Hi, While looking through the code in sctp_backlog_rcv(), I noticed a case whereby sctp_inq_push() can be called outside of a bh_lock_sock() region if the likely case succeeds and the association has not moved. The exact line in question: https://github.com/torvalds/linux/blob/v4.2-rc8/net/sctp/input.c#L350 Intuitively this looks incorrect, as all other calls to sctp_inq_push() are within a BH socket lock. Am I missing something obvious that allows this particular case? Regards, Karl -- To unsubscribe from this list: send the line "unsubscribe linux-sctp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html