From: Frederic Weisbecker <frederic@kernel.org>
To: Andrew Morton <akpm@linux-foundation.org>
Cc: Thomas Gleixner <tglx@linutronix.de>,
LKML <linux-kernel@vger.kernel.org>,
Hillf Danton <hdanton@sina.com>, Tejun Heo <tj@kernel.org>,
syzbot+943d34fa3cf2191e3068@syzkaller.appspotmail.com
Subject: Re: [PATCH] kthread: Unpark only parked kthread
Date: Wed, 2 Oct 2024 16:15:05 +0200 [thread overview]
Message-ID: <Zv1VadXrQVwqDWE9@localhost.localdomain> (raw)
In-Reply-To: <20240926132130.b1d1f6943d225368d3062d5e@linux-foundation.org>
Le Thu, Sep 26, 2024 at 01:21:30PM -0700, Andrew Morton a écrit :
> On Fri, 13 Sep 2024 23:46:34 +0200 Frederic Weisbecker <frederic@kernel.org> wrote:
>
> > Calling into kthread unparking unconditionally is mostly harmless when
> > the kthread is already unparked. The wake up is then simply ignored
> > because the target is not in TASK_PARKED state.
> >
> > However if the kthread is per CPU, the wake up is preceded by a call
> > to kthread_bind() which expects the task to be inactive and in
> > TASK_PARKED state, which obviously isn't the case if it is unparked.
> >
> > As a result, calling kthread_stop() on an unparked per-cpu kthread
> > triggers such a warning:
> >
> > WARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525
> > <TASK>
> > kthread_stop+0x17a/0x630 kernel/kthread.c:707
> > destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810
> > wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257
> > netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693
> > default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769
> > ops_exit_list net/core/net_namespace.c:178 [inline]
> > cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640
> > process_one_work kernel/workqueue.c:3231 [inline]
> > process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
> > worker_thread+0x86d/0xd70 kernel/workqueue.c:3393
> > kthread+0x2f0/0x390 kernel/kthread.c:389
> > ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
> > ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
> > </TASK>
> >
> > Fix this with skipping unecessary unparking while stopping a kthread.
>
> How does userspace trigger this? Is it an issue in current mainline?
I guess it takes some module unload performing a destroy workqueue to
trigger this. And it's an issue in current mainline.
>
> Should we backport the fix into -stable kernels (depends on the answers
> to the above questions).
>
> It looks like the issue is old, so a Fixes: probably isn't needed. But
> as the issue is old, why did it come to light now?
It's hard to tell. The core of the issue is there for a long while but
the conditions for it to really happen in practice is probably since:
5c25b5ff89f0 (workqueue: Tag bound workers with KTHREAD_IS_PER_CPU)
So it might deserve a Fixes: actually.
Thanks.
next prev parent reply other threads:[~2024-10-02 14:15 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-09-13 21:46 Frederic Weisbecker
2024-09-26 12:07 ` Frederic Weisbecker
2024-09-26 20:21 ` Andrew Morton
2024-10-02 14:15 ` Frederic Weisbecker [this message]
2024-10-02 21:08 ` Andrew Morton
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Zv1VadXrQVwqDWE9@localhost.localdomain \
--to=frederic@kernel.org \
--cc=akpm@linux-foundation.org \
--cc=hdanton@sina.com \
--cc=linux-kernel@vger.kernel.org \
--cc=syzbot+943d34fa3cf2191e3068@syzkaller.appspotmail.com \
--cc=tglx@linutronix.de \
--cc=tj@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®