• Oleg Nesterov's avatar
    sched/autogroup: Fix autogroup_move_group() to never skip sched_move_task() · 18f649ef
    Oleg Nesterov authored
    The PF_EXITING check in task_wants_autogroup() is no longer needed. Remove
    it, but see the next patch.
    
    However the comment is correct in that autogroup_move_group() must always
    change task_group() for every thread so the sysctl_ check is very wrong;
    we can race with cgroups and even sys_setsid() is not safe because a task
    running with task_group() == ag->tg must participate in refcounting:
    
    	int main(void)
    	{
    		int sctl = open("/proc/sys/kernel/sched_autogroup_enabled", O_WRONLY);
    
    		assert(sctl > 0);
    		if (fork()) {
    			wait(NULL); // destroy the child's ag/tg
    			pause();
    		}
    
    		assert(pwrite(sctl, "1\n", 2, 0) == 2);
    		assert(setsid() > 0);
    		if (fork())
    			pause();
    
    		kill(getppid(), SIGKILL);
    		sleep(1);
    
    		// The child has gone, the grandchild runs with kref == 1
    		assert(pwrite(sctl, "0\n", 2, 0) == 2);
    		assert(setsid() > 0);
    
    		// runs with the freed ag/tg
    		for (;;)
    			sleep(1);
    
    		return 0;
    	}
    
    crashes the kernel. It doesn't really need sleep(1), it doesn't matter if
    autogroup_move_group() actually frees the task_group or this happens later.
    Reported-by: default avatarVern Lovejoy <vlovejoy@redhat.com>
    Signed-off-by: default avatarOleg Nesterov <oleg@redhat.com>
    Signed-off-by: default avatarPeter Zijlstra (Intel) <peterz@infradead.org>
    Cc: Linus Torvalds <torvalds@linux-foundation.org>
    Cc: Mike Galbraith <efault@gmx.de>
    Cc: Peter Zijlstra <peterz@infradead.org>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Cc: hartsjc@redhat.com
    Cc: vbendel@redhat.com
    Link: http://lkml.kernel.org/r/20161114184609.GA15965@redhat.comSigned-off-by: default avatarIngo Molnar <mingo@kernel.org>
    18f649ef
auto_group.c 5.85 KB