From: Oleg Nesterov <oleg@redhat.com>
To: David Laight <david.laight.linux@gmail.com>
Cc: Babanpreet Singh <bbnpreetsingh@gmail.com>,
Christian Brauner <brauner@kernel.org>,
Pavel Tikhomirov <ptikhomirov@virtuozzo.com>,
Andrew Morton <akpm@linux-foundation.org>,
linux-kernel@vger.kernel.org,
syzbot+c382ee653fd70f5cf1bb@syzkaller.appspotmail.com
Subject: Re: [PATCH] pid: use READ_ONCE() in pid_alive()
Date: Sun, 4 Oct 2026 15:14:26 +0200 [thread overview]
Message-ID: <asJRMhSXz5XhljNi@redhat.com> (raw)
In-Reply-To: <20261004125118.7de53b47@pumpkin>
On 10/04, David Laight wrote:
>
> On Sun, 4 Oct 2026 12:55:34 +0200
> Oleg Nesterov <oleg@redhat.com> wrote:
>
> > Yep. That is why do_each_pid_task() needs tasklist_lock.
> >
> > This is the known fact, let me quote the part of my old email
> > https://lore.kernel.org/all/20200512150936.GA28621@redhat.com/
> >
> > > Currently the tasklist_lock is shared mainly in order to observe
> > > the list atomically for the PRIO_PGRP and PRIO_USER cases, as
> > > the actual lookups are already rcu-safe,
> >
> > not really...
> >
> > do_each_pid_task(PIDTYPE_PGID) can race with change_pid(PIDTYPE_PGID)
> > which moves the task from one hlist to another. Yes, it is safe in
> > that task_struct can't go away. But still this is not right because
> > do_each_pid_task() can scan the wrong (2nd) hlist.
> >
> > Somehow I thought this was documented, but it isn't. And this is not obvious.
> > I think this deserves a comment above do_each_pid_task(), will send the patch.
>
> I guess the rcu protection lets the task exit without holding the lock?
> Is that really significant given the other things that happen during task exit.
Sorry, I don't understand your question...
> Could do_each_pid_task() use hlist_nulls_for_each_entry_rcu() and rescan
> if it got the wrong terminator.
> Or does scanning twice cause grief as well.
I don't think it can. Say, __kill_pgrp_info() is a "typical" user of
do_each_pid_task(). What can it do if it detects that get_nulls_value()
doesn't match after the main loop? The signal was already sent.
Oleg.
next prev parent reply other threads:[~2026-10-04 13:14 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-02 1:21 [PATCH] pid: use READ_ONCE() in pid_alive() Babanpreet Singh
2026-10-02 6:33 ` Bradley Morgan
2026-10-02 11:59 ` Oleg Nesterov
2026-10-03 17:22 ` David Laight
2026-10-04 10:55 ` Oleg Nesterov
2026-10-04 11:11 ` Oleg Nesterov
2026-10-04 11:51 ` David Laight
2026-10-04 13:14 ` Oleg Nesterov [this message]
2026-10-04 13:31 ` David Laight
2026-10-05 15:03 ` Oleg Nesterov
2026-10-05 18:46 ` David Laight
2026-10-12 9:13 ` Christian Brauner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=asJRMhSXz5XhljNi@redhat.com \
--to=oleg@redhat.com \
--cc=akpm@linux-foundation.org \
--cc=bbnpreetsingh@gmail.com \
--cc=brauner@kernel.org \
--cc=david.laight.linux@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=ptikhomirov@virtuozzo.com \
--cc=syzbot+c382ee653fd70f5cf1bb@syzkaller.appspotmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.