Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 28 Sep 2005 17:51:46 +0200
From:      Andre Oppermann <andre@freebsd.org>
To:        Kris Kennaway <kris@obsecurity.org>
Cc:        SUZUKI Shinsuke <suz@kame.net>, net@FreeBSD.org
Subject:   Re: ipv6 panic in 6.0 ([kris@FreeBSD.org: kern/85780: 'panic:bogus	 refcnt 0' in routing/ipv6])
Message-ID:  <433ABC12.948DA54D@freebsd.org>
References:  <20050927222634.GA46375@xor.obsecurity.org> <x7psqtzyad.wl%suz@alaxala.net> <20050928151319.GA27347@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote:
> 
> On Wed, Sep 28, 2005 at 12:06:18PM +0900, SUZUKI Shinsuke wrote:
> > Hello kris,
> >
> > >>>>> On Tue, 27 Sep 2005 18:26:34 -0400
> > >>>>> kris@obsecurity.org(Kris Kennaway)  said:
> >
> > > Can someone please look into this ipv6 panic?  It is now my #1 panic
> > > on 6.0 (every few days, and I hardly make any use of ipv6 except for
> > > light nfs and tcp traffic), so it would be good to get it fixed before
> > > the release.
> >
> > Let me confirm one thing.
> > Did you also see a message "panic: bogus refcnt 0", in your panic?
> 
> Yes, that's the panic string.
> 
> > As far as I investigated, only IF_CLONE_REMREF_LOCKED() can display
> > this message.  But it's called only in
> > if_clone_create/detach/destory(), and none of them seems to be called
> > according to the description in the PR.  (rtexpunge() in route.c also
> > has this message, but it is commented out by "if 0", so it is not the
> > cause of this message)
> 
> I have a number of (sparc64) cores for this panic if you'd like to see
> them.

This particular panic string is used by RT_REMREF() via RTFREE_LOCKED()
too.  It could be triggered anywhere in the routing/network code.

-- 
Andre



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?433ABC12.948DA54D>