| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20251225082059.1632-5-lizhe.67@bytedance.com>
Date: Thu, 25 Dec 2025 16:20:55 +0800
From: 李喆 <lizhe.67@...edance.com>
To: <muchun.song@...ux.dev>, <osalvador@...e.de>, <david@...nel.org>,
<akpm@...ux-foundation.org>, <fvdl@...gle.com>
Cc: <linux-mm@...ck.org>, <linux-kernel@...r.kernel.org>,
<lizhe.67@...edance.com>
Subject: [PATCH 4/8] mm/hugetlb: introduce per-node sysfs interface "zeroable_hugepages"
From: Li Zhe <lizhe.67@...edance.com>
Fresh hugetlb pages are zeroed out when they are faulted in,
just like with all other page types. This can take up a good
amount of time for larger page sizes (e.g. around 40 milliseconds
for a 1G page on a recent AMD-based system).
This normally isn't a problem, since hugetlb pages are typically
mapped by the application for a long time, and the initial delay
when touching them isn't much of an issue.
However, there are some use cases where a large number of hugetlb
pages are touched when an application (such as a VM backed by
these pages) starts. For 256 1G pages and 40ms per page, this would
take 10 seconds, a noticeable delay.
This patch adds a new zeroable_hugepages interface under each
/sys/devices/system/node/node*/hugepages/hugepages-***kB directory.
Reading it returns the number of huge folios of the corresponding size
on that node that are eligible for pre-zeroing. The interface also
accepts an integer x in the range [0, max], enabling user space to
request that x huge pages be zeroed on demand.
Exporting this interface offers the following advantages:
(1) User space gains full control over when zeroing is triggered,
enabling it to minimize the impact on both CPU and cache utilization.
(2) Applications can spawn as many zeroing processes as they need,
enabling concurrent background zeroing.
(3) By binding the process to specific CPUs, users can confine zeroing
threads to cores that do not run latency-critical tasks, eliminating
interference.
(4) A zeroing process can be interrupted at any time through standard
signal mechanisms, allowing immediate cancellation.
(5) The CPU consumption incurred by zeroing can be throttled and contained
with cgroups, ensuring that the cost is not borne system-wide.
On an AMD Milan platform, each 1 GB huge-page fault is shortened by at
least 25628 us (figure inherited from the test results cited herein[1]).
[1]: https://lore.kernel.org/linux-mm/202412030519.W14yll4e-lkp@intel.com/T/#t
Co-developed-by: Frank van der Linden <fvdl@...gle.com>
Signed-off-by: Frank van der Linden <fvdl@...gle.com>
Signed-off-by: Li Zhe <lizhe.67@...edance.com>
---
mm/hugetlb_sysfs.c | 120 +++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 120 insertions(+)
diff --git a/mm/hugetlb_sysfs.c b/mm/hugetlb_sysfs.c
index 79ece91406bf..8c3e433209c3 100644
--- a/mm/hugetlb_sysfs.c
+++ b/mm/hugetlb_sysfs.c
@@ -352,6 +352,125 @@ struct node_hstate {
};
static struct node_hstate node_hstates[MAX_NUMNODES];
+static ssize_t zeroable_hugepages_show(struct kobject *kobj,
+ struct kobj_attribute *attr, char *buf)
+{
+ struct hstate *h;
+ unsigned long free_huge_pages_zero;
+ int nid;
+
+ h = kobj_to_hstate(kobj, &nid);
+ if (WARN_ON(nid == NUMA_NO_NODE))
+ return -EPERM;
+
+ free_huge_pages_zero = h->free_huge_pages_node[nid] -
+ h->free_huge_pages_zero_node[nid];
+
+ return sprintf(buf, "%lu\n", free_huge_pages_zero);
+}
+
+static inline bool zero_should_abort(struct hstate *h, int nid)
+{
+ return (h->free_huge_pages_zero_node[nid] ==
+ h->free_huge_pages_node[nid]) ||
+ list_empty(&h->hugepage_freelists[nid]);
+}
+
+static void zero_free_hugepages_nid(struct hstate *h,
+ int nid, unsigned int nr_zero)
+{
+ struct list_head *freelist = &h->hugepage_freelists[nid];
+ unsigned int nr_zerod = 0;
+ struct folio *folio;
+
+ if (zero_should_abort(h, nid))
+ return;
+
+ spin_lock_irq(&hugetlb_lock);
+
+ while (nr_zerod < nr_zero) {
+
+ if (zero_should_abort(h, nid) || fatal_signal_pending(current))
+ break;
+
+ freelist = freelist->prev;
+ if (unlikely(list_is_head(freelist, &h->hugepage_freelists[nid])))
+ break;
+ folio = list_entry(freelist, struct folio, lru);
+
+ if (folio_test_hugetlb_zeroed(folio) ||
+ folio_test_hugetlb_zeroing(folio))
+ continue;
+
+ folio_set_hugetlb_zeroing(folio);
+
+ /*
+ * Incrementing this here is a bit of a fib, since
+ * the page hasn't been cleared yet (it will be done
+ * immediately after dropping the lock below). But
+ * it keeps the count consistent with the overall
+ * free count in case the page gets taken off the
+ * freelist while we're working on it.
+ */
+ h->free_huge_pages_zero_node[nid]++;
+ spin_unlock_irq(&hugetlb_lock);
+
+ /*
+ * HWPoison pages may show up on the freelist.
+ * Don't try to zero it out, but do set the flag
+ * and counts, so that we don't consider it again.
+ */
+ if (!folio_test_hwpoison(folio))
+ folio_zero_user(folio, 0);
+
+ cond_resched();
+
+ spin_lock_irq(&hugetlb_lock);
+ folio_set_hugetlb_zeroed(folio);
+ folio_clear_hugetlb_zeroing(folio);
+
+ /*
+ * If the page is still on the free list, move
+ * it to the head.
+ */
+ if (folio_test_hugetlb_freed(folio))
+ list_move(&folio->lru, &h->hugepage_freelists[nid]);
+
+ /*
+ * If someone was waiting for the zero to
+ * finish, wake them up.
+ */
+ if (waitqueue_active(&h->dqzero_wait[nid]))
+ wake_up(&h->dqzero_wait[nid]);
+ nr_zerod++;
+ freelist = &h->hugepage_freelists[nid];
+ }
+ spin_unlock_irq(&hugetlb_lock);
+}
+
+static ssize_t zeroable_hugepages_store(struct kobject *kobj,
+ struct kobj_attribute *attr, const char *buf, size_t len)
+{
+ unsigned int nr_zero;
+ struct hstate *h;
+ int err;
+ int nid;
+
+ if (!strcmp(buf, "max") || !strcmp(buf, "max\n")) {
+ nr_zero = UINT_MAX;
+ } else {
+ err = kstrtouint(buf, 10, &nr_zero);
+ if (err)
+ return err;
+ }
+ h = kobj_to_hstate(kobj, &nid);
+
+ zero_free_hugepages_nid(h, nid, nr_zero);
+
+ return len;
+}
+HSTATE_ATTR(zeroable_hugepages);
+
/*
* A subset of global hstate attributes for node devices
*/
@@ -359,6 +478,7 @@ static struct attribute *per_node_hstate_attrs[] = {
&nr_hugepages_attr.attr,
&free_hugepages_attr.attr,
&surplus_hugepages_attr.attr,
+ &zeroable_hugepages_attr.attr,
NULL,
};
--
2.20.1
Powered by blists - more mailing lists