1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * mm/pgtable-generic.c
4 *
5 * Generic pgtable methods declared in linux/pgtable.h
6 *
7 * Copyright (C) 2010 Linus Torvalds
8 */
9
10 #include <linux/pagemap.h>
11 #include <linux/hugetlb.h>
12 #include <linux/pgtable.h>
13 #include <linux/swap.h>
14 #include <linux/swapops.h>
15 #include <linux/mm_inline.h>
16 #include <asm/pgalloc.h>
17 #include <asm/tlb.h>
18
19 /*
20 * If a p?d_bad entry is found while walking page tables, report
21 * the error, before resetting entry to p?d_none. Usually (but
22 * very seldom) called out from the p?d_none_or_clear_bad macros.
23 */
24
pgd_clear_bad(pgd_t * pgd)25 void pgd_clear_bad(pgd_t *pgd)
26 {
27 pgd_ERROR(*pgd);
28 pgd_clear(pgd);
29 }
30
31 #ifndef __PAGETABLE_P4D_FOLDED
p4d_clear_bad(p4d_t * p4d)32 void p4d_clear_bad(p4d_t *p4d)
33 {
34 p4d_ERROR(*p4d);
35 p4d_clear(p4d);
36 }
37 #endif
38
39 #ifndef __PAGETABLE_PUD_FOLDED
pud_clear_bad(pud_t * pud)40 void pud_clear_bad(pud_t *pud)
41 {
42 pud_ERROR(*pud);
43 pud_clear(pud);
44 }
45 #endif
46
47 /*
48 * Note that the pmd variant below can't be stub'ed out just as for p4d/pud
49 * above. pmd folding is special and typically pmd_* macros refer to upper
50 * level even when folded
51 */
pmd_clear_bad(pmd_t * pmd)52 void pmd_clear_bad(pmd_t *pmd)
53 {
54 pmd_ERROR(*pmd);
55 pmd_clear(pmd);
56 }
57 EXPORT_SYMBOL_GPL(pmd_clear_bad);
58
59 #ifndef __HAVE_ARCH_PTEP_SET_ACCESS_FLAGS
60 /*
61 * Only sets the access flags (dirty, accessed), as well as write
62 * permission. Furthermore, we know it always gets set to a "more
63 * permissive" setting, which allows most architectures to optimize
64 * this. We return whether the PTE actually changed, which in turn
65 * instructs the caller to do things like update__mmu_cache. This
66 * used to be done in the caller, but sparc needs minor faults to
67 * force that call on sun4c so we changed this macro slightly
68 */
ptep_set_access_flags(struct vm_area_struct * vma,unsigned long address,pte_t * ptep,pte_t entry,int dirty)69 int ptep_set_access_flags(struct vm_area_struct *vma,
70 unsigned long address, pte_t *ptep,
71 pte_t entry, int dirty)
72 {
73 int changed = !pte_same(ptep_get(ptep), entry);
74 if (changed) {
75 set_pte_at(vma->vm_mm, address, ptep, entry);
76 flush_tlb_fix_spurious_fault(vma, address, ptep);
77 }
78 return changed;
79 }
80 #endif
81
82 #ifndef __HAVE_ARCH_PTEP_CLEAR_YOUNG_FLUSH
ptep_clear_flush_young(struct vm_area_struct * vma,unsigned long address,pte_t * ptep)83 int ptep_clear_flush_young(struct vm_area_struct *vma,
84 unsigned long address, pte_t *ptep)
85 {
86 int young;
87 young = ptep_test_and_clear_young(vma, address, ptep);
88 if (young)
89 flush_tlb_page(vma, address);
90 return young;
91 }
92 #endif
93
94 #ifndef __HAVE_ARCH_PTEP_CLEAR_FLUSH
ptep_clear_flush(struct vm_area_struct * vma,unsigned long address,pte_t * ptep)95 pte_t ptep_clear_flush(struct vm_area_struct *vma, unsigned long address,
96 pte_t *ptep)
97 {
98 struct mm_struct *mm = (vma)->vm_mm;
99 pte_t pte;
100 pte = ptep_get_and_clear(mm, address, ptep);
101 if (pte_accessible(mm, pte))
102 flush_tlb_page(vma, address);
103 return pte;
104 }
105 #endif
106
107 #ifdef CONFIG_TRANSPARENT_HUGEPAGE
108
109 #ifndef __HAVE_ARCH_PMDP_SET_ACCESS_FLAGS
pmdp_set_access_flags(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp,pmd_t entry,int dirty)110 int pmdp_set_access_flags(struct vm_area_struct *vma,
111 unsigned long address, pmd_t *pmdp,
112 pmd_t entry, int dirty)
113 {
114 int changed = !pmd_same(*pmdp, entry);
115 VM_BUG_ON(address & ~HPAGE_PMD_MASK);
116 if (changed) {
117 set_pmd_at(vma->vm_mm, address, pmdp, entry);
118 flush_pmd_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
