From owner-freebsd-bugs  Mon Jan 22 13:10:12 1996
Return-Path: owner-bugs
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id NAA13587
          for bugs-outgoing; Mon, 22 Jan 1996 13:10:12 -0800 (PST)
Received: from godzilla.zeta.org.au (godzilla.zeta.org.au [203.2.228.19])
          by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id NAA13521
          for <bugs@freebsd.org>; Mon, 22 Jan 1996 13:09:57 -0800 (PST)
Received: (from bde@localhost) by godzilla.zeta.org.au (8.6.9/8.6.9) id IAA16928; Tue, 23 Jan 1996 08:03:29 +1100
Date: Tue, 23 Jan 1996 08:03:29 +1100
From: Bruce Evans <bde@zeta.org.au>
Message-Id: <199601222103.IAA16928@godzilla.zeta.org.au>
To: bugs@freebsd.org, fortinde@dmr.ca
Subject: Re: 2.0.5 crashes daily: multiple frees is if_ppp.c -> more info
Cc: fortin@acm.org
Sender: owner-bugs@freebsd.org
Precedence: bulk

>panic: free: multiple frees
>#0  boot (arghowto=3D256) at ../../i386/i386/machdep.c:870
>870				dumppcb.pcb_ptd =3D rcr3();
>(kgdb) bt
>#0  boot (arghowto=3D256) at ../../i386/i386/machdep.c:870
>#1  0xf0112843 in panic (fmt=3D0xf010b9b2 "free: multiple frees")
>    at ../../kern/subr_prf.c:128
>#2  0xf010ba93 in free (addr=3D0xf1520180, type=3D1)
>    at ../../kern/kern_malloc.c:337
>#3  0xf013582e in pppstart (tp=3D0xf01c23e4) at ../../net/if_ppp.c:1028
>#4  0xf01a84fc in siopoll () at ../../i386/isa/sio.c:1569
>#5  0xf018e667 in doreti_swi ()
>#6  0xf019688c in cpu_switch ()

Try ORing SWI_NET_MASK into SW_TTY_MASK in <machine/spl.h>.  This is
in -stable but isn't in 2.1 .

Bruce