Cong Wang <xiyou.wangc...@gmail.com> wrote: > On Thu, Aug 10, 2017 at 2:31 AM, Konstantin Khlebnikov > <khlebni...@yandex-team.ru> wrote: > > In previous API tcf_destroy_chain() could be called several times and > > some schedulers like hfsc and atm use that. In new API tcf_block_put() > > frees block but leaves stale pointer, second call will free it once again. > > Which call path do we call tcf_block_put() for multiple times on > the same block? Please be specific, it is not obvious.
you can use tools/testing/selftests/net/rtnetlink.sh to reproduce this (kernel panics on delete of root qdisc).
