[Bug 236864] sys/netpfil/pf/ioctl/validation:addtables triggered a GPF panic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=236864

--- Comment #2 from Kristof Provost <kp at freebsd.org> ---
It appears to be reproducible by running the pf tests
(/usr/tests/sys/netpfil/pf, not just the ioctl tests) in a loop.

The backtrace suggests this is a generic issue with setting up or tearing down
interfaces rather than something specific to pf though.

This panics in ifunit_ref(), because while we're iterating the list of
interfaces (and have the NET_EPOCH held) we run into a freed interface:

#16 0xffffffff80cdcce1 in ifunit_ref (name=0xfffffe009dfae7e0 "epair0b") at
/usr/src/sys/net/if.c:2422
2422                    if (strncmp(name, ifp->if_xname, IFNAMSIZ) == 0 &&
(kgdb) p name
$1 = 0xfffffe009dfae7e0 "epair0b"
(kgdb) p ifp
$2 = (struct ifnet *) 0xdeadc0dedeadc0de

I'd assume that means some other part of the code has free()d the interface
without going through the appropriate 'wait until the epoch is over' callback.

-- 
You are receiving this mail because:
You are the assignee for the bug.