The pipapo set type uses a per-CPU scratch buffer which is protected only by disabling BH. This series adds nested-BH locking which is only used on PREEMPT_RT. v2…v3: https://lore.kernel.org/all/20250815160937.1192748-1-bigeasy@xxxxxxxxxxxxx - dropped applied patches while rebasing to nf-testing - move kernel_fpu_begin() to one place so the locks need to be added in spot. v1…v2: https://lore.kernel.org/all/20250701221304.3846333-1-bigeasy@xxxxxxxxxxxxx - rebase on top of nf-next. Sebastian Andrzej Siewior (2): netfilter: nft_set_pipapo*: Move FPU handling to pipapo_get_avx2() netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch net/netfilter/nft_set_pipapo.c | 7 +++++-- net/netfilter/nft_set_pipapo.h | 1 + net/netfilter/nft_set_pipapo_avx2.c | 19 +++++++++++++------ 3 files changed, 19 insertions(+), 8 deletions(-) -- 2.50.1
