Received-SPF: pass (google.com: domain of linux-kernel+bounces-95226-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
Precedence: bulk
MIME-Version: 1.0
References: <20240307061425.21013-1-ioworker0@gmail.com> <CAGsJ_4xcRvZGdpPh1qcFTnTnDUbwz6WreQ=L_UO+oU2iFm9EPg@mail.gmail.com>
 <CAK1f24k2G_DSEjuqqqPyY0f7+btpYbjfoyMH7btLfP8nkasCTQ@mail.gmail.com>
 <CAGsJ_4xREM-P1mFqeM-s3-cJ9czb6PXwizb-3hOhwaF6+QM5QA@mail.gmail.com> <03458c20-5544-411b-9b8d-b4600a9b802f@arm.com>
In-Reply-To: <03458c20-5544-411b-9b8d-b4600a9b802f@arm.com>
From: Barry Song <21cnbao@gmail.com>
Date: Thu, 7 Mar 2024 22:33:23 +1300
Message-ID: <CAGsJ_4zp1MXTjG=4gBO+J3owg7sHDgDJ8Ut51i1RBSnKnK0BfQ@mail.gmail.com>
Subject: Re: [PATCH v2 1/1] mm/madvise: enhance lazyfreeing with mTHP in madvise_free
To: Ryan Roberts <ryan.roberts@arm.com>
Cc: Lance Yang <ioworker0@gmail.com>, david@redhat.com, 
	Vishal Moola <vishal.moola@gmail.com>, akpm@linux-foundation.org, zokeefe@google.com, 
	shy828301@gmail.com, mhocko@suse.com, fengwei.yin@intel.com, 
	xiehuan09@gmail.com, wangkefeng.wang@huawei.com, songmuchun@bytedance.com, 
	peterx@redhat.com, minchan@kernel.org, linux-mm@kvack.org, 
	linux-kernel@vger.kernel.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 7, 2024 at 10:07=E2=80=AFPM Ryan Roberts <ryan.roberts@arm.com>=
 wrote:
>
> On 07/03/2024 08:10, Barry Song wrote:
> > On Thu, Mar 7, 2024 at 9:00=E2=80=AFPM Lance Yang <ioworker0@gmail.com>=
 wrote:
> >>
> >> Hey Barry,
> >>
> >> Thanks for taking time to review!
> >>
> >> On Thu, Mar 7, 2024 at 3:00=E2=80=AFPM Barry Song <21cnbao@gmail.com> =
wrote:
> >>>
> >>> On Thu, Mar 7, 2024 at 7:15=E2=80=AFPM Lance Yang <ioworker0@gmail.co=
m> wrote:
> >>>>
> >> [...]
> >>>> +static inline bool can_mark_large_folio_lazyfree(unsigned long addr=
,
> >>>> +                                                struct folio *folio=
, pte_t *start_pte)
> >>>> +{
> >>>> +       int nr_pages =3D folio_nr_pages(folio);
> >>>> +       fpb_t flags =3D FPB_IGNORE_DIRTY | FPB_IGNORE_SOFT_DIRTY;
> >>>> +
> >>>> +       for (int i =3D 0; i < nr_pages; i++)
> >>>> +               if (page_mapcount(folio_page(folio, i)) !=3D 1)
> >>>> +                       return false;
> >>>
> >>> we have moved to folio_estimated_sharers though it is not precise, so
> >>> we don't do
> >>> this check with lots of loops and depending on the subpage's mapcount=
.
> >>
> >> If we don't check the subpage=E2=80=99s mapcount, and there is a cow f=
olio associated
> >> with this folio and the cow folio has smaller size than this folio,
> >> should we still
> >> mark this folio as lazyfree?
> >
> > I agree, this is true. However, we've somehow accepted the fact that
> > folio_likely_mapped_shared
> > can result in false negatives or false positives to balance the
> > overhead.  So I really don't know :-)
> >
> > Maybe David and Vishal can give some comments here.
> >
> >>
> >>> BTW, do we need to rebase our work against David's changes[1]?
> >>> [1] https://lore.kernel.org/linux-mm/20240227201548.857831-1-david@re=
dhat.com/
> >>
> >> Yes, we should rebase our work against David=E2=80=99s changes.
> >>
> >>>
> >>>> +
> >>>> +       return nr_pages =3D=3D folio_pte_batch(folio, addr, start_pt=
e,
> >>>> +                                        ptep_get(start_pte), nr_pag=
es, flags, NULL);
> >>>> +}
> >>>> +
> >>>>  static int madvise_free_pte_range(pmd_t *pmd, unsigned long addr,
> >>>>                                 unsigned long end, struct mm_walk *w=
alk)
> >>>>
> >>>> @@ -676,11 +690,45 @@ static int madvise_free_pte_range(pmd_t *pmd, =
unsigned long addr,
> >>>>                  */
> >>>>                 if (folio_test_large(folio)) {
> >>>>                         int err;
> >>>> +                       unsigned long next_addr, align;
> >>>>
> >>>> -                       if (folio_estimated_sharers(folio) !=3D 1)
> >>>> -                               break;
> >>>> -                       if (!folio_trylock(folio))
> >>>> -                               break;
> >>>> +                       if (folio_estimated_sharers(folio) !=3D 1 ||
> >>>> +                           !folio_trylock(folio))
> >>>> +                               goto skip_large_folio;
> >>>
> >>>
> >>> I don't think we can skip all the PTEs for nr_pages, as some of them =
might be
> >>> pointing to other folios.
> >>>
> >>> for example, for a large folio with 16PTEs, you do MADV_DONTNEED(15-1=
6),
> >>> and write the memory of PTE15 and PTE16, you get page faults, thus PT=
E15
> >>> and PTE16 will point to two different small folios. We can only skip =
when we
> >>> are sure nr_pages =3D=3D folio_pte_batch() is sure.
> >>
> >> Agreed. Thanks for pointing that out.
> >>
> >>>
> >>>> +
> >>>> +                       align =3D folio_nr_pages(folio) * PAGE_SIZE;
> >>>> +                       next_addr =3D ALIGN_DOWN(addr + align, align=
);
> >>>> +
> >>>> +                       /*
> >>>> +                        * If we mark only the subpages as lazyfree,=
 or
> >>>> +                        * cannot mark the entire large folio as laz=
yfree,
> >>>> +                        * then just split it.
> >>>> +                        */
> >>>> +                       if (next_addr > end || next_addr - addr !=3D=
 align ||
> >>>> +                           !can_mark_large_folio_lazyfree(addr, fol=
io, pte))
> >>>> +                               goto split_large_folio;
> >>>> +
> >>>> +                       /*
> >>>> +                        * Avoid unnecessary folio splitting if the =
large
> >>>> +                        * folio is entirely within the given range.
> >>>> +                        */
> >>>> +                       folio_clear_dirty(folio);
> >>>> +                       folio_unlock(folio);
> >>>> +                       for (; addr !=3D next_addr; pte++, addr +=3D=
 PAGE_SIZE) {
> >>>> +                               ptent =3D ptep_get(pte);
> >>>> +                               if (pte_young(ptent) || pte_dirty(pt=
ent)) {
> >>>> +                                       ptent =3D ptep_get_and_clear=
_full(
> >>>> +                                               mm, addr, pte, tlb->=
fullmm);
> >>>> +                                       ptent =3D pte_mkold(ptent);
> >>>> +                                       ptent =3D pte_mkclean(ptent)=
;
> >>>> +                                       set_pte_at(mm, addr, pte, pt=
ent);
> >>>> +                                       tlb_remove_tlb_entry(tlb, pt=
e, addr);
> >>>> +                               }
> >>>
> >>> Can we do this in batches? for a CONT-PTE mapped large folio, you are=
 unfolding
> >>> and folding again. It seems quite expensive.
>
> I'm not convinced we should be doing this in batches. We want the initial
> folio_pte_batch() to be as loose as possible regarding permissions so tha=
t we
> reduce our chances of splitting folios to the min. (e.g. ignore SW bits l=
ike
> soft dirty, etc). I think it might be possible that some PTEs are RO and =
other
> RW too (e.g. due to cow - although with the current cow impl, probably no=
t. But
> its fragile to assume that). Anyway, if we do an initial batch that ignor=
es all

