https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=292547
--- Comment #9 from Andrew Gallatin <[email protected]> --- Created attachment 267259 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=267259&action=edit null out freed mbuf in iflib_txsd_free() Sorry about this.. I did test it a lot and never ran into this bug! What driver are you using? Its not apparent from the stack. Anyway, can you please try the attached diff? When adding the IFLIB_GET_MBUF/FLAGS abstraction, I neglected to NULL out the mbuf in the descriptor ring. I didn't think this should matter, as I thought that the ring was going to be re-alloced. But if I'm wrong, it would explain perfectly what you're seeing. A free, stale mbuf stays in the ring, and chaos ensues. -- You are receiving this mail because: You are the assignee for the bug.
