Loading...
1// SPDX-License-Identifier: GPL-2.0
2#include <linux/mm.h>
3#include <linux/rmap.h>
4#include <linux/hugetlb.h>
5#include <linux/swap.h>
6#include <linux/swapops.h>
7
8#include "internal.h"
9
10static inline bool not_found(struct page_vma_mapped_walk *pvmw)
11{
12 page_vma_mapped_walk_done(pvmw);
13 return false;
14}
15
16static bool map_pte(struct page_vma_mapped_walk *pvmw)
17{
18 pvmw->pte = pte_offset_map(pvmw->pmd, pvmw->address);
19 if (!(pvmw->flags & PVMW_SYNC)) {
20 if (pvmw->flags & PVMW_MIGRATION) {
21 if (!is_swap_pte(*pvmw->pte))
22 return false;
23 } else {
24 if (!pte_present(*pvmw->pte))
25 return false;
26 }
27 }
28 pvmw->ptl = pte_lockptr(pvmw->vma->vm_mm, pvmw->pmd);
29 spin_lock(pvmw->ptl);
30 return true;
31}
32
33static inline bool pfn_in_hpage(struct page *hpage, unsigned long pfn)
34{
35 unsigned long hpage_pfn = page_to_pfn(hpage);
36
37 /* THP can be referenced by any subpage */
38 return pfn >= hpage_pfn && pfn - hpage_pfn < hpage_nr_pages(hpage);
39}
40
41/**
42 * check_pte - check if @pvmw->page is mapped at the @pvmw->pte
43 *
44 * page_vma_mapped_walk() found a place where @pvmw->page is *potentially*
45 * mapped. check_pte() has to validate this.
46 *
47 * @pvmw->pte may point to empty PTE, swap PTE or PTE pointing to arbitrary
48 * page.
49 *
50 * If PVMW_MIGRATION flag is set, returns true if @pvmw->pte contains migration
51 * entry that points to @pvmw->page or any subpage in case of THP.
52 *
53 * If PVMW_MIGRATION flag is not set, returns true if @pvmw->pte points to
54 * @pvmw->page or any subpage in case of THP.
55 *
56 * Otherwise, return false.
57 *
58 */
59static bool check_pte(struct page_vma_mapped_walk *pvmw)
60{
61 unsigned long pfn;
62
63 if (pvmw->flags & PVMW_MIGRATION) {
64 swp_entry_t entry;
65 if (!is_swap_pte(*pvmw->pte))
66 return false;
67 entry = pte_to_swp_entry(*pvmw->pte);
68
69 if (!is_migration_entry(entry))
70 return false;
71
72 pfn = migration_entry_to_pfn(entry);
73 } else if (is_swap_pte(*pvmw->pte)) {
74 swp_entry_t entry;
75
76 /* Handle un-addressable ZONE_DEVICE memory */
77 entry = pte_to_swp_entry(*pvmw->pte);
78 if (!is_device_private_entry(entry))
79 return false;
80
81 pfn = device_private_entry_to_pfn(entry);
82 } else {
83 if (!pte_present(*pvmw->pte))
84 return false;
85
86 pfn = pte_pfn(*pvmw->pte);
87 }
88
89 return pfn_in_hpage(pvmw->page, pfn);
90}
91
92/**
93 * page_vma_mapped_walk - check if @pvmw->page is mapped in @pvmw->vma at
94 * @pvmw->address
95 * @pvmw: pointer to struct page_vma_mapped_walk. page, vma, address and flags
96 * must be set. pmd, pte and ptl must be NULL.
97 *
98 * Returns true if the page is mapped in the vma. @pvmw->pmd and @pvmw->pte point
99 * to relevant page table entries. @pvmw->ptl is locked. @pvmw->address is
100 * adjusted if needed (for PTE-mapped THPs).
101 *
102 * If @pvmw->pmd is set but @pvmw->pte is not, you have found PMD-mapped page
103 * (usually THP). For PTE-mapped THP, you should run page_vma_mapped_walk() in
104 * a loop to find all PTEs that map the THP.
