Re: new LOR tcphash, in6_ifaddr_lock

From: Jonathan T. Looney <jtl_at_freebsd.org>
Date: Wed, 03 Dec 2025 22:36:38 UTC 
This looks like a duplicate report to PR 289184 (
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=289184).

If you can reproduce this, can you try the patch I included in the bug
audit trail?

Jonathan

On Wed, Dec 3, 2025 at 2:04 PM Bjoern A. Zeeb <
bzeeb-lists@lists.zabbadoz.net> wrote:

>
> lock order reversal:
>   1st 0xfffffe000bb71a00 tcphash (tcphash, sleep mutex) @
> /usr/src.g/sys/netinet/tcp_usrreq.c:1534
>   2nd 0xffffffff81eee5f8 in6_ifaddr_lock (in6_ifaddr_lock, rm) @
> /usr/src.g/sys/netinet6/in6_src.c:292
> lock order tcphash -> in6_ifaddr_lock attempted at:
> #0 0xffffffff80c0f5b1 at witness_checkorder+0xbe1
> #1 0xffffffff80b91899 at _rm_rlock_debug+0x129
> #2 0xffffffff80de7b5d at in6_selectsrc+0x3fd
> #3 0xffffffff80de76fd at in6_selectsrc_socket+0x6d
> #4 0xffffffff80de4971 at in6_pcbconnect+0x291
> #5 0xffffffff80dc79fa at tcp6_connect+0xba
> #6 0xffffffff80dc5375 at tcp6_usr_connect+0x2f5
> #7 0xffffffff80c50050 at soconnectat+0xc0
> #8 0xffffffff80c582a1 at kern_connectat+0xe1
> #9 0xffffffff80c58191 at sys_connect+0x81
> #10 0xffffffff810f4a19 at amd64_syscall+0x169
> #11 0xffffffff810c3b9b at fast_syscall_common+0xf8
>
>
> --
> Bjoern A. Zeeb                                                     r15:7
>
>