I'm running a RHEL5 system with an Infiniband card installed,
using the 'openib' driver set.  When I attempt to manipulate iptables
while the infiniband drivers are loaded, the system either hangs (usually)
or kernel-panics (occasionally).

        For example:


stats-storage-0:/root# iptables --flush
stats-storage-0:/etc/sysconfig/network-scripts# service iptables start
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: filter                    [  OK  ]
Unloading iptables modules: 

        ...and there it hangs.  When I then run, in another window:

stats-storage-0:/root# service openibd stop
Unloading OpenIB kernel modules:                           [  OK  ]

        ...then the iptables run from before completes successfully.

        Is this a known/reported bug?  Or is this something new? 

        Note: I have modified /etc/sysconfig/iptables-config, to comment out
this line:

#IPTABLES_MODULES="ip_conntrack_netbios_ns"
IPTABLES_MODULES=""

        I did this in an attempt to stop the actual kernel panics, which
are of course worse.  The logs from one of those kernel panics:

iRemoving netfilter NETLINK layer.                                              
ip_tables: (C) 2000-2006 Netfilter Core Team                                    
Netfilter messages via NETLINK v0.30.                                           
ip_conntrack version 2.4 (8192 buckets, 65536 max) - 304 bytes per              
conntrack                                                                       
Unable to handle kernel paging request at 0000000000200200 RIP:                 
 [<ffffffff80157b5d>] list_del+0x8/0x71                                         
PGD 6b0eb067 PUD 6f36c067 PMD 0                                                 
Oops: 0000 [1] SMP                                                              
last sysfs file:                                                                
/devices/pci0000:00/0000:00:02.0/0000:04:00.0/0000:05:00.0/0000:06:00.0/0000:07:
00.0/irq                                                                        
CPU 7                                                                           
Modules linked in: ip_conntrack nfnetlink nfs fscache hfsplus nfsd              
exportfs nfs_acl auth_rpcgss openafs(PU) autofs4 ipmi_devintf ipmi_si           
ipmi_msghandler lockd sunrpc ipt_REJECT ip6t_REJECT xt_tcpudp                   
ip6table_filter ip6_tables x_tables be2iscsi iscsi_tcp bnx2i cnic uio           
cxgb3i cxgb3 8021q libiscsi_tcp ib_iser libiscsi2 scsi_transport_iscsi2         
scsi_transport_iscsi ib_srp rds ib_sdp ib_ipoib ipoib_helper ipv6               
xfrm_nalgo crypto_api rdma_ucm rdma_cm ib_ucm ib_uverbs ib_umad ib_cm           
iw_cm ib_addr ib_sa mlx4_ib ib_mad ib_core loop dm_mirror dm_multipath          
scsi_dh video backlight sbs power_meter hwmon i2c_ec i2c_core dell_wmi wmi      
button battery asus_acpi acpi_memhotplug ac parport_pc lp parport mlx4_en       
joydev sr_mod cdrom sg qla2xxx tpm_tis tpm mlx4_core tpm_bios bnx2              
scsi_transport_fc pcspkr i5000_edac edac_mc serio_raw dm_raid45 dm_message      
dm_region_hash dm_log dm_mod dm_mem_cache ata_piix libata shpchp                
megaraid_sas sd_mod scsi_mod ext3 jbd uhci_hcd ohci_hcd ehci_hcd                
Pid: 11693, comm: modprobe Tainted: P      2.6.18-238.1.1.el5 #1                
RIP: 0010:[<ffffffff80157b5d>]  [<ffffffff80157b5d>] list_del+0x8/0x71          
RSP: 0000:ffff81006fd83ea8  EFLAGS: 00010213                                    
RAX: 0000000000200200 RBX: ffff81006cdce9a8 RCX: ffff810037c2c3b8               
RDX: ffff81006cdce8b8 RSI: 0000000000000000 RDI: ffff81006cdce9a8               
RAX: 0000000000200200 RBX: ffff81006cdce9a8 RCX: ffff810037c2c3b8               
RDX: ffff81006cdce8b8 RSI: 0000000000000000 RDI: ffff81006cdce9a8               
RBP: 000000000001fff0 R08: ffff81007f06bbf8 R09: ffffffff8886f9f3               
R10: ffffffff804b1300 R11: 0000000000000000 R12: 0000000000002000               
R13: 0000000000000000 R14: ffffffff8886f9f3 R15: 0000000000000000               
FS:  00002b0c65d266e0(0000) GS:ffff81007fae03c0(0000)                           
knlGS:0000000000000000                                                          
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b                               
                                                                                
CR2: 0000000000200200 CR3: 000000006af74000 CR4: 00000000000006e0               
Process modprobe (pid: 11693, threadinfo ffff81006fd82000, task                 
ffff81007a652080)                                                               
Stack:  ffff81006cdce8b8 ffffffff8887125d ffff81006cdce8b8                      
ffffffff8887017f                                                                
 00000000000000ff 0000000000000000 0000000000000880 00000000113ac568            
 00007fff52d23520 ffffffff88870309 ffffffff8887ca00 ffffffff800a8559            
Call Trace:                                                                     
 [<ffffffff8887125d>] :ip_conntrack:destroy_conntrack+0x9a/0xdc                 
 [<ffffffff8887017f>] :ip_conntrack:ip_ct_iterate_cleanup+0x30/0x142            
 [<ffffffff88870309>] :ip_conntrack:ip_conntrack_cleanup+0x6a/0xc7              
 [<ffffffff800a8559>] sys_delete_module+0x196/0x1c5                             
 [<ffffffff8005d28d>] tracesys+0xd5/0xe0                                        
                                                                                
                                                                                
Code: 48 8b 10 48 39 fa 74 1b 48 89 fe 31 c0 48 c7 c7 90 3b 2c 80               
RIP  [<ffffffff80157b5d>] list_del+0x8/0x71                                     
 RSP <ffff81006fd83ea8>                                                         
CR2: 0000000000200200                                                           
 <0>Kernel panic - not syncing: Fatal exception                                 



                                                                 

                            - Tim Skirvin ([email protected])
-- 
  Senior Unix Systems Administrator     http://www.stanford.edu/~tskirvin/
ITS Computing Services - Sysadmin Team         Stanford University

Attachment: signature.asc
Description: Digital signature

_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list

Reply via email to