Re: "ro->_ro_rt ==NULL || ro->_ro_rt->rt_refcnt > 0" failed

[Ryota Ozaki <ozaki-r%netbsd.org@localhost>]

On Thu, Sep 3, 2015 at 3:03 PM, Jun Ebihara <jun%soum.co.jp@localhost> wrote:
> From: Ryota Ozaki <ozaki-r%netbsd.org@localhost>
> Subject: Re: "ro->_ro_rt ==NULL || ro->_ro_rt->rt_refcnt > 0" failed
> Date: Wed, 2 Sep 2015 19:06:12 +0900
>
>> I found nd6_lookup is broken. Here is a patch to fix the issue:
>> http://www.netbsd.org/~ozaki-r/fix-ipv6-refcnt.diff
>> It works for me. I hope it works for you too.
>
> with apply this patch: kernel panic on rtfree.
> #0  0xc072ed86 in cpu_reboot ()
> #1  0xc09961b0 in vpanic ()
> #2  0xc099623a in panic ()
> #3  0xc08e3ea8 in rt_assert_inactive ()
> #4  0xc08c995d in rtfree ()
> #5  0xc0781d99 in nd6_output ()
> #6  0xc05ffb6e in ip6_output ()
> #7  0xc09d8606 in tcp_output ()
> #8  0xc09deef3 in tcp_connect_wrapper ()
> #9  0xc0a69a63 in do_sys_connect ()
> #10 0xc0a69b44 in sys_connect ()
> #11 0xc09bc9aa in syscall ()
> #12 0xc01005c6 in Xsyscall ()

Hmm...

>
> I'll re-updating my kernel and try.

The fix is already committed, so you can try it by cvs update.
If the panic still happens, could you please try a kernel with
DEBUG? It will provide a more useful backtrace.

Thanks,
  ozaki-r