--- a/sys/netgraph7/socket/ng_socket.c +++ b/sys/netgraph7/socket/ng_socket.c @@ (each of the five bare reads of priv->node / priv->datasock in ngc_send, ngd_send, ngs_connect, ngs_disconnect, ngs_rcvdata) Take priv->mtx around the load, re-check the pointer after acquiring, and drop the mutex before use only with an explicit reference held (mirrors the DF-0537 fix shape for ng_connect_data).