Panic on use of "deleted" route.

Hi

I was wondering if anyone else is seeing this...

I get a panic shortly after ppp(8) exits.  I haven't been able to
get a crashdump from a recent -CURRENT system, so in that absence,
I'll include output from an older system.  Interestingly, the route
partially persists past the destruction of the interface.  And the
panic is triggered apparently by the use of the route.  I've also
been unable to delete routes added on the system.  We're running a
kernel compiled with options RADIX_MPATH.

[root_at_pbx ~]# pppctl -p pass 3000 quit all
Connection closed
[root_at_pbx ~]# ifconfig tun0
ifconfig: interface tun0 does not exist
[root_at_pbx ~]# netstat -rn
Routing tables

Internet:
Destination        Gateway            Flags    Refs      Use  Netif Expire
default            tun0               US          0        4       


Here's the crash from another system:

KDB: stack backtrace:
#0 0xffffffff8051ed16 at kdb_backtrace+0x66
#1 0xffffffff804e828e at panic+0x1ce
#2 0xffffffff806dcff0 at trap_fatal+0x290
#3 0xffffffff806dd327 at trap_pfault+0x1e7
#4 0xffffffff806dd92e at trap+0x3be
#5 0xffffffff806c792f at calltrap+0x8
#6 0xffffffff805a975c at rn_walktree+0x7c
#7 0xffffffff805b085e at sysctl_rtsock+0x2ee
#8 0xffffffff804f1bd8 at sysctl_root+0x128
#9 0xffffffff804f1eb5 at userland_sysctl+0x145
#10 0xffffffff804f23ea at sys___sysctl+0xaa
#11 0xffffffff806dc910 at amd64_syscall+0x530
#12 0xffffffff806c7c17 at Xfast_syscall+0xf7
Uptime: 2d12h15m1s

#0  doadump (textdump=Variable "textdump" is not available.
) at pcpu.h:229
229     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=Variable "textdump" is not available.
) at pcpu.h:229
#1  0xffffffff804e7d74 in kern_reboot (howto=260)
    at /usr/src.pflock/sys/kern/kern_shutdown.c:449
#2  0xffffffff804e8267 in panic (fmt=0x1 <Address 0x1 out of bounds>)
    at /usr/src.pflock/sys/kern/kern_shutdown.c:637
#3  0xffffffff806dcff0 in trap_fatal (frame=0xc, eva=Variable "eva" is not available.
)
    at /usr/src.pflock/sys/amd64/amd64/trap.c:853
#4  0xffffffff806dd327 in trap_pfault (frame=0xffffff82355bf6b0, usermode=0)
    at /usr/src.pflock/sys/amd64/amd64/trap.c:770
#5  0xffffffff806dd92e in trap (frame=0xffffff82355bf6b0)
    at /usr/src.pflock/sys/amd64/amd64/trap.c:458
#6  0xffffffff806c792f in calltrap ()
    at /usr/src.pflock/sys/amd64/amd64/exception.S:228
#7  0xffffffff805ae525 in sysctl_dumpentry (rn=0xfffffe0007398e10, vw=Variable "vw" is not available.
)
    at /usr/src.pflock/sys/net/rtsock.c:1527
#8  0xffffffff805a975c in rn_walktree (h=Variable "h" is not available.
)
    at /usr/src.pflock/sys/net/radix.c:1112
#9  0xffffffff805b085e in sysctl_rtsock (oidp=Variable "oidp" is not available.
)
    at /usr/src.pflock/sys/net/rtsock.c:1888
#10 0xffffffff804f1bd8 in sysctl_root (oidp=Variable "oidp" is not available.
)
    at /usr/src.pflock/sys/kern/kern_sysctl.c:1513
#11 0xffffffff804f1eb5 in userland_sysctl (td=Variable "td" is not available.
)
    at /usr/src.pflock/sys/kern/kern_sysctl.c:1623
#12 0xffffffff804f23ea in sys___sysctl (td=0xfffffe0007189000, 
    uap=0xffffff82355bfb70) at /usr/src.pflock/sys/kern/kern_sysctl.c:1549
#13 0xffffffff806dc910 in amd64_syscall (td=0xfffffe0007189000, traced=0)
    at subr_syscall.c:135
#14 0xffffffff806c7c17 in Xfast_syscall ()
    at /usr/src.pflock/sys/amd64/amd64/exception.S:387
#15 0x0000000801debc6c in ?? ()
Previous frame inner to this frame (corrupt stack?)
(kgdb) 


-- 
Ian Freislich