From owner-freebsd-stable@FreeBSD.ORG  Wed Oct 11 16:30:25 2006
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
X-Original-To: freebsd-stable@freebsd.org
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5116716A5EB
	for <freebsd-stable@freebsd.org>; Wed, 11 Oct 2006 16:30:25 +0000 (UTC)
	(envelope-from amon@sockar.homeip.net)
Received: from mallaury.nerim.net (smtp-103-wednesday.noc.nerim.net
	[62.4.17.103]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3446A43E3E
	for <freebsd-stable@freebsd.org>; Wed, 11 Oct 2006 16:28:57 +0000 (GMT)
	(envelope-from amon@sockar.homeip.net)
Received: from sockar.homeip.net (tourist.net8.nerim.net [213.41.176.3])
	by mallaury.nerim.net (Postfix) with ESMTP id A8CD04F3D4
	for <freebsd-stable@freebsd.org>; Wed, 11 Oct 2006 18:28:46 +0200 (CEST)
Received: from ra.aabs (localhost [127.0.0.1])
	by sockar.homeip.net (8.13.4/8.13.4) with ESMTP id k9BGRXN3089039
	for <freebsd-stable@freebsd.org>; Wed, 11 Oct 2006 18:27:33 +0200 (CEST)
	(envelope-from amon@ra.aabs)
Received: (from amon@localhost)
	by ra.aabs (8.13.4/8.13.4/Submit) id k9BGRXmh089038
	for freebsd-stable@freebsd.org; Wed, 11 Oct 2006 18:27:33 +0200 (CEST)
	(envelope-from amon)
Date: Wed, 11 Oct 2006 18:27:33 +0200
From: Herve Boulouis <amon@sockar.homeip.net>
To: freebsd-stable@freebsd.org
Message-ID: <20061011162733.GO46550@ra.aabs>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: 6.2 prerelease: panic in ipv6 stack
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Oct 2006 16:30:25 -0000

Hi,

I got the following panic on a i386 6.2-PRELEASE system :

panic: bogus refcnt 0
Uptime: 1d14h3m32s
Dumping 511 MB (2 chunks)
  chunk 0: 1MB (160 pages) ... ok
  chunk 1: 511MB (130800 pages) 495 479 463 447 431 415 399 383 367 351 335 319 303 287 271 255 239 223 207 191 175 159 143 127 111 95 79 63 47 31 15

backtrace :

(kgdb) bt
#0  0xc05e069c in doadump ()
#1  0xc05e0c12 in boot ()
#2  0xc05e0f4d in panic ()
#3  0xc067079c in rtfree ()
#4  0xc06b7247 in nd6_na_output ()
#5  0xc06b5f93 in nd6_ns_input ()
#6  0xc069a788 in icmp6_input ()
#7  0xc06a99bb in ip6_input ()
#8  0xc066c13e in netisr_processqueue ()
#9  0xc066c353 in swi_net ()
#10 0xc05c8e18 in ithread_execute_handlers ()
#11 0xc05c8f93 in ithread_loop ()
#12 0xc05c7b61 in fork_exit ()

after doing a bit of google, the panic seems to be the same than in PR 85780.

kernel config and vmcore available on request.

-- 
Herve Boulouis