On Mon, Jul 4, 2016 at 7:50 PM, Matt Bennett <Matt.Bennett@xxxxxxxxxxxxxxxxxxx> wrote: > Using printk I have confirmed that ppp_pernet() is called from > ppp_connect_channel() when the BUG occurs (i.e. pch->chan_net is NULL). > > This behavior appears to have been introduced in commit 1f461dc ("ppp: > take reference on channels netns"). We have some race condition here, where a parallel ppp_unregister_channel() could happen while we are in ppp_connect_channel(). We need some synchronization for them. I am not sure what is the right lock here since ppp locking looks crazy. -- To unsubscribe from this list: send the line "unsubscribe linux-ppp" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html