From: Andrew Morton <akpm@linux-foundation.org>
To: "David Hildenbrand (Arm)" <david@kernel.org>
Cc: Qi Xi <xiqi5703@163.com>,
linux-mm@kvack.org, Zi Yan <ziy@nvidia.com>,
Matthew Brost <matthew.brost@intel.com>,
Joshua Hahn <joshua.hahnjy@gmail.com>,
Byungchul Park <byungchul@sk.com>,
Gregory Price <gourry@gourry.net>,
Ying Huang <ying.huang@linux.alibaba.com>,
Alistair Popple <apopple@nvidia.com>,
Qiliang Yuan <odys.yuan@gmail.com>,
linux-kernel@vger.kernel.org, wangkefeng.wang@huawei.com,
sunnanyong@huawei.com, xiqi2@huawei.com
Subject: Re: [PATCH] mm/migrate: fix softlockup in do_pages_stat() with huge page arrays
Date: Sat, 31 Oct 2026 09:42:53 -0700 [thread overview]
Message-ID: <20261031094253.d28f484e7e27de469cfa76d2@linux-foundation.org> (raw)
In-Reply-To: <76579248-64db-47bf-b8d0-4eb3ca556f5a@kernel.org>
On Sat, 31 Oct 2026 11:52:30 +0100 "David Hildenbrand (Arm)" <david@kernel.org> wrote:
> On 10/31/26 04:33, Qi Xi wrote:
> > From: Qi Xi <xiqi2@huawei.com>
> >
> > do_pages_stat() walks the user page array in 16-page chunks but never
> > reschedules, so a huge nr_pages can hold a CPU past the watchdog
> > threshold on non-preemptible kernels. Add cond_resched() to the loop so
> > long move_pages() node-query calls yield periodically.
> >
> > With KASAN and function tracing enabled, a move_pages() node query
> > (nodes == NULL) over 10 million page entries (~40GB) can trigger the
> > softlockup on a PREEMPT_NONE kernel.
> >
> > Fixes: 80bba1290ab5 ("mm: no get_user/put_user while holding mmap_sem in do_pages_stat?")
> > Signed-off-by: Qi Xi <xiqi2@huawei.com>
> > ---
> > mm/migrate.c | 1 +
> > 1 file changed, 1 insertion(+)
> >
> > diff --git a/mm/migrate.c b/mm/migrate.c
> > index 7bdcdb57652f..6c2371020cc5 100644
> > --- a/mm/migrate.c
> > +++ b/mm/migrate.c
> > @@ -2545,6 +2545,7 @@ static int do_pages_stat(struct mm_struct *mm, unsigned long nr_pages,
> >
> > chunk_offset += chunk_nr;
> > nr_pages -= chunk_nr;
> > + cond_resched();
> > }
> > return nr_pages ? -EFAULT : 0;
> > }
>
> I though we wanted to stop throwing in cond_resched() at this point?
It's almost unneeded in current mainline kernels. PREEMPT_NONE can
still be selected by
All supported Alpha configurations
All supported Hexagon configurations
Non-ColdFire configurations (classic m68k)
However 99% of the world are on 5.x and 6.x kernels and many of those
machines use PREEMPT_NONE.
IOW, cond_resched() is not really needed in mainline, needed in
-stable.
I think simply merging the thing with cc:stable is the simplest and
most reliable way of getting those older kernels fixed up. mm/ already
has >200 cond_resched/need_resched so a few more won't matter.
Presumably the day will come when we remove all those scheduling
points, after which people will have to work directly with the -stable
maintainers to get these things fixed up.
prev parent reply other threads:[~2026-10-31 16:42 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-31 3:33 [PATCH] mm/migrate: fix softlockup in do_pages_stat() with huge page arrays Qi Xi
2026-10-31 10:52 ` David Hildenbrand (Arm)
2026-10-31 16:42 ` Andrew Morton [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261031094253.d28f484e7e27de469cfa76d2@linux-foundation.org \
--to=akpm@linux-foundation.org \
--cc=apopple@nvidia.com \
--cc=byungchul@sk.com \
--cc=david@kernel.org \
--cc=gourry@gourry.net \
--cc=joshua.hahnjy@gmail.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=matthew.brost@intel.com \
--cc=odys.yuan@gmail.com \
--cc=sunnanyong@huawei.com \
--cc=wangkefeng.wang@huawei.com \
--cc=xiqi2@huawei.com \
--cc=xiqi5703@163.com \
--cc=ying.huang@linux.alibaba.com \
--cc=ziy@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox