From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id AA651C433EF for ; Fri, 4 Mar 2022 05:19:43 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 4C30F8D0008; Fri, 4 Mar 2022 00:19:43 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 4725D8D0001; Fri, 4 Mar 2022 00:19:43 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 312CF8D0008; Fri, 4 Mar 2022 00:19:43 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from forelay.hostedemail.com (smtprelay0243.hostedemail.com [216.40.44.243]) by kanga.kvack.org (Postfix) with ESMTP id 2324A8D0001 for ; Fri, 4 Mar 2022 00:19:43 -0500 (EST) Received: from smtpin24.hostedemail.com (10.5.19.251.rfc1918.com [10.5.19.251]) by forelay05.hostedemail.com (Postfix) with ESMTP id CAA9F181AC217 for ; Fri, 4 Mar 2022 05:19:42 +0000 (UTC) X-FDA: 79205551404.24.3656AD8 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by imf26.hostedemail.com (Postfix) with ESMTP id 3F6B0140002 for ; Fri, 4 Mar 2022 05:19:42 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1646371181; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=W3A1Sw4gSLvq3WpWIO0c1Ts85eaL9QjEv2hQ97BtHXI=; b=cX3abnRgEotL7LxvvP8L9vT/I1b1KSKr5DBwkgAgFoFK219Zojc8+U/WPhUKA0W/5AnCh6 J9iYsolvPGqzhfHn4J8DdbfrSD/c84wcDupRfcgoKH1/AxMgDzpompkxVUlT9P113L2/FJ Xe+iIyBTxZY3XxKuBzuP9rqmbJqy2WQ= Received: from mail-pj1-f69.google.com (mail-pj1-f69.google.com [209.85.216.69]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-97-2RYlOBs3P_uyIe4tEyCf6Q-1; Fri, 04 Mar 2022 00:19:40 -0500 X-MC-Unique: 2RYlOBs3P_uyIe4tEyCf6Q-1 Received: by mail-pj1-f69.google.com with SMTP id t12-20020a17090a448c00b001b9cbac9c43so4182292pjg.2 for ; Thu, 03 Mar 2022 21:19:40 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references:mime-version:content-transfer-encoding; bh=W3A1Sw4gSLvq3WpWIO0c1Ts85eaL9QjEv2hQ97BtHXI=; b=M11UIVGhmNFDJfQ86NjWC2WTmdLO580RtqPXZu6WgyqGVTFuZlW0+mYIuiZq0kyaTB 9z/Uvr5dvV1g/Tfpmw5XW29kTjmcOa/bN94SOnfA999x4J59w8w3/hAFlVSdXV9waBAC DvFXJ5WxL0PevT6CDKkQOqugDuT5h7qRllYkWZjL/VLICivYRpMZnnR7aBwN8t3zlnoX uO9Wf4yM+n+qYEamMB7sz6zEcBEJgKpsYmh1solkyIrj6chJoNKTjSvkpRwww2uGKrCX yt4jNpQYjVm+ngGvQuXSNCGAXoDyk1qzdGLT6SIqL1I+QY/lg5Sk4u8rxmfz/AcgmzHv 3fpQ== X-Gm-Message-State: AOAM531JA0ahf/yYdS0avl08njAOXapeca+VTU94MqDmZxMwRmwfZQ3N bZ48bq972UkMDfqPXTn6mJwjm7jfGCplhgp18bhUmBUDczFN7YLuOFsjnI0Bvz5l4PGZioRGlc3 BJo/cx0rsySicHUo+Y4laWHzjF1hnGpfP+rE6UEhjXvNYkMMZDz3dMEAU9RVp X-Received: by 2002:a17:902:b908:b0:151:b8ec:2038 with SMTP id bf8-20020a170902b90800b00151b8ec2038mr2680092plb.76.1646371179522; Thu, 03 Mar 2022 21:19:39 -0800 (PST) X-Google-Smtp-Source: ABdhPJx0oSKjLHhzbwnFEI3D/leuju9Hh++AWa1WGIDqEaacCZODw/P1z3OkOVq6mvSOA7JhcqdiMA== X-Received: by 2002:a17:902:b908:b0:151:b8ec:2038 with SMTP id bf8-20020a170902b90800b00151b8ec2038mr2680056plb.76.1646371179057; Thu, 03 Mar 2022 21:19:39 -0800 (PST) Received: from localhost.localdomain ([94.177.118.59]) by smtp.gmail.com with ESMTPSA id p16-20020a056a000b5000b004f669806cd9sm4323865pfo.87.2022.03.03.21.19.31 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Thu, 03 Mar 2022 21:19:38 -0800 (PST) From: Peter Xu To: linux-mm@kvack.org, linux-kernel@vger.kernel.org Cc: peterx@redhat.com, Nadav Amit , Hugh Dickins , David Hildenbrand , Axel Rasmussen , Matthew Wilcox , Alistair Popple , Mike Rapoport , Andrew Morton , Jerome Glisse , Mike Kravetz , "Kirill A . Shutemov" , Andrea Arcangeli Subject: [PATCH v7 17/23] mm/hugetlb: Only drop uffd-wp special pte if required Date: Fri, 4 Mar 2022 13:17:02 +0800 Message-Id: <20220304051708.86193-18-peterx@redhat.com> X-Mailer: git-send-email 2.32.0 In-Reply-To: <20220304051708.86193-1-peterx@redhat.com> References: <20220304051708.86193-1-peterx@redhat.com> MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset="US-ASCII" X-Rspamd-Server: rspam11 X-Rspamd-Queue-Id: 3F6B0140002 X-Rspam-User: Authentication-Results: imf26.hostedemail.com; dkim=pass header.d=redhat.com header.s=mimecast20190719 header.b=cX3abnRg; dmarc=pass (policy=none) header.from=redhat.com; spf=none (imf26.hostedemail.com: domain of peterx@redhat.com has no SPF policy when checking 170.10.129.124) smtp.mailfrom=peterx@redhat.com X-Stat-Signature: snuhep9nwswad3zjbrie4tn68oqh8wyz X-HE-Tag: 1646371182-369855 Content-Transfer-Encoding: quoted-printable X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: As with shmem uffd-wp special ptes, only drop the uffd-wp special swap pt= e if unmapping an entire vma or synchronized such that faults can not race wit= h the unmap operation. This requires passing zap_flags all the way to the lowe= st level hugetlb unmap routine: __unmap_hugepage_range. In general, unmap calls originated in hugetlbfs code will pass the ZAP_FLAG_DROP_MARKER flag as synchronization is in place to prevent fault= s. The exception is hole punch which will first unmap without any synchroniz= ation. Later when hole punch actually removes the page from the file, it will ch= eck to see if there was a subsequent fault and if so take the hugetlb fault mute= x while unmapping again. This second unmap will pass in ZAP_FLAG_DROP_MARK= ER. The justification of "whether to apply ZAP_FLAG_DROP_MARKER flag when unm= ap a hugetlb range" is (IMHO): we should never reach a state when a page fault= could errornously fault in a page-cache page that was wr-protected to be writab= le, even in an extremely short period. That could happen if e.g. we pass ZAP_FLAG_DROP_MARKER when hugetlbfs_punch_hole() calls hugetlb_vmdelete_l= ist(), because if a page faults after that call and before remove_inode_hugepage= s() is executed, the page cache can be mapped writable again in the small racy w= indow, that can cause unexpected data overwritten. Reviewed-by: Mike Kravetz Signed-off-by: Peter Xu --- fs/hugetlbfs/inode.c | 15 +++++++++------ include/linux/hugetlb.h | 8 +++++--- mm/hugetlb.c | 33 +++++++++++++++++++++++++-------- mm/memory.c | 5 ++++- 4 files changed, 43 insertions(+), 18 deletions(-) diff --git a/fs/hugetlbfs/inode.c b/fs/hugetlbfs/inode.c index 171212bdaae6..d017c674f1b8 100644 --- a/fs/hugetlbfs/inode.c +++ b/fs/hugetlbfs/inode.c @@ -404,7 +404,8 @@ static void remove_huge_page(struct page *page) } =20 static void -hugetlb_vmdelete_list(struct rb_root_cached *root, pgoff_t