https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236864
--- Comment #2 from Kristof Provost <[email protected]> --- It appears to be reproducible by running the pf tests (/usr/tests/sys/netpfil/pf, not just the ioctl tests) in a loop. The backtrace suggests this is a generic issue with setting up or tearing down interfaces rather than something specific to pf though. This panics in ifunit_ref(), because while we're iterating the list of interfaces (and have the NET_EPOCH held) we run into a freed interface: #16 0xffffffff80cdcce1 in ifunit_ref (name=0xfffffe009dfae7e0 "epair0b") at /usr/src/sys/net/if.c:2422 2422 if (strncmp(name, ifp->if_xname, IFNAMSIZ) == 0 && (kgdb) p name $1 = 0xfffffe009dfae7e0 "epair0b" (kgdb) p ifp $2 = (struct ifnet *) 0xdeadc0dedeadc0de I'd assume that means some other part of the code has free()d the interface without going through the appropriate 'wait until the epoch is over' callback. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "[email protected]"
