[Openswan dev] FW: Odd kernel panic error, IPtables and IPSEC

[Herbert Xu]

Gary W. Smith <gary at primeexalia.com> wrote:
> 
> This was hacked from an email I originally sent to the netfiler.org
> list.  I patched the kernel and it seemed to have something to do with
> that but then I rebuilt the machine (a whole 15 minute process) and then
> tried again and it did the same thing with the stock kernel.  This is
> RHEL 4, running Linux Openswan U2.3.1dr3/K2.6.9-5.EL.6 (netkey).  I

You should report vendor kernel problems to the vendor.
 
> /upv4/xfrm4_output.c:108 spin_lock /net/sfrm/xfrm_state.c:dfebba14
> already locked by net/ipv4/sfrm4_output.c/108.

This looks like the IPsec/PMTU/ICMP dead-lock that was fixed in 2.6.11.7.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt