=-=
Content-Type: text/x-patch
Content-Disposition: attachment; filename=mld6.diff

--- mld6.c	Wed Nov  9 08:27:14 2005
***************
*** 640,645 ****
--- 640,649 ----
  		mld6_stop_listening(in6m);
  		ifma->ifma_protospec = NULL;
  		LIST_REMOVE(in6m, in6m_entry);
+ 		if (in6m->in6m_timer != IN6M_TIMER_UNDEF) {
+ 			printf("in6_delmulti: timer 0x%p is still active\n", in6m->in6m_timer_ch);
+ 			mld_stoptimer(in6m);
+ 		}
  		free(in6m->in6m_timer_ch, M_IP6MADDR);
  		free(in6m, M_IP6MADDR);
  	}

--=-=-=


Printf is fired with the patch applied, and panic doesn't occur.

I have tested it on -current cvsupped with date=2005.10.21.16.25.00,
and will test it on the fresh -current (in a day or two - I will need
to recompile everything). The patch should work there
although. According to the cvsweb, mld6.c didn't change.  

-- 
WBR, Victor V. Snezhko
EMail: snezhko@indorsoft.ru

--=-=-=--