| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 15 Mar 2018 23:09:45 +0900
From: Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp>
To: ktkhai@...tuozzo.com, akpm@...ux-foundation.org, tj@...nel.org
Cc: cl@...ux.com, linux-mm@...ck.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] percpu: Allow to kill tasks doing pcpu_alloc() and waiting for pcpu_balance_workfn()
Kirill Tkhai wrote:
> >>>>> My memory is weak and our documentation is awful.? What does
> >>>>> mutex_lock_killable() actually do and how does it differ from
> >>>>> mutex_lock_interruptible()?? Userspace tasks can run pcpu_alloc() and I
> >>>>
> >>>> IIRC, killable listens only to SIGKILL.
> >
> > I think that killable listens to any signal which results in termination of
> > that process. For example, if a process is configured to terminate upon SIGINT,
> > fatal_signal_pending() becomes true upon SIGINT.
>
> It shouldn't act on SIGINT:
>
> static inline int __fatal_signal_pending(struct task_struct *p)
> {
> return unlikely(sigismember(&p->pending.signal, SIGKILL));
> }
>
> static inline int fatal_signal_pending(struct task_struct *p)
> {
> return signal_pending(p) && __fatal_signal_pending(p);
> }
>
Really? Compile below module and try to load using insmod command.
----------------------------------------
#include <linux/module.h>
#include <linux/sched/signal.h>
static int __init test_init(void)
{
static DEFINE_MUTEX(lock);
mutex_lock(&lock);
printk(KERN_INFO "signal_pending()=%d fatal_signal_pending()=%d\n", signal_pending(current), fatal_signal_pending(current));
if (mutex_lock_killable(&lock)) {
printk(KERN_INFO "signal_pending()=%d fatal_signal_pending()=%d\n", signal_pending(current), fatal_signal_pending(current));
mutex_unlock(&lock);
return -EINTR;
}
mutex_unlock(&lock);
mutex_unlock(&lock);
return -EINVAL;
}
module_init(test_init);
MODULE_LICENSE("GPL");
----------------------------------------
What you will see (apart from lockdep warning) upon SIGINT or SIGHUP is
signal_pending()=0 fatal_signal_pending()=0
signal_pending()=1 fatal_signal_pending()=1
which means that fatal_signal_pending() becomes true without SIGKILL.
If insmod is executed via nohup wrapper, insmod does not terminate upon SIGHUP.
> The problem is that net namespace init/exit methods are not made to be executed in parallel,
> and exclusive mutex is used there. I'm working on solution at the moment, and you may find
> that I've done in net-next.git, if you are interested.
I see. Despite your patch, torture tests using your test case still allows OOM panic.
----------------------------------------
[ 860.420677] Out of memory: Kill process 12727 (a.out) score 0 or sacrifice child
[ 860.423228] Killed process 12727 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.428125] oom_reaper: reaped process 12727 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.438257] Out of memory: Kill process 12728 (a.out) score 0 or sacrifice child
[ 860.440709] Killed process 12728 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.445840] oom_reaper: reaped process 12728 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.456815] Out of memory: Kill process 12729 (a.out) score 0 or sacrifice child
[ 860.459618] Killed process 12729 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.464686] oom_reaper: reaped process 12729 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.489807] Out of memory: Kill process 12730 (a.out) score 0 or sacrifice child
[ 860.492495] Killed process 12730 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.501268] oom_reaper: reaped process 12730 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.536786] Out of memory: Kill process 12731 (a.out) score 0 or sacrifice child
[ 860.539392] Killed process 12731 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.544130] oom_reaper: reaped process 12731 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.553587] Out of memory: Kill process 12732 (a.out) score 0 or sacrifice child
