lang: en

FreeBSD lock order reversal (LOR) #216

ID 216
state unknown
responsible
reported first 2007-06-07
reported last
do you know more? submit update by email
LOR
lock order reversal:
 1st 0xc30630d8 rtentry (rtentry) @ sys/netinet6/nd6.c:1963
 2nd 0xc2ed977c radix node head (radix node head) @ sys/net/route.c:147
		
KDB: stack backtrace
db_trace_self_wrapper(....) at db_trace_self_wrapper+0x26
kdb_backtrace(...) at kbd_backtrace+0x29
witness_checkorder(...) at witness_checkorder+0x6b7
_mtx_lock_flags(...) at _mtx_lock_flags+0xb0
rtalloc1(...) at rtalloc1+0x60
nd6_lookup(...) at nd6_loockup+0x55
nd6_is_addr_neighbor(...) at nd6_is_addr_neighbor+0x37
nd6_output(...) at nd6_output+0x10d
ip6_output(...) at ip6_output+0x108a
tcp_output(...) at tcp_output+0x12b3
tcp_timer(...) at tcp_timer+0x2ad
softclock(...) at softclock+0x293
ithread_loop(...) at ithread_loop+0x1a8
fork_exit(...) at fork_exit+0xed
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xd3c81d70, ebp = 0 ---
		
lock order reversal:
 1st 0xc3e219c0 rtentry (rtentry) @ sys/netinet6/nd6.c:1930
 2nd 0xc3af367c radix node head (radix node head) @ sys/net/route.c:147
		
KDB: stack backtrace:
db_trace_self_wrapper(c08aeec8,e11b8600,c0662a9e,c08b132a,c3af367c,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c08b132a,c3af367c,c08b138b,c08b138b,c08b9a62,...) at kdb_backtrace+0x29
witness_checkorder(c3af367c,9,c08b9a59,93,e11b8624,...) at witness_checkorder+0x6de
_mtx_lock_flags(c3af367c,0,c08b9a59,93,c06614eb,...) at _mtx_lock_flags+0xbc
rtalloc1(e11b86e0,0,0,0,c3df2b9c,...) at rtalloc1+0x63
nd6_lookup(c3df2ba4,0,c386b400,c3e21960,c3e21960,...) at nd6_lookup+0x55
nd6_is_addr_neighbor(c3df2b9c,c386b400,c08c1af0,78a,c09a5c58,...) at nd6_is_addr_neighbor+0x3b
nd6_output(c386b400,c386b400,c3ccd300,c3df2b9c,c3e21960,...) at nd6_output+0x10f
ip6_output(c3ccd300,0,e11b88e0,0,0,...) at ip6_output+0x1081
icmp6_reflect(c3ccd300,28,3b9aca00,1,c095a678,...) at icmp6_reflect+0x42f
icmp6_input(e11b8c88,e11b8c70,3a,1d5,0,...) at icmp6_input+0x6b5
ip6_input(c3be3d00,0,c08b9602,8c,c09a1ba4,...) at ip6_input+0xe36
netisr_processqueue(c0955bb0,0,c08b9602,f6,c3865a40,...) at netisr_processqueue+0x8b
swi_net(0,0,c08a9157,471,c3870364,...) at swi_net+0x9b
ithread_loop(c383ac90,e11b8d38,c08a8edf,305,c3873000,...) at ithread_loop+0x1b5
fork_exit(c060fc00,c383ac90,e11b8d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe11b8d70, ebp = 0 ---
		
comments/references