subashab@xxxxxxxxxxxxxx <subashab@xxxxxxxxxxxxxx> wrote: > > > Unfortunately we are seeing it on ARM64 regression systems which > > > runs a > > > variety of > > > usecases so the exact steps are not known. > > > > Ok. Would you be willing to run some of those with your suggested > > change to see if that resolves the crashes or is that so rare that this > > isn't practical? > > I can try that out. Let me know if you have any other suggestions as well > and I can try that too. > > I assume we cant add locks here as it would be in the packet processing > path. Yes. We can add a synchronize_net() in xt_replace_table if needed though, before starting to put the references on the old ruleset This would avoid the free of the jumpstack while skbs are still in-flight.
