Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Sep 2004 10:40:50 +0000 (UTC)
From:      "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
To:        Marian Cerny <jojo@matfyz.cz>
Cc:        freebsd-current@freebsd.org
Subject:   Re: LOR (re0 and user map) + PANIC
Message-ID:  <Pine.BSF.4.53.0409101040030.51837@e0-0.zab2.int.zabbadoz.net>
In-Reply-To: <20040910102211.GA15808@artax.karlin.mff.cuni.cz>
References:  <20040907163133.GA24426@artax.karlin.mff.cuni.cz> <Pine.BSF.4.53.0409081203020.51837@e0-0.zab2.int.zabbadoz.net> <20040908133452.GA11639@artax.karlin.mff.cuni.cz> <Pine.BSF.4.53.0409081429070.51837@e0-0.zab2.int.zabbadoz.net> <20040910102211.GA15808@artax.karlin.mff.cuni.cz>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 10 Sep 2004, Marian Cerny wrote:

> lock order reversal
>  1st 0xc177b6e8 re0 (network driver) @ /usr/src/sys/dev/re/if_re.c:1752
>  2nd 0xc08adee4 user map (user map) @ /usr/src/sys/vm/vm_map.c:2997
> KDB: stack backtrace:
> kdb_backtrace(0,ffffffff,c08bde68,c08beb88,c084ddac) at kdb_backtrace+0x29
> withness_checkorder(c08adee4,9,c0808137,bb5) at witness_checkorder+0x544
> _sx_xlock(c08adee4,c0808137,bb5) at _sx_xlock+0x50
> _vm_map_lock_read(c08adea0,c0808137,bb5,20000004,c16bae6c) at _vm_map_lock_read+0x37
> vm_map_lookup(ceef9bb8,0,2,ceef9bbc,ceef9bac) at vm_map_lookup+0x28
> vm_fault(c08adea0,0,2,8,c16b5b00) at vm_fault+0x66
> trap_pfault(ceef9c80,0,c) at trap_pgault+0xf2
> trap(18,10,10,0,3b) at trap+0x335
> calltrap() at calltrap+0x5


this first half looks pretty much the same as
http://sources.zabbadoz.net/freebsd/lor.html#031

 1st 0xc08ec200 ifnet (ifnet) @ sys/net/if.c:1489
 2nd 0xc46703c8 user map (user map) @ sys/vm/vm_map.c:2994

> --- trap 0xc, eip = 0xc0575b76, esp = 0xceef9cc0, ebp = 0xceef9cdc ---
> re_rxeof(c177b000) at re_rxeof+0x2ae
> re_intr(c177b000) at re_intr+0xb3
> ithread_loop(c16bf400,ceef9d48,c16bf400,c05ed66c,0) at ithread_loop+0x124
> fork_exit(c05ed66c,c16bf400,ceef9d48) at fork_exit+0xa4
> fork_trampoline() at fork_trampoline+0x8
> --- trap 0x1, eip = 0, esp = exceef9d7c, ebp = 0 ---

-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.53.0409101040030.51837>