set_timeout() fails to terminate execution when IO Latency is high

Description

I'm not sure if this is a bug or not and I haven't found the proper channel to ask (shall I raise a discussion in Internals?).

We faced a problem in our production cluster. Our setup is following:

SAPI: fpm
max_execution_time: 28
hard_timeout: 2

When Opcache is reloading, we're having excessive IO pressure, which is expected - PHP starts reading everything from disk, etc... However, scripts started executing for 5+ minutes - that wasn't expected.

Further investigation showed that zend_set_timeout_ex uses setitimer(ITIMER_PROF) by default, which means the time the process spends in IOWait doesn't seem to count.

So, basically, even though our gateway cannot wait for such long - it expects that application will finish earlier, PHP still performs the request. One more backside of such behaviour - the restart of Opcache takes longer - it waits until all the workers finish execution (or become killed by opcache when opcache.force_restart_timeout is reached).

This problem doesn't seem to appear when we use ITIMER_REAL. I can provide how we tested this.

I can see a couple of solutions here:

• Switch to ITIMER_REAL (it looks like there are some concerns about the Apache module)
• Choose one over another for some SAPIs when we are sure that there shouldn't be a conflict (e.g. FPM, CLI)
• Make this behaviour configurable (either at runtime or compile time)
• Something else?

从 zend_set_timeout_ex 开始，比较 ITIMER_PROF 与 ITIMER_REAL 在 FPM 和高 I/O 延迟下的报告行为。检查对 Apache 模块的担忧以及提出的替代方案；完成的要求是确定一种计时器行为或配置方式，以防止请求运行数分钟之久。