105 *
106 * For HugeTLB pages, @pvmw->pte is set to the relevant page table entry
107 * regardless of which page table level the page is mapped at. @pvmw->pmd is
108 * NULL.
109 *
110 * Retruns false if there are no more page table entries for the page in
111 * the vma. @pvmw->ptl is unlocked and @pvmw->pte is unmapped.
112 *
113 * If you need to stop the walk before page_vma_mapped_walk() returned false,
114 * use page_vma_mapped_walk_done(). It will do the housekeeping.
115 */
116bool page_vma_mapped_walk(struct page_vma_mapped_walk *pvmw)
117{
118 struct mm_struct *mm = pvmw->vma->vm_mm;
119 struct page *page = pvmw->page;
120 pgd_t *pgd;
121 p4d_t *p4d;
122 pud_t *pud;
123 pmd_t pmde;
124
125 /* The only possible pmd mapping has been handled on last iteration */
126 if (pvmw->pmd && !pvmw->pte)
127 return not_found(pvmw);
128
129 if (pvmw->pte)
130 goto next_pte;
131
132 if (unlikely(PageHuge(pvmw->page))) {
133 /* when pud is not present, pte will be NULL */
134 pvmw->pte = huge_pte_offset(mm, pvmw->address,
135 PAGE_SIZE << compound_order(page));
136 if (!pvmw->pte)
137 return false;
138
139 pvmw->ptl = huge_pte_lockptr(page_hstate(page), mm, pvmw->pte);
140 spin_lock(pvmw->ptl);
141 if (!check_pte(pvmw))
142 return not_found(pvmw);
143 return true;
144 }
145restart:
146 pgd = pgd_offset(mm, pvmw->address);
147 if (!pgd_present(*pgd))
148 return false;
149 p4d = p4d_offset(pgd, pvmw->address);
150 if (!p4d_present(*p4d))
151 return false;
152 pud = pud_offset(p4d, pvmw->address);
153 if (!pud_present(*pud))
154 return false;
155 pvmw->pmd = pmd_offset(pud, pvmw->address);
156 /*
157 * Make sure the pmd value isn't cached in a register by the
158 * compiler and used as a stale value after we've observed a
159 * subsequent update.
160 */
161 pmde = READ_ONCE(*pvmw->pmd);
162 if (pmd_trans_huge(pmde) || is_pmd_migration_entry(pmde)) {
163 pvmw->ptl = pmd_lock(mm, pvmw->pmd);
164 if (likely(pmd_trans_huge(*pvmw->pmd))) {
165 if (pvmw->flags & PVMW_MIGRATION)
166 return not_found(pvmw);
167 if (pmd_page(*pvmw->pmd) != page)
168 return not_found(pvmw);
169 return true;
170 } else if (!pmd_present(*pvmw->pmd)) {
171 if (thp_migration_supported()) {
172 if (!(pvmw->flags & PVMW_MIGRATION))
173 return not_found(pvmw);
174 if (is_migration_entry(pmd_to_swp_entry(*pvmw->pmd))) {
175 swp_entry_t entry = pmd_to_swp_entry(*pvmw->pmd);
176
177 if (migration_entry_to_page(entry) != page)
178 return not_found(pvmw);
179 return true;
180 }
181 }
182 return not_found(pvmw);
183 } else {
184 /* THP pmd was split under us: handle on pte level */
185 spin_unlock(pvmw->ptl);
186 pvmw->ptl = NULL;
187 }
188 } else if (!pmd_present(pmde)) {
189 return false;
190 }
191 if (!map_pte(pvmw))
192 goto next_pte;
193 while (1) {
194 if (check_pte(pvmw))
195 return true;
196next_pte:
197 /* Seek to next pte only makes sense for THP */
198 if (!PageTransHuge(pvmw->page) || PageHuge(pvmw->page))
199 return not_found(pvmw);
200 do {
201 pvmw->address += PAGE_SIZE;
202 if (pvmw->address >= pvmw->vma->vm_end ||
203 pvmw->address >=
204 __vma_address(pvmw->page, pvmw->vma) +
205 hpage_nr_pages(pvmw->page) * PAGE_SIZE)
206 return not_found(pvmw);
207 /* Did we cross page table boundary? */
208 if (pvmw->address % PMD_SIZE == 0) {
209 pte_unmap(pvmw->pte);
210 if (pvmw->ptl) {
211 spin_unlock(pvmw->ptl);
212 pvmw->ptl = NULL;
213 }
214 goto restart;
215 } else {
216 pvmw->pte++;
217 }
218 } while (pte_none(*pvmw->pte));
219
220 if (!pvmw->ptl) {
221 pvmw->ptl = pte_lockptr(mm, pvmw->pmd);
222 spin_lock(pvmw->ptl);
223 }
224 }
225}
226
227/**
228 * page_mapped_in_vma - check whether a page is really mapped in a VMA
229 * @page: the page to test
230 * @vma: the VMA to test
231 *
232 * Returns 1 if the page is mapped into the page tables of the VMA, 0
233 * if the page is not mapped into the page tables of this VMA. Only
234 * valid for normal file or anonymous VMAs.
235 */
236int page_mapped_in_vma(struct page *page, struct vm_area_struct *vma)
237{
238 struct page_vma_mapped_walk pvmw = {
239 .page = page,
240 .vma = vma,
241 .flags = PVMW_SYNC,
242 };
243 unsigned long start, end;
244
245 start = __vma_address(page, vma);
246 end = start + PAGE_SIZE * (hpage_nr_pages(page) - 1);
247
248 if (unlikely(end < vma->vm_start || start >= vma->vm_end))
249 return 0;
250 pvmw.address = max(start, vma->vm_start);
251 if (!page_vma_mapped_walk(&pvmw))
252 return 0;
253 page_vma_mapped_walk_done(&pvmw);
254 return 1;
255}
1// SPDX-License-Identifier: GPL-2.0
2#include <linux/mm.h>
3#include <linux/rmap.h>
4#include <linux/hugetlb.h>
5#include <linux/swap.h>
6#include <linux/swapops.h>
7
8#include "internal.h"
9
10static inline bool not_found(struct page_vma_mapped_walk *pvmw)
11{
12 page_vma_mapped_walk_done(pvmw);
13 return false;
14}
15
16static bool map_pte(struct page_vma_mapped_walk *pvmw, pmd_t *pmdvalp,
17 spinlock_t **ptlp)
18{
19 pte_t ptent;
20
21 if (pvmw->flags & PVMW_SYNC) {
22 /* Use the stricter lookup */
23 pvmw->pte = pte_offset_map_lock(pvmw->vma->vm_mm, pvmw->pmd,
24 pvmw->address, &pvmw->ptl);
25 *ptlp = pvmw->ptl;
26 return !!pvmw->pte;
27 }
28
29again:
30 /*
31 * It is important to return the ptl corresponding to pte,
32 * in case *pvmw->pmd changes underneath us; so we need to
33 * return it even when choosing not to lock, in case caller
34 * proceeds to loop over next ptes, and finds a match later.
35 * Though, in most cases, page lock already protects this.
36 */
37 pvmw->pte = pte_offset_map_rw_nolock(pvmw->vma->vm_mm, pvmw->pmd,
38 pvmw->address, pmdvalp, ptlp);
39 if (!pvmw->pte)
40 return false;
41
42 ptent = ptep_get(pvmw->pte);
43
44 if (pvmw->flags & PVMW_MIGRATION) {
45 if (!is_swap_pte(ptent))
46 return false;
47 } else if (is_swap_pte(ptent)) {
48 swp_entry_t entry;
49 /*
50 * Handle un-addressable ZONE_DEVICE memory.
51 *
52 * We get here when we are trying to unmap a private
53 * device page from the process address space. Such
54 * page is not CPU accessible and thus is mapped as
55 * a special swap entry, nonetheless it still does
56 * count as a valid regular mapping for the page
57 * (and is accounted as such in page maps count).
58 *
59 * So handle this special case as if it was a normal
60 * page mapping ie lock CPU page table and return true.
61 *
62 * For more details on device private memory see HMM
63 * (include/linux/hmm.h or mm/hmm.c).
64 */
65 entry = pte_to_swp_entry(ptent);
66 if (!is_device_private_entry(entry) &&
67 !is_device_exclusive_entry(entry))
68 return false;
69 } else if (!pte_present(ptent)) {
70 return false;
71 }
72 spin_lock(*ptlp);
73 if (unlikely(!pmd_same(*pmdvalp, pmdp_get_lockless(pvmw->pmd)))) {
74 pte_unmap_unlock(pvmw->pte, *ptlp);
75 goto again;
76 }
77 pvmw->ptl = *ptlp;
78
79 return true;
80}
81
82/**
83 * check_pte - check if [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages) is
84 * mapped at the @pvmw->pte
85 * @pvmw: page_vma_mapped_walk struct, includes a pair pte and pfn range
86 * for checking
87 *
88 * page_vma_mapped_walk() found a place where pfn range is *potentially*
89 * mapped. check_pte() has to validate this.
90 *
91 * pvmw->pte may point to empty PTE, swap PTE or PTE pointing to
92 * arbitrary page.
93 *
94 * If PVMW_MIGRATION flag is set, returns true if @pvmw->pte contains migration
95 * entry that points to [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages)
96 *
97 * If PVMW_MIGRATION flag is not set, returns true if pvmw->pte points to
98 * [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages)
99 *
100 * Otherwise, return false.
101 *
102 */
103static bool check_pte(struct page_vma_mapped_walk *pvmw)
104{
105 unsigned long pfn;
106 pte_t ptent = ptep_get(pvmw->pte);
107
108 if (pvmw->flags & PVMW_MIGRATION) {
109 swp_entry_t entry;
110 if (!is_swap_pte(ptent))
111 return false;
112 entry = pte_to_swp_entry(ptent);
113
114 if (!is_migration_entry(entry) &&
115 !is_device_exclusive_entry(entry))
116 return false;
117
118 pfn = swp_offset_pfn(entry);
119 } else if (is_swap_pte(ptent)) {
120 swp_entry_t entry;
121
122 /* Handle un-addressable ZONE_DEVICE memory */
123 entry = pte_to_swp_entry(ptent);
124 if (!is_device_private_entry(entry) &&
125 !is_device_exclusive_entry(entry))
126 return false;
127
128 pfn = swp_offset_pfn(entry);
129 } else {
130 if (!pte_present(ptent))
131 return false;
132
133 pfn = pte_pfn(ptent);
134 }
135
136 return (pfn - pvmw->pfn) < pvmw->nr_pages;
137}
138
139/* Returns true if the two ranges overlap. Careful to not overflow. */
140static bool check_pmd(unsigned long pfn, struct page_vma_mapped_walk *pvmw)
141{
142 if ((pfn + HPAGE_PMD_NR - 1) < pvmw->pfn)
143 return false;
144 if (pfn > pvmw->pfn + pvmw->nr_pages - 1)
145 return false;
146 return true;
147}
148
149static void step_forward(struct page_vma_mapped_walk *pvmw, unsigned long size)
150{
151 pvmw->address = (pvmw->address + size) & ~(size - 1);
152 if (!pvmw->address)
153 pvmw->address = ULONG_MAX;
154}
155
156/**
157 * page_vma_mapped_walk - check if @pvmw->pfn is mapped in @pvmw->vma at
158 * @pvmw->address
159 * @pvmw: pointer to struct page_vma_mapped_walk. page, vma, address and flags
160 * must be set. pmd, pte and ptl must be NULL.
