)]}'
{
  "commit": "e34f0df3d81ad4ae7819f14f7a9dcd2efcfbe8c1",
  "tree": "e030f95c86b51349ffdef72a05b65b175470220e",
  "parents": [
    "3d970eda003441f66551a91fda16478ac0711617"
  ],
  "author": {
    "name": "Eric Dumazet",
    "email": "edumazet@google.com",
    "time": "Fri Dec 19 14:44:59 2025 +0000"
  },
  "committer": {
    "name": "Paolo Abeni",
    "email": "pabeni@redhat.com",
    "time": "Mon Dec 29 19:23:34 2025 +0100"
  },
  "message": "usbnet: avoid a possible crash in dql_completed()\n\nsyzbot reported a crash [1] in dql_completed() after recent usbnet\nBQL adoption.\n\nThe reason for the crash is that netdev_reset_queue() is called too soon.\n\nIt should be called after cancel_work_sync(\u0026dev-\u003ebh_work) to make\nsure no more TX completion can happen.\n\n[1]\nkernel BUG at lib/dynamic_queue_limits.c:99 !\nOops: invalid opcode: 0000 [#1] SMP KASAN PTI\nCPU: 1 UID: 0 PID: 5197 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full)\nTainted: [L]\u003dSOFTLOCKUP\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025\n RIP: 0010:dql_completed+0xbe1/0xbf0 lib/dynamic_queue_limits.c:99\nCall Trace:\n \u003cIRQ\u003e\n  netdev_tx_completed_queue include/linux/netdevice.h:3864 [inline]\n  netdev_completed_queue include/linux/netdevice.h:3894 [inline]\n  usbnet_bh+0x793/0x1020 drivers/net/usb/usbnet.c:1601\n  process_one_work kernel/workqueue.c:3257 [inline]\n  process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340\n  bh_worker+0x2b1/0x600 kernel/workqueue.c:3611\n  tasklet_action+0xc/0x70 kernel/softirq.c:952\n  handle_softirqs+0x27d/0x850 kernel/softirq.c:622\n  __do_softirq kernel/softirq.c:656 [inline]\n  invoke_softirq kernel/softirq.c:496 [inline]\n  __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:723\n  irq_exit_rcu+0x9/0x30 kernel/softirq.c:739\n\nFixes: 7ff14c52049e (\"usbnet: Add support for Byte Queue Limits (BQL)\")\nReported-by: syzbot+5b55e49f8bbd84631a9c@syzkaller.appspotmail.com\nCloses: https://lore.kernel.org/netdev/6945644f.a70a0220.207337.0113.GAE@google.com/T/#u\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Simon Schippers \u003csimon.schippers@tu-dortmund.de\u003e\nLink: https://patch.msgid.link/20251219144459.692715-1-edumazet@google.com\nSigned-off-by: Paolo Abeni \u003cpabeni@redhat.com\u003e\n\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "1d9faa70ba3b7f0d6442d77d33a36b190b2cd10d",
      "old_mode": 33188,
      "old_path": "drivers/net/usb/usbnet.c",
      "new_id": "36742e64cff750cacc2dbb72cf836ff0958b4895",
      "new_mode": 33188,
      "new_path": "drivers/net/usb/usbnet.c"
    }
  ]
}
