ok, so i'm not *entirely* sure it's with pppoe(4), but as far as i can put bits and pieces together, it's always happening after "ifconfig pppoe0 down; ifconfig pppoe0 destroy" and then either "sh /etc/netstart pppoe0" or (the second case) starting ppp(8).
box has 4 interfaces, one of them (vr0) is unused. fxp0 is plain ethernet, there's a plain old pppoe(8)/ppp(8) driving fxp1 (these are the ppp/pppoe processes that can be seen in the process list), and rl0 is driven by pppoe(4). i'm switching back and forth between pppoe(4) and pppoe/ppp on this one, panic always seems to occur a couple of seconds after the last command (see above) is given. it doesn't happen absolutely all the time, but it does happen quite regularly every other day or so. thanks for any ideas. login: pppoe0: LCP keepalive timeoutmultiply freed item 0xd0c62480 panic: free: duplicated free Stopped at Debugger+0x4: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb> ps PID PPID PGRP UID S FLAGS WAIT COMMAND 32587 5086 5086 0 3 0x86 netio tcpdump 5086 7823 5086 76 3 0x4186 bpf tcpdump 13042 28245 13042 0 3 0x4086 ttyin ksh 28245 5850 28245 0 3 0x4184 select sshd 7823 24482 7823 0 3 0x4086 pause ksh 24482 5850 24482 0 3 0x4184 select sshd 13534 1 13534 0 3 0x4086 ttyin getty 29162 1 29162 0 3 0x4086 ttyin getty 27900 1 27900 0 3 0x4086 ttyin getty 5419 1 5419 0 3 0x4086 ttyin getty 22220 1 22220 0 3 0x4086 ttyin getty 26509 1 26509 0 3 0x4086 ttyin ksh 30944 1 30944 0 3 0x84 select cron 9208 17357 17357 62 3 0x184 piperd spamd 15575 17357 17357 62 3 0x184 select spamd 17357 1 17357 62 3 0x184 nanosleep spamd 5850 1 5850 0 3 0x84 select sshd 12694 23856 23856 83 3 0x184 poll ntpd 23856 1 23856 0 3 0x84 poll ntpd *32613 17223 17223 68 7 0x104 isakmpd 17223 1 17223 0 3 0x84 netio isakmpd 3938 23555 23555 70 3 0x184 select named 23555 1 23555 0 3 0x184 netio named 14867 15702 15702 73 2 0x184 syslogd 15702 1 15702 0 3 0x8c netio syslogd 2944 1 5430 82 3 0x4184 select pppoe 5430 1 5430 0 3 0x40184 select ppp 12 0 0 0 3 0x100204 crypto_wa crypto 11 0 0 0 3 0x100204 aiodoned aiodoned 10 0 0 0 3 0x100204 syncer update 9 0 0 0 3 0x100204 cleaner cleaner 8 0 0 0 3 0x100204 reaper reaper 7 0 0 0 3 0x100204 pgdaemon pagedaemon 6 0 0 0 3 0x100204 pftm pfpurge 5 0 0 0 3 0x100204 wait wskbd_hotkey 4 0 0 0 3 0x100204 usbtsk usbtask 3 0 0 0 3 0x100204 usbevt usb0 2 0 0 0 3 0x100204 kmalloc kmthread 1 0 1 0 3 0x4084 wait init 0 -1 0 0 3 0x80204 scheduler swapper ddb> trace Debugger(d0716a84,d0cc0800,daf08c60,d0c62480,9) at Debugger+0x4 panic(d065e4d1,d0c62480,46045c3d,0,db0f9300) at panic+0x63 free(d0c62480,9,14,d0cc0800) at free+0x40 ifafree(d0c62480,daf08e3c,daf08d30,d3c84a6c) at ifafree+0x27 rtfree(d3ca843c,0,daf08d30,d039b67e) at rtfree+0x8d in_selectsrc(d3cd3014,d3c84a6c,200,0,daf08d40,813e46c3,0,daf08e08) at in_select src+0x135 in_pcbconnect(d3c84a24,d3cd3000,daf08d80,0) at in_pcbconnect+0x137 udp_output(d3d09e00,d3c84a24,d3cd3000,0,0) at udp_output+0xa8 sosend(d3c838cc,d3cd3000,daf08e38,d3d09e00,0,0,10,3) at sosend+0x389 sendit(d3d5ae14,1c,daf08ed8,0,daf08f58) at sendit+0x157 sys_sendmsg(d3d5ae14,daf08f68,daf08f58,87a59380,daf08f58) at sys_sendmsg+0x79 syscall() at syscall+0x2ea --- syscall (number 28) --- 0x1c097411: ddb> ================== login: multiply freed item 0xd0c00600 panic: free: duplicated free Stopped at Debugger+0x4: leave RUN AT LEAST 'trace' AND 'ps' AND INCLUDE OUTPUT WHEN REPORTING THIS PANIC! DO NOT EVEN BOTHER REPORTING THIS WITHOUT INCLUDING THAT INFORMATION! ddb> trace Debugger(d0716a84,d076e4e0,d089eca4,d0c00600,9) at Debugger+0x4 panic(d065e4d1,d0c00600,d089ed14,d038876e,2) at panic+0x63 free(d0c00600,9,0,0) at free+0x40 ifafree(d0c00600,d089ed7c,d089ed84,d039b1e4) at ifafree+0x27 rtfree(d3cb42f8,0,0,5) at rtfree+0x8d in_losing(d3c036c8,1900,d089edc4,d032f91a,d0716968) at in_losing+0x62 tcp_timer_rexmt(dafd6644,d0b1b780,d0b1b280,0,0) at tcp_timer_rexmt+0x25b softclock(d0b50058,d0b10010,10,d0890010,d089d000) at softclock+0x22c Bad frame pointer: 0xd089ee24 ddb> ps PID PPID PGRP UID S FLAGS WAIT COMMAND 21712 1 21712 0 3 0x40184 select ppp 22904 10525 22904 0 3 0x4086 ttyin ksh 10525 14910 10525 0 3 0x4184 select sshd 8675 6188 8675 0 3 0x4086 ttyin ksh 6188 14910 6188 0 3 0x4184 select sshd 23975 1 23975 0 3 0x4086 ttyin getty 28257 1 28257 0 3 0x4086 ttyin getty 29830 1 29830 0 3 0x4086 ttyin getty 20291 1 20291 0 3 0x4086 ttyin getty 29527 1 29527 0 3 0x4086 ttyin getty 7717 1 7717 0 3 0x4086 ttyin getty 11186 1 11186 0 3 0x84 select cron 17468 9293 9293 62 3 0x184 piperd spamd 8276 9293 9293 62 3 0x184 select spamd 9293 1 9293 62 3 0x184 nanosleep spamd 14910 1 14910 0 3 0x84 select sshd 27450 25534 25534 83 3 0x184 poll ntpd 25534 1 25534 0 3 0x84 poll ntpd 15852 9096 9096 68 3 0x184 select isakmpd 9096 1 9096 0 3 0x84 netio isakmpd 7854 9275 9275 70 3 0x184 select named 9275 1 9275 0 3 0x184 netio named 8540 17540 17540 73 2 0x184 syslogd 17540 1 17540 0 3 0x8c netio syslogd 10902 1 6012 82 3 0x4184 select pppoe 6012 1 6012 0 3 0x40184 select ppp 12 0 0 0 3 0x100204 crypto_wa crypto 11 0 0 0 3 0x100204 aiodoned aiodoned 10 0 0 0 3 0x100204 syncer update 9 0 0 0 3 0x100204 cleaner cleaner 8 0 0 0 3 0x100204 reaper reaper 7 0 0 0 3 0x100204 pgdaemon pagedaemon 6 0 0 0 3 0x100204 pftm pfpurge 5 0 0 0 3 0x100204 wait wskbd_hotkey 4 0 0 0 3 0x100204 usbtsk usbtask 3 0 0 0 3 0x100204 usbevt usb0 2 0 0 0 3 0x100204 kmalloc kmthread 1 0 1 0 3 0x4084 wait init 0 -1 0 0 3 0x80204 scheduler swapper ddb> ================== OpenBSD 4.0-stable (GENERIC) #1: Wed Mar 21 00:29:33 CET 2007 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III ("GenuineIntel" 686-class) 864 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 132608000 (129500K) avail mem = 113553408 (110892K) using 1644 buffers containing 6733824 bytes (6576K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(eb) BIOS, date 04/05/01, BIOS32 rev. 0 @ 0xe7300, SMBIOS rev. 2.3 @ 0xf80d8 (47 entries) bios0: Compaq Deskpro pcibios0 at bios0: rev 2.1 @ 0xe7300/0x8d00 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfae20/208 (11 entries) pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82801BA LPC" rev 0x00) pcibios0: PCI bus #2 is the last bus bios0: ROM list: 0xc0000/0xa000 0xca000/0x1800 0xcb800/0xd800! 0xe0000/0x10000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 "Intel 82815 Hub" rev 0x02 vga1 at pci0 dev 2 function 0 "Intel 82815 Graphics" rev 0x02: aperture at 0x44000000, size 0x4000000 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ppb0 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0x01 pci1 at ppb0 bus 2 vr0 at pci1 dev 4 function 0 "VIA VT6105 RhineIII" rev 0x8b: irq 5, address 00:02:44:89:8e:6e ukphy0 at vr0 phy 1: Generic IEEE 802.3u media interface, rev. 9: OUI 0x004063, model 0x0034 fxp0 at pci1 dev 8 function 0 "Intel 82562" rev 0x01, i82562: irq 10, address 00:02:a5:94:ce:7e inphy0 at fxp0 phy 1: i82562EM 10/100 PHY, rev. 0 fxp1 at pci1 dev 9 function 0 "Intel 8255x" rev 0x0c, i82550: irq 11, address 00:02:b3:5d:a4:3e inphy1 at fxp1 phy 1: i82555 10/100 PHY, rev. 4 rl0 at pci1 dev 10 function 0 "Realtek 8139" rev 0x10: irq 5, address 00:48:54:6f:0c:df rlphy0 at rl0 phy 0: RTL internal PHY ichpcib0 at pci0 dev 31 function 0 "Intel 82801BA LPC" rev 0x01 pciide0 at pci0 dev 31 function 1 "Intel 82801BA IDE" rev 0x01: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: <Maxtor 2F040L0> wd0: 16-sector PIO, LBA, 39205MB, 80293248 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: <COMPAQ, CD-ROM LTN485, KQA4> SCSI0 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, DMA mode 2 uhci0 at pci0 dev 31 function 4 "Intel 82801BA USB" rev 0x01: irq 11 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered auich0 at pci0 dev 31 function 5 "Intel 82801BA AC97" rev 0x01: irq 10, ICH2 AC97 ac97: codec id 0x41445360 (Analog Devices AD1885) ac97: codec features headphone, Analog Devices Phat Stereo audio0 at auich0 isa0 at ichpcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pmsi0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pmsi0 mux 0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: <PC speaker> spkr0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom0: console pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo biomask eb45 netmask ef65 ttymask ffe7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matches BIOS drive 0x80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 WARNING: / was not properly unmounted -- [-] mkdir /nonexistent