From: Xia Fukun <xiafukun@huawei.com>
To: <mingo@redhat.com>, <peterz@infradead.org>,
<juri.lelli@redhat.com>, <vincent.guittot@linaro.org>,
<mgorman@suse.de>, <riel@redhat.com>
Cc: <dietmar.eggemann@arm.com>, <rostedt@goodmis.org>,
<bsegall@google.com>, <vschneid@redhat.com>,
<linux-kernel@vger.kernel.org>, <xiafukun@huawei.com>
Subject: [PATCH] sched/fair: Fix division-by-zero error in task_scan_max()
Date: Wed, 27 Aug 2025 12:34:27 +0000 [thread overview]
Message-ID: <20250827123427.1229183-1-xiafukun@huawei.com> (raw)
The error can be reproduced by following these steps:
First, set sysctl_numa_balancing_scan_size to 0:
echo 0 > /sys/kernel/debug/sched/numa_balancing/scan_size_mb
Then trigger the clone system call, for example, by using
pthread_create to create a new thread.
Oops: divide error: 0000 [#1] SMP NOPTI
CPU: 11 UID: 0 PID: 1 Comm: systemd Tainted: G S 6.17.0xfk_v2 #6
Tainted: [S]=CPU_OUT_OF_SPEC
Hardware name: SuperCloud R5210 G12/X12DPi-N6, BIOS 1.1c 08/30/2021
RIP: 0010:task_scan_max+0x24/0x190
RSP: 0018:ff56485a001ebc98 EFLAGS: 00010246
...
Call Trace:
<TASK>
init_numa_balancing+0xdb/0x1e0
__sched_fork+0x110/0x180
sched_fork+0xd/0x170
copy_process+0x821/0x1aa0
kernel_clone+0xbc/0x400
__do_sys_clone3+0xde/0x120
do_syscall_64+0xa4/0x260
entry_SYSCALL_64_after_hwframe+0x77/0x7f
This patch fixes the issue by ensuring that the relevant value in
task_scan_max() is at least 1.
Fixes: 598f0ec0bc99 ("sched/numa: Set the scan rate proportional to the memory usage of the task being scanned")
Signed-off-by: Xia Fukun <xiafukun@huawei.com>
---
kernel/sched/fair.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c
index b173a059315c..ea962e3bcb13 100644
--- a/kernel/sched/fair.c
+++ b/kernel/sched/fair.c
@@ -1496,6 +1496,7 @@ static unsigned int task_nr_scan_windows(struct task_struct *p)
* on resident pages
*/
nr_scan_pages = sysctl_numa_balancing_scan_size << (20 - PAGE_SHIFT);
+ nr_scan_pages = max_t(unsigned long, nr_scan_pages, 1UL << (20 - PAGE_SHIFT));
rss = get_mm_rss(p->mm);
if (!rss)
rss = nr_scan_pages;
@@ -1510,6 +1511,7 @@ static unsigned int task_nr_scan_windows(struct task_struct *p)
static unsigned int task_scan_min(struct task_struct *p)
{
unsigned int scan_size = READ_ONCE(sysctl_numa_balancing_scan_size);
+ scan_size = max_t(unsigned int, scan_size, 1);
unsigned int scan, floor;
unsigned int windows = 1;
--
2.34.1
next reply other threads:[~2025-08-27 12:51 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-08-27 12:34 Xia Fukun [this message]
2025-09-02 8:08 ` Xia Fukun
2025-09-02 8:57 ` Peter Zijlstra
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250827123427.1229183-1-xiafukun@huawei.com \
--to=xiafukun@huawei.com \
--cc=bsegall@google.com \
--cc=dietmar.eggemann@arm.com \
--cc=juri.lelli@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mgorman@suse.de \
--cc=mingo@redhat.com \
--cc=peterz@infradead.org \
--cc=riel@redhat.com \
--cc=rostedt@goodmis.org \
--cc=vincent.guittot@linaro.org \
--cc=vschneid@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®