From owner-freebsd-bugs@freebsd.org Sat Aug 8 19:09:55 2015 Return-Path: Delivered-To: freebsd-bugs@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id ABBAA9B6596 for ; Sat, 8 Aug 2015 19:09:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2001:1900:2254:206a::16:76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 7EAD717D for ; Sat, 8 Aug 2015 19:09:55 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from bugs.freebsd.org ([127.0.1.118]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id t78J9tak006753 for ; Sat, 8 Aug 2015 19:09:55 GMT (envelope-from bugzilla-noreply@freebsd.org) From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 202178] [pf] pf recursion panic when running ifconfig stf create Date: Sat, 08 Aug 2015 19:09:55 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 10.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: brian.salcedo@hardenedbsd.org X-Bugzilla-Status: New X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: freebsd-bugs@FreeBSD.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 08 Aug 2015 19:09:55 -0000 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=202178 Bug ID: 202178 Summary: [pf] pf recursion panic when running ifconfig stf create Product: Base System Version: 10.1-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: kern Assignee: freebsd-bugs@FreeBSD.org Reporter: brian.salcedo@hardenedbsd.org This was reported for 10.1-RELEASE by ketas @ IRC. I have also confirmed it in HEAD. groupname = all if_addgroup(): groups insert pfi_kif_update(): 0xfffff8000480cb00 pfi_kif_update(): 0xfffff8000480c400 pfi_kif_update(): 0xfffff8000480cb00 groupname = stf if_addgroup(): ifg == NULL if_addgroup(): groups insert pfi_kif_update(): 0xfffff8000480c400 pfi_kif_update(): 0xfffff8000480cb00 pfi_kif_update(): 0xfffff8000480c400 pfi_kif_update(): 0xfffff8000480cb00 pfi_kif_update(): 0xfffff8000480c400 [ ... ] Fatal double fault rip = 0xffffffff809ed9fc rsp = 0xfffffe0238914000 rbp = 0xfffffe0238914020 cpuid = 0; apic id = 00 panic: double fault cpuid = 0 KDB: stack backtrace: [ ... ] pfi_kif_update() at pfi_kif_update+0x29/frame 0xfffffe0238914630 pfi_kif_update() at pfi_kif_update+0x23c/frame 0xfffffe0238914690 pfi_kif_update() at pfi_kif_update+0x23c/frame 0xfffffe02389146f0 pfi_kif_update() at pfi_kif_update+0x23c/frame 0xfffffe0238914750 pfi_kif_update() at pfi_kif_update+0x23c/frame 0xfffffe02389147b0 [ ... more recursion ... ] pfi_change_group_event() at pfi_change_group_event+0x56/frame 0xfffffe02389178f0 if_addgroup() at if_addgroup+0x4ce/frame 0xfffffe0238917950 if_clone_createif() at if_clone_createif+0x1cf/frame 0xfffffe02389179a0 kern_ioctl() at kern_ioctl+0x230/frame 0xfffffe0238917a00 sys_ioctl() at sys_ioctl+0x16a/frame 0xfffffe0238917ae0 amd64_syscall() at amd64_syscall+0x282/frame 0xfffffe0238917bf0 Xfast_syscall() at Xfast_syscall+0xfb/frame 0xfffffe0238917bf0 --- syscall (54, FreeBSD ELF64, sys_ioctl), rip = 0x3c54795a85a, rsp = 0x74f3a9666078, rbp = 0x74f3a96660c0 --- KDB: enter: panic [ thread pid 70905 tid 100584 ] Stopped at kdb_enter+0x3e: movq $0,kdb_why How-To-Repeat: # ifconfig stf create This seems related to #127042. -- You are receiving this mail because: You are the assignee for the bug.