From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-13.6 required=3.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id DC1FDC07E9B for ; Tue, 6 Jul 2021 06:18:50 +0000 (UTC) Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by mail.kernel.org (Postfix) with ESMTP id 9216661988 for ; Tue, 6 Jul 2021 06:18:50 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 9216661988 Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=redhat.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=owner-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix) id 6B15C6B0083; Tue, 6 Jul 2021 02:18:50 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id 687BB6B0087; Tue, 6 Jul 2021 02:18:50 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 5293B6B0088; Tue, 6 Jul 2021 02:18:50 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0130.hostedemail.com [216.40.44.130]) by kanga.kvack.org (Postfix) with ESMTP id 2CB6C6B0083 for ; Tue, 6 Jul 2021 02:18:50 -0400 (EDT) Received: from smtpin38.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay01.hostedemail.com (Postfix) with ESMTP id AD5A71801BD8B for ; Tue, 6 Jul 2021 06:18:49 +0000 (UTC) X-FDA: 78331159578.38.E466DB2 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by imf30.hostedemail.com (Postfix) with ESMTP id 4E5D7E0016BB for ; Tue, 6 Jul 2021 06:18:49 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1625552328; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qHjYf26nDQF8IxrBuohCHfhS/U3Bnml2w07ftwA7X+w=; b=PvHi2ocuGOGKd4ZSKiQKnxZGYs9W5Cx1C2ss0JFVxtgGr9D5PzJf0cExepl+36tUTAxf8n PfqGdHD6NCQ7FA9G4tmmAQOxWdYTib5NUDDbp66uoYStAZ4dKG+YFKDeWiYYz41ICApGQN YN3uu1kZsc6KOPxsGJhYNUwOwYy7yM8= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-20-Eo_T1f37OX6II2fr5ElcwA-1; Tue, 06 Jul 2021 02:18:45 -0400 X-MC-Unique: Eo_T1f37OX6II2fr5ElcwA-1 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 73ECD100CEC0; Tue, 6 Jul 2021 06:18:44 +0000 (UTC) Received: from gshan.redhat.com (vpn2-54-119.bne.redhat.com [10.64.54.119]) by smtp.corp.redhat.com (Postfix) with ESMTP id 7399060583; Tue, 6 Jul 2021 06:18:41 +0000 (UTC) From: Gavin Shan To: linux-mm@kvack.org Cc: linux-kernel@vger.kernel.org, anshuman.khandual@arm.com, catalin.marinas@arm.com, will@kernel.org, akpm@linux-foundation.org, shan.gavin@gmail.com, chuhu@redhat.com Subject: [PATCH 12/12] mm/debug_vm_pgtable: Fix corrupted page flag Date: Tue, 6 Jul 2021 14:17:48 +0800 Message-Id: <20210706061748.161258-13-gshan@redhat.com> In-Reply-To: <20210706061748.161258-1-gshan@redhat.com> References: <20210706061748.161258-1-gshan@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11 Authentication-Results: imf30.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=PvHi2ocu; dmarc=pass (policy=none) header.from=redhat.com; spf=none (imf30.hostedemail.com: domain of gshan@redhat.com has no SPF policy when checking 170.10.133.124) smtp.mailfrom=gshan@redhat.com X-Stat-Signature: unnrz1qpm4nsus4z4wnuemmfmaj6ejij X-Rspamd-Server: rspam04 X-Rspamd-Queue-Id: 4E5D7E0016BB X-HE-Tag: 1625552329-886183 Content-Transfer-Encoding: quoted-printable X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: In page table entry modifying tests, set_{pud, pmd, pte}_at() are used to populate the page table entries. On ARM64, PG_arch_1 is set to the target page flag if execution permission is given. The page flag is kept when the page is free'd to buddy's free area list. However, it will trigger page checking failure when it's pulled from the buddy's free area list, as the following warning messages indicate. BUG: Bad page state in process memhog pfn:08000 page:0000000015c0a628 refcount:0 mapcount:0 \ mapping:0000000000000000 index:0x1 pfn:0x8000 flags: 0x7ffff8000000800(arch_1|node=3D0|zone=3D0|lastcpupid=3D0xfffff= ) raw: 07ffff8000000800 dead000000000100 dead000000000122 00000000000000= 00 raw: 0000000000000001 0000000000000000 00000000ffffffff 00000000000000= 00 page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag(s) set This fixes the issue by clearing PG_arch_1 through flush_dcache_page(), right after set_{pud, pmd, pte}_at() is called. Signed-off-by: Gavin Shan --- mm/debug_vm_pgtable.c | 36 ++++++++++++++++++++++++++++++++---- 1 file changed, 32 insertions(+), 4 deletions(-) diff --git a/mm/debug_vm_pgtable.c b/mm/debug_vm_pgtable.c index 1fd6d73d2152..de6f99382b4b 100644 --- a/mm/debug_vm_pgtable.c +++ b/mm/debug_vm_pgtable.c @@ -29,6 +29,8 @@ #include #include #include + +#include #include #include =20 @@ -110,6 +112,7 @@ static void __init pte_basic_tests(struct vm_pgtable_= debug *debug, int idx) =20 static void __init pte_advanced_tests(struct vm_pgtable_debug *debug) { + struct page *page; pte_t pte; =20 /* @@ -119,13 +122,17 @@ static void __init pte_advanced_tests(struct vm_pgt= able_debug *debug) */ =20 pr_debug("Validating PTE advanced\n"); - if (debug->pte_pfn =3D=3D ULONG_MAX) { + + page =3D (debug->pte_pfn !=3D ULONG_MAX) ? + pfn_to_page(debug->pte_pfn) : NULL; + if (!page) { pr_debug("%s: Skipped\n", __func__); return; } =20 pte =3D pfn_pte(debug->pte_pfn, debug->page_prot); set_pte_at(debug->mm, debug->vaddr, debug->ptep, pte); + flush_dcache_page(page); ptep_set_wrprotect(debug->mm, debug->vaddr, debug->ptep); pte =3D ptep_get(debug->ptep); WARN_ON(pte_write(pte)); @@ -137,6 +144,7 @@ static void __init pte_advanced_tests(struct vm_pgtab= le_debug *debug) pte =3D pte_wrprotect(pte); pte =3D pte_mkclean(pte); set_pte_at(debug->mm, debug->vaddr, debug->ptep, pte); + flush_dcache_page(page); pte =3D pte_mkwrite(pte); pte =3D pte_mkdirty(pte); ptep_set_access_flags(debug->vma, debug->vaddr, debug->ptep, pte, 1); @@ -149,6 +157,7 @@ static void __init pte_advanced_tests(struct vm_pgtab= le_debug *debug) pte =3D pfn_pte(debug->pte_pfn, debug->page_prot); pte =3D pte_mkyoung(pte); set_pte_at(debug->mm, debug->vaddr, debug->ptep, pte); + flush_dcache_page(page); ptep_test_and_clear_young(debug->vma, debug->vaddr, debug->ptep); pte =3D ptep_get(debug->ptep); WARN_ON(pte_young(pte)); @@ -207,6 +216,7 @@ static void __init pmd_basic_tests(struct vm_pgtable_= debug *debug, int idx) =20 static void __init pmd_advanced_tests(struct vm_pgtable_debug *debug) { + struct page *page; pmd_t pmd; unsigned long vaddr =3D (debug->vaddr & HPAGE_PMD_MASK); =20 @@ -214,7 +224,10 @@ static void __init pmd_advanced_tests(struct vm_pgta= ble_debug *debug) return; =20 pr_debug("Validating PMD advanced\n"); - if (debug->pmd_pfn =3D=3D ULONG_MAX) { + + page =3D (debug->pmd_pfn !