Eric Dumazet 61c2402665 net/sched: fq_pie: prevent dismantle issue ... For some reason, fq_pie_destroy() did not copy working code from pie_destroy() and other qdiscs, thus causing elusive bug. Before calling del_timer_sync(&q->adapt_timer), we need to ensure timer will not rearm itself. rcu: INFO: rcu_preempt self-detected stall on CPU rcu: 0-....: (4416 ticks this GP) idle=60d/1/0x4000000000000000 softirq=10433/10434 fqs=2579 (t=10501 jiffies g=13085 q=3989) NMI backtrace for cpu 0 CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 nmi_cpu_backtrace.cold+0x47/0x144 lib/nmi_backtrace.c:111 nmi_trigger_cpumask_backtrace+0x1b3/0x230 lib/nmi_backtrace.c:62 trigger_single_cpu_backtrace include/linux/nmi.h:164 [inline] rcu_dump_cpu_stacks+0x25e/0x3f0 kernel/rcu/tree_stall.h:343 print_cpu_stall kernel/rcu/tree_stall.h:627 [inline] check_cpu_stall kernel/rcu/tree_stall.h:711 [inline] rcu_pending kernel/rcu/tree.c:3878 [inline] rcu_sched_clock_irq.cold+0x9d/0x746 kernel/rcu/tree.c:2597 update_process_times+0x16d/0x200 kernel/time/timer.c:1785 tick_sched_handle+0x9b/0x180 kernel/time/tick-sched.c:226 tick_sched_timer+0x1b0/0x2d0 kernel/time/tick-sched.c:1428 __run_hrtimer kernel/time/hrtimer.c:1685 [inline] __hrtimer_run_queues+0x1c0/0xe50 kernel/time/hrtimer.c:1749 hrtimer_interrupt+0x31c/0x790 kernel/time/hrtimer.c:1811 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1086 [inline] __sysvec_apic_timer_interrupt+0x146/0x530 arch/x86/kernel/apic/apic.c:1103 sysvec_apic_timer_interrupt+0x8e/0xc0 arch/x86/kernel/apic/apic.c:1097 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638 RIP: 0010:write_comp_data kernel/kcov.c:221 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x1d/0x80 kernel/kcov.c:273 Code: 54 c8 20 48 89 10 c3 66 0f 1f 44 00 00 53 41 89 fb 41 89 f1 bf 03 00 00 00 65 48 8b 0c 25 40 70 02 00 48 89 ce 4c 8b 54 24 08 <e8> 4e f7 ff ff 84 c0 74 51 48 8b 81 88 15 00 00 44 8b 81 84 15 00 RSP: 0018:ffffc90000d27b28 EFLAGS: 00000246 RAX: 0000000000000000 RBX: ffff888064bf1bf0 RCX: ffff888011928000 RDX: ffff888011928000 RSI: ffff888011928000 RDI: 0000000000000003 RBP: ffff888064bf1c28 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff875d8295 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880783dd300 R14: 0000000000000000 R15: 0000000000000000 pie_calculate_probability+0x405/0x7c0 net/sched/sch_pie.c:418 fq_pie_timer+0x170/0x2a0 net/sched/sch_fq_pie.c:383 call_timer_fn+0x1a5/0x6b0 kernel/time/timer.c:1421 expire_timers kernel/time/timer.c:1466 [inline] __run_timers.part.0+0x675/0xa20 kernel/time/timer.c:1734 __run_timers kernel/time/timer.c:1715 [inline] run_timer_softirq+0xb3/0x1d0 kernel/time/timer.c:1747 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 run_ksoftirqd kernel/softirq.c:921 [inline] run_ksoftirqd+0x2d/0x60 kernel/softirq.c:913 smpboot_thread_fn+0x645/0x9c0 kernel/smpboot.c:164 kthread+0x405/0x4f0 kernel/kthread.c:327 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK> Fixes: ec97ecf1eb ("net: sched: add Flow Queue PIE packet scheduler") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: syzbot <syzkaller@googlegroups.com> Cc: Mohit P. Tahiliani <tahiliani@nitk.edu.in> Cc: Sachin D. Patil <sdp.sachin@gmail.com> Cc: V. Saicharan <vsaicharan1998@gmail.com> Cc: Mohit Bhasi <mohitbhasi1998@gmail.com> Cc: Leslie Monis <lesliemonis@gmail.com> Cc: Gautam Ramakrishnan <gautamramk@gmail.com> Link: https://lore.kernel.org/r/20211209084937.3500020-1-eric.dumazet@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2021-12-09 08:01:00 -08:00
..
