From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-6.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY,SPF_PASS,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 52946C43382 for ; Thu, 27 Sep 2018 16:06:56 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id F2ECA216FE for ; Thu, 27 Sep 2018 16:06:55 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org F2ECA216FE Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=linux.alibaba.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728512AbeI0WZu (ORCPT ); Thu, 27 Sep 2018 18:25:50 -0400 Received: from out30-131.freemail.mail.aliyun.com ([115.124.30.131]:39319 "EHLO out30-131.freemail.mail.aliyun.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727334AbeI0WZu (ORCPT ); Thu, 27 Sep 2018 18:25:50 -0400 X-Alimail-AntiSpam: AC=PASS;BC=-1|-1;BR=01201311R441e4;CH=green;FP=0|-1|-1|-1|0|-1|-1|-1;HT=e01e04390;MF=yang.shi@linux.alibaba.com;NM=1;PH=DS;RN=8;SR=0;TI=SMTPD_---0T9a2PuZ_1538064392; Received: from US-143344MP.local(mailfrom:yang.shi@linux.alibaba.com fp:SMTPD_---0T9a2PuZ_1538064392) by smtp.aliyun-inc.com(127.0.0.1); Fri, 28 Sep 2018 00:06:34 +0800 Subject: Re: [v2 PATCH 2/2 -mm] mm: brk: dwongrade mmap_sem to read when shrinking To: "Kirill A. Shutemov" Cc: mhocko@kernel.org, willy@infradead.org, ldufour@linux.vnet.ibm.com, vbabka@suse.cz, akpm@linux-foundation.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org References: <1537985434-22655-1-git-send-email-yang.shi@linux.alibaba.com> <1537985434-22655-2-git-send-email-yang.shi@linux.alibaba.com> <20180927125025.xnvoh2btdq5kjmai@kshutemo-mobl1> From: Yang Shi Message-ID: Date: Thu, 27 Sep 2018 09:06:29 -0700 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <20180927125025.xnvoh2btdq5kjmai@kshutemo-mobl1> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 9/27/18 5:50 AM, Kirill A. Shutemov wrote: > On Thu, Sep 27, 2018 at 02:10:34AM +0800, Yang Shi wrote: >> brk might be used to shinrk memory mapping too other than munmap(). > s/shinrk/shrink/ > >> So, it may hold write mmap_sem for long time when shrinking large >> mapping, as what commit ("mm: mmap: zap pages with read mmap_sem in >> munmap") described. >> >> The brk() will not manipulate vmas anymore after __do_munmap() call for >> the mapping shrink use case. But, it may set mm->brk after >> __do_munmap(), which needs hold write mmap_sem. >> >> However, a simple trick can workaround this by setting mm->brk before >> __do_munmap(). Then restore the original value if __do_munmap() fails. >> With this trick, it is safe to downgrade to read mmap_sem. >> >> So, the same optimization, which downgrades mmap_sem to read for >> zapping pages, is also feasible and reasonable to this case. >> >> The period of holding exclusive mmap_sem for shrinking large mapping >> would be reduced significantly with this optimization. >> >> Cc: Michal Hocko >> Cc: Kirill A. Shutemov >> Cc: Matthew Wilcox >> Cc: Laurent Dufour >> Cc: Vlastimil Babka >> Cc: Andrew Morton >> Signed-off-by: Yang Shi >> --- >> v2: Rephrase the commit per Michal >> >> mm/mmap.c | 40 ++++++++++++++++++++++++++++++---------- >> 1 file changed, 30 insertions(+), 10 deletions(-) >> >> diff --git a/mm/mmap.c b/mm/mmap.c >> index 017bcfa..0d2fae1 100644 >> --- a/mm/mmap.c >> +++ b/mm/mmap.c >> @@ -193,9 +193,11 @@ static int do_brk_flags(unsigned long addr, unsigned long request, unsigned long >> unsigned long retval; >> unsigned long newbrk, oldbrk; >> struct mm_struct *mm = current->mm; >> + unsigned long origbrk = mm->brk; > Is it safe to read mm->brk outside the lock? Aha, thanks for catching this. It can be moved inside down_write(). Will solve in the next version. Thanks, Yang > >> struct vm_area_struct *next; >> unsigned long min_brk; >> bool populate; >> + bool downgrade = false; > Again, > > s/downgrade/downgraded/ ? > >> LIST_HEAD(uf); >> >> if (down_write_killable(&mm->mmap_sem)) >> @@ -229,14 +231,29 @@ static int do_brk_flags(unsigned long addr, unsigned long request, unsigned long >> >> newbrk = PAGE_ALIGN(brk); >> oldbrk = PAGE_ALIGN(mm->brk); >> - if (oldbrk == newbrk) >> - goto set_brk; >> + if (oldbrk == newbrk) { >> + mm->brk = brk; >> + goto success; >> + } >> >> - /* Always allow shrinking brk. */ >> + /* >> + * Always allow shrinking brk. >> + * __do_munmap() may downgrade mmap_sem to read. >> + */ >> if (brk <= mm->brk) { >> - if (!do_munmap(mm, newbrk, oldbrk-newbrk, &uf)) >> - goto set_brk; >> - goto out; >> + /* >> + * mm->brk need to be protected by write mmap_sem, update it >> + * before downgrading mmap_sem. >> + * When __do_munmap fail, it will be restored from origbrk. >> + */ >> + mm->brk = brk; >> + retval = __do_munmap(mm, newbrk, oldbrk-newbrk, &uf, true); >> + if (retval < 0) { >> + mm->brk = origbrk; >> + goto out; >> + } else if (retval == 1) >> + downgrade = true; >> + goto success; >> } >> >> /* Check against existing mmap mappings. */ >> @@ -247,18 +264,21 @@ static int do_brk_flags(unsigned long addr, unsigned long request, unsigned long >> /* Ok, looks good - let it rip. */ >> if (do_brk_flags(oldbrk, newbrk-oldbrk, 0, &uf) < 0) >> goto out; >> - >> -set_brk: >> mm->brk = brk; >> + >> +success: >> populate = newbrk > oldbrk && (mm->def_flags & VM_LOCKED) != 0; >> - up_write(&mm->mmap_sem); >> + if (downgrade) >> + up_read(&mm->mmap_sem); >> + else >> + up_write(&mm->mmap_sem); >> userfaultfd_unmap_complete(mm, &uf); >> if (populate) >> mm_populate(oldbrk, newbrk - oldbrk); >> return brk; >> >> out: >> - retval = mm->brk; >> + retval = origbrk; >> up_write(&mm->mmap_sem); >> return retval; >> } >> -- >> 1.8.3.1 >>