arptables and ebtables need the same fixup that was added for ip/ip6tables: synchronize_rcu() is needed before ruleset can be free'd. Add pre_exit hooks for this. Florian Westphal (2): netfilter: bridge: add pre_exit hooks for ebtable unregistration netfilter: arp_tables: netfilter: bridge: add pre_exit hook for table unregister include/linux/netfilter_arp/arp_tables.h | 5 ++-- include/linux/netfilter_bridge/ebtables.h | 5 ++-- net/bridge/netfilter/ebtable_broute.c | 8 +++++- net/bridge/netfilter/ebtable_filter.c | 8 +++++- net/bridge/netfilter/ebtable_nat.c | 8 +++++- net/bridge/netfilter/ebtables.c | 30 ++++++++++++++++++++--- net/ipv4/netfilter/arp_tables.c | 9 +++++-- net/ipv4/netfilter/arptable_filter.c | 10 +++++++- 8 files changed, 70 insertions(+), 13 deletions(-) -- 2.26.3