iptables hang on shutdown or reboot

[azjp]

I am running CentOS 6.3 with VirtualBox 4.2.0 and have experienced hangs during shutdown when iptables says "unloading modules". Ralv's fix:

Set IPTABLES_MODULES_UNLOAD="no" in /etc/sysconfig/iptables-config

Works fine for me too. Thanks Ralv!

[cschenk]

We have this happening on CentOS 6.5, the machine runs KVMs with bridged interfaces. We've got these kernel stack traces happening, which may help:

Aug 14 14:46:34 head kernel: INFO: task modprobe:9982 blocked for more than 120 seconds.
Aug 14 14:46:34 head kernel: Not tainted 2.6.32-431.23.3.el6.x86_64 #1
Aug 14 14:46:34 head kernel: "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
Aug 14 14:46:34 head kernel: modprobe D 0000000000000009 0 9982 9980 0x00000006
Aug 14 14:46:34 head kernel: ffff880d5ad9de48 0000000000000086 0000000000000000 ffffffff810129de
Aug 14 14:46:34 head kernel: ffff880d5ad9ddd8 ffffffff81123781 ffffffff8100bb8e ffff880d5ad9de48
Aug 14 14:46:34 head kernel: ffff880fded1a638 ffff880d5ad9dfd8 000000000000fbc8 ffff880fded1a638
Aug 14 14:46:34 head kernel: Call Trace:
Aug 14 14:46:34 head kernel: [<ffffffff810129de>] ? copy_user_generic+0xe/0x20
Aug 14 14:46:34 head kernel: [<ffffffff81123781>] ? probe_kernel_write+0x41/0x70
Aug 14 14:46:34 head kernel: [<ffffffff8100bb8e>] ? apic_timer_interrupt+0xe/0x20
Aug 14 14:46:34 head kernel: [<ffffffff8105546b>] ? mutex_spin_on_owner+0x9b/0xc0
Aug 14 14:46:34 head kernel: [<ffffffff8152a36e>] __mutex_lock_slowpath+0x13e/0x180
Aug 14 14:46:34 head kernel: [<ffffffffa0023000>] ? ip_tables_init+0x0/0xb0 [ip_tables]
Aug 14 14:46:34 head kernel: [<ffffffff8152a20b>] mutex_lock+0x2b/0x50
Aug 14 14:46:34 head kernel: [<ffffffffa0023000>] ? ip_tables_init+0x0/0xb0 [ip_tables]
Aug 14 14:46:34 head kernel: [<ffffffff81457e4d>] register_pernet_subsys+0x1d/0x50
Aug 14 14:46:34 head kernel: [<ffffffffa0023015>] ip_tables_init+0x15/0xb0 [ip_tables]
Aug 14 14:46:34 head kernel: [<ffffffff8100204c>] do_one_initcall+0x3c/0x1d0
Aug 14 14:46:34 head kernel: [<ffffffff810bc361>] sys_init_module+0xe1/0x250
Aug 14 14:46:34 head kernel: [<ffffffff8100b072>] system_call_fastpath+0x16/0x1b

[rals]

thanks for the hint with the iptables.config.

For me it was not the iptables.config it was the ip6tables.config
with the IP6TABLES_MODULES_UNLOAD="no"