Subject: fix memory-failure hugetlbfs vs THP collision

From: Andrea Arcangeli <aarcange@redhat.com>

hugetlbfs was changed to allow memory failure to migrate the hugetlbfs pages
and that broke THP as split_huge_page was then called on hugetlbfs pages too.

compound_head/order was also run unsafe on THP pages that can be splitted at
any time.

All compound_head() invocations in memory-failure.c that are run on pages that
aren't pinned and that can be freed and reused from under us (while
compound_head is running) are buggy because compound_head can return a dangling
pointer, but I'm not fixing this as this is a generic memory-failure bug not
specific to THP but it applies to hugetlbfs too, so I can fix it later after
THP is merged upstream.

Signed-off-by: Andrea Arcangeli <aarcange@redhat.com>
---

diff --git a/mm/memory-failure.c b/mm/memory-failure.c
--- a/mm/memory-failure.c
+++ b/mm/memory-failure.c
@@ -385,7 +385,7 @@ static void collect_procs_anon(struct pa
 	struct task_struct *tsk;
 	struct anon_vma *av;
 
-	if (unlikely(split_huge_page(page)))
+	if (!PageHuge(page) && unlikely(split_huge_page(page)))
 		return;
 	read_lock(&tasklist_lock);
 	av = page_lock_anon_vma(page);
diff --git a/mm/rmap.c b/mm/rmap.c
--- a/mm/rmap.c
+++ b/mm/rmap.c
@@ -1430,7 +1430,7 @@ int try_to_unmap(struct page *page, enum
 	int ret;
 
 	BUG_ON(!PageLocked(page));
-	BUG_ON(PageTransHuge(page));
+	VM_BUG_ON(!PageHuge(page) && PageTransHuge(page));
 
 	if (unlikely(PageKsm(page)))
 		ret = try_to_unmap_ksm(page, flags);