=3D ULONG_MAX) ? + pfn_to_page(debug->pmd_pfn) : NULL; + if (!page) { pr_debug("%s: Skipped\n", __func__); return; } @@ -223,6 +236,7 @@ static void __init pmd_advanced_tests(struct vm_pgtab= le_debug *debug) =20 pmd =3D pfn_pmd(debug->pmd_pfn, debug->page_prot); set_pmd_at(debug->mm, vaddr, debug->pmdp, pmd); + flush_dcache_page(page); pmdp_set_wrprotect(debug->mm, vaddr, debug->pmdp); pmd =3D READ_ONCE(*(debug->pmdp)); WARN_ON(pmd_write(pmd)); @@ -234,6 +248,7 @@ static void __init pmd_advanced_tests(struct vm_pgtab= le_debug *debug) pmd =3D pmd_wrprotect(pmd); pmd =3D pmd_mkclean(pmd); set_pmd_at(debug->mm, vaddr, debug->pmdp, pmd); + flush_dcache_page(page); pmd =3D pmd_mkwrite(pmd); pmd =3D pmd_mkdirty(pmd); pmdp_set_access_flags(debug->vma, vaddr, debug->pmdp, pmd, 1); @@ -246,6 +261,7 @@ static void __init pmd_advanced_tests(struct vm_pgtab= le_debug *debug) pmd =3D pmd_mkhuge(pfn_pmd(debug->pmd_pfn, debug->page_prot)); pmd =3D pmd_mkyoung(pmd); set_pmd_at(debug->mm, vaddr, debug->pmdp, pmd); + flush_dcache_page(page); pmdp_test_and_clear_young(debug->vma, vaddr, debug->pmdp); pmd =3D READ_ONCE(*(debug->pmdp)); WARN_ON(pmd_young(pmd)); @@ -332,6 +348,7 @@ static void __init pud_basic_tests(struct vm_pgtable_= debug *debug, int idx) =20 static void __init pud_advanced_tests(struct vm_pgtable_debug *debug) { + struct page *page; unsigned long vaddr =3D (debug->vaddr & HPAGE_PUD_MASK); pud_t pud; =20 @@ -339,13 +356,17 @@ static void __init pud_advanced_tests(struct vm_pgt= able_debug *debug) return; =20 pr_debug("Validating PUD advanced\n"); - if (debug->pud_pfn =3D=3D ULONG_MAX) { + + page =3D (debug->pud_pfn !=3D ULONG_MAX) ? + pfn_to_page(debug->pud_pfn) : NULL; + if (!page) { pr_debug("%s: Skipped\n", __func__); return; } =20 pud =3D pfn_pud(debug->pud_pfn, debug->page_prot); set_pud_at(debug->mm, vaddr, debug->pudp, pud); + flush_dcache_page(page); pudp_set_wrprotect(debug->mm, vaddr, debug->pudp); pud =3D READ_ONCE(*(debug->pudp)); WARN_ON(pud_write(pud)); @@ -359,6 +380,7 @@ static void __init pud_advanced_tests(struct vm_pgtab= le_debug *debug) pud =3D pud_wrprotect(pud); pud =3D pud_mkclean(pud); set_pud_at(debug->mm, vaddr, debug->pudp, pud); + flush_dcache_page(page); pud =3D pud_mkwrite(pud); pud =3D pud_mkdirty(pud); pudp_set_access_flags(debug->vma, vaddr, debug->pudp, pud, 1); @@ -374,6 +396,7 @@ static void __init pud_advanced_tests(struct vm_pgtab= le_debug *debug) pud =3D pfn_pud(debug->pud_pfn, debug->page_prot); pud =3D pud_mkyoung(pud); set_pud_at(debug->mm, vaddr, debug->pudp, pud); + flush_dcache_page(page); pudp_test_and_clear_young(debug->vma, vaddr, debug->pudp); pud =3D READ_ONCE(*(debug->pudp)); WARN_ON(pud_young(pud)); @@ -588,10 +611,14 @@ static void __init pgd_populate_tests(struct vm_pgt= able_debug *debug) { } =20 static void __init pte_clear_tests(struct vm_pgtable_debug *debug) { + struct page *page; pte_t pte; =20 pr_debug("Validating PTE clear\n"); - if (debug->pte_pfn =3D=3D ULONG_MAX) { + + page =3D (debug->pte_pfn !=3D ULONG_MAX) ? + pfn_to_page(debug->pte_pfn) : NULL; + if (!page) { pr_debug("%s: Skipped\n", __func__); return; } @@ -601,6 +628,7 @@ static void __init pte_clear_tests(struct vm_pgtable_= debug *debug) pte =3D __pte(pte_val(pte) | RANDOM_ORVALUE); #endif set_pte_at(debug->mm, debug->vaddr, debug->ptep, pte); + flush_dcache_page(page); barrier(); pte_clear(debug->mm, debug->vaddr, debug->ptep); pte =3D ptep_get(debug->ptep); --=20 2.23.0