On Tue, Feb 25, 2014 at 10:16 AM, Davidlohr Bueso <davidlohr@xxxxxx> wrote: > index a17621c..14396bf 100644 > --- a/kernel/fork.c > +++ b/kernel/fork.c > @@ -363,7 +363,12 @@ static int dup_mmap(struct mm_struct *mm, struct mm_struct *oldmm) > > mm->locked_vm = 0; > mm->mmap = NULL; > - mm->mmap_cache = NULL; > + mm->vmacache_seqnum = oldmm->vmacache_seqnum + 1; > + > + /* deal with overflows */ > + if (unlikely(mm->vmacache_seqnum == 0)) > + vmacache_invalidate_all(); Correct me if I'm wrong, but this can not possibly be correct. vmacache_invalidate_all() walks over all the threads of the current process, but "mm" here is the mm of the *new* process that is getting created, and is unrelated in all ways to the threads of the old process. So it walks completely the wrong list of threads. In fact, the sequence number of the old vm and the sequence number of the new vm cannot in any way be related. As far as I can tell, the only sane thing to do at fork/clone() time is to: - clear all the cache entries (of the new 'struct task_struct'! - so not in dup_mmap, but make sure it's zeroed when allocating!)( - set vmcache_seqnum to 0 in dup_mmap (since any sequence number is fine when it got invalidated, and 0 is best for "avoid overflow"). but I haven't thought deeply about this, but I pretty much guarantee that the quoted sequence above is wrong as-is. Linus -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@xxxxxxxxx. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: <a href=mailto:"dont@xxxxxxxxx"> email@xxxxxxxxx </a>