The KASSERT from r282155 fired; have crash dump. will travel

From /var/crash/core.txt.6:

Thu Apr 30 05:21:22 PDT 2015

FreeBSD  11.0-CURRENT FreeBSD 11.0-CURRENT #47  r282269M/282269:1100071: Thu Apr 30 05:07:08 PDT 2015     root_at_g1-254.catwhisker.org:/common/S3/obj/usr/src/sys/CANARY  amd64

panic: refcount incosistency: found: 0 unr: 0 total: 1
...
Unread portion of the kernel message buffer:
...
Reading symbols from /boot/kernel/if_lagg.ko.symbols...done.
Loaded symbols for /boot/kernel/if_lagg.ko.symbols
#0  doadump (textdump=Unhandled dwarf expression opcode 0x93
) at pcpu.h:219
219     pcpu.h: No such file or directory.
        in pcpu.h
(kgdb) #0  doadump (textdump=Unhandled dwarf expression opcode 0x93
) at pcpu.h:219
#1  0xffffffff80355f9e in db_dump (dummy=<value optimized out>, dummy2=Unhandled dwarf expression opcode 0x93
)
    at /usr/src/sys/ddb/db_command.c:533
#2  0xffffffff80355b17 in db_command (cmd_table=0x0)
    at /usr/src/sys/ddb/db_command.c:440
#3  0xffffffff80355794 in db_command_loop ()
    at /usr/src/sys/ddb/db_command.c:493
#4  0xffffffff80358350 in db_trap (type=<value optimized out>, code=Unhandled dwarf expression opcode 0x93
)
    at /usr/src/sys/ddb/db_main.c:251
#5  0xffffffff8096a1b4 in kdb_trap (type=Unhandled dwarf expression opcode 0x93
) at /usr/src/sys/kern/subr_kdb.c:654
#6  0xffffffff80cd61fe in trap (frame=0xfffffe060cc04220)
    at /usr/src/sys/amd64/amd64/trap.c:540
#7  0xffffffff80cb6702 in calltrap ()
    at /usr/src/sys/amd64/amd64/exception.S:235
#8  0xffffffff8096988e in kdb_enter (why=0xffffffff80f5f68a "panic", 
    msg=0xffffffff80974750 "UH\211åAWAVATSH\203ìPI\211÷A\211þH\213\004%Ðvd\201H\211EØ\201<%x\206d\201") at cpufunc.h:63
#9  0xffffffff8092d949 in vpanic (fmt=<value optimized out>, 
    ap=<value optimized out>) at /usr/src/sys/kern/kern_shutdown.c:739
#10 0xffffffff8092d792 in kassert_panic (fmt=<value optimized out>)
    at /usr/src/sys/kern/kern_shutdown.c:634
#11 0xffffffff80b56c11 in ipfw_rewrite_rule_uidx (chain=0xffffffff817b2be0, 
    ci=0xfffffe060cc04508) at /usr/src/sys/netpfil/ipfw/ip_fw_table.c:3402
#12 0xffffffff80b51613 in commit_rules (chain=0xffffffff817b2be0, 
    rci=0xfffffe060cc04508, count=Unhandled dwarf expression opcode 0x93
)
    at /usr/src/sys/netpfil/ipfw/ip_fw_sockopt.c:675
#13 0xffffffff80b533ed in add_rules (chain=0xffffffff817b2be0, 
    op3=<value optimized out>, sd=<value optimized out>)
    at /usr/src/sys/netpfil/ipfw/ip_fw_sockopt.c:2589
#14 0xffffffff80b4f9bb in ipfw_ctl3 (sopt=0xfffffe060cc04920)
    at /usr/src/sys/netpfil/ipfw/ip_fw_sockopt.c:3189
#15 0xffffffff809be84e in kern_getsockopt (td=0xfffff8000a48b000, 
    s=<value optimized out>, level=<value optimized out>, 
    name=<value optimized out>, val=<value optimized out>, valseg=Unhandled dwarf expression opcode 0x93
)
    at /usr/src/sys/kern/uipc_syscalls.c:1531
#16 0xffffffff809be750 in sys_getsockopt (td=0xfffff8000a48b000, 
    uap=0xfffffe060cc04a40) at /usr/src/sys/kern/uipc_syscalls.c:1477
#17 0xffffffff80cd714c in amd64_syscall (td=0xfffff8000a48b000, traced=0)
    at subr_syscall.c:133
#18 0xffffffff80cb69eb in Xfast_syscall ()
    at /usr/src/sys/amd64/amd64/exception.S:395
#19 0x0000000800b1caaa in ?? ()
Previous frame inner to this frame (corrupt stack?)
Current language:  auto; currently minimal
(kgdb) 
....


I haven't tried i386 yet.  I can make the core.txt.6 file available.

This was on my laptop, where I use ipfw in a "failover" LAGG environment.

Anything else I can provide to help fix this?

Peace,
david
-- 
David H. Wolfskill				david_at_catwhisker.org
Those who murder in the name of God or prophet are blasphemous cowards.

See http://www.catwhisker.org/~david/publickey.gpg for my public key.