Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752465AbeAQI53 (ORCPT + 1 other); Wed, 17 Jan 2018 03:57:29 -0500 Received: from mx0b-001b2d01.pphosted.com ([148.163.158.5]:55658 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1751182AbeAQI51 (ORCPT ); Wed, 17 Jan 2018 03:57:27 -0500 Subject: Re: [PATCH v6 03/24] mm: Dont assume page-table invariance during faults To: Andi Kleen Cc: paulmck@linux.vnet.ibm.com, peterz@infradead.org, akpm@linux-foundation.org, kirill@shutemov.name, mhocko@kernel.org, dave@stgolabs.net, jack@suse.cz, Matthew Wilcox , benh@kernel.crashing.org, mpe@ellerman.id.au, paulus@samba.org, Thomas Gleixner , Ingo Molnar , hpa@zytor.com, Will Deacon , Sergey Senozhatsky , Andrea Arcangeli , Alexei Starovoitov , kemi.wang@intel.com, sergey.senozhatsky.work@gmail.com, linux-kernel@vger.kernel.org, linux-mm@kvack.org, haren@linux.vnet.ibm.com, khandual@linux.vnet.ibm.com, npiggin@gmail.com, bsingharora@gmail.com, Tim Chen , linuxppc-dev@lists.ozlabs.org, x86@kernel.org References: <1515777968-867-1-git-send-email-ldufour@linux.vnet.ibm.com> <1515777968-867-4-git-send-email-ldufour@linux.vnet.ibm.com> <87d129tccz.fsf@linux.intel.com> From: Laurent Dufour Date: Wed, 17 Jan 2018 09:57:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <87d129tccz.fsf@linux.intel.com> Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-TM-AS-GCONF: 00 x-cbid: 18011708-0020-0000-0000-000003EB965E X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 18011708-0021-0000-0000-0000427DD057 Message-Id: <476660c5-771c-0125-7d04-0e5a8d8bf65d@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2018-01-17_03:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=2 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1709140000 definitions=main-1801170129 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Return-Path: On 17/01/2018 04:04, Andi Kleen wrote: > Laurent Dufour writes: > >> From: Peter Zijlstra >> >> One of the side effects of speculating on faults (without holding >> mmap_sem) is that we can race with free_pgtables() and therefore we >> cannot assume the page-tables will stick around. >> >> Remove the reliance on the pte pointer. > > This needs a lot more explanation. So why is this code not needed with > SPF only? Hi Andi, This is a good question, and I should detail that more in the commit's log. Here is my response to Balbir when he asked for: On 10/07/2017 19:48, Laurent Dufour wrote: > On 07/07/2017 09:07, Balbir Singh wrote: >> On Fri, 2017-06-16 at 19:52 +0200, Laurent Dufour wrote: >>> From: Peter Zijlstra >>> >>> One of the side effects of speculating on faults (without holding >>> mmap_sem) is that we can race with free_pgtables() and therefore we >>> cannot assume the page-tables will stick around. >>> >>> Remove the relyance on the pte pointer. >> ^^ reliance >> >> Looking at the changelog and the code the impact is not clear. >> It looks like after this patch we always assume the pte is not >> the same. What is the impact of this patch? > > Hi Balbir, > > In most of the case pte_unmap_same() was returning 1, which meaning that > do_swap_page() should do its processing. > > So in most of the case there will be no impact. > > Now regarding the case where pte_unmap_safe() was returning 0, and thus > do_swap_page return 0 too, this happens when the page has already been > swapped back. This may happen before do_swap_page() get called or while in > the call to do_swap_page(). In that later case, the check done when > swapin_readahead() returns will detect that case. > > The worst case would be that a page fault is occuring on 2 threads at the > same time on the same swapped out page. In that case one thread will take > much time looping in __read_swap_cache_async(). But in the regular page > fault path, this is even worse since the thread would wait for semaphore to > be released before starting anything. > > Cheers, > Laurent. > I'll add that to the commit's log. Thanks, Laurent.