1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * fs/dax.c - Direct Access filesystem code 4 * Copyright (c) 2013-2014 Intel Corporation 5 * Author: Matthew Wilcox <matthew.r.wilcox@intel.com> 6 * Author: Ross Zwisler <ross.zwisler@linux.intel.com> 7 */ 8 9 #include <linux/atomic.h> 10 #include <linux/blkdev.h> 11 #include <linux/buffer_head.h> 12 #include <linux/dax.h> 13 #include <linux/fs.h> 14 #include <linux/highmem.h> 15 #include <linux/memcontrol.h> 16 #include <linux/mm.h> 17 #include <linux/mutex.h> 18 #include <linux/pagevec.h> 19 #include <linux/sched.h> 20 #include <linux/sched/signal.h> 21 #include <linux/uio.h> 22 #include <linux/vmstat.h> 23 #include <linux/pfn_t.h> 24 #include <linux/sizes.h> 25 #include <linux/mmu_notifier.h> 26 #include <linux/iomap.h> 27 #include <linux/rmap.h> 28 #include <asm/pgalloc.h> 29 30 #define CREATE_TRACE_POINTS 31 #include <trace/events/fs_dax.h> 32 33 static inline unsigned int pe_order(enum page_entry_size pe_size) 34 { 35 if (pe_size == PE_SIZE_PTE) 36 return PAGE_SHIFT - PAGE_SHIFT; 37 if (pe_size == PE_SIZE_PMD) 38 return PMD_SHIFT - PAGE_SHIFT; 39 if (pe_size == PE_SIZE_PUD) 40 return PUD_SHIFT - PAGE_SHIFT; 41 return ~0; 42 } 43 44 /* We choose 4096 entries - same as per-zone page wait tables */ 45 #define DAX_WAIT_TABLE_BITS 12 46 #define DAX_WAIT_TABLE_ENTRIES (1 << DAX_WAIT_TABLE_BITS) 47 48 /* The 'colour' (ie low bits) within a PMD of a page offset. */ 49 #define PG_PMD_COLOUR ((PMD_SIZE >> PAGE_SHIFT) - 1) 50 #define PG_PMD_NR (PMD_SIZE >> PAGE_SHIFT) 51 52 /* The order of a PMD entry */ 53 #define PMD_ORDER (PMD_SHIFT - PAGE_SHIFT) 54 55 static wait_queue_head_t wait_table[DAX_WAIT_TABLE_ENTRIES]; 56 57 static int __init init_dax_wait_table(void) 58 { 59 int i; 60 61 for (i = 0; i < DAX_WAIT_TABLE_ENTRIES; i++) 62 init_waitqueue_head(wait_table + i); 63 return 0; 64 } 65 fs_initcall(init_dax_wait_table); 66 67 /* 68 * DAX pagecache entries use XArray value entries so they can't be mistaken 69 * for pages. We use one bit for locking, one bit for the entry size (PMD) 70 * and two more to tell us if the entry is a zero page or an empty entry that 71 * is just used for locking. In total four special bits. 72 * 73 * If the PMD bit isn't set the entry has size PAGE_SIZE, and if the ZERO_PAGE 74 * and EMPTY bits aren't set the entry is a normal DAX entry with a filesystem 75 * block allocation. 76 */ 77 #define DAX_SHIFT (4) 78 #define DAX_LOCKED (1UL << 0) 79 #define DAX_PMD (1UL << 1) 80 #define DAX_ZERO_PAGE (1UL << 2) 81 #define DAX_EMPTY (1UL << 3) 82 83 static unsigned long dax_to_pfn(void *entry) 84 { 85 return xa_to_value(entry) >> DAX_SHIFT; 86 } 87 88 static void *dax_make_entry(pfn_t pfn, unsigned long flags) 89 { 90 return xa_mk_value(flags | (pfn_t_to_pfn(pfn) << DAX_SHIFT)); 91 } 92 93 static bool dax_is_locked(void *entry) 94 { 95 return xa_to_value(entry) & DAX_LOCKED; 96 } 97 98 static unsigned int dax_entry_order(void *entry) 99 { 100 if (xa_to_value(entry) & DAX_PMD) 101 return PMD_ORDER; 102 return 0; 103 } 104 105 static unsigned long dax_is_pmd_entry(void *entry) 106 { 107 return xa_to_value(entry) & DAX_PMD; 108 } 109 110 static bool dax_is_pte_entry(void *entry) 111 { 112 return !(xa_to_value(entry) & DAX_PMD); 113 } 114 115 static int dax_is_zero_entry(void *entry) 116 { 117 return xa_to_value(entry) & DAX_ZERO_PAGE; 118 } 119 120 static int dax_is_empty_entry(void *entry) 121 { 122 return xa_to_value(entry) & DAX_EMPTY; 123 } 124 125 /* 126 * true if the entry that was found is of a smaller order than the entry 127 * we were looking for 128 */ 129 static bool dax_is_conflict(void *entry) 130 { 131 return entry == XA_RETRY_ENTRY; 132 } 133 134 /* 135 * DAX page cache entry locking 136 */ 137 struct exceptional_entry_key { 138 struct xarray *xa; 139 pgoff_t entry_start; 140 }; 141 142 struct wait_exceptional_entry_queue { 143 wait_queue_entry_t wait; 144 struct exceptional_entry_key key; 145 }; 146 147 /** 148 * enum dax_wake_mode: waitqueue wakeup behaviour 149 * @WAKE_ALL: wake all waiters in the waitqueue 150 * @WAKE_NEXT: wake only the first waiter in the waitqueue 151 */ 152 enum dax_wake_mode { 153 WAKE_ALL, 154 WAKE_NEXT, 155 }; 156 157 static wait_queue_head_t *dax_entry_waitqueue(struct xa_state *xas, 158 void *entry, struct exceptional_entry_key *key) 159 { 160 unsigned long hash; 161 unsigned long index = xas->xa_index; 162 163 /* 164 * If 'entry' is a PMD, align the 'index' that we use for the wait 165 * queue to the start of that PMD. This ensures that all offsets in 166 * the range covered by the PMD map to the same bit lock. 167 */ 168 if (dax_is_pmd_entry(entry)) 169 index &= ~PG_PMD_COLOUR; 170 key->xa = xas->xa; 171 key->entry_start = index; 172 173 hash = hash_long((unsigned long)xas->xa ^ index, DAX_WAIT_TABLE_BITS); 174 return wait_table + hash; 175 } 176 177 static int wake_exceptional_entry_func(wait_queue_entry_t *wait, 178 unsigned int mode, int sync, void *keyp) 179 { 180 struct exceptional_entry_key *key = keyp; 181 struct wait_exceptional_entry_queue *ewait = 182 container_of(wait, struct wait_exceptional_entry_queue, wait); 183 184 if (key->xa != ewait->key.xa || 185 key->entry_start != ewait->key.entry_start) 186 return 0; 187 return autoremove_wake_function(wait, mode, sync, NULL); 188 } 189 190 /* 191 * @entry may no longer be the entry at the index in the mapping. 