119 }
120 return changed;
121 }
122 #endif
123
124 #ifndef __HAVE_ARCH_PMDP_CLEAR_YOUNG_FLUSH
pmdp_clear_flush_young(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp)125 int pmdp_clear_flush_young(struct vm_area_struct *vma,
126 unsigned long address, pmd_t *pmdp)
127 {
128 int young;
129 VM_BUG_ON(address & ~HPAGE_PMD_MASK);
130 young = pmdp_test_and_clear_young(vma, address, pmdp);
131 if (young)
132 flush_pmd_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
133 return young;
134 }
135 #endif
136
137 #ifndef __HAVE_ARCH_PMDP_HUGE_CLEAR_FLUSH
pmdp_huge_clear_flush(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp)138 pmd_t pmdp_huge_clear_flush(struct vm_area_struct *vma, unsigned long address,
139 pmd_t *pmdp)
140 {
141 pmd_t pmd;
142 VM_BUG_ON(address & ~HPAGE_PMD_MASK);
143 VM_BUG_ON(pmd_present(*pmdp) && !pmd_trans_huge(*pmdp) &&
144 !pmd_devmap(*pmdp));
145 pmd = pmdp_huge_get_and_clear(vma->vm_mm, address, pmdp);
146 flush_pmd_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
147 return pmd;
148 }
149
150 #ifdef CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD
pudp_huge_clear_flush(struct vm_area_struct * vma,unsigned long address,pud_t * pudp)151 pud_t pudp_huge_clear_flush(struct vm_area_struct *vma, unsigned long address,
152 pud_t *pudp)
153 {
154 pud_t pud;
155
156 VM_BUG_ON(address & ~HPAGE_PUD_MASK);
157 VM_BUG_ON(!pud_trans_huge(*pudp) && !pud_devmap(*pudp));
158 pud = pudp_huge_get_and_clear(vma->vm_mm, address, pudp);
159 flush_pud_tlb_range(vma, address, address + HPAGE_PUD_SIZE);
160 return pud;
161 }
162 #endif
163 #endif
164
165 #ifndef __HAVE_ARCH_PGTABLE_DEPOSIT
pgtable_trans_huge_deposit(struct mm_struct * mm,pmd_t * pmdp,pgtable_t pgtable)166 void pgtable_trans_huge_deposit(struct mm_struct *mm, pmd_t *pmdp,
167 pgtable_t pgtable)
168 {
169 assert_spin_locked(pmd_lockptr(mm, pmdp));
170
171 /* FIFO */
172 if (!pmd_huge_pte(mm, pmdp))
173 INIT_LIST_HEAD(&pgtable->lru);
174 else
175 list_add(&pgtable->lru, &pmd_huge_pte(mm, pmdp)->lru);
176 pmd_huge_pte(mm, pmdp) = pgtable;
177 }
178 #endif
179
180 #ifndef __HAVE_ARCH_PGTABLE_WITHDRAW
181 /* no "address" argument so destroys page coloring of some arch */
pgtable_trans_huge_withdraw(struct mm_struct * mm,pmd_t * pmdp)182 pgtable_t pgtable_trans_huge_withdraw(struct mm_struct *mm, pmd_t *pmdp)
183 {
184 pgtable_t pgtable;
185
186 assert_spin_locked(pmd_lockptr(mm, pmdp));
187
188 /* FIFO */
189 pgtable = pmd_huge_pte(mm, pmdp);
190 pmd_huge_pte(mm, pmdp) = list_first_entry_or_null(&pgtable->lru,
191 struct page, lru);
192 if (pmd_huge_pte(mm, pmdp))
193 list_del(&pgtable->lru);
194 return pgtable;
195 }
196 #endif
197
198 #ifndef __HAVE_ARCH_PMDP_INVALIDATE
pmdp_invalidate(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp)199 pmd_t pmdp_invalidate(struct vm_area_struct *vma, unsigned long address,
200 pmd_t *pmdp)
201 {
202 VM_WARN_ON_ONCE(!pmd_present(*pmdp));
203 pmd_t old = pmdp_establish(vma, address, pmdp, pmd_mkinvalid(*pmdp));
204 flush_pmd_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
205 return old;
206 }
207 #endif
208
209 #ifndef __HAVE_ARCH_PMDP_INVALIDATE_AD
pmdp_invalidate_ad(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp)210 pmd_t pmdp_invalidate_ad(struct vm_area_struct *vma, unsigned long address,
211 pmd_t *pmdp)
212 {
213 VM_WARN_ON_ONCE(!pmd_present(*pmdp));
214 return pmdp_invalidate(vma, address, pmdp);
215 }
216 #endif
217
218 #ifndef pmdp_collapse_flush
pmdp_collapse_flush(struct vm_area_struct * vma,unsigned long address,pmd_t * pmdp)219 pmd_t pmdp_collapse_flush(struct vm_area_struct *vma, unsigned long address,
220 pmd_t *pmdp)
221 {
222 /*
223 * pmd and hugepage pte format are same. So we could
224 * use the same function.
225 */
226 pmd_t pmd;
227
228 VM_BUG_ON(address & ~HPAGE_PMD_MASK);
229 VM_BUG_ON(pmd_trans_huge(*pmdp));
230 pmd = pmdp_huge_get_and_clear(vma->vm_mm, address, pmdp);
231
232 /* collapse entails shooting down ptes not pmd */
233 flush_tlb_range(vma, address, address + HPAGE_PMD_SIZE);
234 return pmd;
235 }
236 #endif
237
238 /* arch define pte_free_defer in asm/pgalloc.h for its own implementation */
239 #ifndef pte_free_defer
pte_free_now(struct rcu_head * head)240 static void pte_free_now(struct rcu_head *head)
241 {
242 struct page *page;
243
244 page = container_of(head, struct page, rcu_head);
245 pte_free(NULL /* mm not passed and not used */, (pgtable_t)page);
246 }
247
pte_free_defer(struct mm_struct * mm,pgtable_t pgtable)248 void pte_free_defer(struct mm_struct *mm, pgtable_t pgtable)
249 {
250 struct page *page;
251
252 page = pgtable;
253 call_rcu(&page->rcu_head, pte_free_now);
254 }
255 #endif /* pte_free_defer */
256 #endif /* CONFIG_TRANSPARENT_HUGEPAGE */
257
258 #if defined(CONFIG_GUP_GET_PXX_LOW_HIGH) && \
259 (defined(CONFIG_SMP) || defined(CONFIG_PREEMPT_RCU))
260 /*
261 * See the comment above ptep_get_lockless() in include/linux/pgtable.h:
262 * the barriers in pmdp_get_lockless() cannot guarantee that the value in
263 * pmd_high actually belongs with the value in pmd_low; but holding interrupts
264 * off blocks the TLB flush between present updates, which guarantees that a
265 * successful __pte_offset_map() points to a page from matched halves.
266 */
pmdp_get_lockless_start(void)267 static unsigned long pmdp_get_lockless_start(void)
268 {
269 unsigned long irqflags;
270
271 local_irq_save(irqflags);
272 return irqflags;
273 }
pmdp_get_lockless_end(unsigned long irqflags)274 static void pmdp_get_lockless_end(unsigned long irqflags)
275 {
276 local_irq_restore(irqflags);
277 }
278 #else
pmdp_get_lockless_start(void)279 static unsigned long pmdp_get_lockless_start(void) { return 0; }
pmdp_get_lockless_end(unsigned long irqflags)280 static void pmdp_get_lockless_end(unsigned long irqflags) { }
281 #endif
282
__pte_offset_map(pmd_t * pmd,unsigned long addr,pmd_t * pmdvalp)283 pte_t *__pte_offset_map(pmd_t *pmd, unsigned long addr, pmd_t *pmdvalp)
284 {
285 unsigned long irqflags;
286 pmd_t pmdval;
287
288 rcu_read_lock();
289 irqflags = pmdp_get_lockless_start();
290 pmdval = pmdp_get_lockless(pmd);
291 pmdp_get_lockless_end(irqflags);
292
293 if (pmdvalp)
294 *pmdvalp = pmdval;
295 if (unlikely(pmd_none(pmdval) || is_pmd_migration_entry(pmdval)))
296 goto nomap;
297 if (unlikely(pmd_trans_huge(pmdval) || pmd_devmap(pmdval)))
298 goto nomap;
299 if (unlikely(pmd_bad(pmdval))) {
300 pmd_clear_bad(pmd);
301 goto nomap;
302 }
303 return __pte_map(&pmdval, addr);
304 nomap:
305 rcu_read_unlock();
306 return NULL;
307 }
308
pte_offset_map_nolock(struct mm_struct * mm,pmd_t * pmd,unsigned long addr,spinlock_t ** ptlp)309 pte_t *pte_offset_map_nolock(struct mm_struct *mm, pmd_t *pmd,
310 unsigned long addr, spinlock_t **ptlp)
311 {
312 pmd_t pmdval;
313 pte_t *pte;
314
315 pte = __pte_offset_map(pmd, addr, &pmdval);
316 if (likely(pte))
317 *ptlp = pte_lockptr(mm, &pmdval);
318 return pte;
319 }
320
321 /*
322 * pte_offset_map_lock(mm, pmd, addr, ptlp), and its internal implementation
323 * __pte_offset_map_lock() below, is usually called with the pmd pointer for
324 * addr, reached by walking down the mm's pgd, p4d, pud for addr: either while
325 * holding mmap_lock or vma lock for read or for write; or in truncate or rmap
326 * context, while holding file's i_mmap_lock or anon_vma lock for read (or for
327 * write). In a few cases, it may be used with pmd pointing to a pmd_t already
328 * copied to or constructed on the stack.
