]> git.ipfire.org Git - thirdparty/linux.git/commitdiff
rhashtable: Add bucket_table_free_atomic() helper
authorUladzislau Rezki (Sony) <urezki@gmail.com>
Tue, 28 Apr 2026 16:14:19 +0000 (18:14 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 5 May 2026 08:12:07 +0000 (16:12 +0800)
rhashtable_insert_rehash() allocates a new bucket table
with GFP_ATOMIC, as it is called from an RCU read-side
critical section.

If rhashtable_rehash_attach() then fails, the new table
is freed via kvfree(). This is unsafe, since kvfree() may
fall back to vfree() for vmalloc-backed allocations, which
can sleep and trigger:

  BUG: sleeping function called from invalid context

Add bucket_table_free_atomic(), which uses kvfree_atomic()
so the table can be freed safely from non-sleeping context.

Signed-off-by: Uladzislau Rezki (Sony) <urezki@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
lib/rhashtable.c

index 426d4e381f136482b25f12058e09521b1f694277..04b3a808fca9f2087e95b1d2312e8e9981e8a8ba 100644 (file)
@@ -114,6 +114,14 @@ static void bucket_table_free(const struct bucket_table *tbl)
        kvfree(tbl);
 }
 
+static void bucket_table_free_atomic(const struct bucket_table *tbl)
+{
+       if (tbl->nest)
+               nested_bucket_table_free(tbl);
+
+       kvfree_atomic(tbl);
+}
+
 static void bucket_table_free_rcu(struct rcu_head *head)
 {
        bucket_table_free(container_of(head, struct bucket_table, rcu));
@@ -496,7 +504,7 @@ static int rhashtable_insert_rehash(struct rhashtable *ht,
 
        err = rhashtable_rehash_attach(ht, tbl, new_tbl);
        if (err) {
-               bucket_table_free(new_tbl);
+               bucket_table_free_atomic(new_tbl);
                if (err == -EEXIST)
                        err = 0;
        } else