From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id DD140C636CC for ; Tue, 7 Feb 2023 12:20:05 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 5CE626B00BC; Tue, 7 Feb 2023 07:20:05 -0500 (EST) Received: by kanga.kvack.org (Postfix, from userid 40) id 558306B00BD; Tue, 7 Feb 2023 07:20:05 -0500 (EST) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id 3AAAF6B00BE; Tue, 7 Feb 2023 07:20:05 -0500 (EST) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0010.hostedemail.com [216.40.44.10]) by kanga.kvack.org (Postfix) with ESMTP id 2619F6B00BC for ; Tue, 7 Feb 2023 07:20:05 -0500 (EST) Received: from smtpin12.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay01.hostedemail.com (Postfix) with ESMTP id F30061C5CC9 for ; Tue, 7 Feb 2023 12:20:04 +0000 (UTC) X-FDA: 80440402728.12.38B1019 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (mail-mw2nam10on2084.outbound.protection.outlook.com [40.107.94.84]) by imf18.hostedemail.com (Postfix) with ESMTP id 029991C0010 for ; Tue, 7 Feb 2023 12:20:00 +0000 (UTC) Authentication-Results: imf18.hostedemail.com; dkim=pass header.d=Nvidia.com header.s=selector2 header.b=m5OE0QsO; spf=pass (imf18.hostedemail.com: domain of jgg@nvidia.com designates 40.107.94.84 as permitted sender) smtp.mailfrom=jgg@nvidia.com; arc=pass ("microsoft.com:s=arcselector9901:i=1"); dmarc=pass (policy=reject) header.from=nvidia.com ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1675772402; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=ka1JLWFpn998EV2qdaWGP74rkt709l/jFMLXnA2McRI=; b=O7wvRv3ZCk4kZXLrOh2s8dxVVYZdIsA9v4JaIq/JWTtWuzwBqEQNbR1aIfUnywqJ4SRB04 yNwFwkPCCWz3CSqTB++URVdiWM4F5Mv+5s7oQAG9DCaznP0ZGrXnUNV4AmpLNfze8TU16k HXWVd+WNTbI9pN05nXGwtP1GgqNg7N0= ARC-Authentication-Results: i=2; imf18.hostedemail.com; dkim=pass header.d=Nvidia.com header.s=selector2 header.b=m5OE0QsO; spf=pass (imf18.hostedemail.com: domain of jgg@nvidia.com designates 40.107.94.84 as permitted sender) smtp.mailfrom=jgg@nvidia.com; arc=pass ("microsoft.com:s=arcselector9901:i=1"); dmarc=pass (policy=reject) header.from=nvidia.com ARC-Seal: i=2; s=arc-20220608; d=hostedemail.com; t=1675772402; a=rsa-sha256; cv=pass; b=7lC9U7mhZGTH2Q86pg5nKLc7T/Dt/pR/IL8smMG7OB7KonpL7HrzKwJFAIQ/4DvgsHM0Dp +UUgLfvG4N7VR12spO6MpqJNk51OVMGOXErEx8yUVmMOCea28QRFXYpVlEog98dWgRXMg7 jXp5P6W4RSgLesUyMOYbAwVooNJXbsw= ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ZQYLCBkr3h7sr6oFL7F00rTYjcBgdGa7gV++Masx1o3oVdRgSyfhMiovpww5datK9wxah4+9dETlGrDmhjJlSeRii5gfLhrVHv2hLLqwWgPtb91eVlg8kCPUG81n3WKSrixouipYh9p+angSaNnUZ56V3dB7iAV5iU4wnD9b7cpPqHKGErzgZKqBQ0l2gAFETrdbJbGWxTTxfX852+cezcoLpMaTK+WToOjm1AeSRIl3OKJs5/PsJhgZyZW8DTf+ynNX9F+h1ll6UJ54ZdmTu9btqk48gdgTzZRqWYCSD9jKCugXemEYRrGtYkpQ3UK5VseNOdt/WpZBTFuh32SOeg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ka1JLWFpn998EV2qdaWGP74rkt709l/jFMLXnA2McRI=; b=ZuZLsoZU2zZuB1ZGw/rau8hwtHaapmiT8VqbHDU5j4Y+k6Sg98tRgRLKf7Y8rNxSJTNytx7fEhavGZcVATMOdzgjMtyU51eFU0TQslg7Nv8I3lcyca+mWIaQ82PIFZLDp5TPlguJ8pfFpS3k1k0mUCOHzKRZyrPKvGem/Uz06tgabvRRl7W0QV5NPXBdlifImOARFvL4a4l01rVxXmWI4eH/o/dqzpeM2S/AwKrbHifuH5ZCLWx1QeB5ObV4guYegLXQtpkWHCu/GmZeA6jkTRlNUlk1mDiOybpyzGgOcaPBlrxSabDoWwjMwQRXFjvsWK0KJWMn/31vFjse5Mi2nA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ka1JLWFpn998EV2qdaWGP74rkt709l/jFMLXnA2McRI=; b=m5OE0QsOAJMuO7sF515kJQhbdVYWm7PbQ1qoPDMRjU+hu8SwYLfcKuvpnj8PnK6DW92p/iV5DwOGd7UDk5WpOpHzLHOnPNcEGURdho9/zdgL93qewYm3BT7ktpSrkfvOx8pqgFqByMapwxsnhf9XEkVxZ4cicYRkWNgJUwnOn40LjQlXvwf/ysRd09mQszOrL3lfPBDKCBbtjAYaeZdEoi95TPyu27VCuB/1rK2KpHWjACa+BP6N8AOajaRa6TXIvADSH2C6auwDsxSrX20MEkNkZwJ/FMw6PuFKHWp+awPf5CQlpOuRLpw3iTPhQKv28Lsdfcw4o46f9AmxoKZ+Hg== Received: from LV2PR12MB5869.namprd12.prod.outlook.com (2603:10b6:408:176::16) by SN7PR12MB8103.namprd12.prod.outlook.com (2603:10b6:806:355::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6064.34; Tue, 7 Feb 2023 12:19:58 +0000 Received: from LV2PR12MB5869.namprd12.prod.outlook.com ([fe80::3cb3:2fce:5c8f:82ee]) by LV2PR12MB5869.namprd12.prod.outlook.com ([fe80::3cb3:2fce:5c8f:82ee%4]) with mapi id 15.20.6064.031; Tue, 7 Feb 2023 12:19:58 +0000 Date: Tue, 7 Feb 2023 08:19:57 -0400 From: Jason Gunthorpe To: Tejun Heo Cc: Yosry Ahmed , Alistair Popple , linux-mm@kvack.org, cgroups@vger.kernel.org, linux-kernel@vger.kernel.org, jhubbard@nvidia.com, tjmercier@google.com, hannes@cmpxchg.org, surenb@google.com, mkoutny@suse.com, daniel@ffwll.ch, "Daniel P . Berrange" , Alex Williamson , Zefan Li , Andrew Morton Subject: Re: [PATCH 14/19] mm: Introduce a cgroup for pinned memory Message-ID: References: Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-ClientProxiedBy: BL1PR13CA0374.namprd13.prod.outlook.com (2603:10b6:208:2c0::19) To LV2PR12MB5869.namprd12.prod.outlook.com (2603:10b6:408:176::16) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: LV2PR12MB5869:EE_|SN7PR12MB8103:EE_ X-MS-Office365-Filtering-Correlation-Id: 3f37ae5d-e578-4edb-205b-08db0905a0f1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:LV2PR12MB5869.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230025)(4636009)(366004)(376002)(136003)(346002)(396003)(39860400002)(451199018)(36756003)(6486002)(478600001)(86362001)(316002)(54906003)(5660300002)(7416002)(2906002)(8676002)(41300700001)(66556008)(66476007)(4326008)(6916009)(66946007)(8936002)(26005)(38100700002)(6506007)(2616005)(186003)(83380400001)(6512007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?7jjaMuA9DcsLEBDIfAXe3RC1lyz+rkh8jyDusQ/Ivk5siPu5l9NPdu21CDkC?= =?us-ascii?Q?iPiuzCzU+weBCxAt8Ta5fXrlC2xAE0ieMCgvOHzhHJJP729ezZJLUPt8hOkA?= =?us-ascii?Q?SUCV6/z/B7BuD4fW050zaiy2/UhcEsaHikE9I7gkykM/62zJAn4c1cikttO9?= =?us-ascii?Q?Dw7X7tUb3++z4Zsaq0hZHiIdwyvM7+gIQoXWqPTaIt+p3NPUOAkZesqGQjPj?= =?us-ascii?Q?iaAP3+N3Z4Uvyy8p1s75YmAJMuA82uuS3oST/iaHw3itMBwTP7Ftmd+YQMdw?= =?us-ascii?Q?Lga9SBYoWzU0URVs0VJsp2H2itoagr4e/8jo46DXavbn9IpNf8fPlN2mXrHV?= =?us-ascii?Q?O0WwNKHVciMQSI4cmIwr1rWDvfaaUBkt+fv7MTEWPaiiuQaW8t6xb4RSecPn?= =?us-ascii?Q?myxB9YNB0hHe3cIGzVpKnhgRI+3WFQ3EfHIfUV9uQBDK5Rkg6iSxBfcLp7zW?= =?us-ascii?Q?DPt/t8GFeHHY78/+E9MBj5+eW2BrHdifu+pjI/kFij0X/H1Kc9xQtsRtpJtz?= =?us-ascii?Q?hBPCIpBavmiAbe1tV4j6+E52OiRlaRuPE7N6aUHy0ENEQIcBHIgSHoTt8aKr?= =?us-ascii?Q?y1XJWJXrVePaECRTpu4Cgux9PfTn/GaUOU6W8JtbPdIP/dmmSjgo6nk14jHf?= =?us-ascii?Q?DeALzquymRf4aKLFhRIVtCXj78nr5joXwtJGDVVIyuv4ag+nS6kYTN46Ap38?