Customer observed few outages on chassis cluster, It seems that the cluster lost the interfaces for a few seconds.

Oct 2 06:49:44 CHASSISD_IFDEV_DETACH_FPC: ifdev_detach_fpc(0)

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/0 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/1 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/2 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/3 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/4 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/5 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/6 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/7 marked as gone

Oct 2 06:49:44 SCC: ifdev_detach:3652 ifd xe-0/0/8 marked as gone

Oct 2 06:49:44 SCC: fpc detach 0

During the issue state, we could see that the device generated PFE core which in turn caused all the interfaces to bounce and the FPC to reboot causing an outage

Engineering team analyzed the core and it was identified to be a software defect on the Junos code and has been fixed in the Latest Junos version.

Issue was caused due to Sophos anti-virus.

When a file is transferred over http, if the file size is exceeding the limit configured, then file is dropped. 

In a rare situation, AV is calling the memory which was already freed in fallback function and hence causing the core dump on the device.

Issue has been fixed in the below Junos versions and above.

23.4R2-S4, 24.4R1, 24.2R2, 25.1R1

The PR opened to fix the issue:

https://prsearch.juniper.net/problemreport/PR1841398

Workaround:

Disable antivirus from the configuration.

2025-02-07 : Article Created

2025-02-07 : Article published