[Bug 285813] Panic (NULL deref) in arptimer

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 02 Apr 2025 16:21:38 UTC 
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=285813

--- Comment #8 from Mark Johnston <markj@FreeBSD.org> ---
I stared for a little while at lle_timer management on stable/14 and don't
really see any problems.  The callout is supposed to hold a ref on the LLE, and
llentry_free() stops the callout.  The (dynamic) entry state is
ARP_LLINFO_REACHABLE.  I guess there is a narrow race condition somewhere, but
I don't see it.

Has the panic happened just once?  Did anything in particular appear to trigger
it?

-- 
You are receiving this mail because:
You are the assignee for the bug.