First patch tries to remove kzalloc/kfree from getsockopt for the common cases. Second patch switches cgroup_bpf_enabled to be per-attach to to add only overhead for the cgroup attach types used on the system. No visible user-side changes. Stanislav Fomichev (2): bpf: try to avoid kzalloc in cgroup/{s,g}etsockopt bpf: split cgroup_bpf_enabled per attach type include/linux/bpf-cgroup.h | 36 +++++++++++++------------ include/linux/filter.h | 3 +++ kernel/bpf/cgroup.c | 55 +++++++++++++++++++++++++++++++------- net/ipv4/af_inet.c | 9 ++++--- net/ipv4/udp.c | 7 +++-- net/ipv6/af_inet6.c | 9 ++++--- net/ipv6/udp.c | 7 +++-- 7 files changed, 83 insertions(+), 43 deletions(-) -- 2.29.2.729.g45daf8777d-goog