From owner-freebsd-net@FreeBSD.ORG Sun Sep 4 17:17:43 2005 Return-Path: X-Original-To: net@FreeBSD.org Delivered-To: freebsd-net@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8F58516A41F; Sun, 4 Sep 2005 17:17:43 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from fileserver.fields.utoronto.ca (fileserver.fields.utoronto.ca [128.100.216.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id DFF5443D46; Sun, 4 Sep 2005 17:17:42 +0000 (GMT) (envelope-from kris@obsecurity.org) Received: from fields.fields.utoronto.ca (fields.localdomain [192.168.216.11]) by fileserver.fields.utoronto.ca (8.12.8/8.12.8/Fields 6.0) with ESMTP id j84HHfvf012961 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sun, 4 Sep 2005 13:17:41 -0400 Received: from obsecurity.dyndns.org (localhost.localdomain [127.0.0.1]) by fields.fields.utoronto.ca (8.12.8/8.12.8/Fields WS 6.0) with ESMTP id j84HHf6P016455; Sun, 4 Sep 2005 13:17:41 -0400 Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 1B698511BF; Sun, 4 Sep 2005 13:17:41 -0400 (EDT) Date: Sun, 4 Sep 2005 13:17:40 -0400 From: Kris Kennaway To: glebius@FreeBSD.org, mlaier@FreeBSD.org, net@FreeBSD.org Message-ID: <20050904171740.GA90260@xor.obsecurity.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="vtzGhvizbBRQ85DL" Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Cc: Subject: 'panic: bogus refcnt 0' from routing/ipv6 code. X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Sep 2005 17:17:43 -0000 --vtzGhvizbBRQ85DL Content-Type: text/plain; charset=us-ascii Content-Disposition: inline I got this on a quad sparc64 machine running 7.0 from a few days ago. Both IPv4 and IPv6 are in use on the machine. I will leave it in DDB for now in case you want something from it, but I should be able to obtain a core. Kris panic: bogus refcnt 0 cpuid = 0 KDB: enter: panic [thread pid 15 tid 100003 ] Stopped at kdb_enter+0x3c: ta %xcc, 1 db> wh Tracing pid 15 tid 100003 td 0xfffff8001fb75680 panic() at panic+0x164 rtfree() at rtfree+0x7c nd6_na_output() at nd6_na_output+0x4d0 nd6_ns_input() at nd6_ns_input+0x704 icmp6_input() at icmp6_input+0xc38 ip6_input() at ip6_input+0xf5c netisr_processqueue() at netisr_processqueue+0x7c swi_net() at swi_net+0xdc ithread_loop() at ithread_loop+0x18c fork_exit() at fork_exit+0x94 fork_trampoline() at fork_trampoline+0x8 db> --vtzGhvizbBRQ85DL Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFDGywzWry0BWjoQKURAk5wAKCGM/2vFZkTL7k6Z9rjOMXc4KeTywCg9vAY /S1uEU0c+EdwkoDdypLCyV8= =FMK0 -----END PGP SIGNATURE----- --vtzGhvizbBRQ85DL--