= =?us-ascii?Q?NaBjXU9ljmvxtkvQchl1LNGkhWflTOqflHXnQyl0Qs3h216sf1FS9UVoAeYs?= =?us-ascii?Q?GLq1aQYa5AZBC2VS04B1myDrJ+2detosXcALOPnjz5pg4PqaU4QDTWcJo6+0?= =?us-ascii?Q?2m7JeV42Yp/TxvWnNHFbDg/H3sbsVXFy0dzUPptiaE2Gao76zxC+54HlnH9b?= =?us-ascii?Q?/C66QINzUCKDZpVBLmqwywji20FZeJ3WyJGST2It7Hv4XWJx6/Gxqzap1HxG?= =?us-ascii?Q?Xnapw4qhsmkbVPGudcgrqUk7NDKgUlzLuQBbI7Sjc/qUkgekqxY5LboZ0kSY?= =?us-ascii?Q?CxaMgRuPq2IuDkQoNA0POsCzSyRChhtnlW3fh1ZSyQ5j9qmdnH9gZY8r8SA2?= =?us-ascii?Q?jdBr3dAETIwaIfyx65gCNPRzDbHeBEq9rd2c//tkr4CCNAUutd+ZpdPISJOc?= =?us-ascii?Q?vrvuSd+Xz4+qu4l3yob9KX95O4ww2NMW9BbijisLXJSAPsvnR0mjzd6hvUIX?= =?us-ascii?Q?VYeHcoW5YCJsgod3RxyNMxcaxKqz/YXGTzeAkNRJsi2il+DhSu/F0NfIm2vW?= =?us-ascii?Q?Y5lvX0Ekih6Rkp1n6wZVHkplnjEj9La+cBmqfQybi4npLUhjso+x3AvzhOaH?= =?us-ascii?Q?dAnqghA3ePAIhLoOEUc0niBtldo99L07i12ewbdRB/cUioL4SPBQhzTbm2eM?= =?us-ascii?Q?oDbMPtyh/Bvbpr1dnACBMbgCbTSOOQ+GF/2/p3/4/+jrwo/VJOvjB+bSq50g?= =?us-ascii?Q?Exf343PTBAklFR9adBLpNL2yItFlIaqiUMU7OXLCHi7CrhHuCIOQkryvwBKg?= =?us-ascii?Q?fX+R5LWs7WM5M9M8xNjF9o9Txf2qlbMyC8EqzlKJKZBS5OEeUo0T6WCLlCnv?= =?us-ascii?Q?PLB0R4Yp2RG8cu9axwZ4rU4cigHFecUWVrlxdSyc?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3f37ae5d-e578-4edb-205b-08db0905a0f1 X-MS-Exchange-CrossTenant-AuthSource: LV2PR12MB5869.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Feb 2023 12:19:58.4888 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 6LBky+F8FtsxirGaThj2HjswjpOwL/6/TJ2PsEPMh4sJ0PGkNfnEKb5Bzygx+h7W X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR12MB8103 X-Rspamd-Queue-Id: 029991C0010 X-Stat-Signature: tg9ma191a6qqqy7khkyhhw8fnzuxegfu X-Rspam-User: X-Rspamd-Server: rspam08 X-HE-Tag: 1675772400-106039 X-HE-Meta: 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 h9rtq8Ef 0IxujltqYJf9UdCWdK38jmsQI2Rn+pg0qaWChtKwO+v8GA/VGOkz1Uo3xVt5dPgkYqc6wKwErBHwUiFUCgxJP7SI8Hl5x8MZP+poTeRvxK4nEOyOQ5S6yq8RPG2MFLResp2YMnsXpiIcIh9tuIsvO8tvRI/y4+K6lzzIN2f3r7hCKmfP0ta70stxeEwWeT//mWD0OhHQs9w1gl9O0E3b4RqskoBUHGDDMyntTAxbj9nSDz2Q= X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: On Mon, Feb 06, 2023 at 02:32:37PM -1000, Tejun Heo wrote: > Hello, > > On Mon, Feb 06, 2023 at 07:40:55PM -0400, Jason Gunthorpe wrote: > > (a) kind of destroys the point of this as a sandboxing tool > > > > It is not so harmful to use memory that someone else has been charged > > with allocating. > > > > But it is harmful to pin memory if someone else is charged for the > > pin. It means it is unpredictable how much memory a sandbox can > > actually lock down. > > > > Plus we have the double accounting problem, if 1000 processes in > > different cgroups open the tmpfs and all pin the memory then cgroup A > > will be charged 1000x for the memory and hit its limit, possibly > > creating a DOS from less priv to more priv > > Let's hear what memcg people think about it. I'm not a fan of disassociating > the ownership and locker of the same page but it is true that actively > increasing locked consumption on a remote cgroup is awkward too. The main purpose of all this is to support libvirt, so they need to support (a) too. (b) is what we have now and most closely emulates the way the RLIMIT works. Jason