[PATCH 1/4] sched/fair: free allocated memory on error in alloc_fair_sched_group()

From: Aaron Lu
Date: Tue Jul 18 2023 - 09:41:39 EST


There is one struct cfs_rq and one struct se on each cpu for a taskgroup
and when allocation for tg->cfs_rq[X] failed, the already allocated
tg->cfs_rq[0]..tg->cfs_rq[X-1] should be freed. The same for tg->se.

Signed-off-by: Aaron Lu <aaron.lu@xxxxxxxxx>
---
kernel/sched/fair.c | 23 ++++++++++++++++-------
1 file changed, 16 insertions(+), 7 deletions(-)

diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c
index a80a73909dc2..0f913487928d 100644
--- a/kernel/sched/fair.c
+++ b/kernel/sched/fair.c
@@ -12443,10 +12443,10 @@ int alloc_fair_sched_group(struct task_group *tg, struct task_group *parent)

tg->cfs_rq = kcalloc(nr_cpu_ids, sizeof(cfs_rq), GFP_KERNEL);
if (!tg->cfs_rq)
- goto err;
+ return 0;
tg->se = kcalloc(nr_cpu_ids, sizeof(se), GFP_KERNEL);
if (!tg->se)
- goto err;
+ goto err_free_rq_pointer;

tg->shares = NICE_0_LOAD;

@@ -12456,12 +12456,12 @@ int alloc_fair_sched_group(struct task_group *tg, struct task_group *parent)
cfs_rq = kzalloc_node(sizeof(struct cfs_rq),
GFP_KERNEL, cpu_to_node(i));
if (!cfs_rq)
- goto err;
+ goto err_free;

se = kzalloc_node(sizeof(struct sched_entity_stats),
GFP_KERNEL, cpu_to_node(i));
if (!se)
- goto err_free_rq;
+ goto err_free;

init_cfs_rq(cfs_rq);
init_tg_cfs_entry(tg, cfs_rq, se, i, parent->se[i]);
@@ -12470,9 +12470,18 @@ int alloc_fair_sched_group(struct task_group *tg, struct task_group *parent)

return 1;

-err_free_rq:
- kfree(cfs_rq);
-err:
+err_free:
+ for_each_possible_cpu(i) {
+ kfree(tg->cfs_rq[i]);
+ kfree(tg->se[i]);
+
+ if (!tg->cfs_rq[i] && !tg->se[i])
+ break;
+ }
+ kfree(tg->se);
+err_free_rq_pointer:
+ kfree(tg->cfs_rq);
+
return 0;
}

--
2.41.0