panic rtentry / hashdestroy /in6_purgeaddr related?

Hi,

-current at d7fc908cffa as of 2021-01-20-154143.

I've seen several failures to free an rtentry on the console shortly  
before the panic. May or may not be related..._
---snip---
in6_purgeaddr: err=65, destination address delete failed
Freed UMA keg (rtentry) was not empty (1 items).  Lost 1 pages of memory.
j_gallery_hif: link state changed to DOWN
j_gallery_jif: link state changed to DOWN
  samba.leidinger.net
in6_purgeaddr: err=65, destination address delete failed
Freed UMA keg (rtentry) was not empty (1 items).  Lost 1 pages of memory.
j_samba_hif: link state changed to DOWN
j_samba_jif: link state changed to DOWN
---snip---

This is on shutdown with 22 vnet jails:
---snip---
Unread portion of the kernel message buffer:
<6>in6_purgeaddr: err=65, destination address delete failed
panic: hashdestroy: hashtbl 0xfffff80be7108800 not empty (malloc type ifaddr)
cpuid = 14
time = 1611248408
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0064b55b10
vpanic() at vpanic+0x181/frame 0xfffffe0064b55b60
panic() at panic+0x43/frame 0xfffffe0064b55bc0
hashdestroy() at hashdestroy+0x54/frame 0xfffffe0064b55bd0
vnet_destroy() at vnet_destroy+0x146/frame 0xfffffe0064b55c00
prison_deref() at prison_deref+0x28e/frame 0xfffffe0064b55c40
taskqueue_run_locked() at taskqueue_run_locked+0xb0/frame 0xfffffe0064b55cc0
taskqueue_thread_loop() at taskqueue_thread_loop+0x97/frame 0xfffffe0064b55cf0
fork_exit() at fork_exit+0x85/frame 0xfffffe0064b55d30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe0064b55d30
---snip---

Full crashinfo output available on request. Kerneldump is also  
available if you want I peek into it at some specific place.

Bye,
Alexander.

-- 
http://www.Leidinger.net Alexander_at_Leidinger.net: PGP 0x8F31830F9F2772BF
http://www.FreeBSD.org    netchild_at_FreeBSD.org  : PGP 0x8F31830F9F2772BF