1 /* SPDX-License-Identifier: GPL-2.0 */
2 /* Copyright(c) 2015 Intel Corporation. All rights reserved. */
3 #include <linux/radix-tree.h>
4 #include <linux/device.h>
5 #include <linux/types.h>
6 #include <linux/pfn_t.h>
8 #include <linux/kasan.h>
10 #include <linux/memory_hotplug.h>
11 #include <linux/swap.h>
12 #include <linux/swapops.h>
13 #include <linux/wait_bit.h>
15 static DEFINE_MUTEX(pgmap_lock
);
16 static RADIX_TREE(pgmap_radix
, GFP_KERNEL
);
17 #define SECTION_MASK ~((1UL << PA_SECTION_SHIFT) - 1)
18 #define SECTION_SIZE (1UL << PA_SECTION_SHIFT)
20 static unsigned long order_at(struct resource
*res
, unsigned long pgoff
)
22 unsigned long phys_pgoff
= PHYS_PFN(res
->start
) + pgoff
;
23 unsigned long nr_pages
, mask
;
25 nr_pages
= PHYS_PFN(resource_size(res
));
26 if (nr_pages
== pgoff
)
30 * What is the largest aligned power-of-2 range available from
31 * this resource pgoff to the end of the resource range,
32 * considering the alignment of the current pgoff?
34 mask
= phys_pgoff
| rounddown_pow_of_two(nr_pages
- pgoff
);
38 return find_first_bit(&mask
, BITS_PER_LONG
);
41 #define foreach_order_pgoff(res, order, pgoff) \
42 for (pgoff = 0, order = order_at((res), pgoff); order < ULONG_MAX; \
43 pgoff += 1UL << order, order = order_at((res), pgoff))
45 #if IS_ENABLED(CONFIG_DEVICE_PRIVATE)
46 vm_fault_t
device_private_entry_fault(struct vm_area_struct
*vma
,
52 struct page
*page
= device_private_entry_to_page(entry
);
55 * The page_fault() callback must migrate page back to system memory
56 * so that CPU can access it. This might fail for various reasons
57 * (device issue, device was unsafely unplugged, ...). When such
58 * error conditions happen, the callback must return VM_FAULT_SIGBUS.
60 * Note that because memory cgroup charges are accounted to the device
61 * memory, this should never fail because of memory restrictions (but
62 * allocation of regular system page might still fail because we are
65 * There is a more in-depth description of what that callback can and
66 * cannot do, in include/linux/memremap.h
68 return page
->pgmap
->page_fault(vma
, addr
, page
, flags
, pmdp
);
70 EXPORT_SYMBOL(device_private_entry_fault
);
71 #endif /* CONFIG_DEVICE_PRIVATE */
73 static void pgmap_radix_release(struct resource
*res
, unsigned long end_pgoff
)
75 unsigned long pgoff
, order
;
77 mutex_lock(&pgmap_lock
);
78 foreach_order_pgoff(res
, order
, pgoff
) {
79 if (pgoff
>= end_pgoff
)
81 radix_tree_delete(&pgmap_radix
, PHYS_PFN(res
->start
) + pgoff
);
83 mutex_unlock(&pgmap_lock
);
88 static unsigned long pfn_first(struct dev_pagemap
*pgmap
)
90 const struct resource
*res
= &pgmap
->res
;
91 struct vmem_altmap
*altmap
= &pgmap
->altmap
;
94 pfn
= res
->start
>> PAGE_SHIFT
;
95 if (pgmap
->altmap_valid
)
96 pfn
+= vmem_altmap_offset(altmap
);
100 static unsigned long pfn_end(struct dev_pagemap
*pgmap
)
102 const struct resource
*res
= &pgmap
->res
;
104 return (res
->start
+ resource_size(res
)) >> PAGE_SHIFT
;
107 static unsigned long pfn_next(unsigned long pfn
)
114 #define for_each_device_pfn(pfn, map) \
115 for (pfn = pfn_first(map); pfn < pfn_end(map); pfn = pfn_next(pfn))
117 static void devm_memremap_pages_release(void *data
)
119 struct dev_pagemap
*pgmap
= data
;
120 struct device
*dev
= pgmap
->dev
;
121 struct resource
*res
= &pgmap
->res
;
122 resource_size_t align_start
, align_size
;
125 for_each_device_pfn(pfn
, pgmap
)
126 put_page(pfn_to_page(pfn
));
128 if (percpu_ref_tryget_live(pgmap
->ref
)) {
129 dev_WARN(dev
, "%s: page mapping is still live!\n", __func__
);
130 percpu_ref_put(pgmap
->ref
);
133 /* pages are dead and unused, undo the arch mapping */
134 align_start
= res
->start
& ~(SECTION_SIZE
- 1);
135 align_size
= ALIGN(res
->start
+ resource_size(res
), SECTION_SIZE
)
139 arch_remove_memory(align_start
, align_size
, pgmap
->altmap_valid
?
