kern/39613: kernel memory corruption on ppp interface change

[christos%netbsd.org@localhost]

>Number:         39613
>Category:       kern
>Synopsis:       kernel memory corruption on ppp interface change
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Sep 23 15:15:00 +0000 2008
>Originator:     Christos Zoulas
>Release:        NetBSD 4.99.72
>Organization:
        Slackerz'r'us
>Environment:
NetBSD 4.99.72 (SHINY) #4: Sat Aug 23 20:53:03 EEST 2008
        christos%shiny.astron.com@localhost:/usr/src/sys/arch/i386/compile/SHINY
Architecture: i386
Machine: i386
>Description:
[....]
com0 at pcmcia0 function 1: <3Com Corporation, 3C562D/3C563D, EtherLink III, 
LAN+Modem PC Card>
com0: ns16550a, working fifo
nd6_setmtu0: new link MTU on ppp0 (296) is too small for IPv6 which needs 1280
Data modified on freelist: word 0 of object 0xc18b8c00 size 164 previous type 
bar (0xcc41cf40 != 0xdeadbeef)
malloc log entry 40396:
        addr = 0xc18b8c00
        size = 164
        type = routetbl
        action = alloc
        file = ../../../../net/rtsock.c
        line = 673
malloc log entry 40397:
        addr = 0xc18b8c00
        size = 0
        type = routetbl
        action = free
        file = ../../../../net/rtsock.c
        line = 1159
malloc log entry 40436:
        addr = 0xc18b8c00
        size = 164
        type = routetbl
        action = alloc
        file = ../../../../net/rtsock.c
        line = 673
malloc log entry 40437:
        addr = 0xc18b8c00
        size = 0
        type = routetbl
        action = free
        file = ../../../../net/rtsock.c
        line = 1159
malloc log entry 40517:
        addr = 0xc18b8c00
        size = 164
        type = routetbl
        action = alloc
        file = ../../../../net/rtsock.c
        line = 673
malloc log entry 40518:
        addr = 0xc18b8c00
        size = 0
        type = routetbl
        action = free
        file = ../../../../net/rtsock.c
        line = 1159
malloc log entry 40798:
        addr = 0xc18b8c00
        size = 160
        type = routetbl
        action = alloc
        file = ../../../../net/rtsock.c
        line = 246
malloc log entry 40802:
        addr = 0xc18b8c00
        size = 0
        type = routetbl
        action = free
        file = ../../../../net/rtsock.c
        line = 369
>How-To-Repeat:
        configure a ppp interface on com0, cause it to dial, unplug modem 
cable, kill pppd.
>Fix:
        none.