Loading...
1// SPDX-License-Identifier: GPL-2.0
2#include <linux/mm.h>
3#include <linux/rmap.h>
4#include <linux/hugetlb.h>
5#include <linux/swap.h>
6#include <linux/swapops.h>
7
8#include "internal.h"
9
10static inline bool not_found(struct page_vma_mapped_walk *pvmw)
11{
12 page_vma_mapped_walk_done(pvmw);
13 return false;
14}
15
16static bool map_pte(struct page_vma_mapped_walk *pvmw)
17{
18 pvmw->pte = pte_offset_map(pvmw->pmd, pvmw->address);
19 if (!(pvmw->flags & PVMW_SYNC)) {
20 if (pvmw->flags & PVMW_MIGRATION) {
21 if (!is_swap_pte(*pvmw->pte))
22 return false;
23 } else {
24 /*
25 * We get here when we are trying to unmap a private
26 * device page from the process address space. Such
27 * page is not CPU accessible and thus is mapped as
28 * a special swap entry, nonetheless it still does
29 * count as a valid regular mapping for the page (and
30 * is accounted as such in page maps count).
31 *
32 * So handle this special case as if it was a normal
33 * page mapping ie lock CPU page table and returns
34 * true.
35 *
36 * For more details on device private memory see HMM
37 * (include/linux/hmm.h or mm/hmm.c).
38 */
39 if (is_swap_pte(*pvmw->pte)) {
40 swp_entry_t entry;
41
42 /* Handle un-addressable ZONE_DEVICE memory */
43 entry = pte_to_swp_entry(*pvmw->pte);
44 if (!is_device_private_entry(entry))
45 return false;
46 } else if (!pte_present(*pvmw->pte))
47 return false;
48 }
49 }
50 pvmw->ptl = pte_lockptr(pvmw->vma->vm_mm, pvmw->pmd);
51 spin_lock(pvmw->ptl);
52 return true;
53}
54
55static inline bool pfn_in_hpage(struct page *hpage, unsigned long pfn)
56{
57 unsigned long hpage_pfn = page_to_pfn(hpage);
58
59 /* THP can be referenced by any subpage */
60 return pfn >= hpage_pfn && pfn - hpage_pfn < hpage_nr_pages(hpage);
61}
62
63/**
64 * check_pte - check if @pvmw->page is mapped at the @pvmw->pte
65 *
66 * page_vma_mapped_walk() found a place where @pvmw->page is *potentially*
67 * mapped. check_pte() has to validate this.
68 *
69 * @pvmw->pte may point to empty PTE, swap PTE or PTE pointing to arbitrary
70 * page.
71 *
72 * If PVMW_MIGRATION flag is set, returns true if @pvmw->pte contains migration
73 * entry that points to @pvmw->page or any subpage in case of THP.
74 *
75 * If PVMW_MIGRATION flag is not set, returns true if @pvmw->pte points to
76 * @pvmw->page or any subpage in case of THP.
77 *
78 * Otherwise, return false.
79 *
80 */
81static bool check_pte(struct page_vma_mapped_walk *pvmw)
82{
83 unsigned long pfn;
84
85 if (pvmw->flags & PVMW_MIGRATION) {
86 swp_entry_t entry;
87 if (!is_swap_pte(*pvmw->pte))
88 return false;
89 entry = pte_to_swp_entry(*pvmw->pte);
90
91 if (!is_migration_entry(entry))
92 return false;
93
94 pfn = migration_entry_to_pfn(entry);
95 } else if (is_swap_pte(*pvmw->pte)) {
96 swp_entry_t entry;
97
98 /* Handle un-addressable ZONE_DEVICE memory */
99 entry = pte_to_swp_entry(*pvmw->pte);
100 if (!is_device_private_entry(entry))
101 return false;
102
103 pfn = device_private_entry_to_pfn(entry);
104 } else {
105 if (!pte_present(*pvmw->pte))
106 return false;
107
108 pfn = pte_pfn(*pvmw->pte);
109 }
110
111 return pfn_in_hpage(pvmw->page, pfn);
112}
113
114/**
115 * page_vma_mapped_walk - check if @pvmw->page is mapped in @pvmw->vma at
116 * @pvmw->address
117 * @pvmw: pointer to struct page_vma_mapped_walk. page, vma, address and flags
118 * must be set. pmd, pte and ptl must be NULL.
