> Actually we do increment refcnt, for every socket found in ehash. > > Carefully read again __inet_lookup_established() > > This code is generic for ESTABLISH and TIME-WAIT sockets > > If you found a code that performed the lookup without taking the refcnt, > please point me at it, this would be a serious bug.
>From my previous observations, it appears as if 1. this check is bypassed 2. the refcount is incremented here but is decremented before it reaches the packet processing in tcp_timewait_state_process() I will try to debug this and update. > Is it some Android kernel ? > > Android had private modules that needed an update in 3.18 Yes, the kernel is based on Android 3.18. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html