Skip to contentSkip to conversation

ALSA: core: Replace mutex_lock with mutex_trylock

PATCH In review 강신형 2 participants 5 messages Nov 7, 2023 – Nov 9, 2023 1 message not in the archive Sound

lore
Share & tools
lore

A message that is not in the archive (sent off-list or not yet received): CGME20231107081810epcas2p27a897426580fce6f0884cffb256b2aaf@epcas2p2.samsung.com

강신형

author
#1 lore raw

PATCH 1/1 ALSA: core: Replace mutex_lock with mutex_trylock

Task1 waits for mutex_lock, and task2 waits for pde to be unused.(deadlock) /*call trace*/

    task1 Call trace:
            __switch_to+0x174/0x338
            schedule+0x7c/0xe8
            schedule_preempt_disabled+0x24/0x40
            mutex_lock+0x40/0xec
            snd_info_text_entry_open+0x28/0x120
            proc_reg_open+0xe4/0x248
            do_dentry_open+0x2a4/0x4e0

    task2 Call trace:
            schedule_timeout+0x44/0x1c8
            wait_for_completion+0x18/0x24
            proc_entry_rundown+0x60/0xf0
            remove_proc_subtree+0x180/0x218
            proc_remove+0x20/0x30
            snd_info_disconnect+0x4c/0x68
            snd_info_card_disconnect+0x3c/0x58
            snd_card_disconnect+0x130/0x264
            usb_audio_disconnect+0xc0/0x24c

/*the sequence*/
task1:
- proc_reg_open: set the use_pde
task2:
- usb_audio_disconnect: usb device disconnection occurs
- snd_info_card_disconnect: acquire the mutex_lock(&info_mutex)
- proc_entry_rundown: wait_for_completion(unuse_pde)
task1:
- wait for mutex_lock in snd_info_text_entry_open

To avoid it, a mutex without wating(mutex_trylock) shoud be used in snd_info_text_entry_open(task1).
Then, when mutex_lock acquisition fails, an error is returned, and the pde becomes unused, and the mutex_lock held by task2 is released.

sound/core/info.c +0 -0
index 0b2f04dcb589..6cb4064b292e 100644
@@ -369,7 +369,10 @@ static int snd_info_text_entry_open(struct inode

*inode, struct file *file)

        struct snd_info_private_data *data;
        int err;

- mutex_lock(&info_mutex);
+ if (!mutex_trylock(&info_mutex)) {
+ pr_err("%s: failed to acquire the info_mutex\n", __func__);
+ return -EAGAIN;
+ }

        err = alloc_info_private(entry, &data);
        if (err < 0)
                goto unlock;
#2 lore raw
Quoted 33 lines · 강신형

Task1 waits for mutex_lock, and task2 waits for pde to be unused.(deadlock) /*call trace*/

    task1 Call trace:
            __switch_to+0x174/0x338
            schedule+0x7c/0xe8
            schedule_preempt_disabled+0x24/0x40
            mutex_lock+0x40/0xec
            snd_info_text_entry_open+0x28/0x120
            proc_reg_open+0xe4/0x248
            do_dentry_open+0x2a4/0x4e0

    task2 Call trace:
            schedule_timeout+0x44/0x1c8
            wait_for_completion+0x18/0x24
            proc_entry_rundown+0x60/0xf0
            remove_proc_subtree+0x180/0x218
            proc_remove+0x20/0x30
            snd_info_disconnect+0x4c/0x68
            snd_info_card_disconnect+0x3c/0x58
            snd_card_disconnect+0x130/0x264
            usb_audio_disconnect+0xc0/0x24c

/*the sequence*/
task1:
- proc_reg_open: set the use_pde
task2:
- usb_audio_disconnect: usb device disconnection occurs
- snd_info_card_disconnect: acquire the mutex_lock(&info_mutex)
- proc_entry_rundown: wait_for_completion(unuse_pde)
task1:
- wait for mutex_lock in snd_info_text_entry_open

Quoted 7 lines

To avoid it, a mutex without wating(mutex_trylock) shoud be used in snd_info_text_entry_open(task1).
Then, when mutex_lock acquisition fails, an error is returned, and the pde becomes unused, and the mutex_lock held by task2 is released.

Thanks for the patch. But this change may break the current working behavior; e.g. when two proc reads are running concurrently, one would be aborted unexpectedly.

IIUC, the problem is the call of proc_remove(), and this call itself can be outside the global mutex.

Could you check whether the patch below works instead? (Note that it's only compile-tested.) It makes the proc_remove() called at first, then clearing the internal entries. The function was renamed accordingly for avoiding confusion, too.

Takashi

sound/core/info.c +13 -8
@@ -56,7 +56,7 @@ struct snd_info_private_data {
 };
 
 static int snd_info_version_init(void);
-static void snd_info_disconnect(struct snd_info_entry *entry);
+static void snd_info_clear_entries(struct snd_info_entry *entry);
 
 /*
 
@@ -569,11 +569,16 @@ void snd_info_card_disconnect(struct snd_card *card)
 {
 	if (!card)
 		return;
-	mutex_lock(&info_mutex);
+
 	proc_remove(card->proc_root_link);
-	card->proc_root_link = NULL;
 	if (card->proc_root)
-		snd_info_disconnect(card->proc_root);
+		proc_remove(card->proc_root->p);
+
+	mutex_lock(&info_mutex);
+	if (card->proc_root)
+		snd_info_clear_entries(card->proc_root);
+	card->proc_root_link = NULL;
+	card->proc_root = NULL;
 	mutex_unlock(&info_mutex);
 }
 
@@ -745,15 +750,14 @@ struct snd_info_entry *snd_info_create_card_entry(struct snd_card *card,
 }
 EXPORT_SYMBOL(snd_info_create_card_entry);
 
-static void snd_info_disconnect(struct snd_info_entry *entry)
+static void snd_info_clear_entries(struct snd_info_entry *entry)
 {
 	struct snd_info_entry *p;
 
 	if (!entry->p)
 		return;
 	list_for_each_entry(p, &entry->children, list)
-		snd_info_disconnect(p);
-	proc_remove(entry->p);
+		snd_info_clear_entries(p);
 	entry->p = NULL;
 }
 
@@ -770,8 +774,9 @@ void snd_info_free_entry(struct snd_info_entry * entry)
 	if (!entry)
 		return;
 	if (entry->p) {
+		proc_remove(entry->p);
 		mutex_lock(&info_mutex);
-		snd_info_disconnect(entry);
+		snd_info_clear_entries(entry);
 		mutex_unlock(&info_mutex);
 	}
 
author
#3 lore raw
Quoted 7 lines

Thanks for the patch. But this change may break the current working behavior; e.g. when two proc reads are running concurrently, one would be aborted unexpectedly.

IIUC, the problem is the call of proc_remove(), and this call itself can be outside the global mutex.

Quoted 7 lines

Could you check whether the patch below works instead? (Note that it's only compile-tested.) It makes the proc_remove() called at first, then clearing the internal entries. The function was renamed accordingly for avoiding confusion, too.

Takashi

You are right. My patch is just for avoiding the deadlock. It may lead to other problem instead the deadlock(e.g. USB sound card registration failure)
Your patch works well without any problems.
But I can't confirm that the problem is solved or not. because the issue has occurred only once until now.
(Test method: USB insertion / removal during a call)

sound/core/info.c struct snd_info_entry

Quoted 33 lines
sound/core/info.c +9 -4
@@ -56,7 +56,7 @@ struct snd_info_private_data {
 };
 
 static int snd_info_version_init(void);
-static void snd_info_disconnect(struct snd_info_entry *entry);
+static void snd_info_clear_entries(struct snd_info_entry *entry);
 
