From owner-freebsd-bugs@FreeBSD.ORG Mon Aug 22 07:10:10 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9AA9516A41F for ; Mon, 22 Aug 2005 07:10:10 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 24A1B43D45 for ; Mon, 22 Aug 2005 07:10:10 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j7M7A9Nk006529 for ; Mon, 22 Aug 2005 07:10:09 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j7M7A91b006528; Mon, 22 Aug 2005 07:10:09 GMT (envelope-from gnats) Resent-Date: Mon, 22 Aug 2005 07:10:09 GMT Resent-Message-Id: <200508220710.j7M7A91b006528@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Alexandr Sulzhenko Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 222A816A41F for ; Mon, 22 Aug 2005 07:06:38 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id DF76243D46 for ; Mon, 22 Aug 2005 07:06:37 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id j7M76bAr053976 for ; Mon, 22 Aug 2005 07:06:37 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id j7M76bio053975; Mon, 22 Aug 2005 07:06:37 GMT (envelope-from nobody) Message-Id: <200508220706.j7M76bio053975@www.freebsd.org> Date: Mon, 22 Aug 2005 07:06:37 GMT From: Alexandr Sulzhenko To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: kern/85202: lock order reversal X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Aug 2005 07:10:10 -0000 >Number: 85202 >Category: kern >Synopsis: lock order reversal >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Aug 22 07:10:09 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Alexandr Sulzhenko >Release: >Organization: Ukr.net >Environment: FreeBSD heaven.ukr.net 6.0-BETA2 FreeBSD 6.0-BETA2 #0: Wed Aug 3 08:22:24 UTC 2005 root@harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386 >Description: taskqueue_drain with the following non-sleepable locks held: exclusive sleep mutex xl0 (network driver) r = 0 (0xc16680a4) locked @ /usr/src/sys/pci/if_xl.c:2796 KDB: stack backtrace: kdb_backtrace(1,c16680c8,c1666000,c1554e00,d0aa1b04) at kdb_backtrace+0x29 witness_warn(5,0,c08593f6,c1666000,c1666000) at witness_warn+0x18e taskqueue_drain(c1554e00,c16680c8,c16680a4,1,c086c796,cc7) at taskqueue_drain+0x1a xl_stop(c1666000,c16680a4,1,c086c796,af9) at xl_stop+0x44 xl_init_locked(c1666000,c16680a4,0,c086c796,aec) at xl_init_locked+0x33 xl_init(c1666000,8020690c,c172b600,c1666000,d0aa1bc0) at xl_init+0x26 ether_ioctl(c1657800,8020690c,c172b600,0,c172b600) at ether_ioctl+0x50 xl_ioctl(c1657800,8020690c,c172b600,1,d42a4356) at xl_ioctl+0x2be in_ifinit(c1657800,c172b600,c16b9850,0,d0aa1c38) at in_ifinit+0x206 in_control(c17b9de8,8040691a,c16b9840,c1657800,c16a5d80) at in_control+0x882 ifioctl(c17b9de8,8040691a,c16b9840,c16a5d80,0) at ifioctl+0x198 soo_ioctl(c1755828,8040691a,c16b9840,c1553a80,c16a5d80) at soo_ioctl+0x2db ioctl(c16a5d80,d0aa1d04,3,3,286) at ioctl+0x370 syscall(3b,3b,3b,8056a20,8058d00) at