start, pgoff_= t end) +hugetlb_vmdelete_list(struct rb_root_cached *root, pgoff_t start, pgoff_= t end, + unsigned long zap_flags) { struct vm_area_struct *vma; =20 @@ -438,7 +439,7 @@ hugetlb_vmdelete_list(struct rb_root_cached *root, pg= off_t start, pgoff_t end) } =20 unmap_hugepage_range(vma, vma->vm_start + v_offset, v_end, - NULL); + NULL, zap_flags); } } =20 @@ -516,7 +517,8 @@ static void remove_inode_hugepages(struct inode *inod= e, loff_t lstart, mutex_lock(&hugetlb_fault_mutex_table[hash]); hugetlb_vmdelete_list(&mapping->i_mmap, index * pages_per_huge_page(h), - (index + 1) * pages_per_huge_page(h)); + (index + 1) * pages_per_huge_page(h), + ZAP_FLAG_DROP_MARKER); i_mmap_unlock_write(mapping); } =20 @@ -582,7 +584,8 @@ static void hugetlb_vmtruncate(struct inode *inode, l= off_t offset) i_mmap_lock_write(mapping); i_size_write(inode, offset); if (!RB_EMPTY_ROOT(&mapping->i_mmap.rb_root)) - hugetlb_vmdelete_list(&mapping->i_mmap, pgoff, 0); + hugetlb_vmdelete_list(&mapping->i_mmap, pgoff, 0, + ZAP_FLAG_DROP_MARKER); i_mmap_unlock_write(mapping); remove_inode_hugepages(inode, offset, LLONG_MAX); } @@ -615,8 +618,8 @@ static long hugetlbfs_punch_hole(struct inode *inode,= loff_t offset, loff_t len) i_mmap_lock_write(mapping); if (!RB_EMPTY_ROOT(&mapping->i_mmap.rb_root)) hugetlb_vmdelete_list(&mapping->i_mmap, - hole_start >> PAGE_SHIFT, - hole_end >> PAGE_SHIFT); + hole_start >> PAGE_SHIFT, + hole_end >> PAGE_SHIFT, 0); i_mmap_unlock_write(mapping); remove_inode_hugepages(inode, hole_start, hole_end); inode_unlock(inode); diff --git a/include/linux/hugetlb.h b/include/linux/hugetlb.h index 38c5ac28b787..ab48b3bbb0e6 100644 --- a/include/linux/hugetlb.h +++ b/include/linux/hugetlb.h @@ -143,11 +143,12 @@ long follow_hugetlb_page(struct mm_struct *, struct= vm_area_struct *, unsigned long *, unsigned long *, long, unsigned int, int *); void unmap_hugepage_range(struct vm_area_struct *, - unsigned long, unsigned long, struct page *); + unsigned long, unsigned long, struct page *, + unsigned long); void __unmap_hugepage_range_final(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long start, unsigned long end, - struct page *ref_page); + struct page *ref_page, unsigned long zap_flags); void hugetlb_report_meminfo(struct seq_file *); int hugetlb_report_node_meminfo(char *buf, int len, int nid); void hugetlb_show_meminfo(void); @@ -400,7 +401,8 @@ static inline unsigned long hugetlb_change_protection= ( =20 static inline void __unmap_hugepage_range_final(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long start, - unsigned long end, struct page *ref_page) + unsigned long end, struct page *ref_page, + unsigned long zap_flags) { BUG(); } diff --git a/mm/hugetlb.c b/mm/hugetlb.c index 1a20be29ac3a..994d7a3ee871 100644 --- a/mm/hugetlb.c +++ b/mm/hugetlb.c @@ -4931,7 +4931,7 @@ int move_hugetlb_page_tables(struct vm_area_struct = *vma, =20 static void __unmap_hugepage_range(struct mmu_gather *tlb, struct vm_are= a_struct *vma, unsigned long start, unsigned long end, - struct page *ref_page) + struct page *ref_page, unsigned long zap_flags) { struct