[Bug 293548] kernel panic with tun interfaces

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 04 Mar 2026 15:30:53 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293548

Kyle Evans <kevans@freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |glebius@FreeBSD.org

--- Comment #8 from Kyle Evans <kevans@freebsd.org> ---
(In reply to mcurex from comment #4)

I think we're dealing with two separate issues in this PR, and I don't see
offhand how we could have hit this one.

On the other hand, thinking about it: we only destroy the mutex after doing an
if_detach + if_free, but is it the case (CC glebius@) that the ifnet isn't
fully detached until an epoch elapses, so we very well could have some packets
lingering and should defer-reclaim those last bits?

For the other one: I don't really know how ocserv works, but I think I could
see a massive oversight in that one might be able to destroy a tun device
that's not yet fully constructed.

-- 
You are receiving this mail because:
You are on the CC list for the bug.