140 &pgmap
->altmap
: NULL
);
141 kasan_remove_zero_shadow(__va(align_start
), align_size
);
144 untrack_pfn(NULL
, PHYS_PFN(align_start
), align_size
);
145 pgmap_radix_release(res
, -1);
146 dev_WARN_ONCE(dev
, pgmap
->altmap
.alloc
,
147 "%s: failed to free all reserved pages\n", __func__
);
151 * devm_memremap_pages - remap and provide memmap backing for the given resource
152 * @dev: hosting device for @res
153 * @pgmap: pointer to a struct dev_pgmap
156 * 1/ At a minimum the res, ref and type members of @pgmap must be initialized
157 * by the caller before passing it to this function
159 * 2/ The altmap field may optionally be initialized, in which case altmap_valid
160 * must be set to true
162 * 3/ pgmap.ref must be 'live' on entry and 'dead' before devm_memunmap_pages()
163 * time (or devm release event). The expected order of events is that ref has
164 * been through percpu_ref_kill() before devm_memremap_pages_release(). The
165 * wait for the completion of all references being dropped and
166 * percpu_ref_exit() must occur after devm_memremap_pages_release().
168 * 4/ res is expected to be a host memory range that could feasibly be
169 * treated as a "System RAM" range, i.e. not a device mmio range, but
170 * this is not enforced.
172 void *devm_memremap_pages(struct device
*dev
, struct dev_pagemap
*pgmap
)
174 resource_size_t align_start
, align_size
, align_end
;
175 struct vmem_altmap
*altmap
= pgmap
->altmap_valid
?
176 &pgmap
->altmap
: NULL
;
177 struct resource
*res
= &pgmap
->res
;
178 unsigned long pfn
, pgoff
, order
;
179 pgprot_t pgprot
= PAGE_KERNEL
;
180 int error
, nid
, is_ram
;
181 struct dev_pagemap
*conflict_pgmap
;
183 align_start
= res
->start
& ~(SECTION_SIZE
- 1);
184 align_size
= ALIGN(res
->start
+ resource_size(res
), SECTION_SIZE
)
186 align_end
= align_start
+ align_size
- 1;
188 conflict_pgmap
= get_dev_pagemap(PHYS_PFN(align_start
), NULL
);
189 if (conflict_pgmap
) {
190 dev_WARN(dev
, "Conflicting mapping in same section\n");
191 put_dev_pagemap(conflict_pgmap
);
192 return ERR_PTR(-ENOMEM
);
195 conflict_pgmap
= get_dev_pagemap(PHYS_PFN(align_end
), NULL
);
196 if (conflict_pgmap
) {
197 dev_WARN(dev
, "Conflicting mapping in same section\n");
198 put_dev_pagemap(conflict_pgmap
);
199 return ERR_PTR(-ENOMEM
);
202 is_ram
= region_intersects(align_start
, align_size
,
203 IORESOURCE_SYSTEM_RAM
, IORES_DESC_NONE
);
205 if (is_ram
== REGION_MIXED
) {
206 WARN_ONCE(1, "%s attempted on mixed region %pr\n",
208 return ERR_PTR(-ENXIO
);
211 if (is_ram
== REGION_INTERSECTS
)
212 return __va(res
->start
);
215 return ERR_PTR(-EINVAL
);
219 mutex_lock(&pgmap_lock
);
222 foreach_order_pgoff(res
, order
, pgoff
) {
223 error
= __radix_tree_insert(&pgmap_radix
,
224 PHYS_PFN(res
->start
) + pgoff
, order
, pgmap
);
226 dev_err(dev
, "%s: failed: %d\n", __func__
, error
);
230 mutex_unlock(&pgmap_lock
);
234 nid
= dev_to_node(dev
);
238 error
= track_pfn_remap(NULL
, &pgprot
, PHYS_PFN(align_start
), 0,
244 error
= kasan_add_zero_shadow(__va(align_start
), align_size
);
250 error
= arch_add_memory(nid
, align_start
, align_size
, altmap
, false);
252 move_pfn_range_to_zone(&NODE_DATA(nid
)->node_zones
[ZONE_DEVICE
],
253 align_start
>> PAGE_SHIFT
,
254 align_size
>> PAGE_SHIFT
, altmap
);
259 for_each_device_pfn(pfn
, pgmap
) {
260 struct page
*page
= pfn_to_page(pfn
);
263 * ZONE_DEVICE pages union ->lru with a ->pgmap back
264 * pointer. It is a bug if a ZONE_DEVICE page is ever
265 * freed or placed on a driver-private list. Seed the
266 * storage with LIST_POISON* values.
