[Bug 91] New: conntrack unload loops forever (reproducible)

bugzilla-daemon@netfilter.org bugzilla-daemon@netfilter.org
Fri, 09 May 2003 00:31:23 +0200


           Summary: conntrack unload loops forever (reproducible)
           Product: netfilter/iptables
           Version: linux-2.4.x
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: connection tracking
        AssignedTo: laforge@netfilter.org
        ReportedBy: kaber@trash.net
                CC: netfilter-buglog@lists.netfilter.org

i know this is a know issue but i'm unsure if it is know how to reproduce it.
some printks in conntrack unload path showed it clears out the entire hash table
but loops infinitely to clear some more because ip_conntrack_count doesn't reach
0 which means that there are still packet with references to some conntrack
structures in the stack. this suggests the BR_NETPROTO_LOCK barrier in
ip_conntrack_cleanup doesn't work as expected.

to reproduce try this:
- start downloading something over _slow_ line from the box running ip_conntrack
- rmmod ip_conntrack

i noted it always hangs when netstat shows packets in the sendqueue of a socket.
i don't think data in the write queue has already been wrapped in skbs and
visited conntrack but maybe this helps. after the queue clears, it still keeps

------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.