Date: Thu, 25 May 2006 21:00:34 +0400 From: sekes <gexlie@gmail.com> To: "Christian S.J. Peron" <csjp@freebsd.org> Cc: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>, freebsd-current@freebsd.org Subject: Re: deadlock every 15-20 min Message-ID: <53cc795f0605251000w7aa13370mcfbf6f8e4f259f6d@mail.gmail.com> In-Reply-To: <44674BDA.7040300@FreeBSD.org> References: <53cc795f0605131026n2d9a5776jd75630e3f9505e55@mail.gmail.com> <53cc795f0605131345t718d0ad7ia7792f2ed4446037@mail.gmail.com> <20060514062825.W54242@maildrop.int.zabbadoz.net> <53cc795f0605140348u769b6b0bkc62d28652b6b3ec3@mail.gmail.com> <44674BDA.7040300@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
today after several weeks i upgraded the box and that's my results: in /boot/loader.conf: debug.mpsafenet=3D0 geom_eli_load=3D"YES" dummynet_load=3D"YES" ipdivert_load=3D"YES" uname -a FreeBSD xnet.nnov.ru 7.0-CURRENT FreeBSD 7.0-CURRENT #1: Thu May 25 09:30:5= 5 MSD 2006 root@xnet.nnov.ru:/usr/obj/usr/src/sys/GENERIC i386 during the boot everything is fine. but when i type `ppp -ddial myprovider` i'm getting this: WARNING: attempt to net_add_domain(netgraph) after domainfinalize() panic: mutex Giant not owned at /usr/src/sys/net/if.c:2209 cpuid =3D 0 KDB: enter: panic [ thread pid 12 tid 10004 ] Stopped at kdb_enter+0x2b: nop after this crash i have unload all of the firewall modules as ipfw.ko, ipdivert.ko, dummynet.ko but nothing changed. On 5/14/06, Christian S.J. Peron <csjp@freebsd.org> wrote: > > > > This is very similar to the UID/GID filtering problem. What appears to > be happening is on the inbound path, we pickup the pfil lock and attempt > to pickup the inp info lock, while on the outbound path, we hold the inp > info lock across ip_output which will try to pickup the pfil lock. > > This problem is the result of a layering violation, in reality the > firewall should not be picking up layer 4 related locks. Myself and a > few others have been discussing this problem for quite some time now, > and hopefully it won't be long before we can come up with a solution > that will make everyone happy. > > For now, you should be able to set debug.mpsafenet to 0 which will > re-enable Giant in the network stack, in theory preventing the deadlock. > > debug.mpsafenet=3D0 > > in your loader.conf > > Let me know if this helps > > > sekes wrote: > > On 5/14/06, Bjoern A. Zeeb <bzeeb-lists@lists.zabbadoz.net> wrote: > >> > >> On Sun, 14 May 2006, sekes wrote: > >> > >> > lock order reversal: > >> > 1st 0xc2b8b090 inp (divinp) @ > >> > /usr/src/sys/modules/ipdivert/../../netinet/ip_divert.c:336 > >> > 2nd 0xc0a44db8 PFil hook read/write mutex (PFil hook read/write > >> mutex) @ > >> > /usr/src/sys/net/pfil.c:73 > >> > >> looks almost the same as LOR #181: > >> http://sources.zabbadoz.net/freebsd/lor.html#181 > >> but without the div_output(). > >> > >> -- > >> Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT > >> > > > > yes, it is similar to my situation. may i know when it could be fixed? > > _______________________________________________ > > freebsd-current@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-current > > To unsubscribe, send any mail to > > "freebsd-current-unsubscribe@freebsd.org" > > > > > -- > Christian S.J. Peron > csjp@FreeBSD.ORG > FreeBSD Committer > FreeBSD Security Team > >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53cc795f0605251000w7aa13370mcfbf6f8e4f259f6d>