Commit 847ce401 authored by Wu Fengguang's avatar Wu Fengguang Committed by Andi Kleen

HWPOISON: Add unpoisoning support

The unpoisoning interface is useful for stress testing tools to
reclaim poisoned pages (to prevent OOM)

There is no hardware level unpoisioning, so this
cannot be used for real memory errors, only for software injected errors.

Note that it may leak pages silently - those who have been removed from
LRU cache, but not isolated from page cache/swap cache at hwpoison time.
Especially the stress test of dirty swap cache pages shall reboot system
before exhausting memory.

AK: Fix comments, add documentation, add printks, rename symbol
Signed-off-by: default avatarWu Fengguang <fengguang.wu@intel.com>
Signed-off-by: default avatarAndi Kleen <ak@linux.intel.com>
parent 8d22ba1b
...@@ -98,10 +98,22 @@ madvise(MADV_POISON, ....) ...@@ -98,10 +98,22 @@ madvise(MADV_POISON, ....)
hwpoison-inject module through debugfs hwpoison-inject module through debugfs
/sys/debug/hwpoison/corrupt-pfn
Inject hwpoison fault at PFN echoed into this file /sys/debug/hwpoison/
corrupt-pfn
Inject hwpoison fault at PFN echoed into this file.
unpoison-pfn
Software-unpoison page at PFN echoed into this file. This
way a page can be reused again.
This only works for Linux injected failures, not for real
memory failures.
Note these injection interfaces are not stable and might change between
kernel versions
Architecture specific MCE injector Architecture specific MCE injector
......
...@@ -1336,6 +1336,7 @@ enum mf_flags { ...@@ -1336,6 +1336,7 @@ enum mf_flags {
}; };
extern void memory_failure(unsigned long pfn, int trapno); extern void memory_failure(unsigned long pfn, int trapno);
extern int __memory_failure(unsigned long pfn, int trapno, int flags); extern int __memory_failure(unsigned long pfn, int trapno, int flags);
extern int unpoison_memory(unsigned long pfn);
extern int sysctl_memory_failure_early_kill; extern int sysctl_memory_failure_early_kill;
extern int sysctl_memory_failure_recovery; extern int sysctl_memory_failure_recovery;
extern void shake_page(struct page *p); extern void shake_page(struct page *p);
......
...@@ -275,7 +275,7 @@ PAGEFLAG_FALSE(Uncached) ...@@ -275,7 +275,7 @@ PAGEFLAG_FALSE(Uncached)
#ifdef CONFIG_MEMORY_FAILURE #ifdef CONFIG_MEMORY_FAILURE
PAGEFLAG(HWPoison, hwpoison) PAGEFLAG(HWPoison, hwpoison)
TESTSETFLAG(HWPoison, hwpoison) TESTSCFLAG(HWPoison, hwpoison)
#define __PG_HWPOISON (1UL << PG_hwpoison) #define __PG_HWPOISON (1UL << PG_hwpoison)
#else #else
PAGEFLAG_FALSE(HWPoison) PAGEFLAG_FALSE(HWPoison)
......
...@@ -4,7 +4,7 @@ ...@@ -4,7 +4,7 @@
#include <linux/kernel.h> #include <linux/kernel.h>
#include <linux/mm.h> #include <linux/mm.h>
static struct dentry *hwpoison_dir, *corrupt_pfn; static struct dentry *hwpoison_dir;
static int hwpoison_inject(void *data, u64 val) static int hwpoison_inject(void *data, u64 val)
{ {
...@@ -14,7 +14,16 @@ static int hwpoison_inject(void *data, u64 val) ...@@ -14,7 +14,16 @@ static int hwpoison_inject(void *data, u64 val)
return __memory_failure(val, 18, 0); return __memory_failure(val, 18, 0);
} }
static int hwpoison_unpoison(void *data, u64 val)
{
if (!capable(CAP_SYS_ADMIN))
return -EPERM;
return unpoison_memory(val);
}
DEFINE_SIMPLE_ATTRIBUTE(hwpoison_fops, NULL, hwpoison_inject, "%lli\n"); DEFINE_SIMPLE_ATTRIBUTE(hwpoison_fops, NULL, hwpoison_inject, "%lli\n");