192 * The important information it's conveying is whether the entry at 193 * this index used to be a PMD entry. 194 */ 195 static void dax_wake_entry(struct xa_state *xas, void *entry, 196 enum dax_wake_mode mode) 197 { 198 struct exceptional_entry_key key; 199 wait_queue_head_t *wq; 200 201 wq = dax_entry_waitqueue(xas, entry, &key); 202 203 /* 204 * Checking for locked entry and prepare_to_wait_exclusive() happens 205 * under the i_pages lock, ditto for entry handling in our callers. 206 * So at this point all tasks that could have seen our entry locked 207 * must be in the waitqueue and the following check will see them. 208 */ 209 if (waitqueue_active(wq)) 210 __wake_up(wq, TASK_NORMAL, mode == WAKE_ALL ? 0 : 1, &key); 211 } 212 213 /* 214 * Look up entry in page cache, wait for it to become unlocked if it 215 * is a DAX entry and return it. The caller must subsequently call 216 * put_unlocked_entry() if it did not lock the entry or dax_unlock_entry() 217 * if it did. The entry returned may have a larger order than @order. 218 * If @order is larger than the order of the entry found in i_pages, this 219 * function returns a dax_is_conflict entry. 220 * 221 * Must be called with the i_pages lock held. 222 */ 223 static void *get_unlocked_entry(struct xa_state *xas, unsigned int order) 224 { 225 void *entry; 226 struct wait_exceptional_entry_queue ewait; 227 wait_queue_head_t *wq; 228 229 init_wait(&ewait.wait); 230 ewait.wait.func = wake_exceptional_entry_func; 231 232 for (;;) { 233 entry = xas_find_conflict(xas); 234 if (!entry || WARN_ON_ONCE(!xa_is_value(entry))) 235 return entry; 236 if (dax_entry_order(entry) < order) 237 return XA_RETRY_ENTRY; 238 if (!dax_is_locked(entry)) 239 return entry; 240 241 wq = dax_entry_waitqueue(xas, entry, &ewait.key); 242 prepare_to_wait_exclusive(wq, &ewait.wait, 243 TASK_UNINTERRUPTIBLE); 244 xas_unlock_irq(xas); 245 xas_reset(xas); 246 schedule(); 247 finish_wait(wq, &ewait.wait); 248 xas_lock_irq(xas); 249 } 250 } 251 252 /* 253 * The only thing keeping the address space around is the i_pages lock 254 * (it's cycled in clear_inode() after removing the entries from i_pages) 255 * After we call xas_unlock_irq(), we cannot touch xas->xa. 256 */ 257 static void wait_entry_unlocked(struct xa_state *xas, void *entry) 258 { 259 struct wait_exceptional_entry_queue ewait; 260 wait_queue_head_t *wq; 261 262 init_wait(&ewait.wait); 263 ewait.wait.func = wake_exceptional_entry_func; 264 265 wq = dax_entry_waitqueue(xas, entry, &ewait.key); 266 /* 267 * Unlike get_unlocked_entry() there is no guarantee that this 268 * path ever successfully retrieves an unlocked entry before an 269 * inode dies. Perform a non-exclusive wait in case this path 270 * never successfully performs its own wake up. 271 */ 272 prepare_to_wait(wq, &ewait.wait, TASK_UNINTERRUPTIBLE); 273 xas_unlock_irq(xas); 274 schedule(); 275 finish_wait(wq, &ewait.wait); 276 } 277 278 static void put_unlocked_entry(struct xa_state *xas, void *entry, 279 enum dax_wake_mode mode) 280 { 281 if (entry && !dax_is_conflict(entry)) 282 dax_wake_entry(xas, entry, mode); 283 } 284 285 /* 286 * We used the xa_state to get the entry, but then we locked the entry and 287 * dropped the xa_lock, so we know the xa_state is stale and must be reset 288 * before use. 289 */ 290 static void dax_unlock_entry(struct xa_state *xas, void *entry) 291 { 292 void *old; 293 294 BUG_ON(dax_is_locked(entry)); 295 xas_reset(xas); 296 xas_lock_irq(xas); 297 old = xas_store(xas, entry); 298 xas_unlock_irq(xas); 299 BUG_ON(!dax_is_locked(old)); 300 dax_wake_entry(xas, entry, WAKE_NEXT); 301 } 302 303 /* 304 * Return: The entry stored at this location before it was locked. 305 */ 306 static void *dax_lock_entry(struct xa_state *xas, void *entry) 307 { 308 unsigned long v = xa_to_value(entry); 309 return xas_store(xas, xa_mk_value(v | DAX_LOCKED)); 310 } 311 312 static unsigned long dax_entry_size(void *entry) 313 { 314 if (dax_is_zero_entry(entry)) 315 return 0; 316 else if (dax_is_empty_entry(entry)) 317 return 0; 318 else if (dax_is_pmd_entry(entry)) 319 return PMD_SIZE; 320 else 321 return PAGE_SIZE; 322 } 323 324 static unsigned long dax_end_pfn(void *entry) 325 { 326 return dax_to_pfn(entry) + dax_entry_size(entry) / PAGE_SIZE; 327 } 328 329 /* 330 * Iterate through all mapped pfns represented by an entry, i.e. skip 331 * 'empty' and 'zero' entries. 332 */ 333 #define for_each_mapped_pfn(entry, pfn) \ 334 for (pfn = dax_to_pfn(entry); \ 335 pfn < dax_end_pfn(entry); pfn++) 336 337 static inline bool dax_mapping_is_cow(struct address_space *mapping) 338 { 339 return (unsigned long)mapping == PAGE_MAPPING_DAX_COW; 340 } 341 342 /* 343 * Set the page->mapping with FS_DAX_MAPPING_COW flag, increase the refcount. 344 */ 345 static inline void dax_mapping_set_cow(struct page *page) 346 { 347 if ((uintptr_t)page->mapping != PAGE_MAPPING_DAX_COW) { 348 /* 349 * Reset the index if the page was already mapped 350 * regularly before. 351 */ 352 if (page->mapping) 353 page->index = 1; 354 page->mapping = (void *)PAGE_MAPPING_DAX_COW; 355 } 356 page->index++; 357 } 358 359 /* 360 * When it is called in dax_insert_entry(), the cow flag will indicate that 361 * whether this entry is shared by multiple files. If so, set the page->mapping 362 * FS_DAX_MAPPING_COW, and use page->index as refcount. 363 */ 364 static void dax_associate_entry(void *entry, struct address_space *mapping, 365 struct vm_area_struct *vma, unsigned long address, bool cow) 366 { 367 unsigned long size = dax_entry_size(entry), pfn, index; 368 int i = 0; 369 370 if (IS_ENABLED(CONFIG_FS_DAX_LIMITED)) 371 return; 372 373 index = linear_page_index(vma, address & ~(size - 1)); 374 for_each_mapped_pfn(entry, pfn) { 375 struct page *page = pfn_to_page(pfn); 376 377 if (cow) { 378 dax_mapping_set_cow(page); 379 } else { 380 WARN_ON_ONCE(page->mapping); 381 page->mapping = mapping; 382 page->index = index + i++; 383 } 384 } 385 } 386 387 static void dax_disassociate_entry(void *entry, struct address_space *mapping, 388 bool trunc) 389 { 390 unsigned long pfn; 391 392 if (IS_ENABLED(CONFIG_FS_DAX_LIMITED)) 393 return; 394 395 for_each_mapped_pfn(entry, pfn) { 396 struct page *page = pfn_to_page(pfn); 397 398 WARN_ON_ONCE(trunc && page_ref_count(page) > 1); 399 if (dax_mapping_is_cow(page->mapping)) { 400 /* keep the CoW flag if this page is still shared */ 401 if (page->index-- > 0) 402 continue; 403 } else 404 WARN_ON_ONCE(page->mapping && page->mapping != mapping); 405 page->mapping = NULL; 406 page->index = 0; 407 } 408 } 409 410 static struct page *dax_busy_page(void *entry) 411 { 412 unsigned long pfn; 413 414 for_each_mapped_pfn(entry, pfn) { 415 struct page *page = pfn_to_page(pfn); 416 417 if (page_ref_count(page) > 1) 418 return page; 419 } 420 return NULL; 421 } 422 423 /* 424 * dax_lock_page - Lock the DAX entry corresponding to a page 425 * @page: The page whose entry we want to lock 426 * 427 * Context: Process context. 428 * Return: A cookie to pass to dax_unlock_page() or 0 if the entry could 429 * not be locked. 430 */ 431 dax_entry_t dax_lock_page(struct page *page) 432 { 433 XA_STATE(xas, NULL, 0); 434 void *entry; 435 436 /* Ensure page->mapping isn't freed while we look at it */ 437 rcu_read_lock(); 438 for (;;) { 439 struct address_space *mapping = READ_ONCE(page->mapping); 440 441 entry = NULL; 442 if (!mapping || !dax_mapping(mapping)) 443 break; 444 445 /* 446 * In the device-dax case there's no need to lock, a 447 * struct dev_pagemap pin is sufficient to keep the 448 * inode alive, and we assume we have dev_pagemap pin 449 * otherwise we would not have a valid pfn_to_page() 450 * translation. 451 */ 452 entry = (void *)~0UL; 453 if (S_ISCHR(mapping->host->i_mode)) 454 break; 455 456 xas.xa = &mapping->i_pages; 457 xas_lock_irq(&xas); 458 if (mapping != page->mapping) { 459 xas_unlock_irq(&xas); 460 continue; 461 } 462 xas_set(&xas, page->index); 463 entry = xas_load(&xas); 464 if (dax_is_locked(entry)) { 465 rcu_read_unlock(); 466 wait_entry_unlocked(&xas, entry); 467 rcu_read_lock(); 468 continue; 469 } 470 dax_lock_entry(&xas, entry); 471 xas_unlock_irq(&xas); 472 break; 473 } 474 rcu_read_unlock(); 475 return (dax_entry_t)entry; 476 } 477 478 void dax_unlock_page(struct page *page, dax_entry_t cookie) 479 { 480 struct address_space *mapping = page->mapping; 481 XA_STATE(xas, &mapping->i_pages, page->index); 482 483 if (S_ISCHR(mapping->host->i_mode)) 484 return; 485 486 dax_unlock_entry(&xas, (void *)cookie); 487 } 488 489 /* 490 * dax_lock_mapping_entry - Lock the DAX entry corresponding to a mapping 491 * @mapping: the file's mapping whose entry we want to lock 492 * @index: the offset within this file 493 * @page: output the dax page corresponding to this dax entry 494 * 495 * Return: A cookie to pass to dax_unlock_mapping_entry() or 0 if the entry 496 * could not be locked. 497 */ 498 dax_entry_t dax_lock_mapping_entry(struct address_space *mapping, pgoff_t index, 499 struct page **page) 500 { 501 XA_STATE(xas, NULL, 0); 502 void *entry; 503 504 rcu_read_lock(); 505 for (;;) { 506 entry = NULL; 507 if (!dax_mapping(mapping)) 508 break; 509 510 xas.xa = &mapping->i_pages; 511 xas_lock_irq(&xas); 512 xas_set(&xas, index); 513 entry = xas_load(&xas); 514 if (dax_is_locked(entry)) { 515 rcu_read_unlock(); 516 wait_entry_unlocked(&xas, entry); 517 rcu_read_lock(); 518 continue; 519 } 520 if (!entry || 521 dax_is_zero_entry(entry) || dax_is_empty_entry(entry)) { 522 /* 523 * Because we are looking for entry from file's mapping 524 * and index, so the entry may not be inserted for now, 525 * or even a zero/empty entry. We don't think this is 526 * an error case. So, return a special value and do 527 * not output @page. 528 */ 529 entry = (void *)~0UL; 530 } else { 531 *page = pfn_to_page(dax_to_pfn(entry)); 532 dax_lock_entry(&xas, entry); 533 } 534 xas_unlock_irq(&xas); 535 break; 536 } 537 rcu_read_unlock(); 538 return (dax_entry_t)entry; 539 } 540 541 void dax_unlock_mapping_entry(struct address_space *mapping, pgoff_t index, 542 dax_entry_t cookie) 543 { 544 XA_STATE(xas, &mapping->i_pages, index); 545 546 if (cookie == ~0UL) 547 return; 548 549 dax_unlock_entry(&xas, (void *)cookie); 550 } 551 552 /* 553 * Find page cache entry at given index. If it is a DAX entry, return it 554 * with the entry locked. If the page cache doesn't contain an entry at 555 * that index, add a locked empty entry. 556 * 557 * When requesting an entry with size DAX_PMD, grab_mapping_entry() will 558 * either return that locked entry or will return VM_FAULT_FALLBACK. 559 * This will happen if there are any PTE entries within the PMD range 560 * that we are requesting. 561 * 562 * We always favor PTE entries over PMD entries. There isn't a flow where we 563 * evict PTE entries in order to 'upgrade' them to a PMD entry. A PMD 564 * insertion will fail if it finds any PTE entries already in the tree, and a 565 * PTE insertion will cause an existing PMD entry to be unmapped and 566 * downgraded to PTE entries. This happens for both PMD zero pages as 567 * well as PMD empty entries. 568 * 569 * The exception to this downgrade path is for PMD entries that have 570 * real storage backing them. We will leave these real PMD entries in 571 * the tree, and PTE writes will simply dirty the entire PMD entry. 572 * 573 * Note: Unlike filemap_fault() we don't honor FAULT_FLAG_RETRY flags. For 574 * persistent memory the benefit is doubtful. We can add that later if we can 575 * show it helps. 576 * 577 * On error, this function does not return an ERR_PTR. Instead it returns 578 * a VM_FAULT code, encoded as an xarray internal entry. The ERR_PTR values 579 * overlap with xarray value entries. 580 */ 581 static void *grab_mapping_entry(struct xa_state *xas, 582 struct address_space *mapping, unsigned int order) 583 { 584 unsigned long index = xas->xa_index; 585 bool pmd_downgrade; /* splitting PMD entry into PTE entries? */ 586 void *entry; 587 588 retry: 589 pmd_downgrade = false; 590 xas_lock_irq(xas); 591 entry = get_unlocked_entry(xas, order); 592 593 if (entry) { 594 if (dax_is_conflict(entry)) 595 goto fallback; 596 if (!xa_is_value(entry)) { 597 xas_set_err(xas, -EIO); 598 goto out_unlock; 599 } 600 601 if (order == 0) { 602 if (dax_is_pmd_entry(entry) && 603 (dax_is_zero_entry(entry) || 604 dax_is_empty_entry(entry))) { 605 pmd_downgrade = true; 606 } 607 } 608 } 609 610 if (pmd_downgrade) { 611 /* 612 * Make sure 'entry' remains valid while we drop 613 * the i_pages lock. 614 */ 615 dax_lock_entry(xas, entry); 616 617 /* 618 * Besides huge zero pages the only other thing that gets 619 * downgraded are empty entries which don't need to be 620 * unmapped. 621 */ 622 if (dax_is_zero_entry(entry)) { 623 xas_unlock_irq(xas); 624 unmap_mapping_pages(mapping, 625 xas->xa_index & ~PG_PMD_COLOUR, 626 PG_PMD_NR, false); 627 xas_reset(xas); 628 xas_lock_irq(xas); 629 } 630 631 dax_disassociate_entry(entry, mapping, false); 632 xas_store(xas, NULL); /* undo the PMD join */ 633 dax_wake_entry(xas, entry, WAKE_ALL); 634 mapping->nrpages -= PG_PMD_NR; 635 entry = NULL; 636 xas_set(xas, index); 637 } 638 639 if (entry) { 640 dax_lock_entry(xas, entry); 641 } else { 642 unsigned long flags = DAX_EMPTY; 643 644 if (order > 0) 645 flags |= DAX_PMD; 646 entry = dax_make_entry(pfn_to_pfn_t(0), flags); 647 dax_lock_entry(xas, entry); 648 if (xas_error(xas)) 649 goto out_unlock; 650 mapping->nrpages += 1UL << order; 651 } 652 653 out_unlock: 654 xas_unlock_irq(xas); 655 if (xas_nomem(xas, mapping_gfp_mask(mapping) & ~__GFP_HIGHMEM)) 656 goto retry; 657 if (xas->xa_node == XA_ERROR(-ENOMEM)) 658 return xa_mk_internal(VM_FAULT_OOM); 659 if (xas_error(xas)) 660 return xa_mk_internal(VM_FAULT_SIGBUS); 661 return entry; 662 fallback: 663 xas_unlock_irq(xas); 664 return xa_mk_internal(VM_FAULT_FALLBACK); 665 } 666 667 /** 668 * dax_layout_busy_page_range - find first pinned page in @mapping 669 * @mapping: address space to scan for a page with ref count > 1 670 * @start: Starting offset. Page containing 'start' is included. 671 * @end: End offset. Page containing 'end' is included. If 'end' is LLONG_MAX, 672 * pages from 'start' till the end of file are included. 673 * 674 * DAX requires ZONE_DEVICE mapped pages. These pages are never 675 * 'onlined' to the page allocator so they are considered idle when 676 * page->count == 1. A filesystem uses this interface to determine if 677 * any page in the mapping is busy, i.e. for DMA, or other 678 * get_user_pages() usages. 