On Wed, Jun 24, 2020 at 02:09:23PM -0700, John Fastabend wrote: > Redirect on non-TLS sockmap side has RCU lock held from sockmap code > path but when called from TLS this is no longer true. The RCU section > is needed because we use rcu dereference to fetch the psock of the > socket we are redirecting to. sk_psock_verdict_apply() is also called by sk_psock_strp_read() after rcu_read_unlock(). This issue should not be limited to tls?