[mirror_ubuntu-jammy-kernel.git] / mm / memremap.c

// SPDX-License-Identifier: GPL-2.0
/* Copyright(c) 2015 Intel Corporation. All rights reserved. */
#include <linux/device.h>
#include <linux/io.h>
#include <linux/kasan.h>
#include <linux/memory_hotplug.h>
#include <linux/mm.h>
#include <linux/pfn_t.h>
#include <linux/swap.h>
#include <linux/mmzone.h>
#include <linux/swapops.h>
#include <linux/types.h>
#include <linux/wait_bit.h>
#include <linux/xarray.h>

static DEFINE_XARRAY(pgmap_array);

/*
 * The memremap() and memremap_pages() interfaces are alternately used
 * to map persistent memory namespaces. These interfaces place different
 * constraints on the alignment and size of the mapping (namespace).
 * memremap() can map individual PAGE_SIZE pages. memremap_pages() can
 * only map subsections (2MB), and at least one architecture (PowerPC)
 * the minimum mapping granularity of memremap_pages() is 16MB.
 *
 * The role of memremap_compat_align() is to communicate the minimum
 * arch supported alignment of a namespace such that it can freely
 * switch modes without violating the arch constraint. Namely, do not
 * allow a namespace to be PAGE_SIZE aligned since that namespace may be
 * reconfigured into a mode that requires SUBSECTION_SIZE alignment.
 */
#ifndef CONFIG_ARCH_HAS_MEMREMAP_COMPAT_ALIGN
unsigned long memremap_compat_align(void)
{
	return SUBSECTION_SIZE;
}
EXPORT_SYMBOL_GPL(memremap_compat_align);
#endif

#ifdef CONFIG_DEV_PAGEMAP_OPS
DEFINE_STATIC_KEY_FALSE(devmap_managed_key);
EXPORT_SYMBOL(devmap_managed_key);

static void devmap_managed_enable_put(struct dev_pagemap *pgmap)
{
	if (pgmap->type == MEMORY_DEVICE_PRIVATE ||
	    pgmap->type == MEMORY_DEVICE_FS_DAX)
		static_branch_dec(&devmap_managed_key);
}

static void devmap_managed_enable_get(struct dev_pagemap *pgmap)
{
	if (pgmap->type == MEMORY_DEVICE_PRIVATE ||
	    pgmap->type == MEMORY_DEVICE_FS_DAX)
		static_branch_inc(&devmap_managed_key);
}
#else
static void devmap_managed_enable_get(struct dev_pagemap *pgmap)
{
}
static void devmap_managed_enable_put(struct dev_pagemap *pgmap)
{
}
#endif /* CONFIG_DEV_PAGEMAP_OPS */

static void pgmap_array_delete(struct range *range)
{
	xa_store_range(&pgmap_array, PHYS_PFN(range->start), PHYS_PFN(range->end),
			NULL, GFP_KERNEL);
	synchronize_rcu();
}

static unsigned long pfn_first(struct dev_pagemap *pgmap, int range_id)
{
	struct range *range = &pgmap->ranges[range_id];
	unsigned long pfn = PHYS_PFN(range->start);

	if (range_id)
		return pfn;
	return pfn + vmem_altmap_offset(pgmap_altmap(pgmap));
}

bool pgmap_pfn_valid(struct dev_pagemap *pgmap, unsigned long pfn)
{
	int i;

	for (i = 0; i < pgmap->nr_range; i++) {
		struct range *range = &pgmap->ranges[i];

		if (pfn >= PHYS_PFN(range->start) &&
		    pfn <= PHYS_PFN(range->end))
			return pfn >= pfn_first(pgmap, i);
	}

	return false;
}

static unsigned long pfn_end(struct dev_pagemap *pgmap, int range_id)
{
	const struct range *range = &pgmap->ranges[range_id];

	return (range->start + range_len(range)) >> PAGE_SHIFT;
}

static unsigned long pfn_next(unsigned long pfn)
{
	if (pfn % 1024 == 0)
		cond_resched();
	return pfn + 1;
}

#define for_each_device_pfn(pfn, map, i) \
	for (pfn = pfn_first(map, i); pfn < pfn_end(map, i); pfn = pfn_next(pfn))

static void dev_pagemap_kill(struct dev_pagemap *pgmap)
{
	if (pgmap->ops && pgmap->ops->kill)
		pgmap->ops->kill(pgmap);
	else
		percpu_ref_kill(pgmap->ref);
}

static void dev_pagemap_cleanup(struct dev_pagemap *pgmap)
{
	if (pgmap->ops && pgmap->ops->cleanup) {
		pgmap->ops->cleanup(pgmap);
	} else {
		wait_for_completion(&pgmap->done);
		percpu_ref_exit(pgmap->ref);
	}
	/*
	 * Undo the pgmap ref assignment for the internal case as the
	 * caller may re-enable the same pgmap.
	 */
	if (pgmap->ref == &pgmap->internal_ref)
		pgmap->ref = NULL;
}

static void pageunmap_range(struct dev_pagemap *pgmap, int range_id)
{
	struct range *range = &pgmap->ranges[range_id];
	struct page *first_page;

	/* make sure to access a memmap that was actually initialized */
	first_page = pfn_to_page(pfn_first(pgmap, range_id));

	/* pages are dead and unused, undo the arch mapping */
	mem_hotplug_begin();
	remove_pfn_range_from_zone(page_zone(first_page), PHYS_PFN(range->start),
				   PHYS_PFN(range_len(range)));
	if (pgmap->type == MEMORY_DEVICE_PRIVATE) {
		__remove_pages(PHYS_PFN(range->start),
			       PHYS_PFN(range_len(range)), NULL);
	} else {
		arch_remove_memory(range->start, range_len(range),
				pgmap_altmap(pgmap));
		kasan_remove_zero_shadow(__va(range->start), range_len(range));
	}
	mem_hotplug_done();

	untrack_pfn(NULL, PHYS_PFN(range->start), range_len(range));
	pgmap_array_delete(range);
}

void memunmap_pages(struct dev_pagemap *pgmap)
{
	unsigned long pfn;
	int i;

	dev_pagemap_kill(pgmap);
	for (i = 0; i < pgmap->nr_range; i++)
		for_each_device_pfn(pfn, pgmap, i)
			put_page(pfn_to_page(pfn));
	dev_pagemap_cleanup(pgmap);

	for (i = 0; i < pgmap->nr_range; i++)
		pageunmap_range(pgmap, i);

	WARN_ONCE(pgmap->altmap.alloc, "failed to free all reserved pages\n");
	devmap_managed_enable_put(pgmap);
}
EXPORT_SYMBOL_GPL(memunmap_pages);

static void devm_memremap_pages_release(void *data)
{
	memunmap_pages(data);
}

static void dev_pagemap_percpu_release(struct percpu_ref *ref)
{
	struct dev_pagemap *pgmap =
		container_of(ref, struct dev_pagemap, internal_ref);

	complete(&pgmap->done);
}

static int pagemap_range(struct dev_pagemap *pgmap, struct mhp_params *params,
		int range_id, int nid)
{
	const bool is_private = pgmap->type == MEMORY_DEVICE_PRIVATE;
	struct range *range = &pgmap->ranges[range_id];
	struct dev_pagemap *conflict_pgmap;
	int error, is_ram;

	if (WARN_ONCE(pgmap_altmap(pgmap) && range_id > 0,
				"altmap not supported for multiple ranges\n"))
		return -EINVAL;

	conflict_pgmap = get_dev_pagemap(PHYS_PFN(range->start), NULL);
	if (conflict_pgmap) {
		WARN(1, "Conflicting mapping in same section\n");
		put_dev_pagemap(conflict_pgmap);
		return -ENOMEM;
	}

	conflict_pgmap = get_dev_pagemap(PHYS_PFN(range->end), NULL);
	if (conflict_pgmap) {
		WARN(1, "Conflicting mapping in same section\n");
		put_dev_pagemap(conflict_pgmap);
		return -ENOMEM;
	}

	is_ram = region_intersects(range->start, range_len(range),
		IORESOURCE_SYSTEM_RAM, IORES_DESC_NONE);

	if (is_ram != REGION_DISJOINT) {
		WARN_ONCE(1, "attempted on %s region %#llx-%#llx\n",
				is_ram == REGION_MIXED ? "mixed" : "ram",
				range->start, range->end);
		return -ENXIO;
	}

	error = xa_err(xa_store_range(&pgmap_array, PHYS_PFN(range->start),
				PHYS_PFN(range->end), pgmap, GFP_KERNEL));
	if (error)
		return error;

	if (nid < 0)
		nid = numa_mem_id();

	error = track_pfn_remap(NULL, &params->pgprot, PHYS_PFN(range->start), 0,
			range_len(range));
	if (error)
		goto err_pfn_remap;

	if (!mhp_range_allowed(range->start, range_len(range), !is_private)) {
		error = -EINVAL;
		goto err_pfn_remap;
	}

	mem_hotplug_begin();

	/*
	 * For device private memory we call add_pages() as we only need to
	 * allocate and initialize struct page for the device memory. More-
	 * over the device memory is un-accessible thus we do not want to
	 * create a linear mapping for the memory like arch_add_memory()
	 * would do.
	 *
	 * For all other device memory types, which are accessible by
	 * the CPU, we do want the linear mapping and thus use
	 * arch_add_memory().
	 */
	if (is_private) {
		error = add_pages(nid, PHYS_PFN(range->start),
				PHYS_PFN(range_len(range)), params);
	} else {
		error = kasan_add_zero_shadow(__va(range->start), range_len(range));
		if (error) {
			mem_hotplug_done();
			goto err_kasan;
		}

		error = arch_add_memory(nid, range->start, range_len(range),
					params);
	}

	if (!error) {
		struct zone *zone;

		zone = &NODE_DATA(nid)->node_zones[ZONE_DEVICE];
		move_pfn_range_to_zone(zone, PHYS_PFN(range->start),
				PHYS_PFN(range_len(range)), params->altmap,
				MIGRATE_MOVABLE);
	}

	mem_hotplug_done();
	if (error)
		goto err_add_memory;

	/*
	 * Initialization of the pages has been deferred until now in order
	 * to allow us to do the work while not holding the hotplug lock.
	 */
	memmap_init_zone_device(&NODE_DATA(nid)->node_zones[ZONE_DEVICE],
				PHYS_PFN(range->start),
				PHYS_PFN(range_len(range)), pgmap);
	percpu_ref_get_many(pgmap->ref, pfn_end(pgmap, range_id)
			- pfn_first(pgmap, range_id));
	return 0;

err_add_memory:
	kasan_remove_zero_shadow(__va(range->start), range_len(range));
err_kasan:
	untrack_pfn(NULL, PHYS_PFN(range->start), range_len(range));
err_pfn_remap:
	pgmap_array_delete(range);
	return error;
}


/*
 * Not device managed version of dev_memremap_pages, undone by
 * memunmap_pages().  Please use dev_memremap_pages if you have a struct
 * device available.
 */
void *memremap_pages(struct dev_pagemap *pgmap, int nid)
{
	struct mhp_params params = {
		.altmap = pgmap_altmap(pgmap),
		.pgprot = PAGE_KERNEL,
	};
	const int nr_range = pgmap->nr_range;
	int error, i;

	if (WARN_ONCE(!nr_range, "nr_range must be specified\n"))
		return ERR_PTR(-EINVAL);

	switch (pgmap->type) {
	case MEMORY_DEVICE_PRIVATE:
		if (!IS_ENABLED(CONFIG_DEVICE_PRIVATE)) {
			WARN(1, "Device private memory not supported\n");
			return ERR_PTR(-EINVAL);
		}
		if (!pgmap->ops || !pgmap->ops->migrate_to_ram) {
			WARN(1, "Missing migrate_to_ram method\n");
			return ERR_PTR(-EINVAL);
		}
		if (!pgmap->ops->page_free) {
			WARN(1, "Missing page_free method\n");
			return ERR_PTR(-EINVAL);
		}
		if (!pgmap->owner) {
			WARN(1, "Missing owner\n");
			return ERR_PTR(-EINVAL);
		}
		break;
	case MEMORY_DEVICE_FS_DAX:
		if (!IS_ENABLED(CONFIG_ZONE_DEVICE) ||
		    IS_ENABLED(CONFIG_FS_DAX_LIMITED)) {
			WARN(1, "File system DAX not supported\n");
			return ERR_PTR(-EINVAL);
		}
		break;
	case MEMORY_DEVICE_GENERIC:
		break;
	case MEMORY_DEVICE_PCI_P2PDMA:
		params.pgprot = pgprot_noncached(params.pgprot);
		break;
	default:
		WARN(1, "Invalid pgmap type %d\n", pgmap->type);
		break;
	}

	if (!pgmap->ref) {
		if (pgmap->ops && (pgmap->ops->kill || pgmap->ops->cleanup))
			return ERR_PTR(-EINVAL);

		init_completion(&pgmap->done);
		error = percpu_ref_init(&pgmap->internal_ref,
				dev_pagemap_percpu_release, 0, GFP_KERNEL);
		if (error)
			return ERR_PTR(error);
		pgmap->ref = &pgmap->internal_ref;
	} else {
		if (!pgmap->ops || !pgmap->ops->kill || !pgmap->ops->cleanup) {
			WARN(1, "Missing reference count teardown definition\n");
			return ERR_PTR(-EINVAL);
		}
	}

	devmap_managed_enable_get(pgmap);

	/*
	 * Clear the pgmap nr_range as it will be incremented for each
	 * successfully processed range. This communicates how many
	 * regions to unwind in the abort case.
	 */
	pgmap->nr_range = 0;
	error = 0;
	for (i = 0; i < nr_range; i++) {
		error = pagemap_range(pgmap, &params, i, nid);
		if (error)
			break;
		pgmap->nr_range++;
	}

	if (i < nr_range) {
		memunmap_pages(pgmap);
		pgmap->nr_range = nr_range;
		return ERR_PTR(error);
	}

	return __va(pgmap->ranges[0].start);
}
EXPORT_SYMBOL_GPL(memremap_pages);

/**
 * devm_memremap_pages - remap and provide memmap backing for the given resource
 * @dev: hosting device for @res
 * @pgmap: pointer to a struct dev_pagemap
 *
 * Notes:
 * 1/ At a minimum the res and type members of @pgmap must be initialized
 *    by the caller before passing it to this function
 *
 * 2/ The altmap field may optionally be initialized, in which case
 *    PGMAP_ALTMAP_VALID must be set in pgmap->flags.
 *
 * 3/ The ref field may optionally be provided, in which pgmap->ref must be
 *    'live' on entry and will be killed and reaped at
 *    devm_memremap_pages_release() time, or if this routine fails.
 *
 * 4/ range is expected to be a host memory range that could feasibly be
 *    treated as a "System RAM" range, i.e. not a device mmio range, but
 *    this is not enforced.
 */
void *devm_memremap_pages(struct device *dev, struct dev_pagemap *pgmap)
{
	int error;
	void *ret;

	ret = memremap_pages(pgmap, dev_to_node(dev));
	if (IS_ERR(ret))
		return ret;

	error = devm_add_action_or_reset(dev, devm_memremap_pages_release,
			pgmap);
	if (error)
		return ERR_PTR(error);
	return ret;
}
EXPORT_SYMBOL_GPL(devm_memremap_pages);

void devm_memunmap_pages(struct device *dev, struct dev_pagemap *pgmap)
{
	devm_release_action(dev, devm_memremap_pages_release, pgmap);
}
EXPORT_SYMBOL_GPL(devm_memunmap_pages);

unsigned long vmem_altmap_offset(struct vmem_altmap *altmap)
{
	/* number of pfns from base where pfn_to_page() is valid */
	if (altmap)
		return altmap->reserve + altmap->free;
	return 0;
}

void vmem_altmap_free(struct vmem_altmap *altmap, unsigned long nr_pfns)
{
	altmap->alloc -= nr_pfns;
}

/**
 * get_dev_pagemap() - take a new live reference on the dev_pagemap for @pfn
 * @pfn: page frame number to lookup page_map
 * @pgmap: optional known pgmap that already has a reference
 *
 * If @pgmap is non-NULL and covers @pfn it will be returned as-is.  If @pgmap
 * is non-NULL but does not cover @pfn the reference to it will be released.
 */
struct dev_pagemap *get_dev_pagemap(unsigned long pfn,
		struct dev_pagemap *pgmap)
{
	resource_size_t phys = PFN_PHYS(pfn);

	/*
	 * In the cached case we're already holding a live reference.
	 */
	if (pgmap) {
		if (phys >= pgmap->range.start && phys <= pgmap->range.end)
			return pgmap;
		put_dev_pagemap(pgmap);
	}

	/* fall back to slow path lookup */
	rcu_read_lock();
	pgmap = xa_load(&pgmap_array, PHYS_PFN(phys));
	if (pgmap && !percpu_ref_tryget_live(pgmap->ref))
		pgmap = NULL;
	rcu_read_unlock();

	return pgmap;
}
EXPORT_SYMBOL_GPL(get_dev_pagemap);

#ifdef CONFIG_DEV_PAGEMAP_OPS
void free_devmap_managed_page(struct page *page)
{
	/* notify page idle for dax */
	if (!is_device_private_page(page)) {
		wake_up_var(&page->_refcount);
		return;
	}

	__ClearPageWaiters(page);

	mem_cgroup_uncharge(page);

	/*
	 * When a device_private page is freed, the page->mapping field
	 * may still contain a (stale) mapping value. For example, the
	 * lower bits of page->mapping may still identify the page as an
	 * anonymous page. Ultimately, this entire field is just stale
	 * and wrong, and it will cause errors if not cleared.  One
	 * example is:
	 *
	 *  migrate_vma_pages()
	 *    migrate_vma_insert_page()
	 *      page_add_new_anon_rmap()
	 *        __page_set_anon_rmap()
	 *          ...checks page->mapping, via PageAnon(page) call,
	 *            and incorrectly concludes that the page is an
	 *            anonymous page. Therefore, it incorrectly,
	 *            silently fails to set up the new anon rmap.
	 *
	 * For other types of ZONE_DEVICE pages, migration is either
	 * handled differently or not done at all, so there is no need
	 * to clear page->mapping.
	 */
	page->mapping = NULL;
	page->pgmap->ops->page_free(page);
}
#endif /* CONFIG_DEV_PAGEMAP_OPS */
Commit	Line	Data
2840d498	1	// SPDX-License-Identifier: GPL-2.0
5981690d	2	/* Copyright(c) 2015 Intel Corporation. All rights reserved. */
7d3dcf26	3	#include <linux/device.h>
92281dee	4	#include <linux/io.h>
0207df4f	5	#include <linux/kasan.h>
41e94a85	6	#include <linux/memory_hotplug.h>
bcfa4b72 MW	7	#include <linux/mm.h>
bcfa4b72 MW	8	#include <linux/pfn_t.h>
5042db43	9	#include <linux/swap.h>
9ffc1d19	10	#include <linux/mmzone.h>
5042db43	11	#include <linux/swapops.h>
bcfa4b72	12	#include <linux/types.h>
e7638488	13	#include <linux/wait_bit.h>
bcfa4b72	14	#include <linux/xarray.h>
92281dee	15
bcfa4b72	16	static DEFINE_XARRAY(pgmap_array);
9476df7d	17
9ffc1d19 DW	18	/*
	19	* The memremap() and memremap_pages() interfaces are alternately used
	20	* to map persistent memory namespaces. These interfaces place different
	21	* constraints on the alignment and size of the mapping (namespace).
	22	* memremap() can map individual PAGE_SIZE pages. memremap_pages() can
	23	* only map subsections (2MB), and at least one architecture (PowerPC)
	24	* the minimum mapping granularity of memremap_pages() is 16MB.
	25	*
	26	* The role of memremap_compat_align() is to communicate the minimum
	27	* arch supported alignment of a namespace such that it can freely
	28	* switch modes without violating the arch constraint. Namely, do not
	29	* allow a namespace to be PAGE_SIZE aligned since that namespace may be
	30	* reconfigured into a mode that requires SUBSECTION_SIZE alignment.
	31	*/
	32	#ifndef CONFIG_ARCH_HAS_MEMREMAP_COMPAT_ALIGN
	33	unsigned long memremap_compat_align(void)
	34	{
	35	return SUBSECTION_SIZE;
	36	}
	37	EXPORT_SYMBOL_GPL(memremap_compat_align);
	38	#endif
	39
f6a55e1a CH	40	#ifdef CONFIG_DEV_PAGEMAP_OPS
	41	DEFINE_STATIC_KEY_FALSE(devmap_managed_key);
	42	EXPORT_SYMBOL(devmap_managed_key);
f6a55e1a	43
46b1ee38	44	static void devmap_managed_enable_put(struct dev_pagemap *pgmap)
f6a55e1a	45	{
46b1ee38 RC	46	if (pgmap->type == MEMORY_DEVICE_PRIVATE \|\|
	47	pgmap->type == MEMORY_DEVICE_FS_DAX)
	48	static_branch_dec(&devmap_managed_key);
f6a55e1a CH	49	}
f6a55e1a CH	50
46b1ee38	51	static void devmap_managed_enable_get(struct dev_pagemap *pgmap)
f6a55e1a	52	{
46b1ee38 RC	53	if (pgmap->type == MEMORY_DEVICE_PRIVATE \|\|
	54	pgmap->type == MEMORY_DEVICE_FS_DAX)
	55	static_branch_inc(&devmap_managed_key);
f6a55e1a CH	56	}
f6a55e1a CH	57	#else
46b1ee38	58	static void devmap_managed_enable_get(struct dev_pagemap *pgmap)
f6a55e1a	59	{
f6a55e1a	60	}
46b1ee38	61	static void devmap_managed_enable_put(struct dev_pagemap *pgmap)
6f42193f CH	62	{
6f42193f CH	63	}
f6a55e1a CH	64	#endif /* CONFIG_DEV_PAGEMAP_OPS */
f6a55e1a CH	65
a4574f63	66	static void pgmap_array_delete(struct range *range)
ab1b597e	67	{
a4574f63	68	xa_store_range(&pgmap_array, PHYS_PFN(range->start), PHYS_PFN(range->end),
bcfa4b72	69	NULL, GFP_KERNEL);
ab1b597e	70	synchronize_rcu();
9476df7d DW	71	}
9476df7d DW	72
b7b3c01b	73	static unsigned long pfn_first(struct dev_pagemap *pgmap, int range_id)
5c2c2587	74	{
b7b3c01b DW	75	struct range *range = &pgmap->ranges[range_id];
	76	unsigned long pfn = PHYS_PFN(range->start);
	77
	78	if (range_id)
	79	return pfn;
	80	return pfn + vmem_altmap_offset(pgmap_altmap(pgmap));
5c2c2587 DW	81	}
5c2c2587 DW	82
34dc45be DW	83	bool pgmap_pfn_valid(struct dev_pagemap *pgmap, unsigned long pfn)
	84	{
	85	int i;
	86
	87	for (i = 0; i < pgmap->nr_range; i++) {
	88	struct range *range = &pgmap->ranges[i];
	89
	90	if (pfn >= PHYS_PFN(range->start) &&
	91	pfn <= PHYS_PFN(range->end))
	92	return pfn >= pfn_first(pgmap, i);
	93	}
	94
	95	return false;
	96	}
	97
b7b3c01b	98	static unsigned long pfn_end(struct dev_pagemap *pgmap, int range_id)
5c2c2587	99	{
b7b3c01b	100	const struct range *range = &pgmap->ranges[range_id];
5c2c2587	101
a4574f63	102	return (range->start + range_len(range)) >> PAGE_SHIFT;
5c2c2587 DW	103	}
5c2c2587 DW	104
949b9325 DW	105	static unsigned long pfn_next(unsigned long pfn)
	106	{
	107	if (pfn % 1024 == 0)
	108	cond_resched();
	109	return pfn + 1;
	110	}
	111
b7b3c01b DW	112	#define for_each_device_pfn(pfn, map, i) \
b7b3c01b DW	113	for (pfn = pfn_first(map, i); pfn < pfn_end(map, i); pfn = pfn_next(pfn))
5c2c2587	114
24917f6b CH	115	static void dev_pagemap_kill(struct dev_pagemap *pgmap)
	116	{
	117	if (pgmap->ops && pgmap->ops->kill)
	118	pgmap->ops->kill(pgmap);
	119	else
	120	percpu_ref_kill(pgmap->ref);
	121	}
	122
	123	static void dev_pagemap_cleanup(struct dev_pagemap *pgmap)
	124	{
	125	if (pgmap->ops && pgmap->ops->cleanup) {
	126	pgmap->ops->cleanup(pgmap);
	127	} else {
	128	wait_for_completion(&pgmap->done);
	129	percpu_ref_exit(pgmap->ref);
	130	}
06282373 DW	131	/*
	132	* Undo the pgmap ref assignment for the internal case as the
	133	* caller may re-enable the same pgmap.
	134	*/
	135	if (pgmap->ref == &pgmap->internal_ref)
	136	pgmap->ref = NULL;
24917f6b CH	137	}
24917f6b CH	138
b7b3c01b	139	static void pageunmap_range(struct dev_pagemap *pgmap, int range_id)
41e94a85	140	{
b7b3c01b	141	struct range *range = &pgmap->ranges[range_id];
77e080e7	142	struct page *first_page;
71389703	143
77e080e7	144	/* make sure to access a memmap that was actually initialized */
b7b3c01b	145	first_page = pfn_to_page(pfn_first(pgmap, range_id));
77e080e7	146
41e94a85	147	/* pages are dead and unused, undo the arch mapping */
f931ab47	148	mem_hotplug_begin();
a4574f63 DW	149	remove_pfn_range_from_zone(page_zone(first_page), PHYS_PFN(range->start),
a4574f63 DW	150	PHYS_PFN(range_len(range)));
69324b8f	151	if (pgmap->type == MEMORY_DEVICE_PRIVATE) {
a4574f63 DW	152	__remove_pages(PHYS_PFN(range->start),
a4574f63 DW	153	PHYS_PFN(range_len(range)), NULL);
69324b8f	154	} else {
65a2aa5f	155	arch_remove_memory(range->start, range_len(range),
514caf23	156	pgmap_altmap(pgmap));
a4574f63	157	kasan_remove_zero_shadow(__va(range->start), range_len(range));
69324b8f	158	}
f931ab47	159	mem_hotplug_done();
b5d24fda	160
a4574f63 DW	161	untrack_pfn(NULL, PHYS_PFN(range->start), range_len(range));
a4574f63 DW	162	pgmap_array_delete(range);
b7b3c01b DW	163	}
	164
	165	void memunmap_pages(struct dev_pagemap *pgmap)
	166	{
	167	unsigned long pfn;
	168	int i;
	169
	170	dev_pagemap_kill(pgmap);
	171	for (i = 0; i < pgmap->nr_range; i++)
	172	for_each_device_pfn(pfn, pgmap, i)
	173	put_page(pfn_to_page(pfn));
	174	dev_pagemap_cleanup(pgmap);
	175
	176	for (i = 0; i < pgmap->nr_range; i++)
	177	pageunmap_range(pgmap, i);
	178
fdc029b1	179	WARN_ONCE(pgmap->altmap.alloc, "failed to free all reserved pages\n");
46b1ee38	180	devmap_managed_enable_put(pgmap);
9476df7d	181	}
6869b7b2 CH	182	EXPORT_SYMBOL_GPL(memunmap_pages);
	183
	184	static void devm_memremap_pages_release(void *data)
	185	{
	186	memunmap_pages(data);
	187	}
9476df7d	188
24917f6b CH	189	static void dev_pagemap_percpu_release(struct percpu_ref *ref)
	190	{
	191	struct dev_pagemap *pgmap =
	192	container_of(ref, struct dev_pagemap, internal_ref);
	193
	194	complete(&pgmap->done);
	195	}
	196
b7b3c01b DW	197	static int pagemap_range(struct dev_pagemap pgmap, struct mhp_params params,
b7b3c01b DW	198	int range_id, int nid)
41e94a85	199	{
bca3feaa	200	const bool is_private = pgmap->type == MEMORY_DEVICE_PRIVATE;
b7b3c01b	201	struct range *range = &pgmap->ranges[range_id];
966cf44f	202	struct dev_pagemap *conflict_pgmap;
6869b7b2	203	int error, is_ram;
5f29a77c	204
b7b3c01b DW	205	if (WARN_ONCE(pgmap_altmap(pgmap) && range_id > 0,
	206	"altmap not supported for multiple ranges\n"))
	207	return -EINVAL;
f6a55e1a	208
a4574f63	209	conflict_pgmap = get_dev_pagemap(PHYS_PFN(range->start), NULL);
15d36fec	210	if (conflict_pgmap) {
6869b7b2	211	WARN(1, "Conflicting mapping in same section\n");
15d36fec	212	put_dev_pagemap(conflict_pgmap);
b7b3c01b	213	return -ENOMEM;
15d36fec DJ	214	}
15d36fec DJ	215
a4574f63	216	conflict_pgmap = get_dev_pagemap(PHYS_PFN(range->end), NULL);
15d36fec	217	if (conflict_pgmap) {
6869b7b2	218	WARN(1, "Conflicting mapping in same section\n");
15d36fec	219	put_dev_pagemap(conflict_pgmap);
b7b3c01b	220	return -ENOMEM;
15d36fec DJ	221	}
15d36fec DJ	222
a4574f63	223	is_ram = region_intersects(range->start, range_len(range),
d37a14bb	224	IORESOURCE_SYSTEM_RAM, IORES_DESC_NONE);
41e94a85	225
06489cfb	226	if (is_ram != REGION_DISJOINT) {
a4574f63 DW	227	WARN_ONCE(1, "attempted on %s region %#llx-%#llx\n",
	228	is_ram == REGION_MIXED ? "mixed" : "ram",
	229	range->start, range->end);
b7b3c01b	230	return -ENXIO;
41e94a85 CH	231	}
41e94a85 CH	232
a4574f63 DW	233	error = xa_err(xa_store_range(&pgmap_array, PHYS_PFN(range->start),
a4574f63 DW	234	PHYS_PFN(range->end), pgmap, GFP_KERNEL));
9476df7d	235	if (error)
b7b3c01b	236	return error;
9476df7d	237
41e94a85	238	if (nid < 0)
7eff93b7	239	nid = numa_mem_id();
41e94a85	240
b7b3c01b	241	error = track_pfn_remap(NULL, &params->pgprot, PHYS_PFN(range->start), 0,
a4574f63	242	range_len(range));
9049771f DW	243	if (error)
	244	goto err_pfn_remap;
	245
bca3feaa AK	246	if (!mhp_range_allowed(range->start, range_len(range), !is_private)) {
	247	error = -EINVAL;
	248	goto err_pfn_remap;
	249	}
	250
f931ab47	251	mem_hotplug_begin();
69324b8f DW	252
	253	/*
	254	* For device private memory we call add_pages() as we only need to
	255	* allocate and initialize struct page for the device memory. More-
	256	* over the device memory is un-accessible thus we do not want to
	257	* create a linear mapping for the memory like arch_add_memory()
	258	* would do.
	259	*
	260	* For all other device memory types, which are accessible by
	261	* the CPU, we do want the linear mapping and thus use
	262	* arch_add_memory().
	263	*/
bca3feaa	264	if (is_private) {
a4574f63	265	error = add_pages(nid, PHYS_PFN(range->start),
b7b3c01b	266	PHYS_PFN(range_len(range)), params);
69324b8f	267	} else {
a4574f63	268	error = kasan_add_zero_shadow(__va(range->start), range_len(range));
69324b8f DW	269	if (error) {
	270	mem_hotplug_done();
	271	goto err_kasan;
	272	}
	273
a4574f63	274	error = arch_add_memory(nid, range->start, range_len(range),
b7b3c01b	275	params);
69324b8f DW	276	}
	277
	278	if (!error) {
	279	struct zone *zone;
	280
	281	zone = &NODE_DATA(nid)->node_zones[ZONE_DEVICE];
a4574f63	282	move_pfn_range_to_zone(zone, PHYS_PFN(range->start),
d882c006 DH	283	PHYS_PFN(range_len(range)), params->altmap,
d882c006 DH	284	MIGRATE_MOVABLE);
0207df4f AR	285	}
0207df4f AR	286
f931ab47	287	mem_hotplug_done();
9476df7d DW	288	if (error)
9476df7d DW	289	goto err_add_memory;
41e94a85	290
966cf44f AD	291	/*
	292	* Initialization of the pages has been deferred until now in order
	293	* to allow us to do the work while not holding the hotplug lock.
	294	*/
	295	memmap_init_zone_device(&NODE_DATA(nid)->node_zones[ZONE_DEVICE],
a4574f63 DW	296	PHYS_PFN(range->start),
a4574f63 DW	297	PHYS_PFN(range_len(range)), pgmap);
b7b3c01b DW	298	percpu_ref_get_many(pgmap->ref, pfn_end(pgmap, range_id)
	299	- pfn_first(pgmap, range_id));
	300	return 0;
9476df7d	301
b7b3c01b	302	err_add_memory:
a4574f63	303	kasan_remove_zero_shadow(__va(range->start), range_len(range));
b7b3c01b	304	err_kasan:
a4574f63	305	untrack_pfn(NULL, PHYS_PFN(range->start), range_len(range));
b7b3c01b	306	err_pfn_remap:
a4574f63	307	pgmap_array_delete(range);
b7b3c01b DW	308	return error;
	309	}
	310
	311
	312	/*
	313	* Not device managed version of dev_memremap_pages, undone by
	314	* memunmap_pages(). Please use dev_memremap_pages if you have a struct
	315	* device available.
	316	*/
	317	void memremap_pages(struct dev_pagemap pgmap, int nid)
	318	{
	319	struct mhp_params params = {
	320	.altmap = pgmap_altmap(pgmap),
	321	.pgprot = PAGE_KERNEL,
	322	};
	323	const int nr_range = pgmap->nr_range;
b7b3c01b DW	324	int error, i;
	325
	326	if (WARN_ONCE(!nr_range, "nr_range must be specified\n"))
	327	return ERR_PTR(-EINVAL);
	328
	329	switch (pgmap->type) {
	330	case MEMORY_DEVICE_PRIVATE:
	331	if (!IS_ENABLED(CONFIG_DEVICE_PRIVATE)) {
	332	WARN(1, "Device private memory not supported\n");
	333	return ERR_PTR(-EINVAL);
	334	}
	335	if (!pgmap->ops \|\| !pgmap->ops->migrate_to_ram) {
	336	WARN(1, "Missing migrate_to_ram method\n");
	337	return ERR_PTR(-EINVAL);
	338	}
46b1ee38 RC	339	if (!pgmap->ops->page_free) {
	340	WARN(1, "Missing page_free method\n");
	341	return ERR_PTR(-EINVAL);
	342	}
b7b3c01b DW	343	if (!pgmap->owner) {
	344	WARN(1, "Missing owner\n");
	345	return ERR_PTR(-EINVAL);
	346	}
	347	break;
	348	case MEMORY_DEVICE_FS_DAX:
	349	if (!IS_ENABLED(CONFIG_ZONE_DEVICE) \|\|
	350	IS_ENABLED(CONFIG_FS_DAX_LIMITED)) {
	351	WARN(1, "File system DAX not supported\n");
	352	return ERR_PTR(-EINVAL);
	353	}
	354	break;
	355	case MEMORY_DEVICE_GENERIC:
b7b3c01b DW	356	break;
	357	case MEMORY_DEVICE_PCI_P2PDMA:
	358	params.pgprot = pgprot_noncached(params.pgprot);
b7b3c01b DW	359	break;
	360	default:
	361	WARN(1, "Invalid pgmap type %d\n", pgmap->type);
	362	break;
	363	}
	364
	365	if (!pgmap->ref) {
	366	if (pgmap->ops && (pgmap->ops->kill \|\| pgmap->ops->cleanup))
	367	return ERR_PTR(-EINVAL);
	368
	369	init_completion(&pgmap->done);
	370	error = percpu_ref_init(&pgmap->internal_ref,
	371	dev_pagemap_percpu_release, 0, GFP_KERNEL);
	372	if (error)
	373	return ERR_PTR(error);
	374	pgmap->ref = &pgmap->internal_ref;
	375	} else {
	376	if (!pgmap->ops \|\| !pgmap->ops->kill \|\| !pgmap->ops->cleanup) {
	377	WARN(1, "Missing reference count teardown definition\n");
	378	return ERR_PTR(-EINVAL);
	379	}
	380	}
	381
46b1ee38	382	devmap_managed_enable_get(pgmap);
b7b3c01b DW	383
	384	/*
	385	* Clear the pgmap nr_range as it will be incremented for each
	386	* successfully processed range. This communicates how many
	387	* regions to unwind in the abort case.
	388	*/
	389	pgmap->nr_range = 0;
	390	error = 0;
	391	for (i = 0; i < nr_range; i++) {
	392	error = pagemap_range(pgmap, &params, i, nid);
	393	if (error)
	394	break;
	395	pgmap->nr_range++;
	396	}
	397
	398	if (i < nr_range) {
	399	memunmap_pages(pgmap);
	400	pgmap->nr_range = nr_range;
	401	return ERR_PTR(error);
	402	}
	403
	404	return __va(pgmap->ranges[0].start);
41e94a85	405	}
6869b7b2 CH	406	EXPORT_SYMBOL_GPL(memremap_pages);
	407
	408	/**
	409	* devm_memremap_pages - remap and provide memmap backing for the given resource
	410	* @dev: hosting device for @res
	411	* @pgmap: pointer to a struct dev_pagemap
	412	*
	413	* Notes:
	414	* 1/ At a minimum the res and type members of @pgmap must be initialized
	415	* by the caller before passing it to this function
	416	*
	417	* 2/ The altmap field may optionally be initialized, in which case
	418	* PGMAP_ALTMAP_VALID must be set in pgmap->flags.
	419	*
	420	* 3/ The ref field may optionally be provided, in which pgmap->ref must be
	421	* 'live' on entry and will be killed and reaped at
	422	* devm_memremap_pages_release() time, or if this routine fails.
	423	*
a4574f63	424	* 4/ range is expected to be a host memory range that could feasibly be
6869b7b2 CH	425	* treated as a "System RAM" range, i.e. not a device mmio range, but
	426	* this is not enforced.
	427	*/
	428	void devm_memremap_pages(struct device dev, struct dev_pagemap *pgmap)
	429	{
	430	int error;
	431	void *ret;
	432
	433	ret = memremap_pages(pgmap, dev_to_node(dev));
	434	if (IS_ERR(ret))
	435	return ret;
	436
	437	error = devm_add_action_or_reset(dev, devm_memremap_pages_release,
	438	pgmap);
	439	if (error)
	440	return ERR_PTR(error);
	441	return ret;
	442	}
808153e1	443	EXPORT_SYMBOL_GPL(devm_memremap_pages);
4b94ffdc	444
2e3f139e DW	445	void devm_memunmap_pages(struct device dev, struct dev_pagemap pgmap)
	446	{
	447	devm_release_action(dev, devm_memremap_pages_release, pgmap);
	448	}
	449	EXPORT_SYMBOL_GPL(devm_memunmap_pages);
	450
4b94ffdc DW	451	unsigned long vmem_altmap_offset(struct vmem_altmap *altmap)
	452	{
	453	/* number of pfns from base where pfn_to_page() is valid */
514caf23 CH	454	if (altmap)
	455	return altmap->reserve + altmap->free;
	456	return 0;
4b94ffdc DW	457	}
	458
	459	void vmem_altmap_free(struct vmem_altmap *altmap, unsigned long nr_pfns)
	460	{
	461	altmap->alloc -= nr_pfns;
	462	}
	463
0822acb8 CH	464	/**
	465	* get_dev_pagemap() - take a new live reference on the dev_pagemap for @pfn
	466	* @pfn: page frame number to lookup page_map
	467	* @pgmap: optional known pgmap that already has a reference
	468	*
832d7aa0 CH	469	* If @pgmap is non-NULL and covers @pfn it will be returned as-is. If @pgmap
832d7aa0 CH	470	* is non-NULL but does not cover @pfn the reference to it will be released.
0822acb8 CH	471	*/
	472	struct dev_pagemap *get_dev_pagemap(unsigned long pfn,
	473	struct dev_pagemap *pgmap)
	474	{
0822acb8 CH	475	resource_size_t phys = PFN_PHYS(pfn);
	476
	477	/*
832d7aa0	478	* In the cached case we're already holding a live reference.
0822acb8	479	*/
832d7aa0	480	if (pgmap) {
a4574f63	481	if (phys >= pgmap->range.start && phys <= pgmap->range.end)
832d7aa0 CH	482	return pgmap;
832d7aa0 CH	483	put_dev_pagemap(pgmap);
0822acb8 CH	484	}
	485
	486	/* fall back to slow path lookup */
	487	rcu_read_lock();
bcfa4b72	488	pgmap = xa_load(&pgmap_array, PHYS_PFN(phys));
0822acb8 CH	489	if (pgmap && !percpu_ref_tryget_live(pgmap->ref))
	490	pgmap = NULL;
	491	rcu_read_unlock();
	492
	493	return pgmap;
	494	}
e7638488	495	EXPORT_SYMBOL_GPL(get_dev_pagemap);
7b2d55d2	496
e7638488	497	#ifdef CONFIG_DEV_PAGEMAP_OPS
07d80269	498	void free_devmap_managed_page(struct page *page)
7b2d55d2	499	{
429589d6 DW	500	/* notify page idle for dax */
	501	if (!is_device_private_page(page)) {
	502	wake_up_var(&page->_refcount);
	503	return;
	504	}
7ab0ad0e	505
429589d6 DW	506	__ClearPageWaiters(page);
	507
	508	mem_cgroup_uncharge(page);
	509
	510	/*
	511	* When a device_private page is freed, the page->mapping field
	512	* may still contain a (stale) mapping value. For example, the
	513	* lower bits of page->mapping may still identify the page as an
	514	* anonymous page. Ultimately, this entire field is just stale
	515	* and wrong, and it will cause errors if not cleared. One
	516	* example is:
	517	*
	518	* migrate_vma_pages()
	519	* migrate_vma_insert_page()
	520	* page_add_new_anon_rmap()
	521	* __page_set_anon_rmap()
	522	* ...checks page->mapping, via PageAnon(page) call,
	523	* and incorrectly concludes that the page is an
	524	* anonymous page. Therefore, it incorrectly,
	525	* silently fails to set up the new anon rmap.
	526	*
	527	* For other types of ZONE_DEVICE pages, migration is either
	528	* handled differently or not done at all, so there is no need
	529	* to clear page->mapping.
	530	*/
	531	page->mapping = NULL;
	532	page->pgmap->ops->page_free(page);
7b2d55d2	533	}
e7638488	534	#endif /* CONFIG_DEV_PAGEMAP_OPS */