On Fri, Mar 27, 2020 at 03:24:45AM +0100, Florian Westphal wrote: [...] > This series fixes this by deferring the call to > nf_queue_entry_release_refs() until after the hook iteration/okfn > returns; i.e. another nf_queue invocation from nf_reinject path will > not observe a zero refcount. Applied.