329 *
330 * When successful, it returns the pte pointer for addr, with its page table
331 * kmapped if necessary (when CONFIG_HIGHPTE), and locked against concurrent
332 * modification by software, with a pointer to that spinlock in ptlp (in some
333 * configs mm->page_table_lock, in SPLIT_PTLOCK configs a spinlock in table's
334 * struct page). pte_unmap_unlock(pte, ptl) to unlock and unmap afterwards.
335 *
336 * But it is unsuccessful, returning NULL with *ptlp unchanged, if there is no
337 * page table at *pmd: if, for example, the page table has just been removed,
338 * or replaced by the huge pmd of a THP. (When successful, *pmd is rechecked
339 * after acquiring the ptlock, and retried internally if it changed: so that a
340 * page table can be safely removed or replaced by THP while holding its lock.)
341 *
342 * pte_offset_map(pmd, addr), and its internal helper __pte_offset_map() above,
343 * just returns the pte pointer for addr, its page table kmapped if necessary;
344 * or NULL if there is no page table at *pmd. It does not attempt to lock the
345 * page table, so cannot normally be used when the page table is to be updated,
346 * or when entries read must be stable. But it does take rcu_read_lock(): so
347 * that even when page table is racily removed, it remains a valid though empty
348 * and disconnected table. Until pte_unmap(pte) unmaps and rcu_read_unlock()s
349 * afterwards.
350 *
351 * pte_offset_map_nolock(mm, pmd, addr, ptlp), above, is like pte_offset_map();
352 * but when successful, it also outputs a pointer to the spinlock in ptlp - as
353 * pte_offset_map_lock() does, but in this case without locking it. This helps
354 * the caller to avoid a later pte_lockptr(mm, *pmd), which might by that time
355 * act on a changed *pmd: pte_offset_map_nolock() provides the correct spinlock
356 * pointer for the page table that it returns. In principle, the caller should
357 * recheck *pmd once the lock is taken; in practice, no callsite needs that -
358 * either the mmap_lock for write, or pte_same() check on contents, is enough.
359 *
360 * Note that free_pgtables(), used after unmapping detached vmas, or when
361 * exiting the whole mm, does not take page table lock before freeing a page
362 * table, and may not use RCU at all: "outsiders" like khugepaged should avoid
363 * pte_offset_map() and co once the vma is detached from mm or mm_users is zero.
364 */
__pte_offset_map_lock(struct mm_struct * mm,pmd_t * pmd,unsigned long addr,spinlock_t ** ptlp)365 pte_t *__pte_offset_map_lock(struct mm_struct *mm, pmd_t *pmd,
366 unsigned long addr, spinlock_t **ptlp)
367 {
368 spinlock_t *ptl;
369 pmd_t pmdval;
370 pte_t *pte;
371 again:
372 pte = __pte_offset_map(pmd, addr, &pmdval);
373 if (unlikely(!pte))
374 return pte;
375 ptl = pte_lockptr(mm, &pmdval);
376 spin_lock(ptl);
377 if (likely(pmd_same(pmdval, pmdp_get_lockless(pmd)))) {
378 *ptlp = ptl;
379 return pte;
380 }
381 pte_unmap_unlock(pte, ptl);
382 goto again;
383 }
384 EXPORT_SYMBOL_GPL(__pte_offset_map_lock);
385