679 * 680 * It is expected that the filesystem is holding locks to block the 681 * establishment of new mappings in this address_space. I.e. it expects 682 * to be able to run unmap_mapping_range() and subsequently not race 683 * mapping_mapped() becoming true. 684 */ 685 struct page *dax_layout_busy_page_range(struct address_space *mapping, 686 loff_t start, loff_t end) 687 { 688 void *entry; 689 unsigned int scanned = 0; 690 struct page *page = NULL; 691 pgoff_t start_idx = start >> PAGE_SHIFT; 692 pgoff_t end_idx; 693 XA_STATE(xas, &mapping->i_pages, start_idx); 694 695 /* 696 * In the 'limited' case get_user_pages() for dax is disabled. 697 */ 698 if (IS_ENABLED(CONFIG_FS_DAX_LIMITED)) 699 return NULL; 700 701 if (!dax_mapping(mapping) || !mapping_mapped(mapping)) 702 return NULL; 703 704 /* If end == LLONG_MAX, all pages from start to till end of file */ 705 if (end == LLONG_MAX) 706 end_idx = ULONG_MAX; 707 else 708 end_idx = end >> PAGE_SHIFT; 709 /* 710 * If we race get_user_pages_fast() here either we'll see the 711 * elevated page count in the iteration and wait, or 712 * get_user_pages_fast() will see that the page it took a reference 713 * against is no longer mapped in the page tables and bail to the 714 * get_user_pages() slow path. The slow path is protected by 715 * pte_lock() and pmd_lock(). New references are not taken without 716 * holding those locks, and unmap_mapping_pages() will not zero the 717 * pte or pmd without holding the respective lock, so we are 718 * guaranteed to either see new references or prevent new 719 * references from being established. 720 */ 721 unmap_mapping_pages(mapping, start_idx, end_idx - start_idx + 1, 0); 722 723 xas_lock_irq(&xas); 724 xas_for_each(&xas, entry, end_idx) { 725 if (WARN_ON_ONCE(!xa_is_value(entry))) 726 continue; 727 if (unlikely(dax_is_locked(entry))) 728 entry = get_unlocked_entry(&xas, 0); 729 if (entry) 730 page = dax_busy_page(entry); 731 put_unlocked_entry(&xas, entry, WAKE_NEXT); 732 if (page) 733 break; 734 if (++scanned % XA_CHECK_SCHED) 735 continue; 736 737 xas_pause(&xas); 738 xas_unlock_irq(&xas); 739 cond_resched(); 740 xas_lock_irq(&xas); 741 } 742 xas_unlock_irq(&xas); 743 return page; 744 } 745 EXPORT_SYMBOL_GPL(dax_layout_busy_page_range); 746 747 struct page *dax_layout_busy_page(struct address_space *mapping) 748 { 749 return dax_layout_busy_page_range(mapping, 0, LLONG_MAX); 750 } 751 EXPORT_SYMBOL_GPL(dax_layout_busy_page); 752 753 static int __dax_invalidate_entry(struct address_space *mapping, 754 pgoff_t index, bool trunc) 755 { 756 XA_STATE(xas, &mapping->i_pages, index); 757 int ret = 0; 758 void *entry; 759 760 xas_lock_irq(&xas); 761 entry = get_unlocked_entry(&xas, 0); 762 if (!entry || WARN_ON_ONCE(!xa_is_value(entry))) 763 goto out; 764 if (!trunc && 765 (xas_get_mark(&xas, PAGECACHE_TAG_DIRTY) || 766 xas_get_mark(&xas, PAGECACHE_TAG_TOWRITE))) 767 goto out; 768 dax_disassociate_entry(entry, mapping, trunc); 769 xas_store(&xas, NULL); 770 mapping->nrpages -= 1UL << dax_entry_order(entry); 771 ret = 1; 772 out: 773 put_unlocked_entry(&xas, entry, WAKE_ALL); 774 xas_unlock_irq(&xas); 775 return ret; 776 } 777 778 /* 779 * Delete DAX entry at @index from @mapping. Wait for it 780 * to be unlocked before deleting it. 781 */ 782 int dax_delete_mapping_entry(struct address_space *mapping, pgoff_t index) 783 { 784 int ret = __dax_invalidate_entry(mapping, index, true); 785 786 /* 787 * This gets called from truncate / punch_hole path. As such, the caller 788 * must hold locks protecting against concurrent modifications of the 789 * page cache (usually fs-private i_mmap_sem for writing). Since the 790 * caller has seen a DAX entry for this index, we better find it 791 * at that index as well... 792 */ 793 WARN_ON_ONCE(!ret); 794 return ret; 795 } 796 797 /* 798 * Invalidate DAX entry if it is clean. 799 */ 800 int dax_invalidate_mapping_entry_sync(struct address_space *mapping, 801 pgoff_t index) 802 { 803 return __dax_invalidate_entry(mapping, index, false); 804 } 805 806 static pgoff_t dax_iomap_pgoff(const struct iomap *iomap, loff_t pos) 807 { 808 return PHYS_PFN(iomap->addr + (pos & PAGE_MASK) - iomap->offset); 809 } 810 811 static int copy_cow_page_dax(struct vm_fault *vmf, const struct iomap_iter *iter) 812 { 813 pgoff_t pgoff = dax_iomap_pgoff(&iter->iomap, iter->pos); 814 void *vto, *kaddr; 815 long rc; 816 int id; 817 818 id = dax_read_lock(); 819 rc = dax_direct_access(iter->iomap.dax_dev, pgoff, 1, DAX_ACCESS, 820 &kaddr, NULL); 821 if (rc < 0) { 822 dax_read_unlock(id); 823 return rc; 824 } 825 vto = kmap_atomic(vmf->cow_page); 826 copy_user_page(vto, kaddr, vmf->address, vmf->cow_page); 827 kunmap_atomic(vto); 828 dax_read_unlock(id); 829 return 0; 830 } 831 832 /* 833 * By this point grab_mapping_entry() has ensured that we have a locked entry 834 * of the appropriate size so we don't have to worry about downgrading PMDs to 835 * PTEs. If we happen to be trying to insert a PTE and there is a PMD 836 * already in the tree, we will skip the insertion and just dirty the PMD as 837 * appropriate. 838 */ 839 static void *dax_insert_entry(struct xa_state *xas, 840 struct address_space *mapping, struct vm_fault *vmf, 841 void *entry, pfn_t pfn, unsigned long flags, bool dirty) 842 { 843 void *new_entry = dax_make_entry(pfn, flags); 844 845 if (dirty) 846 __mark_inode_dirty(mapping->host, I_DIRTY_PAGES); 847 848 if (dax_is_zero_entry(entry) && !(flags & DAX_ZERO_PAGE)) { 849 unsigned long index = xas->xa_index; 850 /* we are replacing a zero page with block mapping */ 851 if (dax_is_pmd_entry(entry)) 852 unmap_mapping_pages(mapping, index & ~PG_PMD_COLOUR, 853 PG_PMD_NR, false); 854 else /* pte entry */ 855 unmap_mapping_pages(mapping, index, 1, false); 856 } 857 858 xas_reset(xas); 859 xas_lock_irq(xas); 860 if (dax_is_zero_entry(entry) || dax_is_empty_entry(entry)) { 861 void *old; 862 863 dax_disassociate_entry(entry, mapping, false); 864 dax_associate_entry(new_entry, mapping, vmf->vma, vmf->address, 865 false); 866 /* 867 * Only swap our new entry into the page cache if the current 868 * entry is a zero page or an empty entry. If a normal PTE or 869 * PMD entry is already in the cache, we leave it alone. This 870 * means that if we are trying to insert a PTE and the 871 * existing entry is a PMD, we will just leave the PMD in the 872 * tree and dirty it if necessary. 873 */ 874 old = dax_lock_entry(xas, new_entry); 875 WARN_ON_ONCE(old != xa_mk_value(xa_to_value(entry) | 876 DAX_LOCKED)); 877 entry = new_entry; 878 } else { 879 xas_load(xas); /* Walk the xa_state */ 880 } 881 882 if (dirty) 883 xas_set_mark(xas, PAGECACHE_TAG_DIRTY); 884 885 xas_unlock_irq(xas); 886 return entry; 887 } 888 889 static int dax_writeback_one(struct xa_state *xas, struct dax_device *dax_dev, 890 struct address_space *mapping, void *entry) 891 { 892 unsigned long pfn, index, count, end; 893 long ret = 0; 894 struct vm_area_struct *vma; 895 896 /* 897 * A page got tagged dirty in DAX mapping? Something is seriously 898 * wrong. 899 */ 900 if (WARN_ON(!xa_is_value(entry))) 901 return -EIO; 902 903 if (unlikely(dax_is_locked(entry))) { 904 void *old_entry = entry; 905 906 entry = get_unlocked_entry(xas, 0); 907 908 /* Entry got punched out / reallocated? */ 909 if (!entry || WARN_ON_ONCE(!xa_is_value(entry))) 910 goto put_unlocked; 911 /* 912 * Entry got reallocated elsewhere? No need to writeback. 913 * We have to compare pfns as we must not bail out due to 914 * difference in lockbit or entry type. 915 */ 916 if (dax_to_pfn(old_entry) != dax_to_pfn(entry)) 917 goto put_unlocked; 918 if (WARN_ON_ONCE(dax_is_empty_entry(entry) || 919 dax_is_zero_entry(entry))) { 920 ret = -EIO; 921 goto put_unlocked; 922 } 923 924 /* Another fsync thread may have already done this entry */ 925 if (!xas_get_mark(xas, PAGECACHE_TAG_TOWRITE)) 926 goto put_unlocked; 927 } 928 929 /* Lock the entry to serialize with page faults */ 930 dax_lock_entry(xas, entry); 931 932 /* 933 * We can clear the tag now but we have to be careful so that concurrent 934 * dax_writeback_one() calls for the same index cannot finish before we 935 * actually flush the caches. This is achieved as the calls will look 936 * at the entry only under the i_pages lock and once they do that 937 * they will see the entry locked and wait for it to unlock. 938 */ 939 xas_clear_mark(xas, PAGECACHE_TAG_TOWRITE); 940 xas_unlock_irq(xas); 941 942 /* 943 * If dax_writeback_mapping_range() was given a wbc->range_start 944 * in the middle of a PMD, the 'index' we use needs to be 945 * aligned to the start of the PMD. 946 * This allows us to flush for PMD_SIZE and not have to worry about 947 * partial PMD writebacks. 948 */ 949 pfn = dax_to_pfn(entry); 950 count = 1UL << dax_entry_order(entry); 951 index = xas->xa_index & ~(count - 1); 952 end = index + count - 1; 953 954 /* Walk all mappings of a given index of a file and writeprotect them */ 955 i_mmap_lock_read(mapping); 956 vma_interval_tree_foreach(vma, &mapping->i_mmap, index, end) { 957 pfn_mkclean_range(pfn, count, index, vma); 958 cond_resched(); 959 } 960 i_mmap_unlock_read(mapping); 961 962 dax_flush(dax_dev, page_address(pfn_to_page(pfn)), count * PAGE_SIZE); 963 /* 964 * After we have flushed the cache, we can clear the dirty tag. There 965 * cannot be new dirty data in the pfn after the flush has completed as 966 * the pfn mappings are writeprotected and fault waits for mapping 967 * entry lock. 968 */ 969 xas_reset(xas); 970 xas_lock_irq(xas); 971 xas_store(xas, entry); 972 xas_clear_mark(xas, PAGECACHE_TAG_DIRTY); 973 dax_wake_entry(xas, entry, WAKE_NEXT); 974 975 trace_dax_writeback_one(mapping->host, index, count); 976 return ret; 977 978 put_unlocked: 979 put_unlocked_entry(xas, entry, WAKE_NEXT); 980 return ret; 981 } 982 983 /* 984 * Flush the mapping to the persistent domain within the byte range of [start, 985 * end]. This is required by data integrity operations to ensure file data is 986 * on persistent storage prior to completion of the operation. 