History

tcp: fix a potential deadlock in tcp_get_info()

Taking socket spinlock in tcp_get_info() can deadlock, as inet_diag_dump_icsk() holds the &hashinfo->ehash_locks[i], while packet processing can use the reverse locking order. We could avoid this locking for TCP_LISTEN states, but lockdep would certainly get confused as all TCP sockets share same lockdep classes. [ 523.722504] ====================================================== [ 523.728706] [ INFO: possible circular locking dependency detected ] [ 523.734990] 4.1.0-dbg-DEV #1676 Not tainted [ 523.739202] ------------------------------------------------------- [ 523.745474] ss/18032 is trying to acquire lock: [ 523.750002] (slock-AF_INET){+.-...}, at: [<ffffffff81669d44>] tcp_get_info+0x2c4/0x360 [ 523.758129] [ 523.758129] but task is already holding lock: [ 523.763968] (&(&hashinfo->ehash_locks[i])->rlock){+.-...}, at: [<ffffffff816bcb75>] inet_diag_dump_icsk+0x1d5/0x6c0 [ 523.774661] [ 523.774661] which lock already depends on the new lock. [ 523.774661] [ 523.782850] [ 523.782850] the existing dependency chain (in reverse order) is: [ 523.790326] -> #1 (&(&hashinfo->ehash_locks[i])->rlock){+.-...}: [ 523.796599] [<ffffffff811126bb>] lock_acquire+0xbb/0x270 [ 523.802565] [<ffffffff816f5868>] _raw_spin_lock+0x38/0x50 [ 523.808628] [<ffffffff81665af8>] __inet_hash_nolisten+0x78/0x110 [ 523.815273] [<ffffffff816819db>] tcp_v4_syn_recv_sock+0x24b/0x350 [ 523.822067] [<ffffffff81684d41>] tcp_check_req+0x3c1/0x500 [ 523.828199] [<ffffffff81682d09>] tcp_v4_do_rcv+0x239/0x3d0 [ 523.834331] [<ffffffff816842fe>] tcp_v4_rcv+0xa8e/0xc10 [ 523.840202] [<ffffffff81658fa3>] ip_local_deliver_finish+0x133/0x3e0 [ 523.847214] [<ffffffff81659a9a>] ip_local_deliver+0xaa/0xc0 [ 523.853440] [<ffffffff816593b8>] ip_rcv_finish+0x168/0x5c0 [ 523.859624] [<ffffffff81659db7>] ip_rcv+0x307/0x420 Lets use u64_sync infrastructure instead. As a bonus, 64bit arches get optimized, as these are nop for them.

Eric Dumazet committed 11 years ago

Commit d6549761 parent c78e1744 files · +17 −4Browse files

Unified · Split

4 files
  1. include/linux/tcp.h +2 −0
  2. net/ipv4/tcp.c +7 −4
  3. net/ipv4/tcp_fastopen.c +4 −0
  4. net/ipv4/tcp_input.c +4 −0
include/linux/tcp.h+2−0
@@ -158,6 +158,8 @@ struct tcp_sock { · 157 unmodified lines
158158 * sum(delta(snd_una)), or how many bytes
159159 * were acked.
160160 */
161+ struct u64_stats_sync syncp; /* protects 64bit vars (cf tcp_get_info()) */
162+
161163 u32 snd_una; /* First byte we want an ack for */
162164 u32 snd_sml; /* Last byte of the most recently transmitted small packet */
163165 u32 rcv_tstamp; /* timestamp of last received ACK (for keepalives) */
net/ipv4/tcp.c+7−4
@@ -402,6 +402,7 @@ void tcp_init_sock(struct sock *sk) · 401 unmodified lines
402402 tp->snd_ssthresh = TCP_INFINITE_SSTHRESH;
403403 tp->snd_cwnd_clamp = ~0;
404404 tp->mss_cache = TCP_MSS_DEFAULT;
405+ u64_stats_init(&tp->syncp);
405406
406407 tp->reordering = sysctl_tcp_reordering;
407408 tcp_enable_early_retrans(tp);
@@ -2598,6 +2599,7 @@ void tcp_get_info(struct sock *sk, struct tcp_info *info) · 2190 unmodified lines
25982599 const struct tcp_sock *tp = tcp_sk(sk);
25992600 const struct inet_connection_sock *icsk = inet_csk(sk);
26002601 u32 now = tcp_time_stamp;
2602+ unsigned int start;
26012603 u32 rate;
26022604
26032605 memset(info, 0, sizeof(*info));
@@ -2665,10 +2667,11 @@ void tcp_get_info(struct sock *sk, struct tcp_info *info) · 61 unmodified lines
26652667 rate = READ_ONCE(sk->sk_max_pacing_rate);
26662668 info->tcpi_max_pacing_rate = rate != ~0U ? rate : ~0ULL;
26672669
2668− spin_lock_bh(&sk->sk_lock.slock);
2669− info->tcpi_bytes_acked = tp->bytes_acked;
2670− info->tcpi_bytes_received = tp->bytes_received;
2671− spin_unlock_bh(&sk->sk_lock.slock);
2670+ do {
2671+ start = u64_stats_fetch_begin_irq(&tp->syncp);
2672+ info->tcpi_bytes_acked = tp->bytes_acked;
2673+ info->tcpi_bytes_received = tp->bytes_received;
2674+ } while (u64_stats_fetch_retry_irq(&tp->syncp, start));
26722675 }
26732676 EXPORT_SYMBOL_GPL(tcp_get_info);
26742677
net/ipv4/tcp_fastopen.c+4−0
@@ -206,6 +206,10 @@ static bool tcp_fastopen_create_child(struct sock *sk, · 205 unmodified lines
206206 skb_set_owner_r(skb2, child);
207207 __skb_queue_tail(&child->sk_receive_queue, skb2);
208208 tp->syn_data_acked = 1;
209+
210+ /* u64_stats_update_begin(&tp->syncp) not needed here,
211+ * as we certainly are not changing upper 32bit value (0)
212+ */
209213 tp->bytes_received = end_seq - TCP_SKB_CB(skb)->seq - 1;
210214 } else {
211215 end_seq = TCP_SKB_CB(skb)->seq + 1;
net/ipv4/tcp_input.c+4−0
@@ -3286,7 +3286,9 @@ static void tcp_snd_una_update(struct tcp_sock *tp, u32 ack) · 3285 unmodified lines
32863286 {
32873287 u32 delta = ack - tp->snd_una;
32883288
3289+ u64_stats_update_begin(&tp->syncp);
32893290 tp->bytes_acked += delta;
3291+ u64_stats_update_end(&tp->syncp);
32903292 tp->snd_una = ack;
32913293 }
32923294
@@ -3295,7 +3297,9 @@ static void tcp_rcv_nxt_update(struct tcp_sock *tp, u32 seq) · 2 unmodified lines
32953297 {
32963298 u32 delta = seq - tp->rcv_nxt;
32973299
3300+ u64_stats_update_begin(&tp->syncp);
32983301 tp->bytes_received += delta;
3302+ u64_stats_update_end(&tp->syncp);
32993303 tp->rcv_nxt = seq;
33003304 }
33013305