From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932122AbdBGPMB (ORCPT ); Tue, 7 Feb 2017 10:12:01 -0500 Received: from mail-bn3nam01on0113.outbound.protection.outlook.com ([104.47.33.113]:2128 "EHLO NAM01-BN3-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754210AbdBGPLu (ORCPT ); Tue, 7 Feb 2017 10:11:50 -0500 Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=zi.yan@cs.rutgers.edu; Message-ID: <5899E389.3040801@cs.rutgers.edu> Date: Tue, 7 Feb 2017 09:11:05 -0600 From: Zi Yan User-Agent: Postbox 5.0.10 (Windows/20170123) MIME-Version: 1.0 To: "Kirill A. Shutemov" CC: Zi Yan , Andrea Arcangeli , Minchan Kim , , , , , , , , , Zi Yan Subject: Re: [PATCH v3 03/14] mm: use pmd lock instead of racy checks in zap_pmd_range() References: <20170205161252.85004-1-zi.yan@sent.com> <20170205161252.85004-4-zi.yan@sent.com> <20170207141956.GA4789@node.shutemov.name> In-Reply-To: <20170207141956.GA4789@node.shutemov.name> X-Enigmail-Version: 1.2.3 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigC6A69F5AE405986FE8731EA4" X-Originating-IP: [12.1.252.66] X-ClientProxiedBy: CY4PR21CA0013.namprd21.prod.outlook.com (10.172.122.151) To MWHPR14MB1661.namprd14.prod.outlook.com (10.171.146.143) X-MS-Office365-Filtering-Correlation-Id: 4ca4ead8-1e2f-4443-4e23-08d44f6ba249 X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:MWHPR14MB1661; X-Microsoft-Exchange-Diagnostics: 1;MWHPR14MB1661;3:DXa6fdpVtq2RwvR67SoXideBcTITOSmRzTrQZ/Mp0rpkXoZEOkh52AsSSvI/P7MRY1+3nT9hQ65sET5WzsvNU28AfLHRKEDavS2JknSIrl4C8XQbL6AzuWTLFWeV6ckiDG/fqP04UQg5JAgTA3lNGCaLv7zSQv0k8QCtnTuj4kMJmFMqJzDzh4Z8Pe+PVLjPVYw3pBx11T45ftIeQKkWI+vYzeqGbI4vLoswAi0feV3bRtObOMJIpsZr+SkY5UaJR5Daq2lg+8Dt5B6W+S1+iQ==;25:1RuvNjJ6ukUvJWWHjYUPzrpaKEtbK9++sIFsJ13xu4YmjRhslZAojb5cxKKzL91xZ+bmdxrWvoJclDRebsEYSxHCNwI3a7WAijTAvdSvOgWone3h4jdcjeI+tiD1782ZBrSTNpR7MYGDjVnwufuJfHHKh/MxuRfIM+NXwDLxogc1VSkhB7cMQ3bLnwa5vdCexyyYhkO2BZEWWYMWk5aIK6OlkWAkjeBq26rUn71JR+5YnLeIJZtmWxLyx43gFoe2pZvSpVbmzIbHXNcSsmmu/vularX68J5Pys017Td6LG44qH+n3ra6zKKA1xgF/El1oR+hoBrsgmjAbQrsU2BgoXq8BTViVBpKjZzXqih9/k8ACb2mAZM2M8o6GcTMz1YhzzvXSQK0KlJOPirdWzEbKuErR1Py4FlV9RSXvDJoXFbriEOF1ssPEsYKvcZEjUnxRygqRGGF/0Sd6SUnfRizIA== X-Microsoft-Exchange-Diagnostics: 1;MWHPR14MB1661;31:BJEmSSlWhCG+LoS2ULMGZKXsly2bNg9pC3cLFoZYUQMn/XDjFPvozsUjLqa0lZFx32xoo7ZO3JJCDIPS1ZLJysTW9XU1VkfinOcm1ZmhXAPx7MePENrmu5xFWLr/kJMG+AZ0Z6swnPXpz0YU1WK23a34d34ZbDKtsyfaAIyNj/+e2yCnPDxJptWdC0rOqOjNZhH+Mfep/ml4H0Fr5RFIPHcne7iVxPy9ALGfA6W7W8xoDokFYwtGtwb55hSkFkeGO13w0UAraa1YeNVrUikC+Q==;20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(8121501046)(2017020603029)(20170203043)(5005006)(3002001)(10201501046)(6041248)(20161123555025)(20161123558025)(20161123562025)(20161123564025)(20161123560025)(6072148);SRVR:MWHPR14MB1661;BCL:0;PCL:0;RULEID:;SRVR:MWHPR14MB1661; X-Microsoft-Exchange-Diagnostics: 1;MWHPR14MB1661;4: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 X-Forefront-PRVS: 0211965D06 X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10019020)(4630300001)(6009001)(6049001)(7916002)(39450400003)(39830400002)(39410400002)(24454002)(189002)(199003)(21480400002)(189998001)(6666003)(2950100002)(42882006)(6916009)(5890100001)(97736004)(512874002)(38730400002)(92566002)(4001350100001)(8676002)(6246003)(59896002)(90366009)(77096006)(229853002)(106356001)(8656002)(6486002)(110136004)(88552002)(105586002)(25786008)(5660300001)(4326007)(83506001)(80316001)(568964002)(575784001)(86362001)(53936002)(54906002)(42186005)(2906002)(87266999)(54356999)(76176999)(305945005)(50986999)(65816999)(7736002)(101416001)(81166006)(81156014)(68736007)(33656002)(7416002)(66066001)(84326002)(75432002)(6116002)(3846002);DIR:OUT;SFP:1102;SCL:1;SRVR:MWHPR14MB1661;H:[10.20.179.32];FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en; X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;MWHPR14MB1661;23:hjnRc2HtSCmw1AQReXG38lahP7u8Rz36VAkpBzRTH?= =?us-ascii?Q?sjhW0lUKcQQudw2BcxxYU78Co6FBJSH9IG/GBuaoe3xTrskU+Bof9Lo8PPBl?= =?us-ascii?Q?9bTKzO6uVDkWOrhDN9+03oirDs9CwgbRyfQG5JHXYap4jzpfQ/94GZru5myz?= =?us-ascii?Q?dVGD1NgG1zUZAIdFpA1OL9H4Gbq6/gNWWk09fNbhJ6gVzJVN5iTAh3f8t2pX?= =?us-ascii?Q?QU8wrMdBdsNZ2FLX29qh0AGe7+pIkSmb+o2Ar5P8V9ycEptRhjD7+khIKBH0?= =?us-ascii?Q?hlUlP2MxzPDpgNSxDDo0MCzsF0zF4GG7xSowHKH/T1hID2YzOFjsKGMTckEI?= =?us-ascii?Q?udJeiX2eLIuKwnVZPGe9DHG8siE0iCFFn8BWjiL8WHHYaNIuoa+WVSfHjv91?= =?us-ascii?Q?iDunV8ZKMjc64nFwUumtazpDRyciHRAHZavA+fa8+AVsG0oIn8MMbMpRGQdP?= =?us-ascii?Q?SXdfJcgOOiUP8E4P6VJH3dq21FgxqPWNUKlLMXSmrHO7OULju9lqpMcNWSwS?= =?us-ascii?Q?mAAYlKNGzH5FZznruG56yGx4FBf0cKQUxBXhye+XpubhH1dr/BTXwuzAvUuQ?= =?us-ascii?Q?n17XgkZz1SXKTizQRY6Q+nx3fqSf6aSpkd1xX2gs6k7RdhEBqWYeFf5+P2gX?= =?us-ascii?Q?kKbhDBbYcSQpPa736bodTvLAaklSP2wyBh0v+UUJhEI98DkUhOFuFv3avHHP?= =?us-ascii?Q?+aOceuaXGIAqH7c7QM3Fdpf+vLFiX96YQxoPq73ci8OErucIywRhfWZHdFKo?= =?us-ascii?Q?eIlbuSTOgwObEvSKT/Mhu2H+rpNQxSpnF/s6v/NemAXF0BeMOvPW2iVSVLEy?= =?us-ascii?Q?i5YOrPGTOCaXjG44ZFn0fwG4v4GRw6W/yH30PPbWorz6BnpMJykOhfzvE6fs?= =?us-ascii?Q?eTPvMtZ1+h2eqvZG1ZRcoG9OeR7BHxXfnmIXNCALEWsiTo6M0fFwjJfWQMQk?= =?us-ascii?Q?v6qXd1HwdTUNhUHdT02FpOqp3yr4za062nYNxxy2B47Jq2jnvKQOp/5xeIgx?= =?us-ascii?Q?gIfgF018IwvZV5RUgeYA822VhbYkGNsO9zipoNzRo5IbyrSxGYz5q4z0wgub?= =?us-ascii?Q?V2dJKXvz1cUKgbso1SAbI9WlgbTFNG3h0SffDPzCOyy6OeGGHz0mLGtWhrel?= =?us-ascii?Q?Ls33ZU/YFHH6gVzZaqMJyUJ7s+aOCR1Nc6QZgI7TEygVWhwx0DlS4frqeyCW?= =?us-ascii?Q?kTuHS/oVjMF7aniumxy+7VeNqdP88FwilZfElT+jisDD20DIevELv/8v9gzT?= =?us-ascii?Q?xTo/YTVlk2XVA+KFzLtda8mxQKrT6moCxYRrYHpTCI41/0itgayO17uq+wT3?= =?us-ascii?Q?YjQUs0/GGMYAXS1oe6FU6TA8VugDqt+szF4HUOk/SCYUMiwv+kiKidAsn3wR?= =?us-ascii?Q?FEwh3FSYntkosix92jd01rwqskU0ytVYsUDi/1vNeYit48d5TJ3gV72I3om+?= =?us-ascii?Q?+rhUSQOo6NRYLt49JOnDieJPr13yynhtRM3ZZHETX/lTwQT8A6ZpFCnOpU3e?