From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from SJ2PR03CU001.outbound.protection.outlook.com (mail-westusazon11022125.outbound.protection.outlook.com [52.101.43.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 152E423EA88 for ; Sat, 14 Feb 2026 07:21:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.43.125 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771053663; cv=fail; b=SD0HQCQesmK073Si58AplYOi9DlKMjR7lx8CQUK4745DpVbOtj0wp6lyPem2ASVSbw+4xssiQxPayAmfANQ2Cr/Tf7AFu/lh5WeMkHM+xAuuWzTdH8iyOyynk/CCcAOryn4pxR6hQPIrhRDpKfk3a9NTRnKI13ZrhWu2s+fsCHM= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771053663; c=relaxed/simple; bh=sAban4Bxr4Lm2SIhY234y6ZAw6NL++21dN3e7dqIhys=; h=Date:From:To:cc:Subject:In-Reply-To:Message-ID:References: Content-Type:MIME-Version; b=fd0lbo4z8Yao1K153j3AYs9faoQFk4SXc+oBYSr30y3JBrQuh9xWDRMRcpiN3I/yygClqy5DB00EBRtzDfe+2nqldEpZdvTiPxM6Fru/JSP2l2h9lXNVVlcdjwzguGTjzEQ0VSinZxKIadvtPfx+LiPXcyiiVGbVqLS1hZYrR/g= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=os.amperecomputing.com; spf=pass smtp.mailfrom=os.amperecomputing.com; dkim=fail (1024-bit key) header.d=os.amperecomputing.com header.i=@os.amperecomputing.com header.b=pzAnq9XN reason="signature verification failed"; arc=fail smtp.client-ip=52.101.43.125 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=os.amperecomputing.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=os.amperecomputing.com Authentication-Results: smtp.subspace.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=os.amperecomputing.com header.i=@os.amperecomputing.com header.b="pzAnq9XN" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=e0oXIzo9nuglNQmX6uEdSUSJU/Bx8UKxGq4MtOMDGO9IMZEPdFen2m52afK5mcNelnRoEsmNE2Xo6l5cF9zHBGba+dZo13PED8jqZTkTotlO3QR7w0Y/NoHIdu6oClEPlwEo+2Fr/Yvwx4lnFrBuVVVGOv/rmaq63suoiy+TOKEFTgEdBaU/Neaz6G0vg1d9VUn3CcBdB2STv6vEyU6i4HSWS9qOpRjowrw8BY3b/uMcWDAMXbtsuSHDHhjs1L3/AspOuw+DF8FwDdmfD4sjxRnKUe4kosp00kGJg5oKaQYTqdA0RZ7dMLwlCvTsULdAGsKzoUJsw1Td0w2FUsvxdA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=F87qDsA6u38jX2jK27JI6PAhY9L2DqErydM7l1tHcnk=; b=KIhyfbpLtmPAQuZA2PLbGPvp+SZeApFtrh8E6+KOvWnJW4K5p0rWmQI3OL0+DBfEMhw04DRh9fEt6Nrq3nJFutYs0+wbSI+gfkBHto+YfK8bQTt+aoz+Ox5X95eGUE3L7jkZkctGI6uEIiRTpRmbNIhgyQePSWtXSYaPIraB8GyqjFP9GGNDjTVgxTcK28Gd+6HC41YvZKerVSzsyWfEx0nsLiuZfzPrJ3Y+xI5rEPlubEdcP2iDjY9NeUYKq2rikKrkOIbnaF+cZcbWFSUdoVmpPVgM1JRicG7w8rghJs0uaIPjyJbjlHL8R6pZLJtT7iN12R0Oun5w+VftMR3Kyg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=os.amperecomputing.com; dmarc=pass action=none header.from=os.amperecomputing.com; dkim=pass header.d=os.amperecomputing.