This is identical to the case I fixed in rxrpc_get_peer()
Signed-off-by: David S. Miller <davem@davemloft.net>
        /* we can now add the new candidate to the list */
        trans = candidate;
        candidate = NULL;
+       usage = atomic_read(&trans->usage);
 
        rxrpc_get_local(trans->local);
        atomic_inc(&trans->peer->usage);
             trans->local->debug_id,
             trans->peer->debug_id);
 
-       _leave(" = %p {u=%d}", trans, atomic_read(&trans->usage));
+       _leave(" = %p {u=%d}", trans, usage);
        return trans;
 
        /* we found the transport in the list immediately */