[Bug 297220] infinite recursion in pfi_kkif_update()

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D297220

            Bug ID: 297220
           Summary: infinite recursion in pfi_kkif_update()
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: [email protected]
          Reporter: [email protected]

This command sequence causes infinite recursion in pfi_kkif_update(),
so it runs out of stack:

# kldload if_wg
# kldload pf
# ifconfig wg0 create
# ifconfig wg0 name wg
Fatal double fault
rip 0xffffffff82e6a2b6 rsp 0xfffffe00d71aefe0 rbp 0xfffffe00d71af030
rax 0x1f91c764d934a9f6 rdx 0 rbx 0xfffff80019d23900
rcx 0xfffff800191e7100 rsi 0xffffffff8220bf80 rdi 0xfffff800191e7100
r8 0xfffff800556cd5c8 r9 0x1a10010 r10 0
r11 0x1 r12 0xffffffff81b99828 r13 0xffffffff81b99828
r14 0 r15 0xfffff8000f289000 rflags 0x10282
cs 0x20 ss 0x28 ds 0x3b es 0x3b fs 0x13 gs 0x1b
fsbase 0x397eefe143b0 gsbase 0xffffffff82a11000 kgsbase 0
cpuid =3D 1; apic id =3D 01
panic: double fault
cpuid =3D 1
time =3D 1785578874
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x36/frame 0xfffffe001c472=
cd0
vpanic() at vpanic+0x149/frame 0xfffffe001c472e00
panic() at panic+0x43/frame 0xfffffe001c472e60
cpu_fetch_syscall_args() at cpu_fetch_syscall_args/frame 0xfffffe001c472f20
Xdblfault() at Xdblfault+0xd7/frame 0xfffffe001c472f20
--- trap 0x17, rip =3D 0xffffffff82e6a2b6, rsp =3D 0xfffffe00d71aefe0, rbp =
=3D
0xfffffe00d71af030 ---
pfi_kkif_update() at pfi_kkif_update+0x26/frame 0xfffffe00d71af030
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71af090
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71af0f0
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71af150
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71af1b0
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71af210
...
pfi_kkif_update() at pfi_kkif_update+0x2ba/frame 0xfffffe00d71b29f0
pfi_attach_ifnet_event() at pfi_attach_ifnet_event+0x91/frame
0xfffffe00d71b2a50
if_rename() at if_rename+0x203/frame 0xfffffe00d71b2ad0
ifhwioctl() at ifhwioctl+0xc57/frame 0xfffffe00d71b2bc0
ifioctl() at ifioctl+0x702/frame 0xfffffe00d71b2cc0
kern_ioctl() at kern_ioctl+0x2bd/frame 0xfffffe00d71b2d30
sys_ioctl() at sys_ioctl+0x12f/frame 0xfffffe00d71b2df0
amd64_syscall() at amd64_syscall+0x17c/frame 0xfffffe00d71b2f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00d71b2f30
--- syscall (54, FreeBSD ELF64, ioctl), rip =3D 0xff79713d48a, rsp =3D
0xff790379a78, rbp =3D 0xff790379ad0 ---

--=20
You are receiving this mail because:
You are the assignee for the bug.=