[ 860.556359] Killed process 12732 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.559639] oom_reaper: reaped process 12732 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.564972] Out of memory: Kill process 12733 (a.out) score 0 or sacrifice child
[ 860.567603] Killed process 12733 (a.out) total-vm:4176kB, anon-rss:84kB, file-rss:0kB, shmem-rss:0kB
[ 860.573416] oom_reaper: reaped process 12733 (a.out), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 860.579675] Out of memory: Kill process 762 (dbus-daemon) score 0 or sacrifice child
[ 860.582334] Killed process 762 (dbus-daemon) total-vm:24560kB, anon-rss:480kB, file-rss:0kB, shmem-rss:0kB
[ 860.590607] systemd invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0
[ 860.594065] systemd cpuset=/ mems_allowed=0
[ 860.596172] CPU: 1 PID: 1 Comm: systemd Kdump: loaded Tainted: G O 4.16.0-rc5-next-20180315 #695
[ 860.599401] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/19/2017
[ 860.602676] Call Trace:
[ 860.604118] dump_stack+0x5f/0x8b
[ 860.605741] dump_header+0x69/0x431
[ 860.607380] ? rcu_read_unlock_special+0x2cc/0x2f0
[ 860.609342] out_of_memory+0x4d8/0x720
[ 860.611044] __alloc_pages_nodemask+0x12c5/0x1410
[ 860.613041] filemap_fault+0x479/0x640
[ 860.614725] __xfs_filemap_fault.constprop.0+0x5f/0x1f0
[ 860.616717] __do_fault+0x15/0xa0
[ 860.618294] __handle_mm_fault+0xcb2/0x1140
[ 860.620031] handle_mm_fault+0x186/0x350
[ 860.621720] __do_page_fault+0x2a7/0x510
[ 860.623402] do_page_fault+0x2c/0x2a0
[ 860.624999] ? page_fault+0x2f/0x50
[ 860.626548] page_fault+0x45/0x50
[ 860.628045] RIP: 61fa2380:0x55c6609099a0
[ 860.629805] RSP: 608a920b:00007ffc83a98620 EFLAGS: 7fdbd590e740
[ 860.630698] Mem-Info:
[ 860.634428] active_anon:3783 inactive_anon:3987 isolated_anon:0
[ 860.634428] active_file:3 inactive_file:0 isolated_file:0
[ 860.634428] unevictable:0 dirty:0 writeback:0 unstable:0
[ 860.634428] slab_reclaimable:124666 slab_unreclaimable:694094
[ 860.634428] mapped:37 shmem:6270 pagetables:2087 bounce:0
[ 860.634428] free:21037 free_pcp:299 free_cma:0
[ 860.646361] Node 0 active_anon:15132kB inactive_anon:15948kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148kB dirty:0kB writeback:0kB shmem:25080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 860.653706] Node 0 DMA free:14828kB min:284kB low:352kB high:420kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15988kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 860.660693] lowmem_reserve[]: 0 2684 3642 3642
[ 860.662661] Node 0 DMA32 free:53532kB min:49596kB low:61992kB high:74388kB active_anon:3420kB inactive_anon:5048kB active_file:192kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129216kB managed:2771556kB mlocked:0kB kernel_stack:5184kB pagetables:7680kB bounce:0kB free_pcp:444kB local_pcp:76kB free_cma:0kB
[ 860.671523] lowmem_reserve[]: 0 0 958 958
[ 860.673464] Node 0 Normal free:15616kB min:17696kB low:22120kB high:26544kB active_anon:11948kB inactive_anon:10900kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:981136kB mlocked:0kB kernel_stack:2640kB pagetables:636kB bounce:0kB free_pcp:892kB local_pcp:648kB free_cma:0kB
[ 860.682664] lowmem_reserve[]: 0 0 0 0
[ 860.684412] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 2*4096kB (M) = 14828kB
[ 860.688963] Node 0 DMA32: 565*4kB (UM) 568*8kB (UM) 1037*16kB (UM) 42*32kB (ME) 26*64kB (UME) 15*128kB (ME) 15*256kB (UM) 8*512kB (ME) 7*1024kB (UME) 3*2048kB (M) 1*4096kB (M) = 53668kB
[ 860.694161] Node 0 Normal: 67*4kB (ME) 1218*8kB (UME) 348*16kB (UME) 1*32kB (E) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 15612kB
[ 860.698195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 860.701105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 860.703682] 6267 total pagecache pages
[ 860.705388] 0 pages in swap cache
[ 860.707457] Swap cache stats: add 0, delete 0, find 0/0
[ 860.709624] Free swap = 0kB
[ 860.711105] Total swap = 0kB
[ 860.712841] 1048445 pages RAM
[ 860.714320] 0 pages HighMem/MovableOnly
[ 860.715970] 106296 pages reserved
[ 860.717625] 0 pages hwpoisoned
[ 860.719086] Unreclaimable slab info:
