(added "Huang, Ying" <ying.huang@xxxxxxxxx> to cc.) On Tue, Jan 19, 2016 at 10:38:50PM +0900, Tetsuo Handa wrote: > Kirill A. Shutemov wrote: > > On Tue, Jan 19, 2016 at 09:46:21PM +0900, Tetsuo Handa wrote: > > > Kirill A. Shutemov wrote: > > > > Oh. Looks like a bug from 2013... > > > > > > > > Thanks for report. > > > > For unsigned int nr_pages, implicitly casted to long in > > > > __mod_zone_page_state(), it becomes something around UINT_MAX. > > > > > > > > munlock_vma_page() usually called for THP as small pages go though > > > > pagevec. > > > > > > > > Let's make nr_pages singed int. > > > > > > > > Signed-off-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> > > > > Fixes: ff6a6da60b89 ("mm: accelerate munlock() treatment of THP pages") > > > > Reported-by: Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> > > > > Cc: Michel Lespinasse <walken@xxxxxxxxxx> > > > > --- > > > > mm/mlock.c | 2 +- > > > > 1 file changed, 1 insertion(+), 1 deletion(-) > > > > > > > > diff --git a/mm/mlock.c b/mm/mlock.c > > > > index e1e2b1207bf2..96f001041928 100644 > > > > --- a/mm/mlock.c > > > > +++ b/mm/mlock.c > > > > @@ -175,7 +175,7 @@ static void __munlock_isolation_failed(struct page *page) > > > > */ > > > > unsigned int munlock_vma_page(struct page *page) > > > > { > > > > - unsigned int nr_pages; > > > > + int nr_pages; > > > > struct zone *zone = page_zone(page); > > > > > > > > /* For try_to_munlock() and to serialize with page migration */ > > > > -- > > > > Kirill A. Shutemov > > > > > > I tested your patch on Linux 4.4 and confirmed that your patch fixed this bug. > Please also send to stable. > > Cc: <stable@xxxxxxxxxxxxxxx> [4.4+] > > > > Don't we want to use "long" than "int" for all variables that count number > > > of pages, for recently commit 6cdb18ad98a49f7e9b95d538a0614cde827404b8 > > > "mm/vmstat: fix overflow in mod_zone_page_state()" changed to use "long" ? > > > > Potentially, yes. But here we count number of small pages in the compound > > page. We're far from being able to allocate 8 terabyte pages ;) > > That commit says "we have a 9TB system with only one node". > You might encounter such machines in near future. ;-) > > > > > Anyway, it's out-of-scope for this bug fix. > > > > My "Fixes:" is probably misleading, since we don't have bug visible until > > 6cdb18ad98a4. Please also mention 6cdb18ad98a4 in the changelog. I didn't request to add my "obviously correct" ;) patch to be added to -stable. But just in case somebody backports it.. There was also a performance regression reported that was introduced with 6cdb18ad98a4. However I couldn't make any sense of it. Maybe this patch fixes it also? See https://lkml.org/lkml/2016/1/5/1103 -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>