At 01:45 PM 21/09/2005, Mike Tancsa wrote: >At 01:15 PM 21/09/2005, Mike Tancsa wrote: > >>lock order reversal >> 1st 0xc295a090 inp (divinp) _at_ /usr/src/sys/netinet/ip_divert.c:327 >> 2nd 0xc28d9150 ipsec request (ipsec request) _at_ >> /usr/src/sys/netipsec/ipsec_output.c:354 Just to followup, I think the lockup / race issue seems to be ipdivert. I took out ipfw and instead used pf and pfnat and I dont seem to be able to lockup the box... Or at least its much harder to trigger. I also tried with regular IPSEC instead of FAST_IPSEC (which works), but that disables debug.mpsafenet by setting it to 0. Also setting debug.mpsafenet=0 lets the box work just fine without any other changes. ---MikeReceived on Wed Sep 21 2005 - 17:54:02 UTC
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:43 UTC