net: sched: Fix use after free in red_enqueue()
[ Upstream commit
38c8f9c083bb317c50b7005b60f894ed2ce55ee9 ]
We can't use "skb" again after passing it to qdisc_enqueue(). This is
basically identical to commit
258f79873422 ("sch_sfb: Also store skb
len before calling child enqueue").
Fixes: aa2a87c46c4f ("sch_red: update backlog as well")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>