119 *
120 * Returns true if the page is mapped in the vma. @pvmw->pmd and @pvmw->pte point
121 * to relevant page table entries. @pvmw->ptl is locked. @pvmw->address is
122 * adjusted if needed (for PTE-mapped THPs).
123 *
124 * If @pvmw->pmd is set but @pvmw->pte is not, you have found PMD-mapped page
125 * (usually THP). For PTE-mapped THP, you should run page_vma_mapped_walk() in
126 * a loop to find all PTEs that map the THP.
127 *
128 * For HugeTLB pages, @pvmw->pte is set to the relevant page table entry
129 * regardless of which page table level the page is mapped at. @pvmw->pmd is
130 * NULL.
131 *
132 * Retruns false if there are no more page table entries for the page in
133 * the vma. @pvmw->ptl is unlocked and @pvmw->pte is unmapped.
134 *
135 * If you need to stop the walk before page_vma_mapped_walk() returned false,
136 * use page_vma_mapped_walk_done(). It will do the housekeeping.
137 */
138bool page_vma_mapped_walk(struct page_vma_mapped_walk *pvmw)
139{
140 struct mm_struct *mm = pvmw->vma->vm_mm;
141 struct page *page = pvmw->page;
142 pgd_t *pgd;
143 p4d_t *p4d;
144 pud_t *pud;
145 pmd_t pmde;
146
147 /* The only possible pmd mapping has been handled on last iteration */
148 if (pvmw->pmd && !pvmw->pte)
149 return not_found(pvmw);
150
151 if (pvmw->pte)
152 goto next_pte;
153
154 if (unlikely(PageHuge(pvmw->page))) {
155 /* when pud is not present, pte will be NULL */
156 pvmw->pte = huge_pte_offset(mm, pvmw->address, page_size(page));
157 if (!pvmw->pte)
158 return false;
159
160 pvmw->ptl = huge_pte_lockptr(page_hstate(page), mm, pvmw->pte);
161 spin_lock(pvmw->ptl);
162 if (!check_pte(pvmw))
163 return not_found(pvmw);
164 return true;
165 }
166restart:
167 pgd = pgd_offset(mm, pvmw->address);
168 if (!pgd_present(*pgd))
169 return false;
170 p4d = p4d_offset(pgd, pvmw->address);
171 if (!p4d_present(*p4d))
172 return false;
173 pud = pud_offset(p4d, pvmw->address);
174 if (!pud_present(*pud))
175 return false;
176 pvmw->pmd = pmd_offset(pud, pvmw->address);
177 /*
178 * Make sure the pmd value isn't cached in a register by the
179 * compiler and used as a stale value after we've observed a
180 * subsequent update.
