An ioctl to delete an ipv6 tunnel leads to a kernel panic

["Natalie Protasevich" <protasnb@gmail.com>]

Hello,

This bug was reported to bugzilla.kernel.org:

http://bugzilla.kernel.org/show_bug.cgi?id=8895

Hardware Environment:  user mode linux and vmware
Software Environment:   an evolution of mip6d (ip mobility daemon)
Problem Description:     The mip6d HA was modified to make a
redondancy evolution, when an HA is interrupted, the other takes over,
this leads to some
creation/deletion of routes and tunnels.
Note: The HA ip address known by the mobile (MR) stays the same, the
slave HA takes it with an override neighbor advertisement message. So
the tunnel between
the mobile router and the HA(s) keep the same end adresses.
The problem occurs when a Ctrl C is done on the master HA, the slave
takes over but sometimes, the master gets a kernel panic.


Possible reason for this failure was identified and tested by the
submitter and several other reporters that ran into the same problem.
Can the patch be reviewed and pushed upstream if accepted (if the
problem hasn't been addressed already)?

Thanks,
--Natalie