syscall+0x22f Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (54, FreeBSD ELF32, ioctl), eip = 0x280c6287, esp = 0xbfbfe5ec, ebp = 0xbfbfee38 --- taskqueue_drain with the following non-sleepable locks held: exclusive sleep mutex xl0 (network driver) r = 0 (0xc16680a4) locked @ /usr/src/sys/pci/if_xl.c:2796 KDB: stack backtrace: kdb_backtrace(1,c16680c8,c1666000,c1554e00,d0aa1984) at kdb_backtrace+0x29 witness_warn(5,0,c08593f6,c1666000,c1666000) at witness_warn+0x18e taskqueue_drain(c1554e00,c16680c8,c16680a4,1,c086c796,cc7) at taskqueue_drain+0x1a xl_stop(c1666000,c16680a4,1,c086c796,af9) at xl_stop+0x44 xl_init_locked(c1666000,c16680a4,0,c086c796,aec) at xl_init_locked+0x33 xl_init(c1666000) at xl_init+0x26 ether_ioctl(c1657800,8020690c,c1741a00,0,1) at ether_ioctl+0x64 xl_ioctl(c1657800,8020690c,c1741a00,0,c1741a00) at xl_ioctl+0x2be in6_ifinit(c1657800,c1741a00,d0aa1b9c,1,40) at in6_ifinit+0x90 in6_update_ifa(c1657800,d0aa1b8c,0) at in6_update_ifa+0x456 in6_ifattach_linklocal(c1657800,0) at in6_ifattach_linklocal+0xe5 in6_ifattach(c1657800,0,8040691a,8040691a,0) at in6_ifattach+0xb9 in6_if_up(c1657800) at in6_if_up+0x13 ifioctl(c17b9de8,8040691a,c16b9840,c16a5d80,0) at ifioctl+0x1f8 soo_ioctl(c1755828,8040691a,c16b9840,c1553a80,c16a5d80) at soo_ioctl+0x2db ioctl(c16a5d80,d0aa1d04,3,3,286) at ioctl+0x370 syscall(3b,3b,3b,8056a20,8058d00) at syscall+0x22f Xint0x80_syscall() at Xint0x80_syscall+0x1f --- syscall (54, FreeBSD ELF32, ioctl), eip = 0x280c6287, esp = 0xbfbfe5ec, ebp = 0xbfbfee38 --- lock order reversal 1st 0xc097b240 UMA lock (UMA lock) @ /usr/src/sys/vm/uma_core.c:1494 2nd 0xc1060144 system map (system map) @ /usr/src/sys/vm/vm_kern.c:295 KDB: stack backtrace: kdb_backtrace(0,ffffffff,c0930358,c0930498,c08bace4) at kdb_backtrace+0x29 witness_checkorder(c1060144,9,c087130e,127) at witness_checkorder+0x564 _mtx_lock_flags(c1060144,0,c087130e,127) at _mtx_lock_flags+0x5b _vm_map_lock(c10600c0,c087130e,127) at _vm_map_lock+0x26 kmem_malloc(c10600c0,1000,1,cc9edba4,c077e865) at kmem_malloc+0x32 page_alloc(c104a5a0,1000,cc9edb97,1,c0653450) at page_alloc+0x1a slab_zalloc(c104a5a0,1,1,c170d5c0,c1049214) at slab_zalloc+0xa1 uma_zone_slab(c104a5a0,1,1,c,31fb) at uma_zone_slab+0xe8 uma_zalloc_bucket(c104a5a0,1) at uma_zalloc_bucket+0x12c uma_zalloc_arg(c104a5a0,0,1) at uma_zalloc_arg+0x2dc malloc(200,c08f5480,1,83,c1044460) at malloc+0xae hash_alloc(cc9edc74,c1044468,0,c08705c7,1ab) at hash_alloc+0x29 zone_timeout(c1042b40) at zone_timeout+0x7e zone_foreach(c077e09c,cc9edce8,c063d25f,0,c077e068) at zone_foreach+0x37 uma_timeout(0) at uma_timeout+0x12 softclock(0) at softclock+0x1e7 ithread_loop(c157a980,cc9edd38,c157a980,c061f854,0) at ithread_loop+0x11c fork_exit(c061f854,c157a980,cc9edd38) at fork_exit+0xa0 fork_trampoline() at fork_trampoline+0x8 --- trap 0x1, eip = 0, esp = 0xcc9edd6c, ebp = 0 --- >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: