From nobody Tue Apr 7 06:30:18 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id EA9C3C433F5 for ; Tue, 11 Oct 2022 19:58:31 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229864AbiJKT63 (ORCPT ); Tue, 11 Oct 2022 15:58:29 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:55198 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229799AbiJKT6U (ORCPT ); Tue, 11 Oct 2022 15:58:20 -0400 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 3DD9B7268C for ; Tue, 11 Oct 2022 12:58:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1665518297; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=V/+ripU4Cn0e2jw5c/awHk5ywDVBelMr8KNke92yFbw=; b=BJlBumdMC90tSTQcPnvFdxQrqPIKjEEinPGnUtDHJqjEgYh/wjpCJTWm7nr8uGm78iIa6l IhejkiCqmtA9lavq4T6Hz/V3ywABuNdxNSy6CUw1zWzbG91D/cJOhQ29hjfQ/UBmIZ2Re6 890aS71bz6I5+lgNfuOPqzQkBuOMv/M= Received: from mail-qk1-f198.google.com (mail-qk1-f198.google.com [209.85.222.198]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_128_GCM_SHA256) id us-mta-175-WbixH5IFMjKwo6so3DxWtQ-1; Tue, 11 Oct 2022 15:58:13 -0400 X-MC-Unique: WbixH5IFMjKwo6so3DxWtQ-1 Received: by mail-qk1-f198.google.com with SMTP id h7-20020a05620a400700b006cebec84734so12689459qko.23 for ; Tue, 11 Oct 2022 12:58:13 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=V/+ripU4Cn0e2jw5c/awHk5ywDVBelMr8KNke92yFbw=; b=TFVc3ZqkrJANKgJWsrFH/eovMJYihgd/+QfPw2zlHom4Y+zvgsBQsNKYMlEpEbJmPX RBWMEZSvwcRcWhejarzwJlskQzrmwzjQF3ksuT+b58yY+dokX8xCEXkGWu/X6CaY/C0a dxDUOOkKsgglFzZoaUgFwLtL3vzRuo/Gzy49kStTyc5jTcaHjTZIjRGWIPwDvhocfM58 7798NpU9ru0Vsb/G3MVMV7CXdaVn34A5nSsZKzfDSHUAFq8g91zVkJ5j3r8ULT33F+kX R+vIMIdJ9RQ9FH8Uo0tDCDZoq/utlHVUilvtuisuLUlpwRMrAau2XIYW3mgdV66SwYuf Vs7Q== X-Gm-Message-State: ACrzQf37N3LOIM31cPGPTF0T/UTZR8sV57Rh3QeDBqugRig0i47+rfUD SDUKwD6DAWK9oXoJq6XIzzzcUhoeCfG6+iCxLxjVtd/aNL0yNhYjBmS60CRcauJrqwfKe43nbLj /UGBm1epcAhRezGJnjMd5v39/ X-Received: by 2002:a0c:9a0d:0:b0:4b1:982e:96d4 with SMTP id p13-20020a0c9a0d000000b004b1982e96d4mr19788277qvd.114.1665518293325; Tue, 11 Oct 2022 12:58:13 -0700 (PDT) X-Google-Smtp-Source: AMsMyM6PixulCqGkG8rkh18fizY4hjzT3AYfYhVR7T8bvGGt8538uBuPPVxwiplaUYFmIz1hwWZjbA== X-Received: by 2002:a0c:9a0d:0:b0:4b1:982e:96d4 with SMTP id p13-20020a0c9a0d000000b004b1982e96d4mr19788255qvd.114.1665518293119; Tue, 11 Oct 2022 12:58:13 -0700 (PDT) Received: from x1n.redhat.com (bras-base-aurron9127w-grc-46-70-31-27-79.dsl.bell.ca. [70.31.27.79]) by smtp.gmail.com with ESMTPSA id az31-20020a05620a171f00b006ce9e880c6fsm13648837qkb.111.2022.10.11.12.58.11 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 11 Oct 2022 12:58:12 -0700 (PDT) From: Peter Xu To: kvm@vger.kernel.org, linux-kernel@vger.kernel.org Cc: Sean Christopherson , peterx@redhat.com, John Hubbard , Paolo Bonzini , David Matlack , Andrew Morton , Andrea Arcangeli , "Dr . David Alan Gilbert" , David Hildenbrand , Linux MM Mailing List , Mike Kravetz Subject: [PATCH v4 1/4] mm/gup: Add FOLL_INTERRUPTIBLE Date: Tue, 11 Oct 2022 15:58:06 -0400 Message-Id: <20221011195809.557016-2-peterx@redhat.com> X-Mailer: git-send-email 2.37.3 In-Reply-To: <20221011195809.557016-1-peterx@redhat.com> References: <20221011195809.557016-1-peterx@redhat.com> MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Type: text/plain; charset="utf-8" We have had FAULT_FLAG_INTERRUPTIBLE but it was never applied to GUPs. One issue with it is that not all GUP paths are able to handle signal delivers besides SIGKILL. That's not ideal for the GUP users who are actually able to handle these cases, like KVM. KVM uses GUP extensively on faulting guest pages, during which we've got existing infrastructures to retry a page fault at a later time. Allowing the GUP to be interrupted by generic signals can make KVM related threads to be more responsive. For examples: (1) SIGUSR1: which QEMU/KVM uses to deliver an inter-process IPI, e.g. when the admin issues a vm_stop QMP command, SIGUSR1 can be generated to kick the vcpus out of kernel context immediately, (2) SIGINT: which can be used with interactive hypervisor users to stop a virtual machine with Ctrl-C without any