| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 25 May 2021 10:07:05 -0700
From: Yang Shi <shy828301@...il.com>
To: Minchan Kim <minchan@...nel.org>
Cc: Hugh Dickins <hughd@...gle.com>, Zi Yan <ziy@...dia.com>,
"Kirill A. Shutemov" <kirill.shutemov@...ux.intel.com>,
HORIGUCHI NAOYA(堀口 直也)
<naoya.horiguchi@....com>, Wang Yugui <wangyugui@...-tech.com>,
Andrew Morton <akpm@...ux-foundation.org>,
Linux MM <linux-mm@...ck.org>,
Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: [v3 PATCH 1/2] mm: rmap: make try_to_unmap() void function
On Tue, May 25, 2021 at 9:46 AM Minchan Kim <minchan@...nel.org> wrote:
>
> On Tue, May 25, 2021 at 09:21:44AM -0700, Yang Shi wrote:
> > Currently try_to_unmap() return bool value by checking page_mapcount(),
> > however this may return false positive since page_mapcount() doesn't
> > check all subpages of compound page. The total_mapcount() could be used
> > instead, but its cost is higher since it traverses all subpages.
> >
> > Actually the most callers of try_to_unmap() don't care about the
> > return value at all. So just need check if page is still mapped by
> > page_mapped() when necessary. And page_mapped() does bail out early
> > when it finds mapped subpage.
> >
> > Suggested-by: Hugh Dickins <hughd@...gle.com>
> > Signed-off-by: Yang Shi <shy828301@...il.com>
> > ---
> > include/linux/rmap.h | 2 +-
> > mm/huge_memory.c | 4 +---
> > mm/memory-failure.c | 13 ++++++-------
> > mm/rmap.c | 6 +-----
> > mm/vmscan.c | 3 ++-
> > 5 files changed, 11 insertions(+), 17 deletions(-)
> >
> > diff --git a/include/linux/rmap.h b/include/linux/rmap.h
> > index def5c62c93b3..116cb193110a 100644
> > --- a/include/linux/rmap.h
> > +++ b/include/linux/rmap.h
> > @@ -194,7 +194,7 @@ static inline void page_dup_rmap(struct page *page, bool compound)
> > int page_referenced(struct page *, int is_locked,
> > struct mem_cgroup *memcg, unsigned long *vm_flags);
> >
> > -bool try_to_unmap(struct page *, enum ttu_flags flags);
> > +void try_to_unmap(struct page *, enum ttu_flags flags);
> >
> > /* Avoid racy checks */
> > #define PVMW_SYNC (1 << 0)
> > diff --git a/mm/huge_memory.c b/mm/huge_memory.c
> > index 19195fca1aee..80fe642d742d 100644
> > --- a/mm/huge_memory.c
> > +++ b/mm/huge_memory.c
> > @@ -2336,15 +2336,13 @@ static void unmap_page(struct page *page)
> > {
> > enum ttu_flags ttu_flags = TTU_IGNORE_MLOCK |
> > TTU_RMAP_LOCKED | TTU_SPLIT_HUGE_PMD;
> > - bool unmap_success;
> >
> > VM_BUG_ON_PAGE(!PageHead(page), page);
> >
> > if (PageAnon(page))
> > ttu_flags |= TTU_SPLIT_FREEZE;
> >
> > - unmap_success = try_to_unmap(page, ttu_flags);
> > - VM_BUG_ON_PAGE(!unmap_success, page);
> > + try_to_unmap(page, ttu_flags);
> > }
> >
> > static void remap_page(struct page *page, unsigned int nr)
> > diff --git a/mm/memory-failure.c b/mm/memory-failure.c
> > index 9dcc9bcea731..6dd53ff34825 100644
> > --- a/mm/memory-failure.c
> > +++ b/mm/memory-failure.c
> > @@ -1126,7 +1126,7 @@ static bool hwpoison_user_mappings(struct page *p, unsigned long pfn,
> > collect_procs(hpage, &tokill, flags & MF_ACTION_REQUIRED);
> >
> > if (!PageHuge(hpage)) {
> > - unmap_success = try_to_unmap(hpage, ttu);
> > + try_to_unmap(hpage, ttu);
> > } else {
> > if (!PageAnon(hpage)) {
> > /*
> > @@ -1138,17 +1138,16 @@ static bool hwpoison_user_mappings(struct page *p, unsigned long pfn,
> > */