161 *
162 * Returns true if the page is mapped in the vma. @pvmw->pmd and @pvmw->pte point
163 * to relevant page table entries. @pvmw->ptl is locked. @pvmw->address is
164 * adjusted if needed (for PTE-mapped THPs).
165 *
166 * If @pvmw->pmd is set but @pvmw->pte is not, you have found PMD-mapped page
167 * (usually THP). For PTE-mapped THP, you should run page_vma_mapped_walk() in
168 * a loop to find all PTEs that map the THP.
169 *
170 * For HugeTLB pages, @pvmw->pte is set to the relevant page table entry
171 * regardless of which page table level the page is mapped at. @pvmw->pmd is
172 * NULL.
173 *
174 * Returns false if there are no more page table entries for the page in
175 * the vma. @pvmw->ptl is unlocked and @pvmw->pte is unmapped.
176 *
177 * If you need to stop the walk before page_vma_mapped_walk() returned false,
178 * use page_vma_mapped_walk_done(). It will do the housekeeping.
179 */
180bool page_vma_mapped_walk(struct page_vma_mapped_walk *pvmw)
181{
182 struct vm_area_struct *vma = pvmw->vma;
183 struct mm_struct *mm = vma->vm_mm;
184 unsigned long end;
185 spinlock_t *ptl;
186 pgd_t *pgd;
187 p4d_t *p4d;
188 pud_t *pud;
189 pmd_t pmde;
190
191 /* The only possible pmd mapping has been handled on last iteration */
192 if (pvmw->pmd && !pvmw->pte)
193 return not_found(pvmw);
194
195 if (unlikely(is_vm_hugetlb_page(vma))) {
196 struct hstate *hstate = hstate_vma(vma);
197 unsigned long size = huge_page_size(hstate);
198 /* The only possible mapping was handled on last iteration */
199 if (pvmw->pte)
200 return not_found(pvmw);
201 /*
202 * All callers that get here will already hold the
203 * i_mmap_rwsem. Therefore, no additional locks need to be
204 * taken before calling hugetlb_walk().
205 */
206 pvmw->pte = hugetlb_walk(vma, pvmw->address, size);
207 if (!pvmw->pte)
208 return false;
209
210 pvmw->ptl = huge_pte_lock(hstate, mm, pvmw->pte);
211 if (!check_pte(pvmw))
212 return not_found(pvmw);
213 return true;
214 }
215
216 end = vma_address_end(pvmw);
217 if (pvmw->pte)
218 goto next_pte;
219restart:
220 do {
221 pgd = pgd_offset(mm, pvmw->address);
222 if (!pgd_present(*pgd)) {
223 step_forward(pvmw, PGDIR_SIZE);
224 continue;
225 }
226 p4d = p4d_offset(pgd, pvmw->address);
227 if (!p4d_present(*p4d)) {
228 step_forward(pvmw, P4D_SIZE);
229 continue;
230 }
231 pud = pud_offset(p4d, pvmw->address);
232 if (!pud_present(*pud)) {
233 step_forward(pvmw, PUD_SIZE);
234 continue;
235 }
236
237 pvmw->pmd = pmd_offset(pud, pvmw->address);
238 /*
239 * Make sure the pmd value isn't cached in a register by the
240 * compiler and used as a stale value after we've observed a
241 * subsequent update.
