timekeeping: Split out timekeeper update of timekeeping_advanced()

timekeeping_advance() is the only optimized function which uses
shadow_timekeeper for updating the real timekeeper to keep the sequence
counter protected region as small as possible.

To be able to transform timekeeper updates in other functions to use the
same logic, split out functionality into a separate function
timekeeper_update_staged().

While at it, document the reason why the sequence counter must be write
held over the call to timekeeping_update() and the copying to the real
timekeeper and why using a pointer based update is suboptimal.

No functional change.

Signed-off-by: Anna-Maria Behnsen <anna-maria@linutronix.de>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Acked-by: John Stultz <jstultz@google.com>
Link: https://lore.kernel.org/all/20241009-devel-anna-maria-b4-timers-ptp-timekeeping-v2-13-554456a44a15@linutronix.de

diff --git a/kernel/time/timekeeping.c b/kernel/time/timekeeping.c
index 979687aa349d3294cea15f36a26c50dd1e5d3bb7..b3f4989173b078b89ecd36474e4bd06d2cc93175 100644 (file)
--- a/kernel/time/timekeeping.c
+++ b/kernel/time/timekeeping.c
@@ -799,7 +799,32 @@ static void timekeeping_update(struct tk_data *tkd, struct timekeeper *tk, unsig
         * timekeeper structure on the next update with stale data
         */
        if (action & TK_MIRROR)
-               memcpy(&tk_core.shadow_timekeeper, &tk_core.timekeeper, sizeof(tk_core.timekeeper));
+               memcpy(&tkd->shadow_timekeeper, tk, sizeof(*tk));
+}
+
+static void timekeeping_update_from_shadow(struct tk_data *tkd, unsigned int action)
+{
+       /*
+        * Block out readers before invoking timekeeping_update() because
+        * that updates VDSO and other time related infrastructure. Not
+        * blocking the readers might let a reader see time going backwards
+        * when reading from the VDSO after the VDSO update and then
+        * reading in the kernel from the timekeeper before that got updated.
+        */
+       write_seqcount_begin(&tkd->seq);
+
+       timekeeping_update(tkd, &tkd->shadow_timekeeper, action);
+
+       /*
+        * Update the real timekeeper.
+        *
+        * We could avoid this memcpy() by switching pointers, but that has
+        * the downside that the reader side does not longer benefit from
+        * the cacheline optimized data layout of the timekeeper and requires
+        * another indirection.
+        */
+       memcpy(&tkd->timekeeper, &tkd->shadow_timekeeper, sizeof(tkd->shadow_timekeeper));
+       write_seqcount_end(&tkd->seq);
 }
 
 /**
@@ -2364,21 +2389,7 @@ static bool timekeeping_advance(enum timekeeping_adv_mode mode)
         */
        clock_set |= accumulate_nsecs_to_secs(tk);
 
-       write_seqcount_begin(&tk_core.seq);
-       /*
-        * Update the real timekeeper.
-        *
-        * We could avoid this memcpy by switching pointers, but that
-        * requires changes to all other timekeeper usage sites as
-        * well, i.e. move the timekeeper pointer getter into the
-        * spinlocked/seqcount protected sections. And we trade this
-        * memcpy under the tk_core.seq against one before we start
-        * updating.
-        */
-       timekeeping_update(&tk_core, tk, clock_set);
-       memcpy(real_tk, tk, sizeof(*tk));
-       /* The memcpy must come last. Do not put anything here! */
-       write_seqcount_end(&tk_core.seq);
+       timekeeping_update_from_shadow(&tk_core, clock_set);
 
        return !!clock_set;
 }