2020-09-27 05:59:54

by Zhang, Qiang

Subject: [PATCH v3] kthread_worker: Prevent queuing delayed work from timer_fn when it is being canceled

From: Zqiang <[email protected]>

There is a small race window when a delayed work is being canceled and
the work still might be queued from the timer_fn:

CPU0 CPU1
kthread_cancel_delayed_work_sync()
__kthread_cancel_work_sync()
__kthread_cancel_work()
work->canceling++;
kthread_delayed_work_timer_fn()
kthread_insert_work();

BUG: kthread_insert_work() should not get called when work->canceling
is set.

Reviewed-by: Petr Mladek <[email protected]>
Signed-off-by: Zqiang <[email protected]>
---
v1->v2->v3:
Change the description of the problem and add 'Reviewed-by' tags.

kernel/kthread.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/kernel/kthread.c b/kernel/kthread.c
index 3edaa380dc7b..85a2c9b32049 100644
--- a/kernel/kthread.c
+++ b/kernel/kthread.c
@@ -897,7 +897,8 @@ void kthread_delayed_work_timer_fn(struct timer_list *t)
/* Move the work from worker->delayed_work_list. */
WARN_ON_ONCE(list_empty(&work->node));
list_del_init(&work->node);
- kthread_insert_work(worker, work, &worker->work_list);
+ if (!work->canceling)
+ kthread_insert_work(worker, work, &worker->work_list);

raw_spin_unlock_irqrestore(&worker->lock, flags);
}
--
2.17.1

2020-09-30 16:00:25

by Tejun Heo

Subject: Re: [PATCH v3] kthread_worker: Prevent queuing delayed work from timer_fn when it is being canceled

On Sun, Sep 27, 2020 at 01:54:49PM +0800, [email protected] wrote:
> From: Zqiang <[email protected]>
>
> There is a small race window when a delayed work is being canceled and
> the work still might be queued from the timer_fn:
>
> CPU0 CPU1
> kthread_cancel_delayed_work_sync()
> __kthread_cancel_work_sync()
> __kthread_cancel_work()
> work->canceling++;
> kthread_delayed_work_timer_fn()
> kthread_insert_work();
>
> BUG: kthread_insert_work() should not get called when work->canceling
> is set.
>
> Reviewed-by: Petr Mladek <[email protected]>
> Signed-off-by: Zqiang <[email protected]>

Acked-by: Tejun Heo <[email protected]>

This prolly should go throgh -mm. Can you please also add a stable: tag?

Thanks.

--
tejun