Michal Hocko <mhocko@xxxxxxxxxx> wrote: > Subject: [PATCH] netfilter/x_tables: do not fail xt_alloc_table_info too > easilly [..] > - /* __GFP_NORETRY is not fully supported by kvmalloc but it should > - * work reasonably well if sz is too large and bail out rather > - * than shoot all processes down before realizing there is nothing > - * more to reclaim. > - */ > - info = kvmalloc(sz, GFP_KERNEL | __GFP_NORETRY); > + info = kvmalloc(sz, GFP_KERNEL | __GFP_ACCOUNT); > if (!info) > return NULL; Acked-by: Florian Westphal <fw@xxxxxxxxx> You can keep this acked-by in case you mangle this patch in a minor way such as using GFP_KERNEL_ACCOUNT. Thanks, Florian