From: Cong Wang <xiyou.wangc...@gmail.com> Date: Sat, 29 Dec 2018 13:56:38 -0800
> nr_find_socket(), nr_find_peer() and nr_find_listener() lock the > sock after finding it in the global list. However, the call path > requires BH disabled for the sock lock consistently. > > Actually the locking is unnecessary at this point, we can just hold > the sock refcnt to make sure it is not gone after we unlock the global > list, and lock it later only when needed. > > Reported-and-tested-by: syzbot+f621cda8b7e598908...@syzkaller.appspotmail.com > Signed-off-by: Cong Wang <xiyou.wangc...@gmail.com> Applied and queued up for -stable.