On Tue, 2010-02-02 at 19:58 +0200, Alexey Dobriyan wrote:

Yes, moving to init_net-only function is fine.

So moving the "setup up fake conntrack" bits to init_init_net from
init_net still results in the panic, which means that the use count
really is dropping to zero and we really are trying to free it when
using multiple namespaces. Per ns is probably an easier way to go.

Just for kicks, I'll have it error out on attempting to free to see if I
can get this box to stay up for a while.

Jon.