On 06/13/2018 09:15 AM, Michal Hocko wrote: > On Wed 13-06-18 08:32:19, Vlastimil Babka wrote: >> On 06/12/2018 04:11 PM, Jason Baron wrote: >>> >>> >>> On 06/12/2018 03:46 AM, Michal Hocko wrote: >>>> On Mon 11-06-18 12:23:58, Jason Baron wrote: >>>>> On 06/11/2018 11:03 AM, Michal Hocko wrote: >>>>>> So can we start discussing whether we want to allow MADV_DONTNEED on >>>>>> mlocked areas and what downsides it might have? Sure it would turn the >>>>>> strong mlock guarantee to have the whole vma resident but is this >>>>>> acceptable for something that is an explicit request from the owner of >>>>>> the memory? >>>>>> >>>>> >>>>> If its being explicity requested by the owner it makes sense to me. I >>>>> guess there could be a concern about this breaking some userspace that >>>>> relied on MADV_DONTNEED not freeing locked memory? >>>> >>>> Yes, this is always the fear when changing user visible behavior. I can >>>> imagine that a userspace allocator calling MADV_DONTNEED on free could >>>> break. The same would apply to MLOCK_ONFAULT/MCL_ONFAULT though. We >>>> have the new flag much shorter so the probability is smaller but the >>>> problem is very same. So I _think_ we should treat both the same because >>>> semantically they are indistinguishable from the MADV_DONTNEED POV. Both >>>> remove faulted and mlocked pages. Mlock, once applied, should guarantee >>>> no later major fault and MADV_DONTNEED breaks that obviously. >> >> I think more concerning than guaranteeing no later major fault is >> possible data loss, e.g. replacing data with zero-filled pages. > > But MADV_DONTNEED is an explicit call for data loss. Or do I miss your > point? My point is that if somebody is relying on MADV_DONTNEED not affecting mlocked pages, the consequences will be unexpected data loss, not just extra page faults. >> The madvise manpage is also quite specific about not allowing >> MADV_DONTNEED and MADV_FREE for locked pages. > > Yeah, but that seems to describe the state of the art rather than > explain why. Right, but as it's explicitly described there, it makes it more likely that somebody is relying on it. >> So I don't think we should risk changing that for all mlocked pages. >> Maybe we can risk MCL_ONFAULT, since it's relatively new and has few users? > > That is what Jason wanted but I argued that the two are the same from > MADV_DONTNEED point of view. I do not see how treating them differently > would be less confusing or error prone. It's new so we can make it > behave differently is certainly not an argument. Right. Might be either this inconsistency, or a new flag. -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html