afs: Fix netns teardown to cancel the preallocation charger

Fix the teardown of an afs network namespace to make sure it cancels the
work item that keeps the preallocated rxrpc call/conn/peer queue charged
before incoming calls are disabled (i.e. listen 0).

Also, if net->live is false because the afs netns is being deleted, make
afs_charge_preallocation() skip charging and make afs_rx_new_call() avoid
requeuing the charger.

(This was found by AI review).

Fixes: 00e907127e6f ("rxrpc: Preallocate peers, conns and calls for incoming service requests")
Reported-by: Simon Horman <horms@kernel.org>
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Li Daming <d4n.for.sec@gmail.com>
cc: Ren Wei <n05ec@lzu.edu.cn>
cc: Marc Dionne <marc.dionne@auristor.com>
cc: Jeffrey Altman <jaltman@auristor.com>
cc: linux-afs@lists.infradead.org
cc: stable@kernel.org
Link: https://patch.msgid.link/20260609140911.838677-5-dhowells@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

diff --git a/fs/afs/rxrpc.c b/fs/afs/rxrpc.c
index 588f8de51167f8ab4ef3f3f104a05160d3bb2bc7..d5cfd24e815bdd14044a6da59692fab1a725ac21 100644 (file)
--- a/fs/afs/rxrpc.c
+++ b/fs/afs/rxrpc.c
@@ -127,6 +127,7 @@ void afs_close_socket(struct afs_net *net)
 {
        _enter("");
 
+       cancel_work_sync(&net->charge_preallocation_work);
        kernel_listen(net->socket, 0);
        flush_workqueue(afs_async_calls);
 
@@ -742,7 +743,7 @@ void afs_charge_preallocation(struct work_struct *work)
                container_of(work, struct afs_net, charge_preallocation_work);
        struct afs_call *call = net->spare_incoming_call;
 
-       for (;;) {
+       while (READ_ONCE(net->live)) {
                if (!call) {
                        call = afs_alloc_call(net, &afs_RXCMxxxx, GFP_KERNEL);
                        if (!call)
@@ -792,7 +793,8 @@ static void afs_rx_new_call(struct sock *sk, struct rxrpc_call *rxcall,
        if (!call->server)
                trace_afs_cm_no_server(call, rxrpc_kernel_remote_srx(call->peer));
 
-       queue_work(afs_wq, &net->charge_preallocation_work);
+       if (net->live)
+               queue_work(afs_wq, &net->charge_preallocation_work);
 }
 
 /*