Opened 12 years ago

Closed 11 years ago

#11109 closed defect (fixed)

linux (CentOS) host hangs when "stopping" iptables

Reported by: mcfip Owned by:
Component: other Version: VirtualBox 4.2.2
Keywords: Cc:
Guest type: other Host type: other


It does not appear anyone has reported this issue to VirtualBox. I hope I did not overlook a previous report.

Guest: Windows 7. Host: CentOS 6.3

After upgrading to 4.2 (now on 4.2.2), my host hangs whenever I stop or restart iptables. When iptables tries to unload the network modules, it hangs while trying to unload the last module. I do not recall this happening before 4.2, but I found a thread on the CentOS forum that is identical to my issue in 4.1.x versions.

My system will reboot / shutdown fine if I do not load a VM session.

Once I load (and unload) a VM session, my host will hang everytime while unloading network modules within the iptables script to stop iptables. This is reproducible 100% of the time.

The hang occurs in iptables script when it trys to unload remaning netfilter modules used by ipv4 and ipv6.

netfilters to unload == x_tables nf_nat nf_conntrack

The first two unload fine. When it unloads nf_conntrack, a referring module" xt_state is found and it calls rmmod to unload it.

The script hangs when the "modprobe -r $mod" command (modprobe -r xt_state) is executed for the xl_state module.

A CentOS thread describes the same issue from other users:

There is a work-around at the bottom of the thread but this is not ideal and is not recommended (per the comments in the iptables-config file.

I am attaching a vbox.log for the "guest" and a vboxsvr.log for the "host".

P{lease let me know if you need more information from my system. I can easily retest and get any log info you may need.


Attachments (3)

VBox.log (97.5 KB ) - added by mcfip 12 years ago.
VBox Guest (Win 7 x64 Pro) log
VBoxSVC.log (3.4 KB ) - added by mcfip 12 years ago.
VBox Svc Log
netflt_conntrack_leak.patch (706 bytes ) - added by Aleksey Ilyushin 12 years ago.
Fix for connection leak problem that may explain the hang

Download all attachments as: .zip

Change History (6)

by mcfip, 12 years ago

Attachment: VBox.log added

VBox Guest (Win 7 x64 Pro) log

by mcfip, 12 years ago

Attachment: VBoxSVC.log added

VBox Svc Log

comment:1 by Aleksey Ilyushin, 12 years ago

This problem could be related to #11178. I am attaching the patch for vboxnetflt kernel module. You can try in out following these steps (you need to be root):

  1. go to VirtualBox installation directory (depends on distro, try /usr/share/virtualbox/src/vboxhost);
  2. apply the patch:
    patch -p0 -i <path_to_netflt_conntrack_leak.patch>
  3. rebuild the modules:
    /etc/init.d/vboxdrv setup

Please let me know the results.

by Aleksey Ilyushin, 12 years ago

Attachment: netflt_conntrack_leak.patch added

Fix for connection leak problem that may explain the hang

comment:2 by Frank Mehnert, 12 years ago

Did this patch help to solve your problem?

comment:3 by Frank Mehnert, 11 years ago

Resolution: fixed
Status: newclosed

No response. Please reopen if necessary.

Note: See TracTickets for help on using tickets.

© 2023 Oracle
ContactPrivacy policyTerms of Use