6lowpan	6lowpan: iphc: Fix an off-by-one check of array index	2021-07-22 16:19:03 +02:00
9p	9p: fix a bunch of checkpatch warnings	2021-11-04 21:04:25 +09:00
802	llc/snap: constify dev_addr passing	2021-10-13 09:40:46 -07:00
8021q	net: vlan: fix underflow for the real_dev refcnt	2021-11-26 11:20:46 -08:00
appletalk	net: socket: rework compat_ifreq_ioctl()	2021-07-23 14:20:25 +01:00
atm	net: atm: use address setting helpers	2021-10-24 13:59:45 +01:00
ax25	ax25: constify dev_addr passing	2021-10-13 09:40:45 -07:00
batman-adv	Merge branch 'exit-cleanups-for-v5.16' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2021-11-10 16:15:54 -08:00
bluetooth	bluetooth: use dev_addr_set()	2021-10-25 11:01:29 -07:00
bpf	bpf: Add dummy BPF STRUCT_OPS for test purpose	2021-11-01 14:10:00 -07:00
bpfilter	bpfilter: Specify the log level for the kmsg message	2021-06-25 13:13:50 +02:00
bridge	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-11-01 20:05:14 -07:00
caif	net: caif: get ready for const netdev->dev_addr	2021-10-24 13:59:45 +01:00
can	can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM	2021-11-06 17:29:32 +01:00
ceph	libceph, ceph: move ceph_osdc_copy_from() into cephfs code	2021-11-08 03:29:52 +01:00
core	net, neigh: clear whole pneigh_entry at alloc time	2021-12-08 17:41:44 -08:00
dcb	net: dcb: Return the correct errno code	2021-06-01 17:01:33 -07:00
dccp	tcp: switch orphan_count to bare per-cpu counters	2021-10-15 11:28:34 +01:00
decnet	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
dns_resolver
dsa	net: dsa: felix: fix broken VLAN-tagged PTP under VLAN-aware bridge	2021-11-03 14:22:00 +00:00
ethernet	eth: platform: add a helper for loading netdev->dev_addr	2021-10-08 14:54:33 +01:00
ethtool	ethtool: do not perform operations on net devices being unregistered	2021-12-06 16:53:32 -08:00
hsr	net: hsr: Add support for redbox supervision frames	2021-10-26 14:52:17 +01:00
ieee802154	mac802154: use dev_addr_set() - manual	2021-10-20 14:27:40 +01:00
ife
ipv4	udp: using datalen to cap max gso segments	2021-12-09 07:48:07 -08:00
ipv6	seg6: fix the iif in the IPv6 socket control block	2021-12-09 07:55:42 -08:00
iucv	net/iucv: Replace deprecated CPU-hotplug functions.	2021-08-09 10:13:32 +01:00
kcm	net: sock: introduce sk_error_report	2021-06-29 11:28:21 -07:00
key
l2tp	net/l2tp: Fix reference count leak in l2tp_udp_recv_core	2021-09-09 11:00:20 +01:00
l3mdev
lapb	net: lapb: Use list_for_each_entry() to simplify code in lapb_iface.c	2021-06-08 16:31:25 -07:00
llc	llc/snap: constify dev_addr passing	2021-10-13 09:40:46 -07:00
mac80211	mac80211: fix throughput LED trigger	2021-11-15 10:56:57 +01:00
mac802154	mac802154: use dev_addr_set() - manual	2021-10-20 14:27:40 +01:00
mctp	mctp: Don't let RTM_DELROUTE delete local routes	2021-12-02 12:15:25 +00:00