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=os.amperecomputing.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F87qDsA6u38jX2jK27JI6PAhY9L2DqErydM7l1tHcnk=; b=pzAnq9XNy0OgmHdbu8+ufLXM1rrNzkg86+lXkGBeHCUGbvYfFHkA39nGvHSW7RuYKkNSbQrDgqYlvuAOmB0vOOmYcrMQNUbjCtyxZHY1ze/X4+jrjYOUPTpBE0HNZdhzgLNibq+QCMBxp9WTJPHYuuzXGmlfOfIH7wVFx9VyfBI= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=os.amperecomputing.com; Received: from BL1PR01MB9477.prod.exchangelabs.com (2603:10b6:208:5d8::16) by SA1PR01MB7328.prod.exchangelabs.com (2603:10b6:806:1f7::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9611.14; Sat, 14 Feb 2026 07:20:57 +0000 Received: from BL1PR01MB9477.prod.exchangelabs.com ([fe80::1aae:8c58:fcdd:508d]) by BL1PR01MB9477.prod.exchangelabs.com ([fe80::1aae:8c58:fcdd:508d%4]) with mapi id 15.20.9611.013; Sat, 14 Feb 2026 07:20:57 +0000 Date: Fri, 13 Feb 2026 23:20:52 -0800 (PST) From: Shubhang Kaushik To: Peter Zijlstra , mingo@kernel.org cc: juri.lelli@redhat.com, vincent.guittot@linaro.org, dietmar.eggemann@arm.com, rostedt@goodmis.org, bsegall@google.com, mgorman@suse.de, vschneid@redhat.com, linux-kernel@vger.kernel.org, wangtao554@huawei.com, quzicheng@huawei.com, kprateek.nayak@amd.com, wuyun.abel@bytedance.com, dsmythies@telus.net Subject: Re: [PATCH 0/4] sched: Various reweight_entity() fixes In-Reply-To: <20260130093439.803225718@infradead.org> Message-ID: <13dff84d-8e40-0248-971f-e731dfb18d70@os.amperecomputing.com> References: <20260130093439.803225718@infradead.org> Content-Type: multipart/mixed; boundary="1275739760-1251320628-1771053657=:19292" X-ClientProxiedBy: CY5PR17CA0010.namprd17.prod.outlook.com (2603:10b6:930:17::24) To BL1PR01MB9477.prod.exchangelabs.com (2603:10b6:208:5d8::16) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL1PR01MB9477:EE_|SA1PR01MB7328:EE_ X-MS-Office365-Filtering-Correlation-Id: 2318376e-d991-4737-f42d-08de6b9998d6 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|7416014|376014|366016|1800799024; X-Microsoft-Antispam-Message-Info: =?iso-8859-7?Q?Pqr7Fw9qrTvvQ3vae1u6zEkhVCf5yEkKt5g9ZxtyDDhBLacuo7vW3sT5cX?= =?iso-8859-7?Q?KLqURrCisulh3ItLRUVOsu+ZDdZf/AUsRf5B1MT3/yEyXsMQeGd1m3qNuf?= =?iso-8859-7?Q?lISgMsrHp9561yr0AnoRW9wv+Jgb5BGHcLp5tMIOkSp/skgj1pi+cLfm1m?= =?iso-8859-7?Q?lb5JcSWG12Rr2CujWG/MlSNYlOt6vErbuA4KSmTpPikLte9uAbVsf7HkEb?= =?iso-8859-7?Q?HD1uadKjoCpA8WzNrqABUToTFC84cGQZ+6dXqw2GiHMfes6t/+0jbx+YwK?= =?iso-8859-7?Q?TzByGPp/Qf1uIZNwdO74IaoB54os9Fe4PGo4+TljyOXAoR3RPTUAFR1xOQ?= =?iso-8859-7?Q?+Kc3uoLs4RVOy34AFBJ9Q/kwzO6ZEF16D72GVLSZA/YXxQk2dHikJ99B5B?= =?iso-8859-7?Q?ANsFpmnDEoa1tPIFyb9UGrH7RI8TMRTGrpP8270t9gJvEtQph5fcTncPPG?= =?iso-8859-7?Q?zJehSXXuo7+YVZOey4QgQ4A5EXUQlHGtmgzH0zWCH8CcXthKRYwMpiWlr5?= =?iso-8859-7?Q?z6jolKbIFz6sBOcSC9Nc1gLRVAcfKlOci7PmJLJnmFaZJEeV3ifto3XF/f?= =?iso-8859-7?Q?2OOlXSb37DZe+XkxSuilrvF7hNjlJfJ52nalW2FK5sX+uYFIMuzto072Ot?= =?iso-8859-7?Q?af8f+pSCPwryoH1AR2KqmrNft7q5hM/6flnp56p9ZstmarNXuCGs/wEc0P?= =?iso-8859-7?Q?ptku7yT42XOj4zypAPN3NtkMqbhRjnEHbPgV0DKQYaq6lm+rj3gne4Qxir?= =?iso-8859-7?Q?riwhVDKeJbmgvGQXKbMcYJlu+ZaqCQQpMg0BWdwLx9nNxsmI2yNiOxjBlo?= =?iso-8859-7?Q?Q7Fe0TgeCpOJhTKrxuCKlFBm71uxyWhAqgzD25J3g+U107QXsD5Bi0J5qD?= =?iso-8859-7?Q?TAlllRy3yV202KBD3ncNE0AeVGzc+MyoaigkN1cj08Kq4SXeE3gkxiRlh/?= =?iso-8859-7?Q?k+jejMHpdMWXqFb1TAcdwwmFDDxklMtlCSez9MJgeArskrp7JfTE4pA/kX?= =?iso-8859-7?Q?IMn+MksLB82NThCrwUprvyvjLllcXa1J3QQu4CzBT5JjvO5hIyNw2KIpZO?= =?iso-8859-7?Q?9bXtPEvidjztBTEbPyU7M3NFt/C8SvToIHsiAk1Ssi5mfzdFmyMsUBLr0d?= =?iso-8859-7?Q?pDKLHGC4196noMYouqNW5dARKd3jr8+a4dw8FCXvj36NlR5GrT8E9zFyAW?= =?iso-8859-7?Q?tAtJEUp14cXmD+eexli6vw0/5GBfab9o8223nLu1jqCe72iTNGeJHWMjh4?= =?iso-8859-7?Q?XQpsgn9iLrUYC6u/Nfq5iqQVKtRbUaIP0xiDy+Vf9pwgXyRNBzKStAXiKL?= =?iso-8859-7?Q?C5HjxT4BUzOFW10hX2K3c9v56U5JU9dUthJJR52+8fkTRJ23XC0cGEhPUa?= =?iso-8859-7?Q?Kj5k1OEWTQHgStKcqGtqIEDSI41RfIYm44AWuGn6AqAwYjOcJ+BUk/yH1B?= =?iso-8859-7?Q?UEYFHICy6Jgo1okwzuBGFqYAQxu7y62OjIbJ102R9MxgzDPEoCioRCt3kr?= =?iso-8859-7?Q?Lx9iTDjxqgW0amFRPzOTsKYXpgjq2yJaYPakbaS4feOUZt/2vpRp9jEA7d?= =?iso-8859-7?Q?kuXd8UKNJUata5FxKMRAIx8ocRVl?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL1PR01MB9477.prod.exchangelabs.com;PTR:;CAT:NONE;SFS:(13230040)(7416014)(376014)(366016)(1800799024);DIR:OUT;SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?iso-8859-7?Q?o1mC0xRlFSAeyXsXTtlENxE5NvfL9DGqVz8R5hqafIF3Uu16uBxsSrsSOu?= =?iso-8859-7?Q?fpuCEX/ufvdqzDqfb36lRwkkN2LuHKpgGb0Rzfndp9G/nRHW3zezFr1+tZ?= =?iso-8859-7?Q?va3KRamSFUHlErI5Cv6yaONU58lmu4ft5TZOpnEQZtTtwXg04rfSROYzEK?= =?iso-8859-7?Q?FBVmKApbGaC5XbYusdeNviY73o1WKENMDhirkLe6OXyWt2GrqMVtgdYguu?= =?iso-8859-7?Q?b9aUWMyMIQGkYOcjHlyz+g4aMFnSHfUZ2yGzH4Pr6w34COQDlLuGkLNUbR?= =?iso-8859-7?Q?Y9MM+aQIVNgreEhBSQPnooUX2KVUvN6QSCA7bHwIg4gNpGLU9TXXxzhn5e?= =?iso-8859-7?Q?seG4Ng8EMccEsYDkARl0vVZs9UWqCsFuUmBFrSjjJ5D0t7rBNNwMmDIgr1?= =?iso-8859-7?Q?ZwhTZ2+NQ9TYCoP9/gh9nm9PN3uQ/wxFUnEEtaosSxsQwmIHOxX4pFB9Cn?= =?iso-8859-7?Q?8jVIRKObZNprW9X0Bm8Mvu1XjRMamFdFdVGDjcm7gIsrER/3T1kPUznxKa?= =?iso-8859-7?Q?NPh1swhP7mw50OM223crwMI0zeOGfWLKHdGoE38nrX3HV2w7g1jbBhUOtw?= =?iso-8859-7?Q?iPtzRBh/VudzrFs/77uQOgXGQuPPfOenba8CBVow7D1ga7fTLrdLYBC7rL?= =?iso-8859-7?Q?dUMa+Ieo/KC+r/49IZHZcS+QbBoT3zaM4msNxgMkCxR21of5QUWoxaM2VJ?= =?iso-8859-7?Q?11dt1oFP3zK7NgLZ+6DkzzDwY/krtqq5hfk53pniJbbT+YUXR/OGwcI5PA?