Bug 219488 - kernel panic removing devices from a teql queuing discipline
kernel panic removing devices from a teql queuing discipline
Product: Fedora
Classification: Fedora
Component: kernel (Show other bugs)
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Kernel Maintainer List
Brian Brock
Depends On:
Blocks: 427887
  Show dependency treegraph
Reported: 2006-12-13 10:23 EST by Tom Hughes
Modified: 2008-01-08 03:48 EST (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2008-01-08 03:48:23 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Kernel panic (1.93 KB, text/plain)
2006-12-13 10:23 EST, Tom Hughes
no flags Details

  None (edit)
Description Tom Hughes 2006-12-13 10:23:25 EST
Description of problem:

Removing devices from a teql queuing discipline being used to equalise traffic
over a group of interfaces can cause the kernel to panic if there is traffic
going through the interface at the time.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:

1. Setup a teql0 interface with one or more underlying interfaces:

   modprobe sch-teql
   tc qdisc add dev eth0 root teql0
   tc qdisc add dev eth1 root teql1
   ifconfig teql0 inet ...

2. Send traffic through the teql0 interface (I use a flood ping):

   ping -s 1200 -f ...

3. Drop the underlying interface(s) from the equaliser:

   tc qdisc del dev eth0 root && tc qdisc del dev eth1 root
Actual results:

Kernel panics - the panic is attached.

Expected results:

Kernel doesn't panic.

Additional info:
Comment 1 Tom Hughes 2006-12-13 10:23:29 EST
Created attachment 143525 [details]
Kernel panic
Comment 2 Tom Hughes 2006-12-13 10:29:35 EST
The panic is in __teql_resolve (which has been inlined into teql_master_xmit) in
net/sched/sch_teql.c at this line:

	if (n && n->tbl == mn->tbl &&

Specifically the dereference of n->tbl is faulting as n is not valid.
Comment 3 Tom Hughes 2007-05-10 05:00:38 EDT
Any news on this?
Comment 4 Tom Hughes 2007-10-29 04:50:03 EDT
Still happening in F7 with kernel
Comment 5 Chuck Ebbert 2007-10-29 14:00:26 EDT
Reported to netdev.
Comment 6 Jon Stanley 2008-01-07 20:55:11 EST
(This is a mass-update to all current FC6 kernel bugs in NEW state)


I'm reviewing this bug list as part of the kernel bug triage project, an attempt
to isolate current bugs in the Fedora kernel.


I am CC'ing myself to this bug, however this version of Fedora is no longer

Please attempt to reproduce this bug with a current version of Fedora (presently
Fedora 8). If the bug no longer exists, please close the bug or I'll do so in a
few days if there is no further information lodged.

Thanks for using Fedora!
Comment 7 Tom Hughes 2008-01-08 03:48:23 EST
This was fixed by the netdev guys and the fix made it into and we have
been running on the system in question since 13th December
without any problems.

In fact our ISP had some problems last night which meant this got throughly
exercised as my monitoring code took interfaces in and out of the bond on
several occasions without any panic.

Note You need to log in before you can comment on or make changes to this bug.