netfilter buglog - Feb 2007 - [Bug 549] New: kernel oops when trying to remove ip_conntrack module

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=549

           Summary: kernel oops when trying to remove ip_conntrack module
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: x86_64
        OS/Version: Fedora
            Status: NEW
          Severity: critical
          Priority: P2
         Component: unknown
        AssignedTo: laforge@netfilter.org
        ReportedBy: jnc@astrakhan.ru


This is Fedora Core 6 x86_64 fresh installation, 2.6.19-1.2911.fc6 kernel.  
Problem is, that when unloading ip_conntrack module, a kernel oops occurs.  
When only ip_conntrack_ftp / ip_nat_ftp modules are loaded, the below 
happens.  When ip_conntrack_pptp / ip_nat_pptp modules are loaded in addition 
to ftp ones, the oops happens in one of the latter two modules.  I'll gather
pptp kind of oops, should there be demand for more information that the below 
oops can provide.

Unable to handle kernel paging request at ffffffff88350110 RIP:
 [<ffffffff8831b12d>] :ip_conntrack:destroy_conntrack+0x3b/0x112
PGD 203027 PUD 205027 PMD 1396f1067 PTE 0
Oops: 0000 [1] SMP
last sysfs file: /module/libata/version
CPU 1
Modules linked in: autofs4 sunrpc ipv6 ib_iser rdma_cm iw_cm ib_addr ib_cm 
ib_sa ib_mad ib_core iscsi_tcp libiscsi scsi_transport_iscsi ipt_REJECT 
xt_tcpudp ip_conntrack nfnetlink x_tables cpufreq_ondemand dm_multipath video 
sbs i2c_ec button battery asus_acpi ac parport_pc lp parport sg snd_hda_intel 
snd_hda_codec snd_seq_dummy ide_cd snd_seq_oss snd_seq_midi_event shpchp 
snd_seq iTCO_wdt snd_seq_device ohci1394 snd_pcm_oss snd_mixer_oss ieee1394 
r8169 cdrom snd_pcm sky2 i2c_i801 snd_timer snd soundcore snd_page_alloc skge 
i2c_core serio_raw pcspkr dm_snapshot dm_zero dm_mirror dm_mod ahci ata_piix 
libata sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd
Pid: 26419, comm: modprobe Not tainted 2.6.19-1.2911.fc6 #1
RIP: 0010:[<ffffffff8831b12d>]  
[<ffffffff8831b12d>] :ip_conntrack:destroy_conntrack+0x3b/0x112
RSP: 0018:ffff81011d6bfe78  EFLAGS: 00010286
RAX: ffffffff883500c0 RBX: ffff81011f829678 RCX: 0000000000000000
RDX: ffff81011f829678 RSI: 0000000000000004 RDI: ffffffff883275f8
RBP: ffff81011f9bda80 R08: ffff81013fe75828 R09: ffff81013fe75800
R10: ffff81013afc3a80 R11: ffff81013eff0c80 R12: 00000000000014c0
R13: 000000000000014c R14: 0000000000000000 R15: ffffffff883199ed
FS:  00002aaaaaadd240(0000) GS:ffff81013fc97ac0(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: ffffffff88350110 CR3: 000000011f542000 CR4: 00000000000006e0
Process modprobe (pid: 26419, threadinfo ffff81011d6be000, task 
ffff81012014c080)
Stack:  ffff81011f9bd968 ffff81011f9bd968 ffff81011f9bda80 ffffffff8831b1f9
 00000000000014c0 ffff81011f9bd968 ffff81011f9bda80 ffffffff8831a18e
 ffff810100000000 0000000000000040 0000000000000000 0000000000000080
Call Trace:
 [<ffffffff8831b1f9>] :ip_conntrack:destroy_conntrack+0x107/0x112
 [<ffffffff8831a18e>] :ip_conntrack:ip_ct_iterate_cleanup+0x3e/0x124
 [<ffffffff8831a2ea>] :ip_conntrack:ip_conntrack_cleanup+0x68/0xc5
 [<ffffffff802a2c55>] sys_delete_module+0x196/0x1c5
 [<ffffffff8025c29c>] tracesys+0xdc/0xf0
 [<0000003864ecd817>]


Code: 48 8b 40 50 48 85 c0 74 05 48 89 df ff d0 0f b6 83 36 01 00
RIP  [<ffffffff8831b12d>] :ip_conntrack:destroy_conntrack+0x3b/0x112
 RSP <ffff81011d6bfe78>
CR2: ffffffff88350110
 <3>BUG: sleeping function called from invalid context at
kernel/rwsem.c:20
in_atomic():0, irqs_disabled():1

Call Trace:
 [<ffffffff8026999a>] show_trace+0x34/0x47
 [<ffffffff802699bf>] dump_stack+0x12/0x17
 [<ffffffff8029e64f>] down_read+0x15/0x23
 [<ffffffff8029666e>] blocking_notifier_call_chain+0x13/0x36
 [<ffffffff8021505c>] do_exit+0x1f/0x8f7
 [<ffffffff80264fe6>] do_page_fault+0x7a1/0x81c
 [<ffffffff8026307d>] error_exit+0x0/0x84
 [<ffffffff8831b12d>] :ip_conntrack:destroy_conntrack+0x3b/0x112
 [<ffffffff8831b1f9>] :ip_conntrack:destroy_conntrack+0x107/0x112
 [<ffffffff8831a18e>] :ip_conntrack:ip_ct_iterate_cleanup+0x3e/0x124
 [<ffffffff8831a2ea>] :ip_conntrack:ip_conntrack_cleanup+0x68/0xc5
 [<ffffffff802a2c55>] sys_delete_module+0x196/0x1c5
 [<ffffffff8025c29c>] tracesys+0xdc/0xf0
 [<0000003864ecd817>]

Any details required?

-- 
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.