Hello!

OK.  Can you give me a code path that allows sk_socket to be NULL
at this point?

cpu 0:				cpu1 (or just preempted cpu)

sk = netlink_lookup(...);
				... closing sk
				netlink_release() clears sk_socket

use sk->sk_socket. Oops.

Alexey