DF-3457 fix validation — 2026-09-13 06:26-06:38 UTC

Patched kernel: DragonFly 6.5-DEVELOPMENT #1: Sun Sep 13 06:15:53 UTC 2026
       (X86_64_GENERIC + fix.diff: ifnet_serialize_all()/deserialize_all()
       wrapped around the gif_clone_destroy() softc teardown)
Build: cd /usr/src && make -j6 nativekernel KERNCONF=X86_64_GENERIC
       => BUILD_RC=0 (full log on guest /tmp/kbuild.log)
       make installkernel => IK_RC=0, rebooted into #1.

Rerun of the EXACT PoC (same flood binary, same churn.sh, same gif0
configuration, 6 unprivileged flooders):

  runtime         : 600 s  (baseline panicked at ~75 s)
  churn cycles    : 2860 destroy/recreate cycles completed, clean exit
  guest state     : up for entire run (uptime 12 min at end)
  kernel panics   : 0   (dmesg | grep -ci "fatal trap" => 0)
  flood result    : ok=1390667 EAFNOSUPPORT=0 netdown=0 other=0  (per proc)
                    ok=1270636 EAFNOSUPPORT=0 netdown=0 other=0

BASELINE (unpatched, same setup):
  panic in gif_output+0x128 after ~75 s (panic.txt), control run of
  1.26M packets on a stable gif0 with zero anomalies.

CONCLUSION: fix_status = fixed.  The unserialized teardown identified by
the panic (gif_delete_tunnel NULL/free of gif_psrc vs in-flight
gif_output deref) is excluded by the serializer; no regression observed
(traffic flows normally through gif0 between destroys: 1.3M+ ok sends).