= =?iso-8859-7?Q?szecnQYcju4D50rpqgJLIYqebRhEaVEwMOxZS7/ScB9hlswQ8T2rgfx9ba?= =?iso-8859-7?Q?+JrIEE8iaMuqS1agnHpMLPIKm7KlFDUs79bKtnHnjKSPWTWe9A1CmOBcvw?= =?iso-8859-7?Q?W4eMPXEiSOM5h2ix1leiWAGh4xKfn/U/mjOIHx65FOfCjnmVcXUgsl/hlf?= =?iso-8859-7?Q?1bzttzjJET1tCjZ1JdHuC296HSZyw4nFfWaEDwgw6z3CPPsAt5LGG7mx67?= =?iso-8859-7?Q?Bg8ym5HxIiXiPT6HSaNTemZKHI7w4cyNJn1Fi4f0yjk62hsjuql6sx3AE6?= =?iso-8859-7?Q?VrgjU0wcNfiLZ+yOR8JFQEDe9Km+e+nQ0CAxgQpozc2IE929TkMEoEeub6?= =?iso-8859-7?Q?NfeF17ypzScAOlLh4LnR7MpQYsfi+qudPTjmpWKBG4VUD2UtR5ajQkStUR?= =?iso-8859-7?Q?0dtdOyAN+dVEILGvuSJX/XLzGXvh1p1UxmcGYl7gvxKv+0Z35RWMa4YLv1?= =?iso-8859-7?Q?AkwiqoiTA83pOpmk786JBe5eYVTStlImCU9xdxkN18wjB2/+TZE5LtZgU+?= =?iso-8859-7?Q?lyoUMt98TgY8Zv0Vf6df9G7/bfBuUBADc0VwzCLIz0EIzmqW+abZ2WzOVQ?= =?iso-8859-7?Q?neFYdIpCa51HYDQkJ9ch6UXrMGvzLeklewXUaZSVTgbSwZKEf3vAAn8bpn?= =?iso-8859-7?Q?FBPcHYm9sKv5lT5qjD87C5EBJcs+lfhG6l/viwp/46Dka/nJpeeXx5Jakh?= =?iso-8859-7?Q?o3XsMIFQSobvuUsPsFXu5/uv+l9nX74UyxxO+n9e1YgpqT4CJQDm1oowlb?= =?iso-8859-7?Q?baFsf/PQL6AIh5+ki21+GDcc15jWuIfX+P8qvqVt8MM3sfcRzXE/46CFCp?= =?iso-8859-7?Q?RIp4uYWgByNDfWLiBah9/g7q8/4aUp0qUrnD9JjhTz11BeVaZ/kUQ5oXsa?= =?iso-8859-7?Q?R5zSl9ONcyV9dBROJVBbvoq1MRuvyTzzwcWB5DsGPM1Tpqq0Ewq37HGSzn?= =?iso-8859-7?Q?aSPLsqXDlrEm6QIhPgRWfun+a3DI49ozCf9wjKbvnvI49wH6baVfEWRGhY?= =?iso-8859-7?Q?pSAFiRbrDnij1lLGNemPL3zK9MGFTyP3XW5iVeFLe/keTKpDgrn4?= X-OriginatorOrg: os.amperecomputing.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2318376e-d991-4737-f42d-08de6b9998d6 X-MS-Exchange-CrossTenant-AuthSource: BL1PR01MB9477.prod.exchangelabs.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Feb 2026 07:20:57.5123 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 3bc2b170-fd94-476d-b0ce-4229bdc904a7 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: B3ml2kUrDnkjP3SL8r+KVAM3Juze+I1ODGWqGy2XJX1zcgn4q+8THOFAZnt/qYewiQ6KmDSEvPQxjm+YOSzADAJ8e2lcV2xkNRknIPlmUUrc42Qh5ejzdklAI2+/lREd X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR01MB7328 --1275739760-1251320628-1771053657=:19292 Content-Type: text/plain; charset=ISO-8859-7; format=flowed Content-Transfer-Encoding: 8BIT Hi Peter, On Fri, 30 Jan 2026, Peter Zijlstra wrote: > Two issues related to reweight_entity() were raised; poking at all that got me > these patches. > > They're in queue.git/sched/core and I spend most of yesterday staring at traces > trying to find anything wrong. So far, so good. > > Please test. > > I¢m seeing a consistent NULL pointer dereference in pick_task_fair() when running hackbench on an Ampere Altra (80 cores arm64). This is happening after applying the complete patchset on the latest 6.19.0+ kernel with