DEFINE_SIMPLE_ATTRIBUTE(unpoison_fops, NULL, hwpoison_unpoison, "%lli\n");
static void pfn_inject_exit(void) static void pfn_inject_exit(void)
{ {
...@@ -24,16 +33,31 @@ static void pfn_inject_exit(void) ...@@ -24,16 +33,31 @@ static void pfn_inject_exit(void)
static int pfn_inject_init(void) static int pfn_inject_init(void)
{ {
struct dentry *dentry;
hwpoison_dir = debugfs_create_dir("hwpoison", NULL); hwpoison_dir = debugfs_create_dir("hwpoison", NULL);
if (hwpoison_dir == NULL) if (hwpoison_dir == NULL)
return -ENOMEM; return -ENOMEM;
corrupt_pfn = debugfs_create_file("corrupt-pfn", 0600, hwpoison_dir,
/*
* Note that the below poison/unpoison interfaces do not involve
* hardware status change, hence do not require hardware support.
* They are mainly for testing hwpoison in software level.
*/
dentry = debugfs_create_file("corrupt-pfn", 0600, hwpoison_dir,
NULL, &hwpoison_fops); NULL, &hwpoison_fops);
if (corrupt_pfn == NULL) { if (!dentry)
pfn_inject_exit(); goto fail;
return -ENOMEM;
} dentry = debugfs_create_file("unpoison-pfn", 0600, hwpoison_dir,
NULL, &unpoison_fops);
if (!dentry)
goto fail;
return 0; return 0;
fail:
pfn_inject_exit();
return -ENOMEM;
} }
module_init(pfn_inject_init); module_init(pfn_inject_init);
......
...@@ -838,6 +838,16 @@ int __memory_failure(unsigned long pfn, int trapno, int flags) ...@@ -838,6 +838,16 @@ int __memory_failure(unsigned long pfn, int trapno, int flags)
* and in many cases impossible, so we just avoid it here. * and in many cases impossible, so we just avoid it here.
*/ */
lock_page_nosync(p); lock_page_nosync(p);
/*
* unpoison always clear PG_hwpoison inside page lock
*/
if (!PageHWPoison(p)) {
action_result(pfn, "unpoisoned", IGNORED);
res = 0;
goto out;
}
wait_on_page_writeback(p); wait_on_page_writeback(p);
/* /*
...@@ -893,3 +903,61 @@ void memory_failure(unsigned long pfn, int trapno) ...@@ -893,3 +903,61 @@ void memory_failure(unsigned long pfn, int trapno)
{ {
__memory_failure(pfn, trapno, 0); __memory_failure(pfn, trapno, 0);
} }
/**
* unpoison_memory - Unpoison a previously poisoned page
* @pfn: Page number of the to be unpoisoned page
*
* Software-unpoison a page that has been poisoned by
* memory_failure() earlier.
*
* This is only done on the software-level, so it only works
* for linux injected failures, not real hardware failures
*
* Returns 0 for success, otherwise -errno.
*/
int unpoison_memory(unsigned long pfn)
{
struct page *page;
struct page *p;
int freeit = 0;
if (!pfn_valid(pfn))
return -ENXIO;
p = pfn_to_page(pfn);
page = compound_head(p);
if (!PageHWPoison(p)) {
pr_debug("MCE: Page was already unpoisoned %#lx\n", pfn);
return 0;
}
if (!get_page_unless_zero(page)) {
if (TestClearPageHWPoison(p))
atomic_long_dec(&mce_bad_pages);
pr_debug("MCE: Software-unpoisoned free page %#lx\n", pfn);
return 0;
}
lock_page_nosync(page);
/*
* This test is racy because PG_hwpoison is set outside of page lock.
* That's acceptable because that won't trigger kernel panic. Instead,
* the PG_hwpoison page will be caught and isolated on the entrance to
* the free buddy page pool.
*/
if (TestClearPageHWPoison(p)) {
pr_debug("MCE: Software-unpoisoned page %#lx\n", pfn);
atomic_long_dec(&mce_bad_pages);
freeit = 1;
}
unlock_page(page);
put_page(page);
if (freeit)
put_page(page);
return 0;
}
EXPORT_SYMBOL(unpoison_memory);
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment