skb_complete_wifi_ack() and skb_complete_tx_timestamp() currently call sock_hold() on sockets that might have transitioned their sk_refcnt to zero already.
Eric Dumazet (2): net: fix socket refcounting in skb_complete_wifi_ack() net: fix socket refcounting in skb_complete_tx_timestamp() net/core/skbuff.c | 30 ++++++++++++++++-------------- 1 file changed, 16 insertions(+), 14 deletions(-) -- 2.12.0.rc1.440.g5b76565f74-goog
