After TCP 3WHS became lockless, we should not attempt cgroup games from sk_clone_lock() since listener/cgroup might be already gone.
Move this business to inet_csk_accept() where we have the guarantee both parent and child exist. Many thanks to John Sperbeck for spotting these issues Eric Dumazet (2): net: memcontrol: defer call to mem_cgroup_sk_alloc() net: defer call to cgroup_sk_alloc() kernel/cgroup/cgroup.c | 11 ----------- mm/memcontrol.c | 15 --------------- net/core/sock.c | 8 +++++--- net/ipv4/inet_connection_sock.c | 6 ++++++ 4 files changed, 11 insertions(+), 29 deletions(-) -- 2.14.2.920.gcf0c67979c-goog