 /*
 
@@ -569,11 +569,16 @@ void snd_info_card_disconnect(struct snd_card *card)
 {
 	if (!card)
 		return;
-	mutex_lock(&info_mutex);
+
 	proc_remove(card->proc_root_link);
-	card->proc_root_link = NULL;
 	if (card->proc_root)
-		snd_info_disconnect(card->proc_root);
+		proc_remove(card->proc_root->p);
+
+	mutex_lock(&info_mutex);
+	if (card->proc_root)
+		snd_info_clear_entries(card->proc_root);
+	card->proc_root_link = NULL;
+	card->proc_root = NULL;
 	mutex_unlock(&info_mutex);
 }
 
@@ -745,15 +750,14 @@ struct snd_info_entry

*snd_info_create_card_entry(struct snd_card *card,

sound/core/info.c void snd_info_free_entry(struct snd_info_entry *

Quoted 18 lines
sound/core/info.c +2 -3
 }
 EXPORT_SYMBOL(snd_info_create_card_entry);
 
-static void snd_info_disconnect(struct snd_info_entry *entry)
+static void snd_info_clear_entries(struct snd_info_entry *entry)
 {
 	struct snd_info_entry *p;
 
 	if (!entry->p)
 		return;
 	list_for_each_entry(p, &entry->children, list)
-		snd_info_disconnect(p);
-	proc_remove(entry->p);
+		snd_info_clear_entries(p);
 	entry->p = NULL;
 }
 
@@ -770,8 +774,9 @@ void snd_info_free_entry(struct snd_info_entry *

entry)

Quoted 9 lines
sound/core/info.c +2 -1
 	if (!entry)
 		return;
 	if (entry->p) {
+		proc_remove(entry->p);
 		mutex_lock(&info_mutex);
-		snd_info_disconnect(entry);
+		snd_info_clear_entries(entry);
 		mutex_unlock(&info_mutex);
 	}
#4 lore raw
Quoted 16 lines · 강신형
Quoted 8 lines

Thanks for the patch. But this change may break the current working behavior; e.g. when two proc reads are running concurrently, one would be aborted unexpectedly.

IIUC, the problem is the call of proc_remove(), and this call itself can be outside the global mutex.

Quoted 7 lines

Could you check whether the patch below works instead? (Note that it's only compile-tested.) It makes the proc_remove() called at first, then clearing the internal entries. The function was renamed accordingly for avoiding confusion, too.

Takashi

Quoted 7 lines

You are right. My patch is just for avoiding the deadlock. It may lead to other problem instead the deadlock(e.g. USB sound card registration failure)
Your patch works well without any problems.
But I can't confirm that the problem is solved or not. because the issue has occurred only once until now.
(Test method: USB insertion / removal during a call)

Maybe you can reproduce it more easily by adding some delay (e.g. ssleep(2)) before mutex_lock() in snd_info_entry_open(). Then it's easier to cause a race.

Takashi

#5 lore raw
Quoted 27 lines · Takashi Iwai
Quoted 16 lines · 강신형
Quoted 8 lines

Thanks for the patch. But this change may break the current working behavior; e.g. when two proc reads are running concurrently, one would be aborted unexpectedly.

IIUC, the problem is the call of proc_remove(), and this call itself can be outside the global mutex.

Quoted 7 lines

Could you check whether the patch below works instead? (Note that it's only compile-tested.) It makes the proc_remove() called at first, then clearing the internal entries. The function was renamed accordingly for avoiding confusion, too.

Takashi

Quoted 7 lines

You are right. My patch is just for avoiding the deadlock. It may lead to other problem instead the deadlock(e.g. USB sound card registration failure)
Your patch works well without any problems.
But I can't confirm that the problem is solved or not. because the issue has occurred only once until now.
(Test method: USB insertion / removal during a call)

Quoted 2 lines

Maybe you can reproduce it more easily by adding some delay (e.g. ssleep(2)) before mutex_lock() in snd_info_entry_open().

... in our case, it's rather snd_info_text_entry_open().

Quoted 1 line

Then it's easier to cause a race.

I could actually reproduce the bug with the extra delay, and confirmed that my patch works around it.
I'm going to submit a proper patch.

Takashi