[ 860.720677] Name Used Total
[ 860.722685] scsi_sense_cache 44KB 44KB
[ 860.724517] RAWv6 237460KB 237460KB
[ 860.726353] TCPv6 118KB 118KB
[ 860.728183] sgpool-128 192KB 192KB
[ 860.730434] sgpool-16 64KB 64KB
[ 860.732303] mqueue_inode_cache 31KB 31KB
[ 860.734302] xfs_buf 584KB 640KB
[ 860.736188] xfs_ili 134KB 134KB
[ 860.738154] xfs_efd_item 110KB 110KB
[ 860.740163] xfs_trans 31KB 31KB
[ 860.742707] xfs_ifork 108KB 108KB
[ 860.744781] xfs_da_state 63KB 63KB
[ 860.747019] xfs_btree_cur 31KB 31KB
[ 860.748845] bio-2 47KB 47KB
[ 860.750647] UNIX 273KB 273KB
[ 860.752534] RAW 277018KB 277018KB
[ 860.754339] UDP 19861KB 19861KB
[ 860.756221] tw_sock_TCP 7KB 7KB
[ 860.758115] request_sock_TCP 7KB 7KB
[ 860.759851] TCP 120KB 120KB
[ 860.761508] hugetlbfs_inode_cache 63KB 63KB
[ 860.763700] eventpoll_pwq 15KB 15KB
[ 860.765423] inotify_inode_mark 52KB 52KB
[ 860.767707] request_queue 94KB 94KB
[ 860.769379] blkdev_ioc 39KB 39KB
[ 860.771060] biovec-(1<<(21-12)) 784KB 912KB
[ 860.772759] biovec-128 192KB 192KB
[ 860.775225] biovec-64 128KB 128KB
[ 860.777187] uid_cache 15KB 15KB
[ 860.779341] dmaengine-unmap-2 16KB 16KB
[ 860.781330] skbuff_head_cache 184KB 216KB
[ 860.783001] file_lock_cache 31KB 31KB
[ 860.784593] file_lock_ctx 15KB 15KB
[ 860.786172] net_namespace 55270KB 55270KB
[ 860.787706] shmem_inode_cache 980KB 980KB
[ 860.789349] task_delay_info 138KB 179KB
[ 860.791090] taskstats 23KB 23KB
[ 860.792623] proc_dir_entry 142317KB 142317KB
[ 860.794287] pde_opener 15KB 15KB
[ 860.796069] seq_file 31KB 31KB
[ 860.797641] sigqueue 19KB 19KB
[ 860.799060] kernfs_node_cache 173844KB 173844KB
[ 860.800572] mnt_cache 141KB 141KB
[ 860.802101] filp 656KB 656KB
[ 860.803624] names_cache 256KB 256KB
[ 860.805107] key_jar 31KB 31KB
[ 860.806655] vm_area_struct 1293KB 1726KB
[ 860.808074] mm_struct 789KB 1012KB
[ 860.809482] files_cache 1330KB 1330KB
[ 860.811777] signal_cache 998KB 1606KB
[ 860.813835] sighand_cache 1610KB 1990KB
[ 860.815698] task_struct 3795KB 4766KB
[ 860.817247] cred_jar 368KB 460KB
[ 860.818819] anon_vma 1457KB 1747KB
[ 860.820406] pid 1534KB 2196KB
[ 860.822081] Acpi-Operand 480KB 480KB
[ 860.823955] Acpi-State 27KB 27KB
[ 860.825518] Acpi-Namespace 179KB 179KB
[ 860.827060] numa_policy 15KB 15KB
[ 860.828772] trace_event_file 90KB 90KB
[ 860.830696] ftrace_event_field 95KB 95KB
[ 860.832241] pool_workqueue 144KB 144KB
[ 860.833746] task_group 599KB 630KB
[ 860.835272] page->ptl 362KB 411KB
[ 860.836755] dma-kmalloc-512 16KB 16KB
[ 860.838274] kmalloc-8192 211320KB 211320KB
[ 860.839748] kmalloc-4096 631748KB 631748KB
[ 860.841248] kmalloc-2048 529296KB 529296KB
[ 860.843094] kmalloc-1024 79300KB 79300KB
[ 860.844575] kmalloc-512 192744KB 192744KB
[ 860.847059] kmalloc-256 24292KB 24292KB
[ 860.848747] kmalloc-192 56959KB 56959KB
[ 860.850504] kmalloc-128 77732KB 77732KB
[ 860.852197] kmalloc-96 1426KB 1519KB
[ 860.853936] kmalloc-64 19192KB 19192KB
[ 860.855454] kmalloc-32 1368KB 1368KB
[ 860.856988] kmalloc-16 336KB 336KB
[ 860.858478] kmalloc-8 864KB 864KB
[ 860.859990] kmem_cache_node 20KB 20KB
[ 860.861448] kmem_cache 78KB 78KB
[ 860.863006] Kernel panic - not syncing: Out of memory and no killable processes...
[ 860.863006]
[ 860.866069] CPU: 3 PID: 1 Comm: systemd Kdump: loaded Tainted: G O 4.16.0-rc5-next-20180315 #695
[ 860.868829] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/19/2017
[ 860.871926] Call Trace:
[ 860.872850] dump_stack+0x5f/0x8b
[ 860.873965] panic+0xde/0x231
[ 860.875005] out_of_memory+0x4e4/0x720
[ 860.876218] __alloc_pages_nodemask+0x12c5/0x1410
[ 860.877645] filemap_fault+0x479/0x640
[ 860.878842] __xfs_filemap_fault.constprop.0+0x5f/0x1f0
[ 860.880542] __do_fault+0x15/0xa0
[ 860.881674] __handle_mm_fault+0xcb2/0x1140
[ 860.883004] handle_mm_fault+0x186/0x350
[ 860.884283] __do_page_fault+0x2a7/0x510
[ 860.885576] do_page_fault+0x2c/0x2a0
[ 860.886805] ? page_fault+0x2f/0x50
[ 860.888003] page_fault+0x45/0x50
[ 860.889169] RIP: 61fa2380:0x55c6609099a0
----------------------------------------
Powered by blists - more mailing lists