On Mon, 2015-11-02 at 22:46 -0500, David Miller wrote: > From: Eric Dumazet <eric.duma...@gmail.com> > Date: Mon, 02 Nov 2015 07:50:07 -0800 > > > From: Eric Dumazet <eduma...@google.com> > > > > Under low memory conditions, tcp_sk_init() and icmp_sk_init() > > can both iterate on all possible cpus and call inet_ctl_sock_destroy(), > > with eventual NULL pointer. > > > > Signed-off-by: Eric Dumazet <eduma...@google.com> > > Reported-by: Dmitry Vyukov <dvyu...@google.com> > > Applied.
Thanks David. Bug origin was in linux-4.2 : commit 26abe14379f8e2fa3fd1bcf97c9a7ad9364886fe Author: Eric W. Biederman <ebied...@xmission.com> Date: Fri May 8 21:10:31 2015 -0500 net: Modify sk_alloc to not reference count the netns of kernel sockets. Now that sk_alloc knows when a kernel socket is being allocated modify it to not reference count the network namespace of kernel sockets. Keep track of if a socket needs reference counting by adding a flag to struct sock called sk_net_refcnt. Update all of the callers of sock_create_kern to stop using sk_change_net and sk_release_kernel as those hacks are no longer needed, to avoid reference counting a kernel socket. Signed-off-by: "Eric W. Biederman" <ebied...@xmission.com> Signed-off-by: David S. Miller <da...@davemloft.net> -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html