= =?us-ascii?Q?ZwbZFXQEcqOpjXt3K9mo9gbho7gfCwsLjSAyZPU/vIBlRxD7e+Zdm5A?= X-Microsoft-Exchange-Diagnostics: 1;MWHPR14MB1661;6:nMdvlJGQNI3PBtAL9BfxDJsRga3g6IbnM8hT6oAWJPrWomL4cbNM3wxGyYQu+O1anxq2Nu2EVXmPDc4Pop6ar/017LWCcG2AXNaQZkmnQwi4cyW6loIXqKXzutf1uIgorlhO3wiL/Kh/DtToVEvdI04/J4FktGqf2iSeJ1X/q1hEIhkUqn50f3G4q9otQEInpZ1wlx5e8NoWMsD24//i0T1e1BgGV374fmP+F0RNxVwM1bPOB5RInZnc3zciO9cKoPpH+8EPmMkU03un92z4+TN0ti7bVUBPp1s921pHCSqVygPSRW7cgkyq6aB81Nooh8542jbgZxh5V5vMy4yQurxwPtWn+VHZETdoeEKpflE4kvGwu4YfUFouCCdzpxeRHH9AYpY2171Y3wheOHU9sQ==;5:bNzWoemb9ttnUQgOmiO9CyOQfyb5lPEpByRkjXQtWvpLwD+xml/ODDAuQhAuozUlyNtKeF6jYdSQ7T7+SfoqWdsbvcVZu65nGLyKjaODLs3voNPQUxXXW7nQgXM7KEJvE+RqEwP5fIPe5qd7TRblNQ==;24:rbDXAEu8fq8T5RHl/LuTXWfvkm5eyhUB/3XW0wsdk0vvvJkjbj/56sF6+oPVDnMtb0BP/O1nbLTV9ErvMaruUUZTEIO/ACj9/v+F8Ki1bxA= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;MWHPR14MB1661;7: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 X-OriginatorOrg: cs.rutgers.edu X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Feb 2017 15:11:45.3978 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR14MB1661 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --------------enigC6A69F5AE405986FE8731EA4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Kirill, Kirill A. Shutemov wrote: > On Sun, Feb 05, 2017 at 11:12:41AM -0500, Zi Yan wrote: >> From: Zi Yan >> >> Originally, zap_pmd_range() checks pmd value without taking pmd lock. >> This can cause pmd_protnone entry not being freed. >> >> Because there are two steps in changing a pmd entry to a pmd_protnone >> entry. First, the pmd entry is cleared to a pmd_none entry, then, >> the pmd_none entry is changed into a pmd_protnone entry. >> The racy check, even with barrier, might only see the pmd_none entry >> in zap_pmd_range(), thus, the mapping is neither split nor zapped. >=20 > Okay, this only can happen to MADV_DONTNEED as we hold > down_write(mmap_sem) for the rest of zap_pmd_range() and whoever modifi= es > page tables has to hold at least down_read(mmap_sem) or exclude paralle= l > modification in other ways. >=20 > See 1a5a9906d4e8 ("mm: thp: fix pmd_bad() triggering in code paths hold= ing > mmap_sem read mode") for more details. >=20 > +Andrea. >=20 >> Later, in free_pmd_range(), pmd_none_or_clear() will see the >> pmd_protnone entry and clear it as a pmd_bad entry. Furthermore, >> since the pmd_protnone entry is not properly freed, the corresponding >> deposited pte page table is not freed either. >=20 > free_pmd_range() should be fine: we only free page tables after vmas go= ne > (under down_write(mmap_sem() in exit_mmap() and unmap_region()) or afte= r > pagetables moved (under down_write(mmap_sem) in shift_arg_pages()). The leaked page is not pmd page tables, but a PTE page table that is in pmd_page_table_page->pmd_huge_pte. If a pmd_protnone does not go into __split_huge_pmd() nor zap_huge_pmd(), the corresponding deposited PTE page table, put into the list via pgtable_trans_huge_deposit(), will not be taken out via pgtable_trans_huge_withdraw(). Then, when the kernel at the end of free_pmd_range() is trying to call pgtable_pmd_page_dtor() in pmd_free_tlb(), it will encounter VM_BUG_ON_PAGE(page->pmd_huge_pte, page). Either the kernel crashes or it leaks a page. >=20 >> This causes memory leak or kernel crashing, if VM_BUG_ON() is enabled.= >=20 > The problem is that numabalancing calls change_huge_pmd() under > down_read(mmap_sem), not down_write(mmap_sem) as the rest of users do. > It makes numabalancing the only code path beyond page fault that can tu= rn > pmd_none() into pmd_trans_huge() under down_read(mmap_sem). >=20 > This can lead to race when MADV_DONTNEED miss THP. That's not critical = for > pagefault vs. MADV_DONTNEED race as we will end up with clear page in t= hat > case. Not so much for change_huge_pmd(). >=20 > Looks like we need pmdp_modify() or something to modify protection bits= > inplace, without clearing pmd. >=20 > Not sure how to get crash scenario. >=20 > BTW, Zi, have you observed the crash? Or is it based on code inspection= ? > Any backtraces? The problem should be very rare in the upstream kernel. I discover the problem in my customized kernel which does very frequent page migration and uses numa_protnone. The crash scenario I guess is like: 1. A huge page pmd entry is in the middle of being changed into either a pmd_protnone or a pmd_migration_entry. It is cleared to pmd_none. 2. At the same time, the application frees the vma this page belongs to. 3. zap_pmd_range() only see pmd_none in "if (pmd_trans_huge(*pmd) || pmd_devmap(*pmd))", it might catch pmd_protnone in "if (pmd_none_or_trans_huge_or_clear_bad(pmd))". But nothing is done for it. So the deposited PTE page table page associated with the huge pmd entry is not withdrawn. 4. free_pmd_range() calls pmd_free_tlb() and in pgtable_pmd_page_dtor(), VM_BUG_ON_PAGE(page->pmd_huge_pte, page) is triggered. The crash log (you will see a pmd_migration_entry is regarded as bad pmd, which should not be. I also saw pmd_protnone before.): [ 1945.978677] mm/pgtable-generic.c:33: bad pmd ffff8f07b13c1b90(0000004fed803c00) ^^^^^^^^^^^^^^^^ a pmd migration entry [ 1946.964974] page:fffffd1dd0c4f040 count:1 mapcount:-511 mapping: (null) index:0x0 [ 1946.974265] flags: 0x6ffff0000000000() [ 1946.978486] raw: 06ffff0000000000 0000000000000000 0000000000000000 00000001fffffe00 [ 1946.987202] raw: dead000000000100 fffffd1dd0c45c80 ffff8f07aa38e340 ffff8efdca466678 [ 1946.995927] page dumped because: VM_BUG_ON_PAGE(page->pmd_huge_pte) [ 1947.002984] page->mem_cgroup:ffff8efdca466678 [ 1947.007927] ------------[ cut here ]------------ [ 1947.013123] kernel BUG at ./include/linux/mm.h:1733! [ 1947.018706] invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC [ 1947.024774] Modules linked in: ipt_MASQUERADE nf_nat_masquerade_ipv4 iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack intel_rapl sb_edac edac_corei [ 1947.077814] CPU: 19 PID: 3303 Comm: python Not tainted 4.10.0-rc5-page-migration+ #283 [ 1947.086721] Hardware name: Dell Inc. PowerEdge R530/0HFG24, BIOS 1.5.4 10/05/2015 [ 1947.095140] task: ffff8f07a5870040 task.stack: ffffc37d64adc000 [ 1947.101796] RIP: 0010:___pmd_free_tlb+0x83/0x90 [ 1947.106890] RSP: 0018:ffffc37d64adfce8 EFLAGS: 00010282 [ 1947.112762] RAX: 0000000000000021 RBX: ffffc37d64adfe10 RCX: 0000000000000000 [ 1947.120770] RDX: 0000000000000000 RSI: ffff8f07c224dea8 RDI: ffff8f07c224dea8 [ 1947.128809] RBP: ffffc37d64adfcf8 R08: 0000000000000001 R09: 0000000000000000 [ 1947.136818] R10: 000000000000000f R11: 0000000000000001 R12: fffffd1dd0c4f040 [ 1947.144825] R13: 00007fae2d7fd000 R14: ffff8f07b13c1b60 R15: ffffc37d64adfe10 [ 1947.152832] FS: 00007fafbcce6700(0000) GS:ffff8f07c2240000(0000) knlGS:0000000000000000 [ 1947.161934] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1947.168380] CR2: 00007fafeb851188 CR3: 0000001432184000 CR4: 00000000001406e0 [ 1947.176393] Call Trace: [ 1947.179160] free_pgd_range+0x487/0x5d0 [ 1947.183476] free_pgtables+0xc4/0x120 [ 1947.187593] unmap_region+0xe1/0x130 [ 1947.191620] do_munmap+0x273/0x400 [ 1947.195452] SyS_munmap+0x53/0x70 [ 1947.199190] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 1947.204382] RIP: 0033:0x7fafeb59d387 [ 1947.208406] RSP: 002b:00007fafbcce5358 EFLAGS: 00000207 ORIG_RAX: 000000000000000b [ 1947.216924] RAX: ffffffffffffffda RBX: 00007faf2c0b6780 RCX: 00007fafeb59d387 [ 1947.224933] RDX: 00007fae247fc030 RSI: 0000000009001000 RDI: 00007fae247fc000 [ 1947.232940] RBP: 00007fafbcce5390 R08: 00007faf48f9ed00 R09: 0000000000000100 [ 1947.240947] R10: 0000000000000020 R11: 0000000000000207 R12: 0000000002cf1fc0 [ 1947.248955] R13: 0000000002cf1fc0 R14: 000000000343d530 R15: 00007fafbcce5810 [ 1947.256965] Code: 4c 89 e6 48 89 df e8 0d b5 1a 00 84 c0 74 08 48 89 df e8 91 b4 1a 00 5b 41 5c 5d c3 48 c7 c6 d8 73 c7 b8 4c 89 e7 e8 dd 7b 1a 00 <0f> 0b 48 8b 3d 34 80 d9 00 eb 99 66 90 [ 1947.278200] RIP: ___pmd_free_tlb+0x83/0x90 RSP: ffffc37d64adfce8 [ 1947.285688] ---[ end trace 7864a23976d71e0a ]--- --=20 Best Regards, Yan Zi --------------enigC6A69F5AE405986FE8731EA4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBCAAGBQJYmeOsAAoJEEGLLxGcTqbMfzYH/2vVa54Od7cYHXwRwsB+d7n8 jnNVf/jRyGeDhq9vf39DLkXdy94klQQy2kr1skWw5iAWx1MnJ3senQ2Hk9VlCBYP Omm7OAlvHBfrhb7Fk2vjvPN5sq9aH33PL70N+6O7m8LZhB4HNrw0sjmcnjNuYh+E MWyhWdRjbgukSb6aHDxbq32c0fNOs2yBoYEdUtKlrMn1FSQFlr2NCGx5MKcWLC20 KPdJFbALbB4BIkotrYm/1VpMjGxu5KByjq29EXd3FG8EJzaC7ohWIk6IYqTebdkN 8fuaZ9wpyqwO9UKRootpq0id/C4Btx9893hYWdX74tRS4go3v2OxXscfIR7bVCE= =3tQH -----END PGP SIGNATURE----- --------------enigC6A69F5AE405986FE8731EA4--