[Bug 229331] panic: refcount == 0 in in6m_release_deferred()

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229331

            Bug ID: 229331
           Summary: panic: refcount == 0 in in6m_release_deferred()
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs at FreeBSD.org
          Reporter: markj at FreeBSD.org

I got the following panic shortly after resuming my laptop, when it            
                                                                               
                                              associated with a local wifi
network.  This was on r335190, and I                                           
                                                                               
             haven't seen any relevant-looking commits since then.  I can      
                                                                               
                                        provide more info from the dump if
needed.

(kgdb) bt                                                                      
                                                                               
                                                                 #0 
__curthread () at ./machine/pcpu.h:226                                         
                                                                               
                                                             #1  doadump
(textdump=<optimized out>) at
/usr/home/markj/src/freebsd-dev/sys/kern/kern_shutdown.c:366                   
                                                                               
                       #2  0x0098ec7e in db_dump (dummy=13334586, dummy2=false,
dummy3=-1, dummy4=0x18ebb744 "") at
/usr/home/markj/src/freebsd-dev/sys/ddb/db_command.c:574
#3  0x0098ea57 in db_command (last_cmdp=<optimized out>, cmd_table=<optimized
out>, dopager=<optimized out>) at
/usr/home/markj/src/freebsd-dev/sys/ddb/db_command.c:481
#4  0x0098e7b0 in db_command_loop () at
/usr/home/markj/src/freebsd-dev/sys/ddb/db_command.c:534                       
                                                                               
                         #5  0x009919ed in db_trap (type=3, code=0) at
/usr/home/markj/src/freebsd-dev/sys/ddb/db_main.c:252                           
#6  0x00cb7fee in kdb_trap (type=3, code=0, tf=0x18ebb97c) at
/usr/home/markj/src/freebsd-dev/sys/kern/subr_kdb.c:697                         
#7  0x010261c7 in trap (frame=0x18ebb97c) at
/usr/home/markj/src/freebsd-dev/sys/i386/i386/trap.c:712                        
#8  0xffc0315d in ?? ()                                                         
#9  0x18ebb97c in ??                                                            
#10 0x00c6e594 in vpanic (fmt=0x10f0aeb "refcount == %d inm: %p", ap=0x18ebba30
"") at /usr/home/markj/src/freebsd-dev/sys/kern/kern_shutdown.c:852
#11 0x00c6e3a0 in kassert_panic (fmt=0x10f0aeb "refcount == %d inm: %p") at
/usr/home/markj/src/freebsd-dev/sys/kern/kern_shutdown.c:749                   
                                                                     #12
0x00ea9b3b in in6m_release_deferred (inm=0x198f1080) at
/usr/home/markj/src/freebsd-dev/sys/netinet6/in6_mcast.c:628                   
                                                                               
     #13 0x00eaadc2 in in6_leavegroup_locked (inm=0x198f1080, imf=<optimized
out>) at /usr/home/markj/src/freebsd-dev/sys/netinet6/in6_mcast.c:1394          
#14 0x00eaaf81 in in6_leavegroup (inm=0x198f1080, imf=<optimized out>) at
/usr/home/markj/src/freebsd-dev/sys/netinet6/in6_mcast.c:1326                  
                                                                       #15
0x00eaaf81 in inp_gcmoptions (ctx=0x1ebf80f4)                                   
#16 0x00cb2cfb in epoch_call_task (arg=0x0) at
/usr/home/markj/src/freebsd-dev/sys/kern/subr_epoch.c:616                       
#17 0x00cb6637 in gtaskqueue_run_locked (queue=0x1710c600) at
/usr/home/markj/src/freebsd-dev/sys/kern/subr_gtaskqueue.c:332                  
#18 0x00cb6317 in gtaskqueue_thread_loop (arg=0x17184834) at
/usr/home/markj/src/freebsd-dev/sys/kern/subr_gtaskqueue.c:507                  
#19 0x00c2b17e in fork_exit (callout=0xcb6270 <gtaskqueue_thread_loop>,
arg=0x17184834, frame=0x18ebbba8) at
/usr/home/markj/src/freebsd-dev/sys/kern/kern_fork.c:1039

-- 
You are receiving this mail because:
You are the assignee for the bug.