delays/hangs, (3) SIGTRAP: which grants GDB capability even during page faults that are stuck for a long time. Normally hypervisor will be able to receive these signals properly, but not if we're stuck in a GUP for a long time for whatever reason. It happens easily with a stucked postcopy migration when e.g. a network temp failure happens, then some vcpu threads can hang death waiting for the pages. With the new FOLL_INTERRUPTIBLE, we can allow GUP users like KVM to selectively enable the ability to trap these signals. Reviewed-by: John Hubbard Reviewed-by: David Hildenbrand Signed-off-by: Peter Xu --- include/linux/mm.h | 1 + mm/gup.c | 33 +++++++++++++++++++++++++++++---- mm/hugetlb.c | 5 ++++- 3 files changed, 34 insertions(+), 5 deletions(-) diff --git a/include/linux/mm.h b/include/linux/mm.h index 21f8b27bd9fd..488a9f4cce07 100644 --- a/include/linux/mm.h +++ b/include/linux/mm.h @@ -2897,6 +2897,7 @@ struct page *follow_page(struct vm_area_struct *vma, = unsigned long address, #define FOLL_SPLIT_PMD 0x20000 /* split huge pmd before returning */ #define FOLL_PIN 0x40000 /* pages must be released via unpin_user_page */ #define FOLL_FAST_ONLY 0x80000 /* gup_fast: prevent fall-back to slow gup = */ +#define FOLL_INTERRUPTIBLE 0x100000 /* allow interrupts from generic sign= als */ =20 /* * FOLL_PIN and FOLL_LONGTERM may be used in various combinations with each diff --git a/mm/gup.c b/mm/gup.c index 5abdaf487460..d51e7ccaef32 100644 --- a/mm/gup.c +++ b/mm/gup.c @@ -970,8 +970,17 @@ static int faultin_page(struct vm_area_struct *vma, fault_flags |=3D FAULT_FLAG_WRITE; if (*flags & FOLL_REMOTE) fault_flags |=3D FAULT_FLAG_REMOTE; - if (locked) + if (locked) { fault_flags |=3D FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_KILLABLE; + /* + * FAULT_FLAG_INTERRUPTIBLE is opt-in. GUP callers must set + * FOLL_INTERRUPTIBLE to enable FAULT_FLAG_INTERRUPTIBLE. + * That's because some callers may not be prepared to + * handle early exits caused by non-fatal signals. + */ + if (*flags & FOLL_INTERRUPTIBLE) + fault_flags |=3D FAULT_FLAG_INTERRUPTIBLE; + } if (*flags & FOLL_NOWAIT) fault_flags |=3D FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_RETRY_NOWAIT; if (*flags & FOLL_TRIED) { @@ -1380,6 +1389,22 @@ int fixup_user_fault(struct mm_struct *mm, } EXPORT_SYMBOL_GPL(fixup_user_fault); =20 +/* + * GUP always responds to fatal signals. When FOLL_INTERRUPTIBLE is + * specified, it'll also respond to generic signals. The caller of GUP + * that has FOLL_INTERRUPTIBLE should take care of the GUP interruption. + */ +static bool gup_signal_pending(unsigned int flags) +{ + if (fatal_signal_pending(current)) + return true; + + if (!(flags & FOLL_INTERRUPTIBLE)) + return false; + + return signal_pending(current); +} + /* * Please note that this function, unlike __get_user_pages will not * return 0 for nr_pages > 0 without FOLL_NOWAIT @@ -1461,11 +1486,11 @@ static __always_inline long __get_user_pages_locked= (struct mm_struct *mm, * Repeat on the address that fired VM_FAULT_RETRY * with both FAULT_FLAG_ALLOW_RETRY and * FAULT_FLAG_TRIED. Note that GUP can be interrupted - * by fatal signals, so we need to check it before we + * by fatal signals of even common signals, depending on + * the caller's request. So we need to check it before we * start trying again otherwise it can loop forever. */ - - if (fatal_signal_pending(current)) { + if (gup_signal_pending(flags)) { if (!pages_done) pages_done =3D -EINTR; break; diff --git a/mm/hugetlb.c b/mm/hugetlb.c index e070b8593b37..202f3ad7f35c 100644 --- a/mm/hugetlb.c +++ b/mm/hugetlb.c @@ -6206,9 +6206,12 @@ long follow_hugetlb_page(struct mm_struct *mm, struc= t vm_area_struct *vma, fault_flags |=3D FAULT_FLAG_WRITE; else if (unshare) fault_flags |=3D FAULT_FLAG_UNSHARE; - if (locked) + if (locked) { fault_flags |=3D FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_KILLABLE; + if (flags & FOLL_INTERRUPTIBLE) + fault_flags |=3D FAULT_FLAG_INTERRUPTIBLE; + } if (flags & FOLL_NOWAIT) fault_flags |=3D FAULT_FLAG_ALLOW_RETRY | FAULT_FLAG_RETRY_NOWAIT; --=20 2.37.3