github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-05-28 17:13:52 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

net: shaper: Reject reparenting of existing nodes

Browse Source 
When an existing node-scope shaper is moved to a different parent
via the group operation, the framework fails to update the leaves
count on both the old and new parent shapers. Only newly created
nodes (handle.id == NET_SHAPER_ID_UNSPEC) trigger the parent
leaves increment at line 1039.

This causes the parent's leaves counter to diverge from the
actual number of children in the xarray. When the node is later
deleted, pre_del_node() allocates an array sized by the stale
leaves count, but the xarray iteration finds more children than
expected, hitting the WARN_ON_ONCE guard and returning -EINVAL.

Rather than adding reparenting support with complex leaves count
bookkeeping, reject group calls that attempt to change an existing
node's parent. Updates to an existing node's rate or leaves under
the same parent remain permitted. We expect that for any modification
of the topology user should always create new groups and let the
kernel garbage collect the leaf-less nodes.

Fixes: 5d5d4700e7 ("net-shapers: implement NL group operation")
Signed-off-by: Mohsin Bashir <hmohsin@meta.com>
Link: https://patch.msgid.link/20260506233745.111895-1-mohsin.bashr@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
This commit is contained in:
Mohsin Bashir 2026-05-06 16:37:45 -07:00 committed by Jakub Kicinski
parent efda25ee84
commit a77d5a069d
1 changed files with 23 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
net/shaper/shaper.c
View File

@ -964,15 +964,22 @@ static int __net_shaper_group(struct net_shaper_binding *binding,
int i, ret;
if (node->handle.scope == NET_SHAPER_SCOPE_NODE) {
struct net_shaper *cur = NULL;
new_node = node->handle.id == NET_SHAPER_ID_UNSPEC;
if (!new_node && !net_shaper_lookup(binding, &node->handle)) {
/* The related attribute is not available when
* reaching here from the delete() op.
*/
NL_SET_ERR_MSG_FMT(extack, "Node shaper %d:%d does not exists",
node->handle.scope, node->handle.id);
return -ENOENT;
if (!new_node) {
cur = net_shaper_lookup(binding, &node->handle);
if (!cur) {
/* The related attribute is not available
* when reaching here from the delete() op.
*/
NL_SET_ERR_MSG_FMT(extack,
"Node shaper %d:%d does not exist",
node->handle.scope,
node->handle.id);
return -ENOENT;
}
}
/* When unspecified, the node parent scope is inherited from
@ -986,6 +993,15 @@ static int __net_shaper_group(struct net_shaper_binding *binding,
return ret;
}
if (cur && net_shaper_handle_cmp(&cur->parent,
&node->parent)) {
NL_SET_ERR_MSG_FMT(extack,
"Cannot reparent node shaper %d:%d",
node->handle.scope,
node->handle.id);
return -EOPNOTSUPP;
}
} else {
net_shaper_default_parent(&node->handle, &node->parent);
}