From owner-freebsd-current@FreeBSD.ORG Wed Sep 21 19:54:02 2005 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 18C4E16A41F for ; Wed, 21 Sep 2005 19:54:02 +0000 (GMT) (envelope-from mike@sentex.net) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [64.7.153.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 974B143D45 for ; Wed, 21 Sep 2005 19:54:01 +0000 (GMT) (envelope-from mike@sentex.net) Received: from pumice6.sentex.ca (pumice6.sentex.ca [64.7.153.21]) by smarthost1.sentex.ca (8.13.3/8.13.3) with ESMTP id j8LJs05G083648 for ; Wed, 21 Sep 2005 15:54:00 -0400 (EDT) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by pumice6.sentex.ca (8.13.3/8.13.3) with ESMTP id j8LJs0uW087012 for ; Wed, 21 Sep 2005 15:54:00 -0400 (EDT) (envelope-from mike@sentex.net) Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.13.3/8.13.3) with ESMTP id j8LJrwlb011056 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 21 Sep 2005 15:53:58 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <6.2.3.4.0.20050921150632.05085f50@64.7.153.2> X-Mailer: QUALCOMM Windows Eudora Version 6.2.3.4 Date: Wed, 21 Sep 2005 15:54:25 -0400 To: freebsd-current@freebsd.org From: Mike Tancsa In-Reply-To: <6.2.3.4.0.20050921133312.06993240@64.7.153.2> References: <6.2.3.4.0.20050921131152.035040a0@64.7.153.2> <6.2.3.4.0.20050921133312.06993240@64.7.153.2> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Scanned: by amavisd-new X-Scanned-By: MIMEDefang 2.51 on 64.7.153.18 X-Scanned-By: MIMEDefang 2.51 on 64.7.153.21 Subject: Re: LOR on RELENG_6, beta 5 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Sep 2005 19:54:02 -0000 At 01:45 PM 21/09/2005, Mike Tancsa wrote: >At 01:15 PM 21/09/2005, Mike Tancsa wrote: > >>lock order reversal >> 1st 0xc295a090 inp (divinp) @ /usr/src/sys/netinet/ip_divert.c:327 >> 2nd 0xc28d9150 ipsec request (ipsec request) @ >> /usr/src/sys/netipsec/ipsec_output.c:354 Just to followup, I think the lockup / race issue seems to be ipdivert. I took out ipfw and instead used pf and pfnat and I dont seem to be able to lockup the box... Or at least its much harder to trigger. I also tried with regular IPSEC instead of FAST_IPSEC (which works), but that disables debug.mpsafenet by setting it to 0. Also setting debug.mpsafenet=0 lets the box work just fine without any other changes. ---Mike