mm_struct *mm =3D vma->vm_mm; unsigned long address; @@ -4987,7 +4987,18 @@ static void __unmap_hugepage_range(struct mmu_gath= er *tlb, struct vm_area_struct * unmapped and its refcount is dropped, so just clear pte here. */ if (unlikely(!pte_present(pte))) { - huge_pte_clear(mm, address, ptep, sz); + /* + * If the pte was wr-protected by uffd-wp in any of the + * swap forms, meanwhile the caller does not want to + * drop the uffd-wp bit in this zap, then replace the + * pte with a marker. + */ + if (pte_swp_uffd_wp_any(pte) && + !(zap_flags & ZAP_FLAG_DROP_MARKER)) + set_huge_pte_at(mm, address, ptep, + make_pte_marker(PTE_MARKER_UFFD_WP)); + else + huge_pte_clear(mm, address, ptep, sz); spin_unlock(ptl); continue; } @@ -5015,7 +5026,11 @@ static void __unmap_hugepage_range(struct mmu_gath= er *tlb, struct vm_area_struct tlb_remove_huge_tlb_entry(h, tlb, ptep, address); if (huge_pte_dirty(pte)) set_page_dirty(page); - + /* Leave a uffd-wp pte marker if needed */ + if (huge_pte_uffd_wp(pte) && + !(zap_flags & ZAP_FLAG_DROP_MARKER)) + set_huge_pte_at(mm, address, ptep, + make_pte_marker(PTE_MARKER_UFFD_WP)); hugetlb_count_sub(pages_per_huge_page(h), mm); page_remove_rmap(page, vma, true); =20 @@ -5049,9 +5064,10 @@ static void __unmap_hugepage_range(struct mmu_gath= er *tlb, struct vm_area_struct =20 void __unmap_hugepage_range_final(struct mmu_gather *tlb, struct vm_area_struct *vma, unsigned long start, - unsigned long end, struct page *ref_page) + unsigned long end, struct page *ref_page, + unsigned long zap_flags) { - __unmap_hugepage_range(tlb, vma, start, end, ref_page); + __unmap_hugepage_range(tlb, vma, start, end, ref_page, zap_flags); =20 /* * Clear this flag so that x86's huge_pmd_share page_table_shareable @@ -5067,12 +5083,13 @@ void __unmap_hugepage_range_final(struct mmu_gath= er *tlb, } =20 void unmap_hugepage_range(struct vm_area_struct *vma, unsigned long star= t, - unsigned long end, struct page *ref_page) + unsigned long end, struct page *ref_page, + unsigned long zap_flags) { struct mmu_gather tlb; =20 tlb_gather_mmu(&tlb, vma->vm_mm); - __unmap_hugepage_range(&tlb, vma, start, end, ref_page); + __unmap_hugepage_range(&tlb, vma, start, end, ref_page, zap_flags); tlb_finish_mmu(&tlb); } =20 @@ -5127,7 +5144,7 @@ static void unmap_ref_private(struct mm_struct *mm,= struct vm_area_struct *vma, */ if (!is_vma_resv_set(iter_vma, HPAGE_RESV_OWNER)) unmap_hugepage_range(iter_vma, address, - address + huge_page_size(h), page); + address + huge_page_size(h), page, 0); } i_mmap_unlock_write(mapping); } diff --git a/mm/memory.c b/mm/memory.c index e9e335ecb5dc..43ab8d6c768e 100644 --- a/mm/memory.c +++ b/mm/memory.c @@ -1679,8 +1679,11 @@ static void unmap_single_vma(struct mmu_gather *tl= b, * safe to do nothing in this case. */ if (vma->vm_file) { + unsigned long zap_flags =3D details ? + details->zap_flags : 0; i_mmap_lock_write(vma->vm_file->f_mapping); - __unmap_hugepage_range_final(tlb, vma, start, end, NULL); + __unmap_hugepage_range_final(tlb, vma, start, end, + NULL, zap_flags); i_mmap_unlock_write(vma->vm_file->f_mapping); } } else --=20 2.32.0