Re: [REGRESSION] 5.0-rc2: iptables -nvL consumes 100% of CPU and hogs memory with kernel 5.0-rc2

From: Florian Westphal
Date: Tue Jan 15 2019 - 05:15:24 EST


Michal Kubecek <mkubecek@xxxxxxx> wrote:
> > I upgraded to self-compiled 5.0-rc2 today and found the machine to be slow
> > after startup. I saw iptables consuming 100% CPU, it only responded to
> > SIGKILL. It got restarted several times, probably by some systemd service.
> >
> > Then I started 'iptables -nvL' manually. And I got this:
> >
> > % strace -p 5748
> > [â tons more, in what appeared an endless loop â]

This is fixed by:

http://patchwork.ozlabs.org/patch/1024772/
("netfilter: nf_tables: Fix for endless loop when dumping ruleset").