PREEMPT_DYNAMIC (full), CONFIG_SCHED_CLUSTER and NOHZ_FULL enabled. The system triggers a level 2 translation fault because pick_eevdf() returns NULL despite the runqueue having active tasks (cfs_rq->nr_running > 0). When pick_next_task_fair() attempts to dereference this NULL pointer to access the task structure, the kernel Oopses at pick_task_fair+0x48/0x148. pick_task_fair <- pick_eevdf() <- [active tasks] The root cause is an underflow in reweight_entity(): se->vprot -= avruntime; Under heavy load, the average runtime can sometimes be larger than the protection time. Because these are unsigned numbers, the result wraps around to a large value instead of becoming zero. [ 1284.596683] Mem abort info: [ 1284.596684] ESR = 0x0000000096000006 [ 1284.596685] EC = 0x25: DABT (current EL), IL = 32 bits [ 1284.596687] SET = 0, FnV = 0 [ 1284.596688] EA = 0, S1PTW = 0 [ 1284.596689] FSC = 0x06: level 2 translation fault [ 1284.596690] Data abort info: [ 1284.596690] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 1284.596692] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1284.596693] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1284.596694] user pgtable: 4k pages, 48-bit VAs, pgdp=00000801917ee000 [ 1284.596695] [0000000000000051] pgd=08000801917ef403, p4d=08000801917ef403, pud=08000801a6ed8403, pmd=0000000000000000 [ 1284.597314] Internal error: Oops: 0000000096000006 [#1] SMP [ 1284.670270] Modules linked in: joydev rfkill mlx5_ib ib_uverbs ib_core sunrpc binfmt_misc mlx5_core acpi_ipmi ipmi_ssif ipmi_devintf cdc_ether mlxfw usbnet psample mii arm_spe_pmu tls ipmi_msghandler arm_cmn arm_dmc620_pmu vfat fat arm_dsu_pmu cppc_cpufreq acpi_tad loop nfnetlink zram xfs uas usb_storage ast ghash_ce sbsa_gwdt nvme i2c_algo_bit nvme_core xgene_hwmon i2c_dev fuse [ 1284.703809] CPU: 76 UID: 1000 PID: 17906 Comm: hackbench_bin Tainted: G W 6.19.0+ #166 PREEMPT(full) [ 1284.714492] Tainted: [W]=WARN [ 1284.717447] Hardware name: WIWYNN Mt.Jade Server System B81.03001.0014/Mt.Jade Motherboard, BIOS 2.10.20230517-1P (SCP: 2.10.20230517) 2023/05/17 [ 1284.730472] pstate: 004000c9 (nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1284.737420] pc : pick_task_fair+0x48/0x148 [ 1284.741508] lr : pick_task_fair+0x48/0x148 [ 1284.745592] sp : ffff8000f92337d0 [ 1284.748894] x29: ffff8000f92337d0 x28: ffff080094f01f00 x27: ffff08012dc43300 [ 1284.756017] x26: ffff0801298189f0 x25: ffff63d900a14000 x24: 0000000000000001 [ 1284.763140] x23: ffff080129818000 x22: 0000000000000000 x21: ffff083e61642e80 [ 1284.770263] x20: ffff083e61643000 x19: ffff083e61643000 x18: 0000000000000000 [ 1284.777385] x17: 