This patch reverts 1ba6e0b50b ("mm: numa: split_huge_page: transfer the NUMA type from the pmd to the pte"). If a huge page is being split due a protection change and the tail will be in a PROT_NONE vma then NUMA hinting PTEs are temporarily created in the protected VMA. VM_RW|VM_PROTNONE |-----------------| ^ split here In the specific case above, it should get fixed up by change_pte_range() but there is a window of opportunity for weirdness to happen. Similarly, if a huge page is shrunk and split during a protection update but before pmd_numa is cleared then a pte_numa can be left behind. Instead of adding complexity trying to deal with the case, this patch will not mark PTEs NUMA when splitting a huge page. NUMA hinting faults will not be triggered which is marginal in comparison to the complexity in dealing with the corner cases during THP split.
Unified · Split
| @@ -1795,14 +1795,17 @@ static int __split_huge_page_map(struct page *page, · 1794 unmodified lines | ||
| 1795 | 1795 | for (i = 0; i < HPAGE_PMD_NR; i++, haddr += PAGE_SIZE) { |
| 1796 | 1796 | pte_t *pte, entry; |
| 1797 | 1797 | BUG_ON(PageCompound(page+i)); |
| 1798 | + /* | |
| 1799 | + * Note that pmd_numa is not transferred deliberately | |
| 1800 | + * to avoid any possibility that pte_numa leaks to | |
| 1801 | + * a PROT_NONE VMA by accident. | |
| 1802 | + */ | |
| 1798 | 1803 | entry = mk_pte(page + i, vma->vm_page_prot); |
| 1799 | 1804 | entry = maybe_mkwrite(pte_mkdirty(entry), vma); |
| 1800 | 1805 | if (!pmd_write(*pmd)) |
| 1801 | 1806 | entry = pte_wrprotect(entry); |
| 1802 | 1807 | if (!pmd_young(*pmd)) |
| 1803 | 1808 | entry = pte_mkold(entry); |
| 1804 | − if (pmd_numa(*pmd)) | |
| 1805 | − entry = pte_mknuma(entry); | |
| 1806 | 1809 | pte = pte_offset_map(&_pmd, haddr); |
| 1807 | 1810 | BUG_ON(!pte_none(*pte)); |
| 1808 | 1811 | set_pte_at(mm, haddr, pte, entry); |