From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-16.6 required=3.0 tests=BAYES_00, DKIM_ADSP_CUSTOM_MED,DKIM_INVALID,DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_CR_TRAILER,INCLUDES_PATCH,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 36DEAC433DB for ; Fri, 15 Jan 2021 19:05:19 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id E4EFF221E2 for ; Fri, 15 Jan 2021 19:05:18 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org E4EFF221E2 Authentication-Results: mail.kernel.org; dmarc=fail (p=reject dis=none) header.from=google.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 13E538D01E0; Fri, 15 Jan 2021 14:05:17 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 119AD8D01DD; Fri, 15 Jan 2021 14:05:17 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id EF9C88D01E0; Fri, 15 Jan 2021 14:05:16 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0196.hostedemail.com [216.40.44.196]) by kanga.kvack.org (Postfix) with ESMTP id D30858D01DD for ; Fri, 15 Jan 2021 14:05:16 -0500 (EST) Received: from smtpin26.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay05.hostedemail.com (Postfix) with ESMTP id 87B4A1844C6D3 for ; Fri, 15 Jan 2021 19:05:16 +0000 (UTC) X-FDA: 77708937432.26.humor91_001609a27531 Received: from filter.hostedemail.com (10.5.16.251.rfc1918.com [10.5.16.251]) by smtpin26.hostedemail.com (Postfix) with ESMTP id 5A427181A8B11 for ; Fri, 15 Jan 2021 19:05:16 +0000 (UTC) X-HE-Tag: humor91_001609a27531 X-Filterd-Recvd-Size: 7433 Received: from mail-qt1-f201.google.com (mail-qt1-f201.google.com [209.85.160.201]) by imf03.hostedemail.com (Postfix) with ESMTP for ; Fri, 15 Jan 2021 19:05:15 +0000 (UTC) Received: by mail-qt1-f201.google.com with SMTP id g9so8162460qtv.12 for ; Fri, 15 Jan 2021 11:05:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=sender:date:in-reply-to:message-id:mime-version:references:subject :from:to:cc; bh=SO9sjqaKCMXJJzHxKFNKZ8fl9M95uBZjn3qrgL8bKOw=; b=br99sLKWPaRGCxGr17dG8+zWbwFvLZfrkAe7MH6InQjqLnu1BBjhtzgPvwOPln11wc ws61/ohpuv1UhyZEBb1RneFJRppgeIKP64B/NjY6yxYror+cpCBs6waPbRnqbNx14mC/ gAyaCu1qw4KBPrDUgaf3yrjyDQT6XcxGbKPU7BEUyfuvD73extZIbRJcFNSo7guR0lD7 vrKx/JSjSvi8EKQMgwi6g+4huBZ2MJBvm8Lihm7L6r/DyZSyl+F0PVQkPC8B+JKZzN/M 35GjMpFLaSiV0/LdeC1eOYUaA3F6Qx+WUNkSeWiX8CeE3gcBk4srPwHUZv8ohTPgILGV mRxw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:date:in-reply-to:message-id:mime-version :references:subject:from:to:cc; bh=SO9sjqaKCMXJJzHxKFNKZ8fl9M95uBZjn3qrgL8bKOw=; b=lMPAmZJCNDECET3do467fKMICAeIL6TGuvCbQhkokK2hz1VS7irnYR7ORWqh/NHEkS Oyyjgb+gXmEw4iPP9a/gIcBZKeqsK3LmUPR5u5/2w7ABD4NZEZy2ROQf/JCEnsLtqd09 /Zh+sJd6JjYqZfC8X3KkvJuXGWkPnRPHYeYmy1WbyvoXqarTIICkqq0XkyMYfQghN2eJ 6kE+owXZkF0xCd5SyLbqzaPLjlXv9spLBAmctztDrQW5XePsNVW7+UUe/oNdZU3u+sH9 fS2Lf3rSV4wJzuxa2W4O2dqGc9vb+LpUF3n6o7RACnNmwASiLJR6Jk/ARKstwXLguHOb V2Ow== X-Gm-Message-State: AOAM532pEsbFgO9IvkYTpujGh+KxsNLIS1sYTrLBXeAgNEHDISyWp5c5 Zkyb4YS4yMUthrGK9Nvbrt2V5CzdOSAlMUbNNFme X-Google-Smtp-Source: ABdhPJwoJi2o7/cXRquIQac61C6Ixroq5e5qW6qDz4QrFxWEc4eZ9BMxB7lbtbKf8xFWJ3ByX3YOQ7eXhMKEqJdAp5LD X-Received: from ajr0.svl.corp.google.com ([2620:15c:2cd:203:f693:9fff:feef:c8f8]) (user=axelrasmussen job=sendgmr) by 2002:ad4:4643:: with SMTP id y3mr13487386qvv.3.1610737514910; Fri, 15 Jan 2021 11:05:14 -0800 (PST) Date: Fri, 15 Jan 2021 11:04:46 -0800 In-Reply-To: <20210115190451.3135416-1-axelrasmussen@google.com> Message-Id: <20210115190451.3135416-5-axelrasmussen@google.com> Mime-Version: 1.0 References: <20210115190451.3135416-1-axelrasmussen@google.com> X-Mailer: git-send-email 2.30.0.284.gd98b1dd5eaa7-goog Subject: [PATCH 4/9] hugetlb/userfaultfd: Unshare all pmds for hugetlbfs when register wp From: Axel Rasmussen To: Alexander Viro , Alexey Dobriyan , Andrea Arcangeli , Andrew Morton , Anshuman Khandual , Catalin Marinas , Chinwen Chang , Huang Ying , Ingo Molnar , Jann Horn , Jerome Glisse , Lokesh Gidra , "Matthew Wilcox (Oracle)" , Michael Ellerman , "=?UTF-8?q?Michal=20Koutn=C3=BD?