mpls	net: mpls: Remove rcu protection from nh_dev	2021-11-29 12:39:42 +00:00
mptcp	mptcp: use delegate action to schedule 3rd ack retrans	2021-11-20 14:24:00 +00:00
ncsi	net/ncsi : Add payload to be 32-bit aligned to fix dropped packets	2021-11-24 11:53:17 +00:00
netfilter	netfilter: conntrack: annotate data-races around ct->timeout	2021-12-08 01:29:15 +01:00
netlabel	net: fix NULL pointer reference in cipso_v4_doi_free	2021-08-30 12:23:18 +01:00
netlink	net: netlink: af_netlink: Prevent empty skb by adding a check on len.	2021-11-30 17:45:01 -08:00
netrom	ax25: constify dev_addr passing	2021-10-13 09:40:45 -07:00
nfc	nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done	2021-12-09 07:50:32 -08:00
nsh
openvswitch	include/linux/mm.h: move nr_free_buffer_pages from swap.h to mm.h	2021-11-06 13:30:43 -07:00
packet	af_packet: Introduce egress hook	2021-10-14 23:06:44 +02:00
phonet	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
psample
qrtr	net: qrtr: combine nameservice into main module	2021-09-28 17:36:43 -07:00
rds	net/rds: correct socket tunable error in rds_tcp_tune()	2021-12-02 12:16:57 +00:00
rfkill
rose	rose: constify dev_addr passing	2021-10-13 09:40:45 -07:00
rxrpc	rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()	2021-11-29 15:40:02 +00:00
sched	net/sched: fq_pie: prevent dismantle issue	2021-12-09 08:01:00 -08:00
sctp	net,lsm,selinux: revert the security_sctp_assoc_established() hook	2021-11-14 12:21:53 +00:00
smc	net/smc: Keep smc_close_final rc during active close	2021-12-02 12:14:36 +00:00
strparser	bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding	2021-11-09 01:05:28 +01:00
sunrpc	NFS client bugfixes for Linux 5.16	2021-11-27 10:33:55 -08:00
switchdev	net: switchdev: merge switchdev_handle_fdb_{add,del}_to_device	2021-10-27 14:54:02 +01:00
tipc	tipc: check for null after calling kmemdup	2021-11-17 20:04:52 -08:00
tls	net/tls: Fix authentication failure in CCM mode	2021-11-29 12:48:28 +00:00
unix	af_unix: fix regression in read after shutdown	2021-11-20 15:10:30 +00:00
vmw_vsock	vsock/virtio: suppress used length validation	2021-11-22 14:49:03 +00:00
wireless	nl80211: fix radio statistics in survey dump	2021-11-15 10:51:51 +01:00
x25	net: x25: Use list_for_each_entry() to simplify code in x25_route.c	2021-06-10 14:08:09 -07:00
xdp	xsk: Fix crash on double free in buffer pool	2021-11-12 15:55:27 +01:00
xfrm	Core:	2021-11-02 06:20:58 -07:00
compat.c	net: Return the correct errno code	2021-06-03 15:13:56 -07:00
devres.c	net: devres: Correct a grammatical error	2021-06-11 12:55:28 -07:00
Kconfig	net/core: disable NET_RX_BUSY_POLL on PREEMPT_RT	2021-10-01 15:45:10 -07:00
Makefile	mctp: Add MCTP base	2021-07-29 15:06:49 +01:00
socket.c	Core:	2021-08-31 16:43:06 -07:00
sysctl_net.c	sections: move and rename core_kernel_data() to is_kernel_core_data()	2021-11-09 10:02:50 -08:00