> > mapping = hugetlb_page_mapping_lock_write(hpage);
> > if (mapping) {
> > - unmap_success = try_to_unmap(hpage,
> > - ttu|TTU_RMAP_LOCKED);
> > + try_to_unmap(hpage, ttu|TTU_RMAP_LOCKED);
> > i_mmap_unlock_write(mapping);
> > - } else {
> > + } else
> > pr_info("Memory failure: %#lx: could not lock mapping for mapped huge page\n", pfn);
> > - unmap_success = false;
> > - }
> > } else {
> > - unmap_success = try_to_unmap(hpage, ttu);
> > + try_to_unmap(hpage, ttu);
> > }
> > }
> > +
> > + unmap_success = !page_mapped(hpage);
> > if (!unmap_success)
> > pr_err("Memory failure: %#lx: failed to unmap page (mapcount=%d)\n",
> > pfn, page_mapcount(hpage));
> > diff --git a/mm/rmap.c b/mm/rmap.c
> > index a35cbbbded0d..728de421e43a 100644
> > --- a/mm/rmap.c
> > +++ b/mm/rmap.c
> > @@ -1748,10 +1748,8 @@ static int page_not_mapped(struct page *page)
> > *
> > * Tries to remove all the page table entries which are mapping this
> > * page, used in the pageout path. Caller must hold the page lock.
> > - *
> > - * If unmap is successful, return true. Otherwise, false.
> > */
> > -bool try_to_unmap(struct page *page, enum ttu_flags flags)
> > +void try_to_unmap(struct page *page, enum ttu_flags flags)
> > {
> > struct rmap_walk_control rwc = {
> > .rmap_one = try_to_unmap_one,
> > @@ -1776,8 +1774,6 @@ bool try_to_unmap(struct page *page, enum ttu_flags flags)
> > rmap_walk_locked(page, &rwc);
> > else
> > rmap_walk(page, &rwc);
> > -
> > - return !page_mapcount(page) ? true : false;
>
> Couldn't we use page_mapped instead of page_mapcount here?
Yes, of course. Actually this has been discussed in v2 review. Most
(or half) callers actually don't check the return value of
try_to_unmap() except hwpoison, vmscan and THP split. It sounds
suboptimal to have everyone pay the cost. So I thought Hugh's
suggestion made sense to me.
Quoted the discussion below:
> @@ -1777,7 +1779,7 @@ bool try_to_unmap(struct page *page, enum ttu_flags flags)
> else
> rmap_walk(page, &rwc);
>
> - return !page_mapcount(page) ? true : false;
> + return !total_mapcount(page) ? true : false;
That always made me wince: "return !total_mapcount(page);" surely.
Or slightly better, "return !page_mapped(page);", since at least that
one breaks out as soon as it sees a mapcount. Though I guess I'm
being silly there, since that case should never occur, so both
total_mapcount() and page_mapped() scan through all pages.
Or better, change try_to_unmap() to void: most callers ignore its
return value anyway, and make their own decisions; the remaining
few could be changed to do the same. Though again, I may be
being silly, since the expensive THP case is not the common case.
> With boolean return of try sematic looks reasonable to me
> rather than void.
>
> > }
> >
> > /**
> > diff --git a/mm/vmscan.c b/mm/vmscan.c
> > index f96d62159720..fa5052ace415 100644
> > --- a/mm/vmscan.c
> > +++ b/mm/vmscan.c
> > @@ -1499,7 +1499,8 @@ static unsigned int shrink_page_list(struct list_head *page_list,
> > if (unlikely(PageTransHuge(page)))
> > flags |= TTU_SPLIT_HUGE_PMD;
> >
> > - if (!try_to_unmap(page, flags)) {
> > + try_to_unmap(page, flags);
> > + if (page_mapped(page)) {
> > stat->nr_unmap_fail += nr_pages;
> > if (!was_swapbacked && PageSwapBacked(page))
> > stat->nr_lazyfree_fail += nr_pages;
> > --
> > 2.26.2
> >
> >
Powered by blists - more mailing lists