K 10
svn:author
V 2
kp
K 8
svn:date
V 27
2018-07-21T07:50:46.070655Z
K 7
svn:log
V 392
MFC r336273:

pf: Fix panic on vnet jail shutdown with synproxy

When shutting down a vnet jail pf_shutdown() clears the remaining states, which
through pf_clear_states() calls pf_unlink_state().
For synproxy states pf_unlink_state() will send a TCP RST, which eventually
tries to schedule the pf swi in pf_send(). This means we can't remove the
software interrupt until after pf_shutdown().

END