Linux Kernel Packet Drop Points

Where the Linux kernel can say no to a packet: driver, tc ingress, netfilter, socket, and why the altitude of the drop decides what the verdict costs.