ipv6 panic in 6.0 ([kris@FreeBSD.org: kern/85780: 'panic:bogus refcnt 0' in routing/ipv6])

[Andre Oppermann]

Kris Kennaway wrote:
> 
> On Wed, Sep 28, 2005 at 12:06:18PM +0900, SUZUKI Shinsuke wrote:
> > Hello kris,
> >
> > >>>>> On Tue, 27 Sep 2005 18:26:34 -0400
> > >>>>> kris at obsecurity.org(Kris Kennaway)  said:
> >
> > > Can someone please look into this ipv6 panic?  It is now my #1 panic
> > > on 6.0 (every few days, and I hardly make any use of ipv6 except for
> > > light nfs and tcp traffic), so it would be good to get it fixed before
> > > the release.
> >
> > Let me confirm one thing.
> > Did you also see a message "panic: bogus refcnt 0", in your panic?
> 
> Yes, that's the panic string.
> 
> > As far as I investigated, only IF_CLONE_REMREF_LOCKED() can display
> > this message.  But it's called only in
> > if_clone_create/detach/destory(), and none of them seems to be called
> > according to the description in the PR.  (rtexpunge() in route.c also
> > has this message, but it is commented out by "if 0", so it is not the
> > cause of this message)
> 
> I have a number of (sparc64) cores for this panic if you'd like to see
> them.

This particular panic string is used by RT_REMREF() via RTFREE_LOCKED()
too.  It could be triggered anywhere in the routing/network code.

-- 
Andre