268 list_del(&page
->lru
);
270 percpu_ref_get(pgmap
->ref
);
273 devm_add_action(dev
, devm_memremap_pages_release
, pgmap
);
275 return __va(res
->start
);
278 kasan_remove_zero_shadow(__va(align_start
), align_size
);
280 untrack_pfn(NULL
, PHYS_PFN(align_start
), align_size
);
283 pgmap_radix_release(res
, pgoff
);
284 return ERR_PTR(error
);
286 EXPORT_SYMBOL(devm_memremap_pages
);
288 unsigned long vmem_altmap_offset(struct vmem_altmap
*altmap
)
290 /* number of pfns from base where pfn_to_page() is valid */
291 return altmap
->reserve
+ altmap
->free
;
294 void vmem_altmap_free(struct vmem_altmap
*altmap
, unsigned long nr_pfns
)
296 altmap
->alloc
-= nr_pfns
;
300 * get_dev_pagemap() - take a new live reference on the dev_pagemap for @pfn
301 * @pfn: page frame number to lookup page_map
302 * @pgmap: optional known pgmap that already has a reference
304 * If @pgmap is non-NULL and covers @pfn it will be returned as-is. If @pgmap
305 * is non-NULL but does not cover @pfn the reference to it will be released.
307 struct dev_pagemap
*get_dev_pagemap(unsigned long pfn
,
308 struct dev_pagemap
*pgmap
)
310 resource_size_t phys
= PFN_PHYS(pfn
);
313 * In the cached case we're already holding a live reference.
316 if (phys
>= pgmap
->res
.start
&& phys
<= pgmap
->res
.end
)
318 put_dev_pagemap(pgmap
);
321 /* fall back to slow path lookup */
323 pgmap
= radix_tree_lookup(&pgmap_radix
, PHYS_PFN(phys
));
324 if (pgmap
&& !percpu_ref_tryget_live(pgmap
->ref
))
330 EXPORT_SYMBOL_GPL(get_dev_pagemap
);
332 #ifdef CONFIG_DEV_PAGEMAP_OPS
333 DEFINE_STATIC_KEY_FALSE(devmap_managed_key
);
334 EXPORT_SYMBOL(devmap_managed_key
);
335 static atomic_t devmap_enable
;
338 * Toggle the static key for ->page_free() callbacks when dev_pagemap
341 void dev_pagemap_get_ops(void)
343 if (atomic_inc_return(&devmap_enable
) == 1)
344 static_branch_enable(&devmap_managed_key
);
346 EXPORT_SYMBOL_GPL(dev_pagemap_get_ops
);
348 void dev_pagemap_put_ops(void)
350 if (atomic_dec_and_test(&devmap_enable
))
351 static_branch_disable(&devmap_managed_key
);
353 EXPORT_SYMBOL_GPL(dev_pagemap_put_ops
);
355 void __put_devmap_managed_page(struct page
*page
)
357 int count
= page_ref_dec_return(page
);
360 * If refcount is 1 then page is freed and refcount is stable as nobody
361 * holds a reference on the page.
364 /* Clear Active bit in case of parallel mark_page_accessed */
365 __ClearPageActive(page
);
366 __ClearPageWaiters(page
);
368 mem_cgroup_uncharge(page
);
370 page
->pgmap
->page_free(page
, page
->pgmap
->data
);
374 EXPORT_SYMBOL(__put_devmap_managed_page
);
375 #endif /* CONFIG_DEV_PAGEMAP_OPS */