On 2022/05/02 23:12, Haakon Bugge wrote: >> + /* TCP timer functions might access net namespace even after >> + * a process which created this net namespace terminated. >> + */ >> + if (!sk->sk_net_refcnt) { >> + sk->sk_net_refcnt = 1; >> + get_net_track(net, &sk->ns_tracker, GFP_KERNEL); > > Don't you need a corresponding put_net_track()? __sk_free() and __sk_destruct() will do if sk->sk_net_refcnt is set. > >> + sock_inuse_add(net, 1); >> + }