On Mon, Jul 23, 2018 at 06:34:36PM +0800, shaochun chen wrote: > I have a question: we will try_module_get in __netlink_dump_start(), > but why we need to call try_module_get again in nft_netlink_dump_start ?? Because they refer to two different modules. nfnetlink is multiplexing all netfilter subsystem through one single netlink bus. At the time that decision was made, there were concerns about netlink running out of busses. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html