From nobody Mon Feb 9 14:03:14 2026 Received: from mail-pl1-f201.google.com (mail-pl1-f201.google.com [209.85.214.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B52F51DE887 for ; Fri, 19 Dec 2025 18:34:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766169243; cv=none; b=rpje0LVqTe6JI4xlBy/YfHWWqdnFTjrQC8OB8onbAByhSG4n0LZw/BD1OBDC1iNm6bPbHU8Uh9CDzv9lFHXDi9PjPEmBxCWL/XsZ2bf5YN++OfWfQM6P1eZUd4UkB9CjPS9egjRUgX0Xaz++QfX+oZ5vUzmjjrXgqCzR8M2SAVc= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1766169243; c=relaxed/simple; bh=u7edsxdy32kamlH2frQDPLe5h0v0WT2y/bCZCe3FPRo=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=PtAQRo2tGAmJXOrbfht23y8olh79Y1pesUAdhFSbXgBVI/cODN/UUyTJtnBIsypgV4p+XcdSTUQymPMM5ALMefGZQI8SNY0Yqz0z6zb9UgKtbYbNfJccN+NnoYOoZbMrXciOmg+qHIiFUti4M22k+CdZQMZhHhkPaSY1XUs3C4E= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--jiaqiyan.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=R1c/Qb1D; arc=none smtp.client-ip=209.85.214.201 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--jiaqiyan.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="R1c/Qb1D" Received: by mail-pl1-f201.google.com with SMTP id d9443c01a7336-29f27176aa7so37862745ad.2 for ; Fri, 19 Dec 2025 10:34:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1766169241; x=1766774041; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=iRw5dUG+XR6beJWQo32i4j651BpzChIFWVHC68FGfqc=; b=R1c/Qb1DQayteitsN3cflfZgWoGr4M1cC2CB/9QZgJaH7AzJ/5ET3VsZ6AglqIeM+8 yLVSwKSJBqW9zg+5dsc+BisMOpJWbFnzyDtmqINCAzsKoU7sg7Br4K7mEDtDUeuVrR+t KOH4Ei+RQz33J132AltQoWoIEDQjAKRiC9QbUId2+DNyw1rh0qdj/BzarT9DECl+4nY3 XI4Hn5eVA8xNT23idrCy0eTrVNthX45JmpHlXepsmmgIAwOpU2pFLTGtgLdJCmZX6XYH DhcOlJXrV2sGFZHiNPDL5s+wV2BM0CYSkbg9EDlGKVa3dAGKUmGmiBILFDOR5LQYxCrM oOww== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1766169241; x=1766774041; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=iRw5dUG+XR6beJWQo32i4j651BpzChIFWVHC68FGfqc=; b=ehKyRMsloPv0lSXRg8qfALlhVScEFuH7dqL0JC+wJW+fMTbYzphwA23NGJdAGt0nqV rI4wLM0Yx0Esf9MPxQ3MB/ld01uLCVTIXH0Nr0/H4uU6VhN3gsRIR1ztARWSzqULc44f eeN2Ywu1jEsLF3vo28MtanW15dbDV6hcs6c+QLjxG2pMS6b1bKXEx3KPqd+RmJd021Mz pqcIs4bdy9/jmqUINrVfC3p65kNU5AujwBD9zJwTsa6c8O7y9ea3nWFX8Wad+erK152+ 8c0RDXzijJPSb6aUz7hKNJRiS1XcJR9QkbLwpkFHTxN+OMI+9fYOJKvDAUrJLCLUq70/ n7YA== X-Forwarded-Encrypted: i=1; AJvYcCX2ifX1n6wJOXkX6saYgIayJEq0VkBYY61bXigOCvON1I3yB3t+e2IvWxRWkMERIgv4GpuMjU+q/7xYdFY=@vger.kernel.org X-Gm-Message-State: AOJu0YwAFCr09im4dVMtAo27C2XpwOOYXjkP0vto3K3e1aWRDgBSsl6h yntrN8BBo47c5WtFfp3rMuqp2S3w6Gx3N4JM3LVDndgKtZVAxwp1USjL87ClvFGRGifql8RRia+ n2e793nX3r0hEew== X-Google-Smtp-Source: AGHT+IH20Rlx/YPAgSS/M8SOXQ64kJgEZYeGfthUqW4VqFVoXAcaf4KGIs5xUGj8Yiw5+hGunRG8Qe3zb+OVlQ== X-Received: from plbkp8.prod.google.com ([2002:a17:903:2808:b0:2a0:9afe:8253]) (user=jiaqiyan job=prod-delivery.src-stubby-dispatcher) by 2002:a17:903:4405:b0:295:565b:c691 with SMTP id d9443c01a7336-2a2f22292e6mr41848565ad.17.1766169240908; Fri, 19 Dec 2025 10:34:00 -0800 (PST) Date: Fri, 19 Dec 2025 18:33:45 +0000 In-Reply-To: <20251219183346.3627510-1-jiaqiyan@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20251219183346.3627510-1-jiaqiyan@google.com> X-Mailer: git-send-email 2.52.0.322.g1dd061c0dc-goog Message-ID: <20251219183346.3627510-3-jiaqiyan@google.com> Subject: [PATCH v2 2/3] mm/page_alloc: only free healthy pages in high-order HWPoison folio From: Jiaqi Yan To: jackmanb@google.com, hannes@cmpxchg.org, linmiaohe@huawei.com, ziy@nvidia.com, harry.yoo@oracle.com, willy@infradead.org Cc: nao.horiguchi@gmail.com, david@redhat.com, lorenzo.stoakes@oracle.com, william.roche@oracle.com, tony.luck@intel.com, wangkefeng.wang@huawei.com, jane.chu@oracle.com, akpm@linux-foundation.org, osalvador@suse.de, muchun.song@linux.dev, rientjes@google.com, duenwen@google.com, jthoughton@google.com, linux-mm@kvack.org, linux-kernel@vger.kernel.org, Liam.Howlett@oracle.com, vbabka@suse.cz, rppt@kernel.org, surenb@google.com, mhocko@suse.com, Jiaqi Yan Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" At the end of dissolve_free_hugetlb_folio that a free HugeTLB folio becomes non-HugeTLB, it is released to buddy allocator as a high-order folio, e.g. a folio that contains 262144 pages if the folio was a 1G HugeTLB hugepage. This is problematic if the HugeTLB hugepage contained HWPoison subpages. In that case, since buddy allocator does not check HWPoison for non-zero-order folio, the raw HWPoison page can be given out with its buddy page and be re-used by either kernel or userspace. Memory failure recovery (MFR) in kernel does attempt to take raw HWPoison page off buddy allocator after dissolve_free_hugetlb_folio. However, there is always a time window between dissolve_free_hugetlb_folio frees a HWPoison high-order folio to buddy allocator and MFR takes HWPoison raw page off buddy allocator. One obvious way to avoid this problem is to add page sanity checks in page allocate or free path. However, it is against the past efforts to reduce sanity check overhead [1,2,3]. Introduce free_has_hwpoison_pages to only free the healthy pages and excludes the HWPoison ones in the high-order folio. The idea is to iterate through the sub-pages of the folio to identify contiguous ranges of healthy pages. Instead of freeing pages one by one, decompose healthy ranges into the largest possible blocks. Each block meets the requirements to be freed to buddy allocator (__free_frozen_pages). free_has_hwpoison_pages has linear time complexity O(N) wrt the number of pages in the folio. While the power-of-two decomposition ensures that the number of calls to the buddy allocator is logarithmic for each contiguous healthy range, the mandatory linear scan of pages to identify PageHWPoison defines the overall time complexity. [1] https://lore.kernel.org/linux-mm/1460711275-1130-15-git-send-email-mgor= man@techsingularity.net/ [2] https://lore.kernel.org/linux-mm/1460711275-1130-16-git-send-email-mgor= man@techsingularity.net/ [3] https://lore.kernel.org/all/20230216095131.17336-1-vbabka@suse.cz Signed-off-by: Jiaqi Yan --- mm/page_alloc.c | 101 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 101 insertions(+) diff --git a/mm/page_alloc.c b/mm/page_alloc.c