@@ -910,6 +910,7 @@ struct task_struct {
#endif
#ifdef CONFIG_MEMCG
unsigned in_user_fault:1;
+ unsigned is_over_memcg_limit:1;
#endif
#ifdef CONFIG_COMPAT_BRK
unsigned brk_randomized:1;
@@ -1846,7 +1846,7 @@ bool mem_cgroup_oom_synchronize(bool handle)
/* OOM is global, do not handle */
if (!memcg)
- return false;
+ return current->is_over_memcg_limit;
if (!handle)
goto cleanup;
@@ -2535,6 +2535,8 @@ static int try_charge_memcg(struct mem_cgroup *memcg, gfp_t gfp_mask,
bool drained = false;
unsigned long pflags;
+ if (current->in_user_fault)
+ current->is_over_memcg_limit = false;
retry:
if (consume_stock(memcg, nr_pages))
return 0;
@@ -2639,8 +2641,11 @@ static int try_charge_memcg(struct mem_cgroup *memcg, gfp_t gfp_mask,
goto retry;
}
nomem:
- if (!(gfp_mask & __GFP_NOFAIL))
+ if (!(gfp_mask & __GFP_NOFAIL)) {
+ if (current->in_user_fault)
+ current->is_over_memcg_limit = true;
return -ENOMEM;
+ }
force:
/*
* The allocation either can't fail or will lead to more memory
@@ -2964,10 +2969,11 @@ static int obj_cgroup_charge_pages(struct obj_cgroup *objcg, gfp_t gfp,
}
cancel_charge(memcg, nr_pages);
ret = -ENOMEM;
+ if (current->in_user_fault)
+ current->is_over_memcg_limit = true;
}
out:
css_put(&memcg->css);
-
return ret;
}
Currently memcg-limited userspace can trigger false global OOM. A user space task inside memcg-limited container generates a page fault, its handler do_user_addr_fault() calls handle_mm_fault(), which cannot allocate the page due to exceeding the memcg limit and returns VM_FAULT_OOM. Then do_user_addr_fault() calls pagefault_out_of_memory() which finally executes out_of_memory() without set of memcg and triggers a false global OOM. At present do_user_addr_fault() does not know why page allocation was failed, i.e. was it global or memcg OOM. Let's use new flag on task struct to save this information, it will be set in obj_cgroup_charge_pages (for memory controller) and in try_charge_memcg (for kmem controller), and will be used in mem_cgroup_oom_synchronize() called inside pagefault_out_of_memory(): in case of memcg-related restrictions it does not allow to generate a false global OOM and will silently return to user space which will either retry the fault or kill the process if it got a fatal signal. Signed-off-by: Vasily Averin <vvs@virtuozzo.com> --- include/linux/sched.h | 1 + mm/memcontrol.c | 12 +++++++++--- 2 files changed, 10 insertions(+), 3 deletions(-)