lang: en

FreeBSD lock order reversal (LOR) #28

ID 28
state unknown
responsible
reported first
reported last
do you know more? submit update by email
LOR
lock order reversal
1st 0xc6c237b8 vm object (vm object) @ vm/vm_object.c:512
2nd 0xc0c2f110 system map (system map) @ vm/vm_kern.c:325
		
Stack backtrace:
backtrace(c050a900,c0c2f110,c051cb66,c051cb66,c051ca0e) at backtrace+0x17
witness_lock(c0c2f110,8,c051ca0e,145,1) at witness_lock+0x697
_mtx_lock_flags(c0c2f110,0,c051ca05,145,3) at _mtx_lock_flags+0xb1
_vm_map_lock(c0c2f0b0,c051ca05,145,f1f70ab8,c0321784) at _vm_map_lock+0x36
kmem_malloc(c0c2f0b0,1000,101,f1f70b24,c046bbc0) at kmem_malloc+0x66
page_alloc(c0c3a240,1000,f1f70b17,101,c055de2c) at page_alloc+0x27
slab_zalloc(c0c3a240,101,c051e3a3,66f,c0c3a924) at slab_zalloc+0x150
uma_zone_slab(c0c3a240,101,c051e39a,66f,0) at uma_zone_slab+0xd8
uma_zalloc_internal(c0c3a240,0,101,6ef,0) at uma_zalloc_internal+0x55
uma_zfree_arg(c0c3a900,c6c60900,0,f1f70bcc,c0453a08) at uma_zfree_arg+0x2cb
dev_pager_putfake(c6c60900,0,c051c24c,bc,c6c237b8) at dev_pager_putfake+0x3a
dev_pager_dealloc(c6c237b8,1,c051e2a9,10b,0) at dev_pager_dealloc+0xc8
vm_pager_deallocate(c6c237b8,0,c051d497,25e,c05aae68) at vm_pager_deallocate+0x3d
vm_object_terminate(c6c237b8,0,c051d497,200,c6bd71e0) at vm_object_terminate+0x1f4
vm_object_deallocate(c6c237b8,c6bd71e0,c6c237b8,c6bd71e0,f1f70c9c) at vm_object_deallocate+0x217
vm_map_entry_delete(c25d5800,c6bd71e0,c051cbd4,86e,c050624e) at vm_map_entry_delete+0x3b
vm_map_delete(c25d5800,286f5000,306f5000,8000000,286f5000) at vm_map_delete+0x453
vm_map_remove(c25d5800,286f5000,306f5000,0,c6b8d608) at vm_map_remove+0x58
munmap(c65d5980,f1f70d10,c0522492,3fb,2) at munmap+0x9e
syscall(2f,2f,bfbf002f,850d280,8227ce0) at syscall+0x26e
Xint0x80_syscall() at Xint0x80_syscall+0x1d
--- syscall (73), eip = 0x2824e153, esp = 0xbfbff77c, ebp = 0xbfbff798 ---
		
comments/references