This patch set changes how bpf(BPF_PROG_ATTACH) operates on flow dissector hook when there is already a program attached. After this change the user is allowed to update the program in a single syscall. Please see the first patch for rationale. v1 -> v2: - Don't use CHECK macro which expects BPF program run duration, which we don't track in attach/detach tests. Suggested by Stanislav Fomichev. - Test re-attaching flow dissector in both root and non-root network namespace. Suggested by Stanislav Fomichev. Jakub Sitnicki (2): flow_dissector: Allow updating the flow dissector program atomically selftests/bpf: Check that flow dissector can be re-attached net/core/flow_dissector.c | 10 +- .../bpf/prog_tests/flow_dissector_reattach.c | 127 ++++++++++++++++++ 2 files changed, 134 insertions(+), 3 deletions(-) create mode 100644 tools/testing/selftests/bpf/prog_tests/flow_dissector_reattach.c -- 2.20.1