From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 09FADC6FA82 for ; Thu, 22 Sep 2022 13:43:54 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 820CE80009; Thu, 22 Sep 2022 09:43:54 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 7D05D80007; Thu, 22 Sep 2022 09:43:54 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 6722080009; Thu, 22 Sep 2022 09:43:54 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0013.hostedemail.com [216.40.44.13]) by kanga.kvack.org (Postfix) with ESMTP id 56F7C80007 for ; Thu, 22 Sep 2022 09:43:54 -0400 (EDT) Received: from smtpin20.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id 24472140A6F for ; Thu, 22 Sep 2022 13:43:54 +0000 (UTC) X-FDA: 79939839588.20.CF99325 Received: from mail-pg1-f181.google.com (mail-pg1-f181.google.com [209.85.215.181]) by imf30.hostedemail.com (Postfix) with ESMTP id CF7748000D for ; Thu, 22 Sep 2022 13:43:53 +0000 (UTC) Received: by mail-pg1-f181.google.com with SMTP id 78so9141752pgb.13 for ; Thu, 22 Sep 2022 06:43:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:content-language:subject :references:cc:to:user-agent:mime-version:date:message-id:from:to:cc :subject:date; bh=A1gPIGPkwtBGNAsou3191eDbQnV5HHWhy5YFxtQ8rL0=; b=C0FMWnH4ugLgjQCous99pqe1wPHUAHr4+tONBDxgiuVY2C7QiPNnPy8wa85+aDYArY Q9CcWmvTsaW+HVRDsMq8Sp+ZP6KRzG/AUCj5UKIlIj88xHEXOwewDKTrpgu/iG5TBEbI IFyLdTZYLN/N51HRjK48hWY9hwA2EN/Px+Fwd6k73RqomjklcD7i16LKcfUQqSIUgNVI wetzltHqurERKJWxlNQ+lWdXu6EQ/D4EvDXD/YNTo6gfKbdVBRSUzb0vpEvfWXzH6ehX zhXZ+7l7tigtoN3rJZQwXP2cG4mFuQD+yspPrg2NCWkcuLxBXNCuZQ2DFusEgLHkhqg+ vsUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:content-language:subject :references:cc:to:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date; bh=A1gPIGPkwtBGNAsou3191eDbQnV5HHWhy5YFxtQ8rL0=; b=GzGHqK5RGy9sr5+QtS/55BYh5NLJOwdEdN4zpGv8SkeZps3to53AiJw3vHKHBHfMCx fLFgXQ8aATiMsEjlqwHJ+nFTPVzOMFizt10e/Q1bgDKfsRIXJ323kZUVv93KTGk/ORqD AJOQO7ZbBhYMyHBs9gmupadffgAUBSyfQzFfjcy94Erva1x4CL7DIU5qO9Sw4vHrzKex ZpZad5SBY+WOQma7KrW0Y5vjISnwMyQPHGv1Nh0TmlCHz7dqh2uBb86U/hoez3TZRkVl Vys7VtNi/M2PvQJXQKw5NvyP+An8vITbayFDYGZvI/uzZ1DHfw0VqxMwoEtnHFp+6H4d RwUQ== X-Gm-Message-State: ACrzQf1CjQnw0kg+EBaq9lJZNFTPqxUTAstY0z1oUskEvL/sgCPeQXj9 O8dACUInwZNerVkQMZO0r28= X-Google-Smtp-Source: AMsMyM7AkwO3l8V5ynYvYZueIPngu0PrXh3//n/yokMVdyGKH8unhU1UjYRnlttNuuru0V/uT29V4Q== X-Received: by 2002:a05:6a00:15d4:b0:544:170c:4f5a with SMTP id o20-20020a056a0015d400b00544170c4f5amr3614064pfu.75.1663854232588; Thu, 22 Sep 2022 06:43:52 -0700 (PDT) Received: from [192.168.11.9] (KD106167171201.ppp-bb.dion.ne.jp. [106.167.171.201]) by smtp.gmail.com with ESMTPSA id x125-20020a628683000000b0053e199aa99bsm4295515pfd.220.2022.09.22.06.43.47 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 22 Sep 2022 06:43:52 -0700 (PDT) Message-ID: <93343c05-f31e-cfbe-6650-8ea8d79e6d55@gmail.com> Date: Thu, 22 Sep 2022 22:43:43 +0900 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.11.0 To: David Hildenbrand Cc: David.Laight@ACULAB.COM, akpm@linux-foundation.org, apw@canonical.com, bhe@redhat.com, christophe.leroy@csgroup.eu, corbet@lwn.net, dwaipayanray1@gmail.com, dyoung@redhat.com, jani.nikula@linux.intel.com, joe@perches.com, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, linux-mm@kvack.org, linuxppc-dev@lists.ozlabs.org, lukas.bulwahn@gmail.com, mingo@kernel.org, mpe@ellerman.id.au, npiggin@gmail.com, torvalds@linux-foundation.org, vgoyal@redhat.com, Akira Yokosawa References: <20220920122302.99195-2-david@redhat.com> Subject: Re: [PATCH v1 1/3] coding-style.rst: document BUG() and WARN() rules ("do not crash the kernel") Content-Language: en-US From: Akira Yokosawa In-Reply-To: <20220920122302.99195-2-david@redhat.