struct cls_fl_head {
        struct rhashtable ht;
+       spinlock_t masks_lock; /* Protect masks list */
        struct list_head masks;
        struct rcu_work rwork;
        struct idr handle_idr;
        if (!head)
                return -ENOBUFS;
 
+       spin_lock_init(&head->masks_lock);
        INIT_LIST_HEAD_RCU(&head->masks);
        rcu_assign_pointer(tp->root, head);
        idr_init(&head->handle_idr);
                return false;
 
        rhashtable_remove_fast(&head->ht, &mask->ht_node, mask_ht_params);
+
+       spin_lock(&head->masks_lock);
        list_del_rcu(&mask->list);
+       spin_unlock(&head->masks_lock);
+
        if (async)
                tcf_queue_work(&mask->rwork, fl_mask_free_work);
        else
        /* Wait until any potential concurrent users of mask are finished */
        synchronize_rcu();
 
+       spin_lock(&head->masks_lock);
        list_add_tail_rcu(&newmask->list, &head->masks);
+       spin_unlock(&head->masks_lock);
 
        return newmask;