Re: [PATCH 4/8] mm/slab: introduce kfree_rcu_nolock()

["Harry Yoo (Oracle)" <harry@kernel.org>]

On Wed, Apr 22, 2026 at 04:42:28PM +0200, Uladzislau Rezki wrote:
> I think a better option is to add a separate kvfree_rcu_nmi() helper,
> or similar, and avoid complicating the generic implementation. Otherwise,
> the common path risks becoming harder to maintain.
> 
> Below is a simple implementation.

I'm happy to keep things simple as long as that doesn't mean
compromising performance.

We can discuss that.

> <patch>
> diff --git a/mm/slab_common.c b/mm/slab_common.c
> index d5a70a831a2a..f6ae3795ec6c 100644
> --- a/mm/slab_common.c
> +++ b/mm/slab_common.c
> @@ -1402,6 +1402,14 @@ struct kfree_rcu_cpu {
>  
>  	struct llist_head bkvcache;
>  	int nr_bkv_objs;
> +
> +	/* For NMI context. */

I think "unknown context" is a better term since it includes
NMI context as well as other contexts.
(I'm also slightly moving towards the term, :D)

> +	struct llist_head drain_list;
> +	struct llist_node *pending_list;
> +
> +	struct rcu_work drain_rcu_work;
> +	struct irq_work drain_irqwork;
> +	atomic_t drain_in_progress;
>  };

[... changing the order of functions a little bit to help review ...]

>  static DEFINE_PER_CPU(struct kfree_rcu_cpu, krc) = {
> @@ -1926,6 +1934,69 @@ void __init kfree_rcu_scheduler_running(void)
>  	}
>  }
> +
> +/*
> + * Queue a request for lazy invocation.
> + * Context: For NMI contexts or unknown contexts only.
> + */
> +void
> +kvfree_call_rcu_nolock(struct rcu_head *head, void *ptr)
> +{
> +	struct kfree_rcu_cpu *krcp = this_cpu_ptr(&krc);
> +
> +	head->func = ptr;
> +	llist_add((struct llist_node *) head, &krcp->drain_list);
> +

So it inserts objects to the list,

> +	if (rcu_scheduler_active == RCU_SCHEDULER_RUNNING) {
> +		/* Only first(and only one) user rings the bell. */
> +		if (!atomic_cmpxchg(&krcp->drain_in_progress, 0, 1))
> +			irq_work_queue(&krcp->drain_irqwork);

and only the task that succeeds cmpxchg queues the IRQ work.
The IRQ work queues an RCU work which iterates over the
list of objects and frees them.

Draining will be performed a little bit more frequently
(every call_rcu_hurry() + work queue delay) compared to the ordinary
kvfree_rcu path (every 1-5 seconds)

The question is how frequent is too frequent, when it comes to
additional IRQ/RCU work invocations affecting performance.

> +static void
> +kvfree_rcu_nolock_irqwork(struct irq_work *irqwork)
> +{
> +	struct kfree_rcu_cpu *krcp =
> +		container_of(irqwork, struct kfree_rcu_cpu, drain_irqwork); > +	bool queued;
> +
> +	krcp->pending_list = llist_del_all(&krcp->drain_list);
> +	ASSERT_EXCLUSIVE_WRITER(krcp->pending_list);
> +	queued = queue_rcu_work(rcu_reclaim_wq, &krcp->drain_rcu_work);
> +	WARN_ON_ONCE(!queued);
> +}
>
> +static void
> +kvfree_rcu_nolock_work(struct work_struct *work)
> +{
> +	struct kfree_rcu_cpu *krcp = container_of(to_rcu_work(work),
> +		struct kfree_rcu_cpu, drain_rcu_work);
> +	struct llist_node *pos, *n, *pending;
> +	bool queued;
> +
> +	pending = krcp->pending_list;
> +	krcp->pending_list = NULL;
> +	ASSERT_EXCLUSIVE_WRITER(krcp->pending_list);
> +
> +	llist_for_each_safe(pos, n, pending) {
> +		struct rcu_head *rcu = (struct rcu_head *) pos;
> +		void *ptr = (void *) rcu->func;
> +		kvfree(ptr);
> +	}

This is pretty similar to what a kvfree_rcu(two_arg) call does
in the slowpath (kvfree_rcu_list), except that we don't maintain
RCU state explicitly.

How much performance do we sacrifice compared to
letting them go through the kvfree_rcu() fastpath?

> +	atomic_set(&krcp->drain_in_progress, 0);
> +	if (!llist_empty(&krcp->drain_list)) {
> +		if (!atomic_cmpxchg(&krcp->drain_in_progress, 0, 1)) {
> +			krcp->pending_list = llist_del_all(&krcp->drain_list);
> +			ASSERT_EXCLUSIVE_WRITER(krcp->pending_list);
> +			queued = queue_rcu_work(rcu_reclaim_wq, &krcp->drain_rcu_work);
> +			WARN_ON_ONCE(!queued);
> +		}
> +	}
> +}
> +	}
> +}
> +EXPORT_SYMBOL_GPL(kvfree_call_rcu_nolock);
> +
>  /*
>   * Queue a request for lazy invocation of the appropriate free routine
>   * after a grace period.  Please note that three paths are maintained,

-- 
Cheers,
Harry / Hyeonggon