You are correct. I believe this scenario could indeed occur. For instance,
if process A forks process B and then unmaps itself, leaving B as the
sole process owning the large folio.  The current wp_page_reuse() function
will reuse PTE one by one while the specific subpage is written. This can
make a part of PTE writable while the others are read-only.

> that then do this bit as a batch, you will end up smeering all the ptes w=
ith
> whatever properties were set on the first pte, which probably isn't right=
.
>
> I've done a similar conversion for madvise_cold_or_pageout_pte_range() as=
 part
> of my swap-out series v4 (hoping to post imminently, but still working ou=
t a
> latent bug that it triggers). I use ptep_test_and_clear_young() in that, =
which
> arm64 can apply per-pte but avoid doing a contpte unfold/fold. I know you=
 have
> to clear dirty here too, but I think this pattern is preferable.

nice to know ptep_test_and_clear_young() won't unfold and fold CONT-PTE.
I probably have missed this part of your CONT-PTE series as I was quite bus=
y
with others :-)

>
> FYI, my swap-out series also halfway-batches madvise_free_pte_range() so =
that I
> can batch free_swap_and_cache() for the swap entry case. Ideally the work=
 you
> are doing here would be rebased on top of that and plug-in to the approac=
h
> implemented there. (subject to others' views of course).
>
> I'll cc you when I post it.
>
> >>
> >> Thanks for your suggestion. I'll do this in batches in v3.
> >>
> >> Thanks again for your time!
> >>
> >> Best,
> >> Lance
> >>
> >>>
> >>>> +                       }
> >>>> +                       folio_mark_lazyfree(folio);
> >>>> +                       goto next_folio;
> >>>> +
> >>>> +split_large_folio:
> >>>>                         folio_get(folio);
> >>>>                         arch_leave_lazy_mmu_mode();
> >>>>                         pte_unmap_unlock(start_pte, ptl);
> >>>> @@ -688,13 +736,28 @@ static int madvise_free_pte_range(pmd_t *pmd, =
unsigned long addr,
> >>>>                         err =3D split_folio(folio);
> >>>>                         folio_unlock(folio);
> >>>>                         folio_put(folio);
> >>>> -                       if (err)
> >>>> -                               break;
> >>>> -                       start_pte =3D pte =3D
> >>>> -                               pte_offset_map_lock(mm, pmd, addr, &=
ptl);
> >>>> -                       if (!start_pte)
> >>>> -                               break;
> >>>> -                       arch_enter_lazy_mmu_mode();
> >>>> +
> >>>> +                       /*
> >>>> +                        * If the large folio is locked or cannot be=
 split,
> >>>> +                        * we just skip it.
> >>>> +                        */
> >>>> +                       if (err) {
> >>>> +skip_large_folio:
> >>>> +                               if (next_addr >=3D end)
> >>>> +                                       break;
> >>>> +                               pte +=3D (next_addr - addr) / PAGE_S=
IZE;
> >>>> +                               addr =3D next_addr;
> >>>> +                       }
> >>>> +
> >>>> +                       if (!start_pte) {
> >>>> +                               start_pte =3D pte =3D pte_offset_map=
_lock(
> >>>> +                                       mm, pmd, addr, &ptl);
> >>>> +                               if (!start_pte)
> >>>> +                                       break;
> >>>> +                               arch_enter_lazy_mmu_mode();
> >>>> +                       }
> >>>> +
> >>>> +next_folio:
> >>>>                         pte--;
> >>>>                         addr -=3D PAGE_SIZE;
> >>>>                         continue;
> >>>> --
> >>>> 2.33.1
> >>>>
> >

Thanks
 Barry