From: Ridong Chen <ridong.chen@linux.dev>
To: "Garg, Shivank" <shivankg@amd.com>,
"david@kernel.org" <david@kernel.org>,
"akpm@linux-foundation.org" <akpm@linux-foundation.org>
Cc: "chenridong@xiaomi.com" <chenridong@xiaomi.com>,
"apopple@nvidia.com" <apopple@nvidia.com>,
"ziy@nvidia.com" <ziy@nvidia.com>,
"gourry@gourry.net" <gourry@gourry.net>,
"linux-mm@kvack.org" <linux-mm@kvack.org>,
"matthew.brost@intel.com" <matthew.brost@intel.com>,
"joshua.hahnjy@gmail.com" <joshua.hahnjy@gmail.com>,
"ying.huang@linux.alibaba.com" <ying.huang@linux.alibaba.com>,
"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
"byungchul@sk.com" <byungchul@sk.com>,
"willy@infradead.org" <willy@infradead.org>
Subject: Re: [PATCH] mm/migrate: move NR_FILE_THPS on cross-node migration
Date: Tue, 27 Oct 2026 12:34:37 +0800 [thread overview]
Message-ID: <1267a0a3-d3fa-49ee-a791-294e62c29bb6@linux.dev> (raw)
In-Reply-To: <6372d92c7b0ec9c3fef4e803e39e54a36f3aa918.camel@amd.com>
On 10/26/2026 8:51 PM, Garg, Shivank wrote:
> On Mon, 2026-10-26 at 11:59 +0100, David Hildenbrand (Arm) wrote:
>> On 10/25/26 12:02, Ridong Chen wrote:
>>> From: Ridong Chen <chenridong@xiaomi.com>
>>>
>>> When a page cache folio is migrated to another node,
>>> __folio_migrate_mapping() moves the per-node and per-memcg counters
>>> that are keyed off the folio's node: NR_FILE_PAGES, NR_SHMEM,
>>> NR_SHMEM_THPS, NR_SWAPCACHE and NR_FILE_DIRTY. NR_FILE_THPS is not
>>> moved, although __filemap_add_folio() charges it to the source node and
>>> filemap_unaccount_folio() takes it off whatever node the folio lives on
>>> when it is removed.
>>>
>>> Commit 0b52c420350e ("mm: fix shmem THP counters on migration") added
>>> the NR_SHMEM_THPS case but not its file-backed counterpart. Now that
>>> ext4, xfs, btrfs and erofs can all have PMD-sized page cache folios,
>>> migrating them via NUMA balancing, mbind(), migratepages, demotion or
>>> memory offlining leaks FileHugePages on the source node and underflows
>>> it on the destination, in both /sys/devices/system/node/nodeN/meminfo
>>> and memory.numa_stat. The global value is unaffected, which is why this
>>> went unnoticed.
>>>
>>> Reproducer, on a 2-node QEMU guest with THP set to "always":
>>>
>>> 1. read a 256M ext4 file through a MADV_HUGEPAGE mapping while bound
>>> to node 0, so its page cache is 128 PMD-sized folios on node 0;
>>> 2. move the mapping to node 1 with mbind(MPOL_MF_MOVE);
>>> 3. unmap the file and drop its page cache.
>>>
>>> nr_file_hugepages in /sys/devices/system/node/nodeN/vmstat after each
>>> step (in units of PMD-sized folios):
>>>
>>> without this patch with this patch
>>> node0 node1 node0 node1
>>> 1. cached 128 0 128 0
>>> 2. migrated 128 0 0 128
>>> 3. dropped 128 0 (*) 0 0
>>>
>>> (*) the counter has underflowed to -128; negative values read as 0.
>>>
>>> Without the patch the 128 folios stay accounted to node 0 forever, and
>>> every further round adds another 128. The same happens to the per-memcg
>>> per-node counter: after step 3, memory.stat of the cgroup shows
>>> "file_thp 0", while memory.numa_stat still shows
>>> "file_thp N0=268435456 N1=0". With the patch both are 0.
>>>
>>> Move NR_FILE_THPS together with NR_FILE_PAGES, using the same condition
>>> filemap_unaccount_folio() uses to take it off, so that THPs in the swap
>>> cache are left alone.
>>>
>>> Fixes: d68eccad3706 ("mm/filemap: Allow large folios to be added to the page cache")
>>> Signed-off-by: Ridong Chen <chenridong@xiaomi.com>
>>> ---
>>> Note: prepared with help from an LLM-based assistant (Kiro, claude-opus-5.5).
>>>
>>> mm/migrate.c | 4 ++++
>>> 1 file changed, 4 insertions(+)
>>>
>>> diff --git a/mm/migrate.c b/mm/migrate.c
>>> index 7bdcdb57652f..d55f576a2579 100644
>>> --- a/mm/migrate.c
>>> +++ b/mm/migrate.c
>>> @@ -700,6 +700,10 @@ static int __folio_migrate_mapping(struct address_space *mapping,
>>> mod_lruvec_state(old_lruvec, NR_SHMEM_THPS, -nr);
>>> mod_lruvec_state(new_lruvec, NR_SHMEM_THPS, nr);
>>> }
>>> + } else if (!folio_test_swapbacked(folio) &&
>>> + folio_test_pmd_mappable(folio)) {
>>> + mod_lruvec_state(old_lruvec, NR_FILE_THPS, -nr);
>>> + mod_lruvec_state(new_lruvec, NR_FILE_THPS, nr);
>>> }
>>
>> Looking at filemap_unaccount_folio(), I was (once again) surprise about the
>> different handling.
>>
>> Key is that we might be migration aonymous folios in the swapcache.
>>
>> Acked-by: David Hildenbrand (Arm) <david@kernel.org>
>>
>
> filemap_unaccount_folio() also checks for AS_KERNEL_FILE, but
> __folio_migrate_mapping() does not.
>
> Should add this as well?
>
Good catch, thanks. NR_KERNEL_FILE_PAGES has the same problem, and I
could reproduce it by demoting btrfs btree folios to a CPU-less memory
tier. Since it was introduced separately by e3a9ac4e866e ("mm: add
vmstat for kernel_file pages") and is a node-only counter, I sent it
as a separate patch on top of this one:
https://lore.kernel.org/20261027043214.2248986-1-ridong.chen@linux.dev
--
Best regards
Ridong
next prev parent reply other threads:[~2026-10-27 4:34 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-25 11:02 [PATCH] mm/migrate: move NR_FILE_THPS on cross-node migration Ridong Chen
2026-10-26 10:59 ` David Hildenbrand (Arm)
2026-10-26 12:51 ` Garg, Shivank
2026-10-27 4:34 ` Ridong Chen [this message]
2026-10-27 5:08 ` Garg, Shivank
2026-10-27 14:57 ` Zi Yan
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1267a0a3-d3fa-49ee-a791-294e62c29bb6@linux.dev \
--to=ridong.chen@linux.dev \
--cc=akpm@linux-foundation.org \
--cc=apopple@nvidia.com \
--cc=byungchul@sk.com \
--cc=chenridong@xiaomi.com \
--cc=david@kernel.org \
--cc=gourry@gourry.net \
--cc=joshua.hahnjy@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=matthew.brost@intel.com \
--cc=shivankg@amd.com \
--cc=willy@infradead.org \
--cc=ying.huang@linux.alibaba.com \
--cc=ziy@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox