Will the appropriate maintainer please pass this upstream. Following the kernel install directions exactly for a new system, I used vanilla-2.4.22 instead of gentoo-sources. The automated kernel build system compiles with modversions by default. There is a bug in netfilter with modversions. It compiles the symbol suffix for some symbols as _R__ver_nf_unregister_hook instead of _R_[8 chars hex]. This causes depmod -ae -f System.map to succeed, but the modules cannot be loaded into the running kernel. Temporary fix: Compile without modversions. Permanent fix: Get the upstream maintainer to make sure that macro/function expands properly to insert a module version, rather than its own name.
Please report this in netfilter bugzilla (http://bugzilla.netfilter.org).