181 */
182 pmde = READ_ONCE(*pvmw->pmd);
183 if (pmd_trans_huge(pmde) || is_pmd_migration_entry(pmde)) {
184 pvmw->ptl = pmd_lock(mm, pvmw->pmd);
185 if (likely(pmd_trans_huge(*pvmw->pmd))) {
186 if (pvmw->flags & PVMW_MIGRATION)
187 return not_found(pvmw);
188 if (pmd_page(*pvmw->pmd) != page)
189 return not_found(pvmw);
190 return true;
191 } else if (!pmd_present(*pvmw->pmd)) {
192 if (thp_migration_supported()) {
193 if (!(pvmw->flags & PVMW_MIGRATION))
194 return not_found(pvmw);
195 if (is_migration_entry(pmd_to_swp_entry(*pvmw->pmd))) {
196 swp_entry_t entry = pmd_to_swp_entry(*pvmw->pmd);
197
198 if (migration_entry_to_page(entry) != page)
199 return not_found(pvmw);
200 return true;
201 }
202 }
203 return not_found(pvmw);
204 } else {
205 /* THP pmd was split under us: handle on pte level */
206 spin_unlock(pvmw->ptl);
207 pvmw->ptl = NULL;
208 }
209 } else if (!pmd_present(pmde)) {
210 return false;
211 }
212 if (!map_pte(pvmw))
213 goto next_pte;
214 while (1) {
215 if (check_pte(pvmw))
216 return true;
217next_pte:
218 /* Seek to next pte only makes sense for THP */
219 if (!PageTransHuge(pvmw->page) || PageHuge(pvmw->page))
220 return not_found(pvmw);
221 do {
222 pvmw->address += PAGE_SIZE;
223 if (pvmw->address >= pvmw->vma->vm_end ||
224 pvmw->address >=
225 __vma_address(pvmw->page, pvmw->vma) +
226 hpage_nr_pages(pvmw->page) * PAGE_SIZE)
227 return not_found(pvmw);
228 /* Did we cross page table boundary? */
229 if (pvmw->address % PMD_SIZE == 0) {
230 pte_unmap(pvmw->pte);
231 if (pvmw->ptl) {
232 spin_unlock(pvmw->ptl);
233 pvmw->ptl = NULL;
234 }
235 goto restart;
236 } else {
237 pvmw->pte++;
238 }
239 } while (pte_none(*pvmw->pte));
240
241 if (!pvmw->ptl) {
242 pvmw->ptl = pte_lockptr(mm, pvmw->pmd);
243 spin_lock(pvmw->ptl);
244 }
245 }
246}
247
248/**
249 * page_mapped_in_vma - check whether a page is really mapped in a VMA
250 * @page: the page to test
251 * @vma: the VMA to test
252 *
253 * Returns 1 if the page is mapped into the page tables of the VMA, 0
254 * if the page is not mapped into the page tables of this VMA. Only
255 * valid for normal file or anonymous VMAs.
256 */
257int page_mapped_in_vma(struct page *page, struct vm_area_struct *vma)
258{
259 struct page_vma_mapped_walk pvmw = {
260 .page = page,
261 .vma = vma,
262 .flags = PVMW_SYNC,
263 };
264 unsigned long start, end;
265
266 start = __vma_address(page, vma);
267 end = start + PAGE_SIZE * (hpage_nr_pages(page) - 1);
268
269 if (unlikely(end < vma->vm_start || start >= vma->vm_end))
270 return 0;
271 pvmw.address = max(start, vma->vm_start);
272 if (!page_vma_mapped_walk(&pvmw))
273 return 0;
274 page_vma_mapped_walk_done(&pvmw);
275 return 1;
276}
1// SPDX-License-Identifier: GPL-2.0
2#include <linux/mm.h>
3#include <linux/rmap.h>
4#include <linux/hugetlb.h>
5#include <linux/swap.h>
6#include <linux/swapops.h>
7
8#include "internal.h"
9
10static inline bool not_found(struct page_vma_mapped_walk *pvmw)
11{
12 page_vma_mapped_walk_done(pvmw);
13 return false;
14}
15
16static bool map_pte(struct page_vma_mapped_walk *pvmw, spinlock_t **ptlp)
17{
18 pte_t ptent;
19
20 if (pvmw->flags & PVMW_SYNC) {
21 /* Use the stricter lookup */
22 pvmw->pte = pte_offset_map_lock(pvmw->vma->vm_mm, pvmw->pmd,
23 pvmw->address, &pvmw->ptl);
24 *ptlp = pvmw->ptl;
25 return !!pvmw->pte;
26 }
27
28 /*
29 * It is important to return the ptl corresponding to pte,
30 * in case *pvmw->pmd changes underneath us; so we need to
31 * return it even when choosing not to lock, in case caller
32 * proceeds to loop over next ptes, and finds a match later.
