LOR on RELENG_6, beta 5

[Mike Tancsa]

At 01:45 PM 21/09/2005, Mike Tancsa wrote:
>At 01:15 PM 21/09/2005, Mike Tancsa wrote:
>
>>lock order reversal
>>  1st 0xc295a090 inp (divinp) @ /usr/src/sys/netinet/ip_divert.c:327
>>  2nd 0xc28d9150 ipsec request (ipsec request) @ 
>> /usr/src/sys/netipsec/ipsec_output.c:354


Just to followup, I think the lockup / race issue seems to be 
ipdivert.  I took out ipfw and instead used pf and pfnat and I dont 
seem to be able to lockup the box... Or at least its much harder to trigger.

I also tried with regular IPSEC instead of FAST_IPSEC (which works), 
but that disables debug.mpsafenet by setting it to 0.  Also setting 
debug.mpsafenet=0 lets the box work just fine without any other changes.


         ---Mike