Re: [PATCH v4 02/12] mm/rmap: Add try_to_unmap_hugetlb_one

From: Lance Yang

Date: Thu Jun 18 2026 - 06:04:12 EST




On 2026/6/18 17:43, David Hildenbrand (Arm) wrote:
On 6/18/26 11:09, Lance Yang wrote:


On 2026/6/18 15:55, David Hildenbrand (Arm) wrote:
    return __rste_to_pte(pte_val(*ptep));
}


So plain ptep_get() can feed raw huge-entry bits into pte_pfn(), and the
derived subpage can be wrong.

Good question which impact that might have in practice?

The subpage check can warn, but we still pass that subpage to
make_hwpoison_entry(). So the hwpoison marker can end up with the
wrong PFN?

+    subpage = folio_page(folio, pte_pfn(pteval) - folio_pfn(folio));
+    VM_WARN_ON(folio_page(folio, 0) != subpage);
[...]
+    pteval = swp_entry_to_pte(make_hwpoison_entry(subpage));

My s390x page table knowledge is a bit rusty.

IIUC, it would be a problem if some PTE bits in segment/region entries (pmd/pud/
...) would pass the

pte_pfn(x) -> (pte_val(x) >> PAGE_SHIFT)

check. I don't think this applies, because

While
#define _SEGMENT_ENTRY_ORIGIN_LARGE ~0xfffffUL

We also have

#define _SEGMENT_ENTRY_ORIGIN ~0x7ffUL

So these bits are not actually used.

What __rste_to_pte() primarily does is reshuffling present bits etc.

So using any other bits besides the PFN would be problematic I guess.

Am I wrong or isn't the present bit already at a different location? For
prot-none hugetlb folios there might be a real issue, as the PTE present bit
corresponds to the PMD/PUD read-permission bit.


Oh my :)

So yeah, we should probably fix that ahead of time unless I am missing
something? Good that we separate that hugetlb crap out.

Yeah, looks like this was already there before the split. Should this
be fixed separately?