33 * Though, in most cases, page lock already protects this.
34 */
35 pvmw->pte = pte_offset_map_nolock(pvmw->vma->vm_mm, pvmw->pmd,
36 pvmw->address, ptlp);
37 if (!pvmw->pte)
38 return false;
39
40 ptent = ptep_get(pvmw->pte);
41
42 if (pvmw->flags & PVMW_MIGRATION) {
43 if (!is_swap_pte(ptent))
44 return false;
45 } else if (is_swap_pte(ptent)) {
46 swp_entry_t entry;
47 /*
48 * Handle un-addressable ZONE_DEVICE memory.
49 *
50 * We get here when we are trying to unmap a private
51 * device page from the process address space. Such
52 * page is not CPU accessible and thus is mapped as
53 * a special swap entry, nonetheless it still does
54 * count as a valid regular mapping for the page
55 * (and is accounted as such in page maps count).
56 *
57 * So handle this special case as if it was a normal
58 * page mapping ie lock CPU page table and return true.
59 *
60 * For more details on device private memory see HMM
61 * (include/linux/hmm.h or mm/hmm.c).
62 */
63 entry = pte_to_swp_entry(ptent);
64 if (!is_device_private_entry(entry) &&
65 !is_device_exclusive_entry(entry))
66 return false;
67 } else if (!pte_present(ptent)) {
68 return false;
69 }
70 pvmw->ptl = *ptlp;
71 spin_lock(pvmw->ptl);
72 return true;
73}
74
75/**
76 * check_pte - check if [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages) is
77 * mapped at the @pvmw->pte
78 * @pvmw: page_vma_mapped_walk struct, includes a pair pte and pfn range
79 * for checking
80 *
81 * page_vma_mapped_walk() found a place where pfn range is *potentially*
82 * mapped. check_pte() has to validate this.
83 *
84 * pvmw->pte may point to empty PTE, swap PTE or PTE pointing to
85 * arbitrary page.
86 *
87 * If PVMW_MIGRATION flag is set, returns true if @pvmw->pte contains migration
88 * entry that points to [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages)
89 *
90 * If PVMW_MIGRATION flag is not set, returns true if pvmw->pte points to
91 * [pvmw->pfn, @pvmw->pfn + @pvmw->nr_pages)
92 *
93 * Otherwise, return false.
94 *
95 */
96static bool check_pte(struct page_vma_mapped_walk *pvmw)
97{
98 unsigned long pfn;
99 pte_t ptent = ptep_get(pvmw->pte);
100
101 if (pvmw->flags & PVMW_MIGRATION) {
102 swp_entry_t entry;
103 if (!is_swap_pte(ptent))
104 return false;
105 entry = pte_to_swp_entry(ptent);
106
107 if (!is_migration_entry(entry) &&
108 !is_device_exclusive_entry(entry))
109 return false;
110
111 pfn = swp_offset_pfn(entry);
112 } else if (is_swap_pte(ptent)) {
113 swp_entry_t entry;
114
115 /* Handle un-addressable ZONE_DEVICE memory */
116 entry = pte_to_swp_entry(ptent);
117 if (!is_device_private_entry(entry) &&
118 !is_device_exclusive_entry(entry))
119 return false;
120
121 pfn = swp_offset_pfn(entry);
122 } else {
123 if (!pte_present(ptent))
124 return false;
125
126 pfn = pte_pfn(ptent);
127 }
128
129 return (pfn - pvmw->pfn) < pvmw->nr_pages;
130}
131
132/* Returns true if the two ranges overlap. Careful to not overflow. */
133static bool check_pmd(unsigned long pfn, struct page_vma_mapped_walk *pvmw)
134{
135 if ((pfn + HPAGE_PMD_NR - 1) < pvmw->pfn)
136 return false;
137 if (pfn > pvmw->pfn + pvmw->nr_pages - 1)
138 return false;
139 return true;
140}
141
142static void step_forward(struct page_vma_mapped_walk *pvmw, unsigned long size)
143{
144 pvmw->address = (pvmw->address + size) & ~(size - 1);
145 if (!pvmw->address)
146 pvmw->address = ULONG_MAX;
147}
148
149/**
150 * page_vma_mapped_walk - check if @pvmw->pfn is mapped in @pvmw->vma at
151 * @pvmw->address
152 * @pvmw: pointer to struct page_vma_mapped_walk. page, vma, address and flags
153 * must be set. pmd, pte and ptl must be NULL.
154 *
155 * Returns true if the page is mapped in the vma. @pvmw->pmd and @pvmw->pte point
156 * to relevant page table entries. @pvmw->ptl is locked. @pvmw->address is
157 * adjusted if needed (for PTE-mapped THPs).
158 *
159 * If @pvmw->pmd is set but @pvmw->pte is not, you have found PMD-mapped page
160 * (usually THP). For PTE-mapped THP, you should run page_vma_mapped_walk() in
161 * a loop to find all PTEs that map the THP.
162 *
163 * For HugeTLB pages, @pvmw->pte is set to the relevant page table entry
164 * regardless of which page table level the page is mapped at. @pvmw->pmd is
165 * NULL.
166 *
167 * Returns false if there are no more page table entries for the page in
168 * the vma. @pvmw->ptl is unlocked and @pvmw->pte is unmapped.
169 *
170 * If you need to stop the walk before page_vma_mapped_walk() returned false,
171 * use page_vma_mapped_walk_done(). It will do the housekeeping.
172 */
173bool page_vma_mapped_walk(struct page_vma_mapped_walk *pvmw)
174{
175 struct vm_area_struct *vma = pvmw->vma;
176 struct mm_struct *mm = vma->vm_mm;
177 unsigned long end;
178 spinlock_t *ptl;
179 pgd_t *pgd;
180 p4d_t *p4d;
181 pud_t *pud;
182 pmd_t pmde;
183
184 /* The only possible pmd mapping has been handled on last iteration */
185 if (pvmw->pmd && !pvmw->pte)
186 return not_found(pvmw);
187
188 if (unlikely(is_vm_hugetlb_page(vma))) {
189 struct hstate *hstate = hstate_vma(vma);
190 unsigned long size = huge_page_size(hstate);
191 /* The only possible mapping was handled on last iteration */
192 if (pvmw->pte)
193 return not_found(pvmw);
194 /*
195 * All callers that get here will already hold the
196 * i_mmap_rwsem. Therefore, no additional locks need to be
197 * taken before calling hugetlb_walk().
198 */
199 pvmw->pte = hugetlb_walk(vma, pvmw->address, size);
200 if (!pvmw->pte)
201 return false;
202
203 pvmw->ptl = huge_pte_lock(hstate, mm, pvmw->pte);
204 if (!check_pte(pvmw))
205 return not_found(pvmw);
206 return true;
207 }
208
209 end = vma_address_end(pvmw);
210 if (pvmw->pte)
211 goto next_pte;
212restart:
213 do {
214 pgd = pgd_offset(mm, pvmw->address);
215 if (!pgd_present(*pgd)) {
216 step_forward(pvmw, PGDIR_SIZE);
217 continue;
218 }
219 p4d = p4d_offset(pgd, pvmw->address);
220 if (!p4d_present(*p4d)) {
221 step_forward(pvmw, P4D_SIZE);
222 continue;
223 }
224 pud = pud_offset(p4d, pvmw->address);
225 if (!pud_present(*pud)) {
226 step_forward(pvmw, PUD_SIZE);
227 continue;
228 }
229
230 pvmw->pmd = pmd_offset(pud, pvmw->address);
231 /*
232 * Make sure the pmd value isn't cached in a register by the
233 * compiler and used as a stale value after we've observed a
234 * subsequent update.
