lang: en

FreeBSD lock order reversal (LOR) #219

ID 219
state unknown
responsible
reported first 2007-06-14
reported last 2007-09-08
do you know more? submit update by email
LOR
lock order reversal:
 1st 0xc2e4700c ieee80211com (802.11 com lock) @ sys/net80211/ieee80211_scan.c:523
 2nd 0xc2e48400 iwi0 (network driver) @ sys/modules/iwi/../../dev/iwi/if_iwi.c:1908
		
KDB: stack backtrace:
db_trace_self_wrapper(c0a39fdb,d2ce68f0,c077bb0e,c0a3c481,c2e48400,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0a3c481,c2e48400,c2e360f0,c0cc6a0c,c0cc650a,...) at kdb_backtrace+0x29
witness_checkorder(c2e48400,9,c0cc650a,774,80246,...) at witness_checkorder+0x6de
_mtx_lock_flags(c2e48400,0,c0cc650a,774,c0a55e6d,...) at _mtx_lock_flags+0xbc
iwi_start(c2e38000,cf,c2fb8600,c2e47004) at iwi_start+0xae
if_start(c2e38000,0,c0a4702d,17e,d2ce6a1c,...) at if_start+0x89
ieee80211_send_nulldata(c3396000,38,c0a3bb59,6cc,c2e4700c) at ieee80211_send_nulldata+0x1f4
ieee80211_sta_pwrsave(c2e47004,1,20b,360,c2e3d000,...) at ieee80211_sta_pwrsave+0x212
scan_restart(c2e3d000,c2e47004,c0a47b0e,20b,450,...) at scan_restart+0x96
ieee80211_bg_scan(c2e47004,c2ea3034,8,f5,c0b8e1a0,...) at ieee80211_bg_scan+0x102
ieee80211_recv_mgmt(c2e47004,c2e60e00,c3396000,80,4b,...) at ieee80211_recv_mgmt+0xdaf
ieee80211_input(c2e47004,c2e60e00,c3396000,4b,0,...) at ieee80211_input+0x142b
iwi_intr(c2e47000,0,c0a3421e,471,c2c0a0e4,...) at iwi_intr+0x541
ithread_loop(c2ceb940,d2ce6d38,c0a33f92,316,c2c3c804,...) at ithread_loop+0x1b5
fork_exit(c0729ea0,c2ceb940,d2ce6d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xd2ce6d70, ebp = 0 ---
		
KDB: stack backtrace:
db_trace_self_wrapper(c08f94ff,e25d8a90,c066448e,c08fb8a2,c4271400,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c08fb8a2,c4271400,c3d02950,c426e91b,c426e044,...) at kdb_backtrace+0x29
witness_checkorder(c4271400,9,c426e044,773,c0997fb4,...) at witness_checkorder+0x6de
_mtx_lock_flags(c4271400,0,c426e044,773,e25d8b08,...) at _mtx_lock_flags+0xbc
iwi_start(c3d16800,c42711b4,e25d8bc8,c06ef074,c3d16800,...) at iwi_start+0xae
if_start(c3d16800,0,c09064a9,17e,e25d8bac,...) at if_start+0x59
ieee80211_send_nulldata(c43e0000,38,c08faf85,6ce,c427000c) at ieee80211_send_nulldata+0x1f4
ieee80211_sta_pwrsave(c4270004,1,20b,e25d8c44,c3ff6000,...) at ieee80211_sta_pwrsave+0x201
scan_restart(c3ff6000,c4270004,c0906fd5,20b,c4270004,...) at scan_restart+0x96
ieee80211_bg_scan(c4270004,e25d8c84,c06ebf27,c4270004,e25d8c68,...) at ieee80211_bg_scan+0x10f
ieee80211_scan_timeout(c4270004,e25d8c68,80246,c0993c64,e25d8c84,...) at ieee80211_scan_timeout+0x1c
ieee80211_node_timeout(c4270004,0,c08f7dfb,ef,0,...) at ieee80211_node_timeout+0x17
softclock(0,0,c08f37b3,471,c3af31e4,...) at softclock+0x299
ithread_loop(c3a7ac50,e25d8d38,c08f3533,315,c3ab3558,...) at ithread_loop+0x1b5
fork_exit(c0611de0,c3a7ac50,e25d8d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xe25d8d70, ebp = 0 ---
		
KDB: stack backtrace:
db_trace_self_wrapper(c0a983d7,db8f3a4c,c078409e,c0a9a89e,c3b0a400,...) at db_trace_self_wrapper+0x26
kdb_backtrace(c0a9a89e,c3b0a400,c3b035e0,c0d2bb16,c0d2b50a,...) at kdb_backtrace+0x29
witness_checkorder(c3b0a400,9,c0d2b50a,773,c0740cfd,...) at witness_checkorder+0x6de
_mtx_lock_flags(c3b0a400,0,c0d2b50a,773,c39bcc00,...) at _mtx_lock_flags+0xbc
iwi_start(c3b06400,c3b0a1b4,db8f3b88,c080c764,c3b06400,...) at iwi_start+0xae
if_start(c3b06400,0,c0aa54db,17e,db8f3b6c,...) at if_start+0x59
ieee80211_send_nulldata(c3f2c000,38,c0a99f81,6ce,c3b0900c) at ieee80211_send_nulldata+0x1f4
ieee80211_sta_pwrsave(c3b09004,1,20b,c3d52000,c3a96000,...) at ieee80211_sta_pwrsave+0x212
scan_restart(c3a96000,c3b09004,c0aa5fc4,20b,0,...) at scan_restart+0x96
ieee80211_bg_scan(c3b09004,0,c0aa62fc,434,c39bcc00,...) at ieee80211_bg_scan+0x10f
sta_age(c3a96000,db8f3c84,c08095d7,c3b09004,db8f3c68,...) at sta_age+0x345
ieee80211_scan_timeout(c3b09004,db8f3c68,80246,c0baa0c4,db8f3c84,...) at ieee80211_scan_timeout+0x1c
ieee80211_node_timeout(c3b09004,0,c0a96b33,ef,0,...) at ieee80211_node_timeout+0x17
softclock(0,0,c0a92545,471,c39b7c64,...) at softclock+0x299
ithread_loop(c39ba3c0,db8f3d38,c0a922b9,315,c39bb558,...) at ithread_loop+0x1b5
fork_exit(c07313c0,c39ba3c0,db8f3d38) at fork_exit+0xb8
fork_trampoline() at fork_trampoline+0x8
--- trap 0, eip = 0, esp = 0xdb8f3d70, ebp = 0 ---
		
comments/references