linux-kernel - Re: [PATCH] softlockup: fix NMI hangs due to lock race

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 28 May 2008 08:31:17 -0500
From:	Jason Wessel <jason.wessel@...driver.com>
To:	Peter Zijlstra <a.p.zijlstra@...llo.nl>
CC:	Ingo Molnar <mingo@...e.hu>, lkml <linux-kernel@...r.kernel.org>,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: [PATCH] softlockup: fix NMI hangs due to lock race - 2.6.26-rc
 regression

Peter Zijlstra wrote:
> On Tue, 2008-05-27 at 12:23 -0500, Jason Wessel wrote:
>> The touch_nmi_watchdog() routine on x86 ultimately calls
>> touch_softlockup_watchdog().  The problem is that to touch the
>> softlockup watchdog, the cpu_clock code has to be called which could
>> involve multiple cpu locks and can lead to a hard hang if one of the
>> locks is held by a processor that is not going to return anytime soon
>> (such as could be the case with kgdb or perhaps even with some other
>> kind of exception).
>>
>> This patch causes the public version of the
>> touch_softlockup_watchdog() to defer the cpu clock access to a later
>> point.
>>
>> The test case for this problem is to use the following kernel config
>> options:
>>
>> CONFIG_KGDB_TESTS=y
>> CONFIG_KGDB_TESTS_ON_BOOT=y
>> CONFIG_KGDB_TESTS_BOOT_STRING="V1F100I100000"
>>
>> It should be noted that kgdb test suite and these options were not
>> available until 2.6.26-rc2, so it was necessary to patch the kgdb
>> test suite during the bisection.
>>
>> I would consider this patch a regression fix because the problem first
>> appeared in commit 27ec4407790d075c325e1f4da0a19c56953cce23 when some
>> logic was added to try to periodically sync the clocks.  It was
>> possible to work around this particular problem by simply not
>> performing the sync anytime the system was in a critical context.
>> This was ok until commit 3e51f33fcc7f55e6df25d15b55ed10c8b4da84cd,
>> which added config option CONFIG_HAVE_UNSTABLE_SCHED_CLOCK and some
>> multi-cpu locks to sync the clocks.  It became clear that accessing
>> this code from an nmi was the source of the lockups.  Avoiding the
>> access to the low level clock code from an code inside the NMI
>> processing also fixed the problem with the 27ec44... commit.
>
>
> While I do not object to this approach, I ran into something similar
> while poking at .25-rt.
>
> How about we make sched_clock_cpu() use trylocks to update the ->clock
> value, and on failure just return the ->clock without updating it?
>


If the try locks are used it will certainly solve the NMI problem, but
it seems that the probability that lock could not be obtained would
increase for the "normal" operation case.  In the "normal" operation
case the lock would generally be available in a few more cpu ticks and
the update would proceed correctly.  It is not clear to me if there is
some ramification of returning the ->clock without the update in this
case, which is why I opted for deferring the update in the NMI case.

Perhaps if you return the clock without updating the unstable clock
source is more unstable?  It would be best to figure out how to
address regression so as to observe the intent of seemly more complex
clock logic.

Jason.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/