]> git.ipfire.org Git - thirdparty/linux.git/commit
devlink: Fix parent ref leak on tc-bw failure
authorCosmin Ratiu <cratiu@nvidia.com>
Tue, 16 Jun 2026 11:06:33 +0000 (14:06 +0300)
committerJakub Kicinski <kuba@kernel.org>
Fri, 19 Jun 2026 01:02:29 +0000 (18:02 -0700)
commitba81a8b80f042038b9f73a4e5bb135de890b59bb
tree3e1ef6e21c5c7a6909ac859cd859d4ea3981a2d5
parentba45106342bbdd905651cb9fcefb8c11871d4c25
devlink: Fix parent ref leak on tc-bw failure

When a node is created via rate-new with tc-bw and a parent node,
devlink_nl_rate_set() executes the sequence of ops. It bails out on the
first failure and doesn't rollback anything. For most things that is
fine (setting some numbers), but the parent set can leak if there's
another failure after that.

That is precisely what happens when parent setting isn't the last block
in the function. After the referenced "Fixes" commit, when tc-bw fails
to be set the function bails out after having set the parent and
incremented its refcount.
There are two callers:
- devlink_nl_rate_set_doit() is fine, it just reports the error.
- but devlink_nl_rate_new_doit() frees the newly created node and leaks
  the parent refcnt.

Fix that by reordering the blocks so parent setting is last and adding a
comment explaining this so future modification preserve the ordering
(hopefully).

Fixes: 566e8f108fc7 ("devlink: Extend devlink rate API with traffic classes bandwidth management")
Signed-off-by: Cosmin Ratiu <cratiu@nvidia.com>
Reviewed-by: Carolina Jubran <cjubran@nvidia.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20260616110633.1449432-3-cratiu@nvidia.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/devlink/rate.c