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1663854233; a=rsa-sha256; cv=none; b=df+OhvE/hKgAlZfIhISyPaW3bTENQNILeEZCesqEXlVb+Zzttcq8JzvF/dvCs2rQk8e1pD cS4S60SSFh3lxUfuI7HrI2gfW8fkBpZvx0x33VsPTCCiXDN4kgRSpR746w+nsxgOt5HS8n MajOkPZkmyt1vRJLTNhGOYiVA3A+qeE= ARC-Authentication-Results: i=1; imf30.hostedemail.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=C0FMWnH4; spf=pass (imf30.hostedemail.com: domain of akiyks@gmail.com designates 209.85.215.181 as permitted sender) smtp.mailfrom=akiyks@gmail.com; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1663854233; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=A1gPIGPkwtBGNAsou3191eDbQnV5HHWhy5YFxtQ8rL0=; b=3sm9gBYvz9YEk+NWtUIgqd7i8ai3euuTA5GOrTrRbJTTrUqTPFUsJ+9YjUmy6KcRra+aUf l1NqjUZRgiREQ7cg5IBB1zkzs88Ck4Pxiq+nAKPX6g58qUq0CvyfUWEQXxyvPk8qGYo7Io GU/Ayl5kXkxQ8bjV3cC0Izx+tpYtLKc= X-Rspamd-Server: rspam05 X-Rspamd-Queue-Id: CF7748000D X-Rspam-User: Authentication-Results: imf30.hostedemail.com; dkim=pass header.d=gmail.com header.s=20210112 header.b=C0FMWnH4; spf=pass (imf30.hostedemail.com: domain of akiyks@gmail.com designates 209.85.215.181 as permitted sender) smtp.mailfrom=akiyks@gmail.com; dmarc=pass (policy=none) header.from=gmail.com X-Stat-Signature: 9b5u5n84nagqpbqpwe7q1cwf7989nby9 X-HE-Tag: 1663854233-601238 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: Hi, Minor nits on section title adornments. See inline comments below. On Tue, 20 Sep 2022 14:23:00 +0200, David Hildenbrand wrote: > Linus notes [1] that the introduction of new code that uses VM_BUG_ON() > is just as bad as BUG_ON(), because it will crash the kernel on > distributions that enable CONFIG_DEBUG_VM (like Fedora): > > VM_BUG_ON() has the exact same semantics as BUG_ON. It is literally > no different, the only difference is "we can make the code smaller > because these are less important". [2] > > This resulted in a more generic discussion about usage of BUG() and > friends. While there might be corner cases that still deserve a BUG_ON(), > most BUG_ON() cases should simply use WARN_ON_ONCE() and implement a > recovery path if reasonable: > > The only possible case where BUG_ON can validly be used is "I have > some fundamental data corruption and cannot possibly return an > error". [2] > > As a very good approximation is the general rule: > > "absolutely no new BUG_ON() calls _ever_" [2] > > ... not even if something really shouldn't ever happen and is merely for > documenting that an invariant always has to hold. However, there are sill > exceptions where BUG_ON() may be used: > > If you have a "this is major internal corruption, there's no way we can > continue", then BUG_ON() is appropriate. [3] > > There is only one good BUG_ON(): > > Now, that said, there is one very valid sub-form of BUG_ON(): > BUILD_BUG_ON() is absolutely 100% fine. [2] > > While WARN will also crash the machine with panic_on_warn set, that's > exactly to be expected: > > So we have two very different cases: the "virtual machine with good > logging where a dead machine is fine" - use 'panic_on_warn'. And > the actual real hardware with real drivers, running real loads by > users. [4] > > The basic idea is that warnings will similarly get reported by users > and be found during testing. However, in contrast to a BUG(), there is a > way to actually influence the expected behavior (e.g., panic_on_warn) > and to eventually keep the machine alive to extract some debug info. > > Ingo notes that not all WARN_ON_ONCE cases need recovery. If we don't ever > expect this code to trigger in any case, recovery code is not really > helpful. > > I'd prefer to keep all these warnings 'simple' - i.e. no attempted > recovery & control flow, unless we ever expect these to trigger. > [5] > > There have been different rules floating around that were never properly > documented. Let's try to clarify. > > [1] https://lkml.kernel.org/r/CAHk-=wiEAH+ojSpAgx_Ep=NKPWHU8AdO3V56BXcCsU97oYJ1EA@mail.gmail.com > [2] https://lore.kernel.org/r/CAHk-=wg40EAZofO16Eviaj7mfqDhZ2gVEbvfsMf6gYzspRjYvw@mail.gmail.com > [2] https://lkml.kernel.org/r/CAHk-=wit-DmhMfQErY29JSPjFgebx_Ld+pnerc4J2Ag990WwAA@mail.gmail.com > [4] https://lore.kernel.org/r/CAHk-=wgF7K2gSSpy=m_=K3Nov4zaceUX9puQf1TjkTJLA2XC_g@mail.gmail.com > [5] https://lore.kernel.org/r/YwIW+mVeZoTOxn%2F4@gmail.com > > Signed-off-by: David Hildenbrand > --- > Documentation/process/coding-style.rst | 61 ++++++++++++++++++++++++++ > 1 file changed, 61 insertions(+) > > diff --git a/Documentation/process/coding-style.rst b/Documentation/process/coding-style.rst > index 03eb53fd029a..e05899cbfd49 100644 > --- a/Documentation/process/coding-style.rst > +++ b/Documentation/process/coding-style.rst > @@ -1186,6 +1186,67 @@ expression used. For instance: > #endif /* CONFIG_SOMETHING */ > > > +22) Do not crash the kernel > +--------------------------- > + > +In general, it is not the kernel developer's decision to crash the kernel. > + > +Avoid panic() > +============= This looks to me like a subsection-level title. The adornment symbol needs to be: ************* > + > +panic() should be used with care and primarily only during system boot. > +panic() is, for example, acceptable when running out of memory during boot and > +not being able to continue. > + > +Use WARN() rather than BUG() > +============================ Ditto. > + > +Do not add new code that uses any of the BUG() variants, such as BUG(), > +BUG_ON(), or VM_BUG_ON(). Instead, use a WARN*() variant, preferably > +WARN_ON_ONCE(), and possibly with recovery code. Recovery code is not > +required if there is no reasonable way to at least partially recover. > + > +"I'm too lazy to do error handling" is not an excuse for using BUG(). Major > +internal corruptions with no way of continuing may still use BUG(), but need > +good justification. > + > +Use WARN_ON_ONCE() rather than WARN() or WARN_ON() > +************************************************** These wrong adornment symbol confuse ReST parser of Sphinx and results in the build error from "make htmldocs" at this title (long message folded): Sphinx parallel build error: docutils.utils.SystemMessage: /xxx/Documentation/process/coding-style.rst:1213: (SEVERE/4) Title level inconsistent: Please fix in v2. Thanks, Akira > + > +WARN_ON_ONCE() is generally preferred over WARN() or WARN_ON(), because it > +is common for a given warning condition, if it occurs at all, to occur > +multiple times. This can fill up and wrap the kernel log, and can even slow > +the system enough that the excessive logging turns into its own, additional > +problem. > + [...]