Bug 138332 - [tun] [lor] ifconfig tun0 destroy causes LOR if_adata/mld_mtx on 8.0-BETA3
Summary: [tun] [lor] ifconfig tun0 destroy causes LOR if_adata/mld_mtx on 8.0-BETA3
Status: Closed Overcome By Events
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 8.0-BETA3
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-08-30 10:00 UTC by richard
Modified: 2024-11-17 03:45 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description richard 2009-08-30 10:00:08 UTC
Issuing ifconfig tun0 destroy after stopping PPP causes a lock order reversal as follows:

tun0: link state changed to DOWN
lock order reversal:
 1st 0xffffff00037b4bc8 if_afdata (if_afdata) @ /usr/src/sys/net/if.c:912
 2nd 0xffffffff80a42200 mld_mtx (mld_mtx) @ /usr/src/sys/netinet6/mld6.c:569
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2a
_witness_debugger() at _witness_debugger+0x2e
witness_checkorder() at witness_checkorder+0x80b
_mtx_lock_flags() at _mtx_lock_flags+0x71
mld_domifdetach() at mld_domifdetach+0x24
in6_domifdetach() at in6_domifdetach+0x11
if_detach() at if_detach+0x792
tun_destroy() at tun_destroy+0x70
ifc_simple_destroy() at ifc_simple_destroy+0x2a
if_clone_destroyif() at if_clone_destroyif+0xc0
ifioctl() at ifioctl+0x6f4
kern_ioctl() at kern_ioctl+0xc3
ioctl() at ioctl+0xfc
syscall() at syscall+0x1b2
Xfast_syscall() at Xfast_syscall+0xe1
--- syscall (54, FreeBSD ELF64, ioctl), rip = 0x800a7bbbc, rsp = 0x7fffffffe238, rbp = 0x51cf28 ---

How-To-Repeat: /etc/rc.d/ppp stop
ifconfig tun0 destroy
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2009-08-30 10:22:38 UTC
Responsible Changed
From-To: freebsd-bugs->freebsd-net

Over to maintainer(s).
Comment 2 Eitan Adler freebsd_committer freebsd_triage 2017-12-31 08:01:20 UTC
For bugs matching the following criteria:

Status: In Progress Changed: (is less than) 2014-06-01

Reset to default assignee and clear in-progress tags.

Mail being skipped
Comment 3 Mark Linimon freebsd_committer freebsd_triage 2024-11-17 03:45:54 UTC
^Triage: I'm sorry that this PR did not get addressed in a timely fashion.

By now, the version that it was created against is long out of suppoprt.
Please re-open if it is still a problem on a supported version.