0000000000000000 x16: 0000000000000000 x15: ffff08011fc4f200 [ 1284.784508] x14: 000000000041fdf0 x13: 0000000000000004 x12: 0000000004aca7c0 [ 1284.791631] x11: ffffa4656247fa30 x10: ffffa46562818c48 x9 : ffffa4655e0620c8 [ 1284.798754] x8 : 0000000000000001 x7 : 0000000000000002 x6 : 0000000000000002 [ 1284.805877] x5 : 000000000000000b x4 : 00000000057ae40b x3 : fff73c190d1b5a9c [ 1284.813000] x2 : 0000002f3f70fd54 x1 : 02eb323b0f008a9a x0 : 0000000000000000 [ 1284.820124] Call trace: [ 1284.822558] pick_task_fair+0x48/0x148 (P) [ 1284.826643] pick_next_task_fair+0x34/0x250 [ 1284.830815] __pick_next_task+0x4c/0x260 [ 1284.834727] pick_next_task+0x40/0xb68 [ 1284.838463] __schedule+0x184/0x790 [ 1284.841942] preempt_schedule_common+0x28/0x50 [ 1284.846374] dynamic_preempt_schedule+0x30/0x40 [ 1284.850893] kfree+0x2e8/0x448 [ 1284.853936] skb_free_head+0x54/0xc0 [ 1284.857501] skb_release_data+0x164/0x230 [ 1284.861499] consume_skb+0x78/0x1b0 [ 1284.864975] unix_stream_read_generic+0x818/0x950 [ 1284.869668] unix_stream_recvmsg+0xa4/0xc0 [ 1284.873753] sock_recvmsg+0x78/0xd0 [ 1284.877230] sock_read_iter+0xa4/0x118 [ 1284.880967] new_sync_read+0x18c/0x1b8 [ 1284.884704] vfs_read+0x1a4/0x200 [ 1284.888006] ksys_read+0xf4/0x118 [ 1284.891308] __arm64_sys_read+0x24/0x40 [ 1284.895132] invoke_syscall+0x6c/0x100 [ 1284.898869] el0_svc_common.constprop.0+0x48/0xf0 [ 1284.903561] do_el0_svc+0x24/0x38 [ 1284.906864] el0_svc+0x54/0x2f0 [ 1284.909993] el0t_64_sync_handler+0xa0/0xe8 [ 1284.914164] el0t_64_sync+0x19c/0x1a0 [ 1284.917815] Code: d503201f 52800021 aa1303e0 97ffab6f (39414401) I was able to fix this by preventing the underflow in reweight_entity() and resetting the state in set_next_entity(). By using time_after64(), I cap the value at 0 instead of letting it wrap to a large number. I also added a reset (se->vprot = se->vruntime) to ensure the protection state stays synchronized with actual progress, clearing out any mismatch from the reweighting phase. a/kernel/sched/fair.c +++ b/kernel/sched/fair.c @@ -3972,7 +3972,7 @@ static void reweight_entity(struct cfs_rq *cfs_rq, struct sched_entity *se, se->deadline -= avruntime; se->rel_deadline = 1; if (curr && protect_slice(se)) { - se->vprot -= avruntime; + se->vprot = (time_after64(se->vprot, avruntime)) ? se->vprot - avruntime : 0; rel_vprot = true; } @@ -5608,6 +5608,8 @@ set_next_entity(struct cfs_rq *cfs_rq, struct sched_entity *se, bool first) if (first) set_protect_slice(cfs_rq, se); + else + se->vprot = se->vruntime; } Tested-by: Shubhang Kaushik Regards, Shubhang Kaushik --1275739760-1251320628-1771053657=:19292--