=" , Michel Lespinasse , Mike Kravetz , Mike Rapoport , Nicholas Piggin , Peter Xu , Shaohua Li , Shawn Anastasio , Steven Rostedt , Steven Price , Vlastimil Babka Cc: linux-kernel@vger.kernel.org, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, Adam Ruprecht , Axel Rasmussen , Cannon Matthews , "Dr . David Alan Gilbert" , David Rientjes , Oliver Upton Content-Type: text/plain; charset="UTF-8" X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: From: Peter Xu Huge pmd sharing for hugetlbfs is racy with userfaultfd-wp because userfaultfd-wp is always based on pgtable entries, so they cannot be shared. Walk the hugetlb range and unshare all such mappings if there is, right before UFFDIO_REGISTER will succeed and return to userspace. This will pair with want_pmd_share() in hugetlb code so that huge pmd sharing is completely disabled for userfaultfd-wp registered range. Signed-off-by: Peter Xu Signed-off-by: Axel Rasmussen --- fs/userfaultfd.c | 43 ++++++++++++++++++++++++++++++++++++ include/linux/mmu_notifier.h | 1 + 2 files changed, 44 insertions(+) diff --git a/fs/userfaultfd.c b/fs/userfaultfd.c index 894cc28142e7..dfe5f7a21883 100644 --- a/fs/userfaultfd.c +++ b/fs/userfaultfd.c @@ -15,6 +15,7 @@ #include #include #include +#include #include #include #include @@ -1190,6 +1191,45 @@ static ssize_t userfaultfd_read(struct file *file, char __user *buf, } } +/* + * This function will unconditionally remove all the shared pmd pgtable entries + * within the specific vma for a hugetlbfs memory range. + */ +static void hugetlb_unshare_all_pmds(struct vm_area_struct *vma) +{ + struct hstate *h = hstate_vma(vma); + unsigned long sz = huge_page_size(h); + struct mm_struct *mm = vma->vm_mm; + struct mmu_notifier_range range; + unsigned long address; + spinlock_t *ptl; + pte_t *ptep; + + /* + * No need to call adjust_range_if_pmd_sharing_possible(), because + * we're going to operate on the whole vma + */ + mmu_notifier_range_init(&range, MMU_NOTIFY_HUGETLB_UNSHARE, + 0, vma, mm, vma->vm_start, vma->vm_end); + mmu_notifier_invalidate_range_start(&range); + i_mmap_lock_write(vma->vm_file->f_mapping); + for (address = vma->vm_start; address < vma->vm_end; address += sz) { + ptep = huge_pte_offset(mm, address, sz); + if (!ptep) + continue; + ptl = huge_pte_lock(h, mm, ptep); + huge_pmd_unshare(mm, vma, &address, ptep); + spin_unlock(ptl); + } + flush_hugetlb_tlb_range(vma, vma->vm_start, vma->vm_end); + i_mmap_unlock_write(vma->vm_file->f_mapping); + /* + * No need to call mmu_notifier_invalidate_range(), see + * Documentation/vm/mmu_notifier.rst. + */ + mmu_notifier_invalidate_range_end(&range); +} + static void __wake_userfault(struct userfaultfd_ctx *ctx, struct userfaultfd_wake_range *range) { @@ -1448,6 +1488,9 @@ static int userfaultfd_register(struct userfaultfd_ctx *ctx, vma->vm_flags = new_flags; vma->vm_userfaultfd_ctx.ctx = ctx; + if (is_vm_hugetlb_page(vma) && uffd_disable_huge_pmd_share(vma)) + hugetlb_unshare_all_pmds(vma); + skip: prev = vma; start = vma->vm_end; diff --git a/include/linux/mmu_notifier.h b/include/linux/mmu_notifier.h index b8200782dede..ff50c8528113 100644 --- a/include/linux/mmu_notifier.h +++ b/include/linux/mmu_notifier.h @@ -51,6 +51,7 @@ enum mmu_notifier_event { MMU_NOTIFY_SOFT_DIRTY, MMU_NOTIFY_RELEASE, MMU_NOTIFY_MIGRATE, + MMU_NOTIFY_HUGETLB_UNSHARE, }; #define MMU_NOTIFIER_RANGE_BLOCKABLE (1 << 0) -- 2.30.0.284.gd98b1dd5eaa7-goog