From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=100.103.45.18 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1793209665; b=MsvWs44+xeMbBQGYV1UAiWskjp2Ovk+pMGwe1AgCZZlBhzSYRq+mHu/1b3uyD4vf0Sh8 EUDe6nLj+9AlzZ1NxFVF7VYmLezlCdRXVmuBU0vW2GdE3WWoZOdnIHzQdAhozauohVjVL VpsRieAqwyJyTL7xc0WpcIjdgxmXOAOJ3K9aguyx1RtvuD63l0MI/FsssGyTHbfjPIAVl w/nrg/LNfTWoJO+VUk+maL+xWqYph8NcelxH3ICx7/mAcxDyK84aG+4mAJnqQVdQ0Nkeu c70jjGQyFYMaYSTKeVS2aApkfLjFoDHREoprw01rFNrOPAL64qb64uW8Uae5AuV+M+g== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1793209665; h=Received:DKIM-Signature:From:To:Cc:Subject:Date:Message-ID:X-Mailer: In-Reply-To:References:User-Agent:X-stable:X-Patchwork-Hint: MIME-Version:Content-Type:Content-Transfer-Encoding; bh=rA9wTEFbVMDjAtOYoNIZmidp86vAfhOiZ7WeFV7gAG0=; b=D2x5CPUgcxOht/RE9ywMbowCYPZWC8qnqxs4auh1PQMFMXNajoaafPxXyEpHfTkOnlgk On/BbxSLt49Qu94C3VolgqQMnxFpYUL5PRsyX7ffPox/Nf1I+31PT7/uiuxguvileV02/ NCBKYKYoaXMsDLbQ5P+SR7qfugsoIZV3LSFir/k52YEkNOGXgqoHYzgEjICxfPH+hoG8h tjKFsXft61c4bpzWzutdflF5olWpZreRidBYIf7VoaXwrHP9XAPWH0i+5GVA6NCppQZW5 //wyIfnT0i7KDL+xx9z3aqvxQ5aAtAUuAlmp5TvRyDUpRlGU2h4xVldLI4TjnVrG2YA== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass header.d=linuxfoundation.org header.i=@linuxfoundation.org header.a=rsa-sha256 header.s=korg header.b=TckHK541; arc=none smtp.remote-ip=100.103.45.18 Received: from smtp.kernel.org (quasi.space.kernel.org [100.103.45.18]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 95C4F606A31A; Wed, 28 Oct 2026 17:47:45 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key, unprotected) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.a=rsa-sha256 header.s=korg header.b=TckHK541 Received: by smtp.kernel.org (Postfix) with ESMTPSA id EBFF41F01825; Wed, 28 Oct 2026 17:47:44 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1793209665; bh=rA9wTEFbVMDjAtOYoNIZmidp86vAfhOiZ7WeFV7gAG0=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=TckHK541nUUPKU0vJCuuZEcMHLtMZ/eXM9s1s7maCPDWSypXJjVO2rHIC0GdTSaYP BiWwtfJWkFh1qOXWnZ0hEkDbLIViCqbMFOw930O31NynDjqM/pg3ASRTIwnqTQzRgz 4C+tz0y5tBD0t06vfGBIfej+InYf1J+hMkbQoxLM= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, Jesper Dangaard Brouer , =?UTF-8?q?Jonas=20K=C3=B6ppeler?= , Chris Arges , =?UTF-8?q?Toke=20H=C3=B8iland-J=C3=B8rgensen?= , Eric Dumazet , Jakub Kicinski , Sasha Levin Subject: [PATCH 6.18 033/109] net_sched: codel: fix stale state for empty flows in fq_codel Date: Wed, 28 Oct 2026 18:00:17 +0100 Message-ID: <20261028165943.141837155@linuxfoundation.org> X-Mailer: git-send-email 2.56.0 In-Reply-To: <20261028165942.357251485@linuxfoundation.org> References: <20261028165942.357251485@linuxfoundation.org> User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-Mailing-List: patches@lists.linux.dev List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 6.18-stable review patch. If anyone has any objections, please let me know. ------------------ From: Jonas Köppeler [ Upstream commit 815980fe6dbb01ad4007e8b260a45617f598b76d ] When codel_dequeue() finds an empty queue, it resets vars->dropping but does not reset vars->first_above_time. The reference CoDel algorithm (Nichols & Jacobson, ACM Queue 2012) resets both: dodeque_result codel_queue_t::dodeque(time_t now) { ... if (r.p == NULL) { first_above_time = 0; // <-- Linux omits this } ... } Note that codel_should_drop() does reset first_above_time when called with a NULL skb, but codel_dequeue() returns early before ever calling codel_should_drop() in the empty-queue case. The post-drop code paths do reach codel_should_drop(NULL) and correctly reset the timer, so a dropped packet breaks the cycle -- but the next delivered packet re-arms first_above_time and the cycle repeats. For sparse flows such as ICMP ping (one packet every 200ms-1s), the first packet arms first_above_time, the flow goes empty, and the second packet arrives after the interval has elapsed and gets dropped. The pattern repeats, producing sustained loss on flows that are not actually congested. Test: veth pair, fq_codel, BQL disabled, 30000 iptables rules in the consumer namespace (NAPI-64 cycle ~14ms, well above fq_codel's 5ms target), ping at 5 pps under UDP flood: Before fix: 26% ping packet loss After fix: 0% ping packet loss Fix by resetting first_above_time to zero in the empty-queue path of codel_dequeue(), matching the reference algorithm. Fixes: 76e3cc126bb2 ("codel: Controlled Delay AQM") Fixes: d068ca2ae2e6 ("codel: split into multiple files") Co-developed-by: Jesper Dangaard Brouer Signed-off-by: Jesper Dangaard Brouer Signed-off-by: Jonas Köppeler Reported-by: Chris Arges Tested-by: Jonas Köppeler Reviewed-by: Toke Høiland-Jørgensen Link: https://lore.kernel.org/all/20260318134826.1281205-7-hawk@kernel.org/ Reviewed-by: Eric Dumazet Link: https://patch.msgid.link/20260323174920.253526-1-hawk@kernel.org Signed-off-by: Jakub Kicinski Signed-off-by: Sasha Levin --- include/net/codel_impl.h | 1 + 1 file changed, 1 insertion(+) diff --git a/include/net/codel_impl.h b/include/net/codel_impl.h index 78a27ac730700..b2c359c6dd1b8 100644 --- a/include/net/codel_impl.h +++ b/include/net/codel_impl.h @@ -158,6 +158,7 @@ static struct sk_buff *codel_dequeue(void *ctx, bool drop; if (!skb) { + vars->first_above_time = 0; vars->dropping = false; return skb; } -- 2.53.0