lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Thu, 08 May 2008 12:55:32 +0900
From:	FUJITA Tomonori <fujita.tomonori@....ntt.co.jp>
To:	James.Bottomley@...senPartnership.com, jens.axboe@...cle.com
Cc:	fujita.tomonori@....ntt.co.jp, jesper.juhl@...il.com,
	linux-kernel@...r.kernel.org, linux-scsi@...r.kernel.org
Subject: Re: scsi_scan: WARNING: at include/linux/blkdev.h:431
	blk_queue_init_tags+0x107/0x120()

On Wed, 07 May 2008 17:40:26 -0500
James Bottomley <James.Bottomley@...senPartnership.com> wrote:

> On Fri, 2008-05-02 at 11:17 +0900, FUJITA Tomonori wrote:
> > On Fri, 2 May 2008 00:43:30 +0200 (CEST)
> > Jesper Juhl <jesper.juhl@...il.com> wrote:
> > 
> > > Hi,
> > > 
> > > For your information;
> > > 
> > > I just build and booted the tip of Linus' git tree (HEAD at 
> > > 886c35fbcf6fb2eee15687efc2d64d99b6ad9a4a) and got this in dmesg during 
> > > bootup : 
> > > 
> > > ------------[ cut here ]------------
> > > WARNING: at include/linux/blkdev.h:431 blk_queue_init_tags+0x107/0x120()
> > > Modules linked in:
> > > Pid: 432, comm: scsi_scan_0 Not tainted 2.6.25-07351-g886c35f #1
> > >  [<c0129684>] warn_on_slowpath+0x54/0x70
> > >  [<c017a7c3>] ? check_object+0xe3/0x1f0
> > >  [<c0200ae9>] ? init_tag_map+0x59/0xb0
> > >  [<c014b1e7>] ? mark_held_locks+0x47/0x80
> > >  [<c017cbeb>] ? __kmalloc+0x6b/0x100
> > >  [<c014b379>] ? trace_hardirqs_on+0xb9/0x150
> > >  [<c0200ae9>] ? init_tag_map+0x59/0xb0
> > >  [<c0200ae9>] ? init_tag_map+0x59/0xb0
> > >  [<c0200ae9>] ? init_tag_map+0x59/0xb0
> > >  [<c0200c34>] ? __blk_queue_init_tags+0x24/0x70
> > >  [<c0200c45>] ? __blk_queue_init_tags+0x35/0x70
> > >  [<c0200e57>] blk_queue_init_tags+0x107/0x120
> > >  [<c02b5a91>] ahc_platform_set_tags+0x191/0x1d0
> > >  [<c02b5bd3>] ahc_linux_slave_configure+0x103/0x170
> > >  [<c02a1f65>] scsi_probe_and_add_lun+0x6e5/0x920
> > >  [<c02a2468>] __scsi_scan_target+0xe8/0x5d0
> > >  [<c0108e17>] ? native_sched_clock+0x87/0xd0
> > >  [<c0148c89>] ? get_lock_stats+0x29/0x50
> > >  [<c0148cbd>] ? put_lock_stats+0xd/0x30
> > >  [<c014b1e7>] ? mark_held_locks+0x47/0x80
> > >  [<c035e247>] ? mutex_lock_nested+0x1b7/0x2a0
> > >  [<c014b379>] ? trace_hardirqs_on+0xb9/0x150
> > >  [<c035e23a>] ? mutex_lock_nested+0x1aa/0x2a0
> > >  [<c02a2a1a>] ? scsi_scan_host_selected+0x3a/0xf0
> > >  [<c02a29c0>] scsi_scan_channel+0x70/0x90
> > >  [<c02a2a9d>] scsi_scan_host_selected+0xbd/0xf0
> > >  [<c02a2b50>] ? do_scan_async+0x0/0x140
> > >  [<c02a2b48>] do_scsi_scan_host+0x78/0x80
> > >  [<c02a2b64>] do_scan_async+0x14/0x140
> > >  [<c011f6e8>] ? complete+0x48/0x60
> > >  [<c02a2b50>] ? do_scan_async+0x0/0x140
> > >  [<c013c8d2>] kthread+0x42/0x70
> > >  [<c013c890>] ? kthread+0x0/0x70
> > >  [<c0103ceb>] kernel_thread_helper+0x7/0x1c
> > 
> > The problem is that the commit 75ad23b expects that we hold the queue
> > lock for __blk_queue_free_tags, blk_queue_free_tags and
> > blk_queue_init_tags but we haven't.
> > 
> > The simple fix is using queue_flag_set/clear_unlocked for them, then
> > it should work as before. However, it would be better to hold the
> > queue lock for blk_queue_free_tags and blk_queue_init_tags (we can
> > hold the queue lock in scsi_activate_tcq and scsi_deactivate_tcq).
> 
> So is this the fix that everyone agrees on?  And if so, whose tree is it
> going through (I tend to think block, since the original breakage came
> from the block tree).

The patch is fine from the perspective of the SCSI mid-layer. But it
would be not from the perspective of the block layer. For example,
blk_queue_init_tags is expected to be called with holding the queue
lock (since it could call blk_queue_resize_tags internally) though
only the SCSI mid-layer uses those APIs for now.

Jens, what do you think?

For your convenience, here's the same patch with a proper description
and my signed-off.


==
From: FUJITA Tomonori <fujita.tomonori@....ntt.co.jp>
Subject: [PATCH] block: fix the queue locking test on tag APIs

The commit 75ad23bc0fcb4f992a5d06982bf0857ab1738e9e expects that
 __blk_queue_free_tags, blk_queue_free_tags and blk_queue_init_tags
are called with holding the queue lock but the SCSI mid-layer has not
(and only the SCSI mid-layer uses them).

This changes them to use queue_flag_set/clear_unlocked. It should work
as before.

Signed-off-by: FUJITA Tomonori <fujita.tomonori@....ntt.co.jp>
Cc: James Bottomley <James.Bottomley@...senPartnership.com>
Cc: Jens Axboe <jens.axboe@...cle.com>
---
 block/blk-tag.c |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/block/blk-tag.c b/block/blk-tag.c
index de64e04..d4e21cd 100644
--- a/block/blk-tag.c
+++ b/block/blk-tag.c
@@ -70,7 +70,7 @@ void __blk_queue_free_tags(struct request_queue *q)
 	__blk_free_tags(bqt);
 
 	q->queue_tags = NULL;
-	queue_flag_clear(QUEUE_FLAG_QUEUED, q);
+	queue_flag_clear_unlocked(QUEUE_FLAG_QUEUED, q);
 }
 
 /**
@@ -98,7 +98,7 @@ EXPORT_SYMBOL(blk_free_tags);
  **/
 void blk_queue_free_tags(struct request_queue *q)
 {
-	queue_flag_clear(QUEUE_FLAG_QUEUED, q);
+	queue_flag_clear_unlocked(QUEUE_FLAG_QUEUED, q);
 }
 EXPORT_SYMBOL(blk_queue_free_tags);
 
@@ -197,7 +197,7 @@ int blk_queue_init_tags(struct request_queue *q, int depth,
 	 * assign it, all done
 	 */
 	q->queue_tags = tags;
-	queue_flag_set(QUEUE_FLAG_QUEUED, q);
+	queue_flag_set_unlocked(QUEUE_FLAG_QUEUED, q);
 	INIT_LIST_HEAD(&q->tag_busy_list);
 	return 0;
 fail:
-- 
1.5.3.6

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