Date: Wed, 21 Sep 2005 15:54:25 -0400 From: Mike Tancsa <mike@sentex.net> To: freebsd-current@freebsd.org Subject: Re: LOR on RELENG_6, beta 5 Message-ID: <6.2.3.4.0.20050921150632.05085f50@64.7.153.2> In-Reply-To: <6.2.3.4.0.20050921133312.06993240@64.7.153.2> References: <6.2.3.4.0.20050921131152.035040a0@64.7.153.2> <6.2.3.4.0.20050921133312.06993240@64.7.153.2>
next in thread | previous in thread | raw e-mail | index | archive | help
At 01:45 PM 21/09/2005, Mike Tancsa wrote:
>At 01:15 PM 21/09/2005, Mike Tancsa wrote:
>
>>lock order reversal
>> 1st 0xc295a090 inp (divinp) @ /usr/src/sys/netinet/ip_divert.c:327
>> 2nd 0xc28d9150 ipsec request (ipsec request) @
>> /usr/src/sys/netipsec/ipsec_output.c:354
Just to followup, I think the lockup / race issue seems to be
ipdivert. I took out ipfw and instead used pf and pfnat and I dont
seem to be able to lockup the box... Or at least its much harder to trigger.
I also tried with regular IPSEC instead of FAST_IPSEC (which works),
but that disables debug.mpsafenet by setting it to 0. Also setting
debug.mpsafenet=0 lets the box work just fine without any other changes.
---Mike
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6.2.3.4.0.20050921150632.05085f50>