nf_tables may create percpu counters from the packet path through its
dynamic set instantiation infrastructure, so we need a way to allocate
this through GFP_ATOMIC.
Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
Acked-by: NDavid S. Miller <davem@davemloft.net>