1 files changed, 7 insertions, 4 deletions

diff --git a/sys/kern/uipc_cow.c b/sys/kern/uipc_cow.c
index 52988dd..bc9a56a 100644
--- a/sys/kern/uipc_cow.c
+++ b/sys/kern/uipc_cow.c
@@ -80,6 +80,7 @@ socow_iodone(void *addr, void *args)
 	pp = sf_buf_page(sf);
 	sf_buf_free(sf);
 	/* remove COW mapping  */
+	vm_page_lock(pp);
 	vm_page_lock_queues();
 	vm_page_cowclear(pp);
 	vm_page_unwire(pp, 0);
@@ -91,6 +92,7 @@ socow_iodone(void *addr, void *args)
 	if (pp->wire_count == 0 && pp->object == NULL)
 		vm_page_free(pp);
 	vm_page_unlock_queues();
+	vm_page_unlock(pp);
 	socow_stats.iodone++;
 }
 
@@ -128,10 +130,10 @@ socow_setup(struct mbuf *m0, struct uio *uio)
 	/* 
 	 * set up COW
 	 */
-	vm_page_lock_queues();
+	vm_page_lock(pp);
 	if (vm_page_cowsetup(pp) != 0) {
 		vm_page_unhold(pp);
-		vm_page_unlock_queues();
+		vm_page_unlock(pp);
 		return (0);
 	}
 
@@ -140,13 +142,13 @@ socow_setup(struct mbuf *m0, struct uio *uio)
 	 */
 	vm_page_wire(pp);
 	vm_page_unhold(pp);
-	vm_page_unlock_queues();
-
+	vm_page_unlock(pp);
 	/*
 	 * Allocate an sf buf
 	 */
 	sf = sf_buf_alloc(pp, SFB_CATCH);
 	if (!sf) {
+		vm_page_lock(pp);
 		vm_page_lock_queues();
 		vm_page_cowclear(pp);
 		vm_page_unwire(pp, 0);
@@ -158,6 +160,7 @@ socow_setup(struct mbuf *m0, struct uio *uio)
 		if (pp->wire_count == 0 && pp->object == NULL)
 			vm_page_free(pp);
 		vm_page_unlock_queues();
+		vm_page_unlock(pp);
 		socow_stats.fail_sf_buf++;
 		return(0);
 	}