index 822e05f1a9646..20c8862ce594e 100644 --- a/mm/page_alloc.c +++ b/mm/page_alloc.c @@ -2976,8 +2976,109 @@ static void __free_frozen_pages(struct page *page, = unsigned int order, } } =20 +static void prepare_compound_page_to_free(struct page *new_head, + unsigned int order, + unsigned long flags) +{ + new_head->flags.f =3D flags & (~PAGE_FLAGS_CHECK_AT_FREE); + new_head->mapping =3D NULL; + new_head->private =3D 0; + + clear_compound_head(new_head); + if (order) + prep_compound_page(new_head, order); +} + +/* + * Given a range of pages physically contiguous physical, efficiently + * free them in blocks that meet __free_frozen_pages's requirements. + */ +static void free_contiguous_pages(struct page *curr, struct page *next, + unsigned long flags) +{ + unsigned int order; + unsigned int align_order; + unsigned int size_order; + unsigned long pfn; + unsigned long end_pfn =3D page_to_pfn(next); + unsigned long remaining; + + /* + * This decomposition algorithm at every iteration chooses the + * order to be the minimum of two constraints: + * - Alignment: the largest power-of-two that divides current pfn. + * - Size: the largest power-of-two that fits in the + * current remaining number of pages. + */ + while (curr < next) { + pfn =3D page_to_pfn(curr); + remaining =3D end_pfn - pfn; + + align_order =3D ffs(pfn) - 1; + size_order =3D fls_long(remaining) - 1; + order =3D min(align_order, size_order); + + prepare_compound_page_to_free(curr, order, flags); + __free_frozen_pages(curr, order, FPI_NONE); + curr +=3D (1UL << order); + } + + VM_WARN_ON(curr !=3D next); +} + +/* + * Given a high-order compound page containing certain number of HWPoison + * pages, free only the healthy ones to buddy allocator. + * + * It calls __free_frozen_pages O(2^order) times and cause nontrivial + * overhead. So only use this when compound page really contains HWPoison. + * + * This implementation doesn't work in memdesc world. + */ +static void free_has_hwpoison_pages(struct page *page, unsigned int order) +{ + struct page *curr =3D page; + struct page *end =3D page + (1 << order); + struct page *next; + unsigned long flags =3D page->flags.f; + unsigned long nr_pages; + unsigned long total_freed =3D 0; + unsigned long total_hwp =3D 0; + + VM_WARN_ON(flags & PAGE_FLAGS_CHECK_AT_FREE); + + while (curr < end) { + next =3D curr; + nr_pages =3D 0; + + while (next < end && !PageHWPoison(next)) { + ++next; + ++nr_pages; + } + + if (PageHWPoison(next)) + ++total_hwp; + + free_contiguous_pages(curr, next, flags); + + total_freed +=3D nr_pages; + curr =3D PageHWPoison(next) ? next + 1 : next; + } + + pr_info("Excluded %lu hwpoison pages from folio\n", total_hwp); + pr_info("Freed %#lx pages from folio\n", total_freed); +} + void free_frozen_pages(struct page *page, unsigned int order) { + struct folio *folio =3D page_folio(page); + + if (order > 0 && unlikely(folio_test_has_hwpoisoned(folio))) { + folio_clear_has_hwpoisoned(folio); + free_has_hwpoison_pages(page, order); + return; + } + __free_frozen_pages(page, order, FPI_NONE); } =20 --=20 2.52.0.322.g1dd061c0dc-goog