On Tue, Jan 16, 2024 at 05:29:56PM +0100, Jozsef Kadlecsik wrote: > The patch "netfilter: ipset: fix race condition between swap/destroy > and kernel side add/del/test", commit 28628fa9 fixes a race condition. > But the synchronize_rcu() added to the swap function unnecessarily slows > it down: it can safely be moved to destroy and use call_rcu() instead. > Thus we can get back the same performance and preventing the race condition > at the same time. Manually applied this to nf.git, thanks!