242 */
243 pmde = pmdp_get_lockless(pvmw->pmd);
244
245 if (pmd_trans_huge(pmde) || is_pmd_migration_entry(pmde) ||
246 (pmd_present(pmde) && pmd_devmap(pmde))) {
247 pvmw->ptl = pmd_lock(mm, pvmw->pmd);
248 pmde = *pvmw->pmd;
249 if (!pmd_present(pmde)) {
250 swp_entry_t entry;
251
252 if (!thp_migration_supported() ||
253 !(pvmw->flags & PVMW_MIGRATION))
254 return not_found(pvmw);
255 entry = pmd_to_swp_entry(pmde);
256 if (!is_migration_entry(entry) ||
257 !check_pmd(swp_offset_pfn(entry), pvmw))
258 return not_found(pvmw);
259 return true;
260 }
261 if (likely(pmd_trans_huge(pmde) || pmd_devmap(pmde))) {
262 if (pvmw->flags & PVMW_MIGRATION)
263 return not_found(pvmw);
264 if (!check_pmd(pmd_pfn(pmde), pvmw))
265 return not_found(pvmw);
266 return true;
267 }
268 /* THP pmd was split under us: handle on pte level */
269 spin_unlock(pvmw->ptl);
270 pvmw->ptl = NULL;
271 } else if (!pmd_present(pmde)) {
272 /*
273 * If PVMW_SYNC, take and drop THP pmd lock so that we
274 * cannot return prematurely, while zap_huge_pmd() has
275 * cleared *pmd but not decremented compound_mapcount().
276 */
277 if ((pvmw->flags & PVMW_SYNC) &&
278 thp_vma_suitable_order(vma, pvmw->address,
279 PMD_ORDER) &&
280 (pvmw->nr_pages >= HPAGE_PMD_NR)) {
281 spinlock_t *ptl = pmd_lock(mm, pvmw->pmd);
282
283 spin_unlock(ptl);
284 }
285 step_forward(pvmw, PMD_SIZE);
286 continue;
287 }
288 if (!map_pte(pvmw, &pmde, &ptl)) {
289 if (!pvmw->pte)
290 goto restart;
291 goto next_pte;
292 }
293this_pte:
294 if (check_pte(pvmw))
295 return true;
296next_pte:
297 do {
298 pvmw->address += PAGE_SIZE;
299 if (pvmw->address >= end)
300 return not_found(pvmw);
301 /* Did we cross page table boundary? */
302 if ((pvmw->address & (PMD_SIZE - PAGE_SIZE)) == 0) {
303 if (pvmw->ptl) {
304 spin_unlock(pvmw->ptl);
305 pvmw->ptl = NULL;
306 }
307 pte_unmap(pvmw->pte);
308 pvmw->pte = NULL;
309 goto restart;
310 }
311 pvmw->pte++;
312 } while (pte_none(ptep_get(pvmw->pte)));
313
314 if (!pvmw->ptl) {
315 spin_lock(ptl);
316 if (unlikely(!pmd_same(pmde, pmdp_get_lockless(pvmw->pmd)))) {
317 pte_unmap_unlock(pvmw->pte, ptl);
318 pvmw->pte = NULL;
319 goto restart;
320 }
321 pvmw->ptl = ptl;
322 }
323 goto this_pte;
324 } while (pvmw->address < end);
325
326 return false;
327}
328
329#ifdef CONFIG_MEMORY_FAILURE
330/**
331 * page_mapped_in_vma - check whether a page is really mapped in a VMA
332 * @page: the page to test
333 * @vma: the VMA to test
334 *
335 * Return: The address the page is mapped at if the page is in the range
336 * covered by the VMA and present in the page table. If the page is
337 * outside the VMA or not present, returns -EFAULT.
338 * Only valid for normal file or anonymous VMAs.
339 */
340unsigned long page_mapped_in_vma(const struct page *page,
341 struct vm_area_struct *vma)
342{
343 const struct folio *folio = page_folio(page);
344 struct page_vma_mapped_walk pvmw = {
345 .pfn = page_to_pfn(page),
346 .nr_pages = 1,
347 .vma = vma,
348 .flags = PVMW_SYNC,
349 };
350
351 pvmw.address = vma_address(vma, page_pgoff(folio, page), 1);
352 if (pvmw.address == -EFAULT)
353 goto out;
354 if (!page_vma_mapped_walk(&pvmw))
355 return -EFAULT;
356 page_vma_mapped_walk_done(&pvmw);
357out:
358 return pvmw.address;
359}
360#endif