235 */
236 pmde = pmdp_get_lockless(pvmw->pmd);
237
238 if (pmd_trans_huge(pmde) || is_pmd_migration_entry(pmde) ||
239 (pmd_present(pmde) && pmd_devmap(pmde))) {
240 pvmw->ptl = pmd_lock(mm, pvmw->pmd);
241 pmde = *pvmw->pmd;
242 if (!pmd_present(pmde)) {
243 swp_entry_t entry;
244
245 if (!thp_migration_supported() ||
246 !(pvmw->flags & PVMW_MIGRATION))
247 return not_found(pvmw);
248 entry = pmd_to_swp_entry(pmde);
249 if (!is_migration_entry(entry) ||
250 !check_pmd(swp_offset_pfn(entry), pvmw))
251 return not_found(pvmw);
252 return true;
253 }
254 if (likely(pmd_trans_huge(pmde) || pmd_devmap(pmde))) {
255 if (pvmw->flags & PVMW_MIGRATION)
256 return not_found(pvmw);
257 if (!check_pmd(pmd_pfn(pmde), pvmw))
258 return not_found(pvmw);
259 return true;
260 }
261 /* THP pmd was split under us: handle on pte level */
262 spin_unlock(pvmw->ptl);
263 pvmw->ptl = NULL;
264 } else if (!pmd_present(pmde)) {
265 /*
266 * If PVMW_SYNC, take and drop THP pmd lock so that we
267 * cannot return prematurely, while zap_huge_pmd() has
268 * cleared *pmd but not decremented compound_mapcount().
269 */
270 if ((pvmw->flags & PVMW_SYNC) &&
271 thp_vma_suitable_order(vma, pvmw->address,
272 PMD_ORDER) &&
273 (pvmw->nr_pages >= HPAGE_PMD_NR)) {
274 spinlock_t *ptl = pmd_lock(mm, pvmw->pmd);
275
276 spin_unlock(ptl);
277 }
278 step_forward(pvmw, PMD_SIZE);
279 continue;
280 }
281 if (!map_pte(pvmw, &ptl)) {
282 if (!pvmw->pte)
283 goto restart;
284 goto next_pte;
285 }
286this_pte:
287 if (check_pte(pvmw))
288 return true;
289next_pte:
290 do {
291 pvmw->address += PAGE_SIZE;
292 if (pvmw->address >= end)
293 return not_found(pvmw);
294 /* Did we cross page table boundary? */
295 if ((pvmw->address & (PMD_SIZE - PAGE_SIZE)) == 0) {
296 if (pvmw->ptl) {
297 spin_unlock(pvmw->ptl);
298 pvmw->ptl = NULL;
299 }
300 pte_unmap(pvmw->pte);
301 pvmw->pte = NULL;
302 goto restart;
303 }
304 pvmw->pte++;
305 } while (pte_none(ptep_get(pvmw->pte)));
306
307 if (!pvmw->ptl) {
308 pvmw->ptl = ptl;
309 spin_lock(pvmw->ptl);
310 }
311 goto this_pte;
312 } while (pvmw->address < end);
313
314 return false;
315}
316
317/**
318 * page_mapped_in_vma - check whether a page is really mapped in a VMA
319 * @page: the page to test
320 * @vma: the VMA to test
321 *
322 * Returns 1 if the page is mapped into the page tables of the VMA, 0
323 * if the page is not mapped into the page tables of this VMA. Only
324 * valid for normal file or anonymous VMAs.
325 */
326int page_mapped_in_vma(struct page *page, struct vm_area_struct *vma)
327{
328 struct page_vma_mapped_walk pvmw = {
329 .pfn = page_to_pfn(page),
330 .nr_pages = 1,
331 .vma = vma,
332 .flags = PVMW_SYNC,
333 };
334
335 pvmw.address = vma_address(page, vma);
336 if (pvmw.address == -EFAULT)
337 return 0;
338 if (!page_vma_mapped_walk(&pvmw))
339 return 0;
340 page_vma_mapped_walk_done(&pvmw);
341 return 1;
342}