Panic in pfsync_sendout()

Hey,

I happen to have pfsync in my kernel but I don't use it. I do use pf though.
It panics when my jails are starting.  No idea if it's related or not.

I managed to grab a core with "call doadump()" but I can't open it
with kgdb(1).  I get:
# kgdb /boot/kernel.panic/kernel vmcore.3
[...]
Attempt to extract a component of a value that is not a structure pointer.
Attempt to extract a component of a value that is not a structure pointer.
kgdb: kvm_read: invalid address (0x0)
#0  0x0000000000000000 in ?? ()


"bt" doesn't work, "info threads" yields hundreds of:
* 51 Thread 0 (PID=0: /zil_clean)  0x0000000000000000 in ?? ()


Why is that?  This should work since How can I get a proper one?

DDB spit the following stacktrace (this is amd64):

Fatal trap 9: general protection fault while in kernel mode
[...]
pfsync_sendout() at pfsync_sendout+0x1d0
pfsyncintr() at pfsyncintr+0x42
intr_event_execute_handlers()
ithread_loop()


-- 
Jeremie Le Hen
jlh_at_FreeBSD.org