987 */ 988 int dax_writeback_mapping_range(struct address_space *mapping, 989 struct dax_device *dax_dev, struct writeback_control *wbc) 990 { 991 XA_STATE(xas, &mapping->i_pages, wbc->range_start >> PAGE_SHIFT); 992 struct inode *inode = mapping->host; 993 pgoff_t end_index = wbc->range_end >> PAGE_SHIFT; 994 void *entry; 995 int ret = 0; 996 unsigned int scanned = 0; 997 998 if (WARN_ON_ONCE(inode->i_blkbits != PAGE_SHIFT)) 999 return -EIO; 1000 1001 if (mapping_empty(mapping) || wbc->sync_mode != WB_SYNC_ALL) 1002 return 0; 1003 1004 trace_dax_writeback_range(inode, xas.xa_index, end_index); 1005 1006 tag_pages_for_writeback(mapping, xas.xa_index, end_index); 1007 1008 xas_lock_irq(&xas); 1009 xas_for_each_marked(&xas, entry, end_index, PAGECACHE_TAG_TOWRITE) { 1010 ret = dax_writeback_one(&xas, dax_dev, mapping, entry); 1011 if (ret < 0) { 1012 mapping_set_error(mapping, ret); 1013 break; 1014 } 1015 if (++scanned % XA_CHECK_SCHED) 1016 continue; 1017 1018 xas_pause(&xas); 1019 xas_unlock_irq(&xas); 1020 cond_resched(); 1021 xas_lock_irq(&xas); 1022 } 1023 xas_unlock_irq(&xas); 1024 trace_dax_writeback_range_done(inode, xas.xa_index, end_index); 1025 return ret; 1026 } 1027 EXPORT_SYMBOL_GPL(dax_writeback_mapping_range); 1028 1029 static int dax_iomap_pfn(const struct iomap *iomap, loff_t pos, size_t size, 1030 pfn_t *pfnp) 1031 { 1032 pgoff_t pgoff = dax_iomap_pgoff(iomap, pos); 1033 int id, rc; 1034 long length; 1035 1036 id = dax_read_lock(); 1037 length = dax_direct_access(iomap->dax_dev, pgoff, PHYS_PFN(size), 1038 DAX_ACCESS, NULL, pfnp); 1039 if (length < 0) { 1040 rc = length; 1041 goto out; 1042 } 1043 rc = -EINVAL; 1044 if (PFN_PHYS(length) < size) 1045 goto out; 1046 if (pfn_t_to_pfn(*pfnp) & (PHYS_PFN(size)-1)) 1047 goto out; 1048 /* For larger pages we need devmap */ 1049 if (length > 1 && !pfn_t_devmap(*pfnp)) 1050 goto out; 1051 rc = 0; 1052 out: 1053 dax_read_unlock(id); 1054 return rc; 1055 } 1056 1057 /* 1058 * The user has performed a load from a hole in the file. Allocating a new 1059 * page in the file would cause excessive storage usage for workloads with 1060 * sparse files. Instead we insert a read-only mapping of the 4k zero page. 1061 * If this page is ever written to we will re-fault and change the mapping to 1062 * point to real DAX storage instead. 1063 */ 1064 static vm_fault_t dax_load_hole(struct xa_state *xas, 1065 struct address_space *mapping, void **entry, 1066 struct vm_fault *vmf) 1067 { 1068 struct inode *inode = mapping->host; 1069 unsigned long vaddr = vmf->address; 1070 pfn_t pfn = pfn_to_pfn_t(my_zero_pfn(vaddr)); 1071 vm_fault_t ret; 1072 1073 *entry = dax_insert_entry(xas, mapping, vmf, *entry, pfn, 1074 DAX_ZERO_PAGE, false); 1075 1076 ret = vmf_insert_mixed(vmf->vma, vaddr, pfn); 1077 trace_dax_load_hole(inode, vmf, ret); 1078 return ret; 1079 } 1080 1081 #ifdef CONFIG_FS_DAX_PMD 1082 static vm_fault_t dax_pmd_load_hole(struct xa_state *xas, struct vm_fault *vmf, 1083 const struct iomap *iomap, void **entry) 1084 { 1085 struct address_space *mapping = vmf->vma->vm_file->f_mapping; 1086 unsigned long pmd_addr = vmf->address & PMD_MASK; 1087 struct vm_area_struct *vma = vmf->vma; 1088 struct inode *inode = mapping->host; 1089 pgtable_t pgtable = NULL; 1090 struct page *zero_page; 1091 spinlock_t *ptl; 1092 pmd_t pmd_entry; 1093 pfn_t pfn; 1094 1095 zero_page = mm_get_huge_zero_page(vmf->vma->vm_mm); 1096 1097 if (unlikely(!zero_page)) 1098 goto fallback; 1099 1100 pfn = page_to_pfn_t(zero_page); 1101 *entry = dax_insert_entry(xas, mapping, vmf, *entry, pfn, 1102 DAX_PMD | DAX_ZERO_PAGE, false); 1103 1104 if (arch_needs_pgtable_deposit()) { 1105 pgtable = pte_alloc_one(vma->vm_mm); 1106 if (!pgtable) 1107 return VM_FAULT_OOM; 1108 } 1109 1110 ptl = pmd_lock(vmf->vma->vm_mm, vmf->pmd); 1111 if (!pmd_none(*(vmf->pmd))) { 1112 spin_unlock(ptl); 1113 goto fallback; 1114 } 1115 1116 if (pgtable) { 1117 pgtable_trans_huge_deposit(vma->vm_mm, vmf->pmd, pgtable); 1118 mm_inc_nr_ptes(vma->vm_mm); 1119 } 1120 pmd_entry = mk_pmd(zero_page, vmf->vma->vm_page_prot); 1121 pmd_entry = pmd_mkhuge(pmd_entry); 1122 set_pmd_at(vmf->vma->vm_mm, pmd_addr, vmf->pmd, pmd_entry); 1123 spin_unlock(ptl); 1124 trace_dax_pmd_load_hole(inode, vmf, zero_page, *entry); 1125 return VM_FAULT_NOPAGE; 1126 1127 fallback: 1128 if (pgtable) 1129 pte_free(vma->vm_mm, pgtable); 1130 trace_dax_pmd_load_hole_fallback(inode, vmf, zero_page, *entry); 1131 return VM_FAULT_FALLBACK; 1132 } 1133 #else 1134 static vm_fault_t dax_pmd_load_hole(struct xa_state *xas, struct vm_fault *vmf, 1135 const struct iomap *iomap, void **entry) 1136 { 1137 return VM_FAULT_FALLBACK; 1138 } 1139 #endif /* CONFIG_FS_DAX_PMD */ 1140 1141 static int dax_memzero(struct dax_device *dax_dev, pgoff_t pgoff, 1142 unsigned int offset, size_t size) 1143 { 1144 void *kaddr; 1145 long ret; 1146 1147 ret = dax_direct_access(dax_dev, pgoff, 1, DAX_ACCESS, &kaddr, NULL); 1148 if (ret > 0) { 1149 memset(kaddr + offset, 0, size); 1150 dax_flush(dax_dev, kaddr + offset, size); 1151 } 1152 return ret; 1153 } 1154 1155 static s64 dax_zero_iter(struct iomap_iter *iter, bool *did_zero) 1156 { 1157 const struct iomap *iomap = &iter->iomap; 1158 const struct iomap *srcmap = iomap_iter_srcmap(iter); 1159 loff_t pos = iter->pos; 1160 u64 length = iomap_length(iter); 1161 s64 written = 0; 1162 1163 /* already zeroed? we're done. */ 1164 if (srcmap->type == IOMAP_HOLE || srcmap->type == IOMAP_UNWRITTEN) 1165 return length; 1166 1167 do { 1168 unsigned offset = offset_in_page(pos); 1169 unsigned size = min_t(u64, PAGE_SIZE - offset, length); 1170 pgoff_t pgoff = dax_iomap_pgoff(iomap, pos); 1171 long rc; 1172 int id; 1173 1174 id = dax_read_lock(); 1175 if (IS_ALIGNED(pos, PAGE_SIZE) && size == PAGE_SIZE) 1176 rc = dax_zero_page_range(iomap->dax_dev, pgoff, 1); 1177 else 1178 rc = dax_memzero(iomap->dax_dev, pgoff, offset, size); 1179 dax_read_unlock(id); 1180 1181 if (rc < 0) 1182 return rc; 1183 pos += size; 1184 length -= size; 1185 written += size; 1186 if (did_zero) 1187 *did_zero = true; 1188 } while (length > 0); 1189 1190 return written; 1191 } 1192 1193 int dax_zero_range(struct inode *inode, loff_t pos, loff_t len, bool *did_zero, 1194 const struct iomap_ops *ops) 1195 { 1196 struct iomap_iter iter = { 1197 .inode = inode, 1198 .pos = pos, 1199 .len = len, 1200 .flags = IOMAP_DAX | IOMAP_ZERO, 1201 }; 1202 int ret; 1203 1204 while ((ret = iomap_iter(&iter, ops)) > 0) 1205 iter.processed = dax_zero_iter(&iter, did_zero); 1206 return ret; 1207 } 1208 EXPORT_SYMBOL_GPL(dax_zero_range); 1209 1210 int dax_truncate_page(struct inode *inode, loff_t pos, bool *did_zero, 1211 const struct iomap_ops *ops) 1212 { 1213 unsigned int blocksize = i_blocksize(inode); 1214 unsigned int off = pos & (blocksize - 1); 1215 1216 /* Block boundary? Nothing to do */ 1217 if (!off) 1218 return 0; 1219 return dax_zero_range(inode, pos, blocksize - off, did_zero, ops); 1220 } 1221 EXPORT_SYMBOL_GPL(dax_truncate_page); 1222 1223 static loff_t dax_iomap_iter(const struct iomap_iter *iomi, 1224 struct iov_iter *iter) 1225 { 1226 const struct iomap *iomap = &iomi->iomap; 1227 loff_t length = iomap_length(iomi); 1228 loff_t pos = iomi->pos; 1229 struct dax_device *dax_dev = iomap->dax_dev; 1230 loff_t end = pos + length, done = 0; 1231 ssize_t ret = 0; 1232 size_t xfer; 1233 int id; 1234 1235 if (iov_iter_rw(iter) == READ) { 1236 end = min(end, i_size_read(iomi->inode)); 1237 if (pos >= end) 1238 return 0; 1239 1240 if (iomap->type == IOMAP_HOLE || iomap->type == IOMAP_UNWRITTEN) 1241 return iov_iter_zero(min(length, end - pos), iter); 1242 } 1243 1244 if (WARN_ON_ONCE(iomap->type != IOMAP_MAPPED)) 1245 return -EIO; 1246 1247 /* 1248 * Write can allocate block for an area which has a hole page mapped 1249 * into page tables. We have to tear down these mappings so that data 1250 * written by write(2) is visible in mmap. 1251 */ 1252 if (iomap->flags & IOMAP_F_NEW) { 1253 invalidate_inode_pages2_range(iomi->inode->i_mapping, 1254 pos >> PAGE_SHIFT, 1255 (end - 1) >> PAGE_SHIFT); 1256 } 1257 1258 id = dax_read_lock(); 1259 while (pos < end) { 1260 unsigned offset = pos & (PAGE_SIZE - 1); 1261 const size_t size = ALIGN(length + offset, PAGE_SIZE); 1262 pgoff_t pgoff = dax_iomap_pgoff(iomap, pos); 1263 ssize_t map_len; 1264 bool recovery = false; 1265 void *kaddr; 1266 1267 if (fatal_signal_pending(current)) { 1268 ret = -EINTR; 1269 break; 1270 } 1271 1272 map_len = dax_direct_access(dax_dev, pgoff, PHYS_PFN(size), 1273 DAX_ACCESS, &kaddr, NULL); 1274 if (map_len == -EIO && iov_iter_rw(iter) == WRITE) { 1275 map_len = dax_direct_access(dax_dev, pgoff, 1276 PHYS_PFN(size), DAX_RECOVERY_WRITE, 1277 &kaddr, NULL); 1278 if (map_len > 0) 1279 recovery = true; 1280 } 1281 if (map_len < 0) { 1282 ret = map_len; 1283 break; 1284 } 1285 1286 map_len = PFN_PHYS(map_len); 1287 kaddr += offset; 1288 map_len -= offset; 1289 if (map_len > end - pos) 1290 map_len = end - pos; 1291 1292 if (recovery) 1293 xfer = dax_recovery_write(dax_dev, pgoff, kaddr, 1294 map_len, iter); 1295 else if (iov_iter_rw(iter) == WRITE) 1296 xfer = dax_copy_from_iter(dax_dev, pgoff, kaddr, 1297 map_len, iter); 1298 else 1299 xfer = dax_copy_to_iter(dax_dev, pgoff, kaddr, 1300 map_len, iter); 1301 1302 pos += xfer; 1303 length -= xfer; 1304 done += xfer; 1305 1306 if (xfer == 0) 1307 ret = -EFAULT; 1308 if (xfer < map_len) 1309 break; 1310 } 1311 dax_read_unlock(id); 1312 1313 return done ? done : ret; 1314 } 1315 1316 /** 1317 * dax_iomap_rw - Perform I/O to a DAX file 1318 * @iocb: The control block for this I/O 1319 * @iter: The addresses to do I/O from or to 1320 * @ops: iomap ops passed from the file system 1321 * 1322 * This function performs read and write operations to directly mapped 1323 * persistent memory. The callers needs to take care of read/write exclusion 1324 * and evicting any page cache pages in the region under I/O. 1325 */ 1326 ssize_t 1327 dax_iomap_rw(struct kiocb *iocb, struct iov_iter *iter, 1328 const struct iomap_ops *ops) 1329 { 1330 struct iomap_iter iomi = { 1331 .inode = iocb->ki_filp->f_mapping->host, 1332 .pos = iocb->ki_pos, 1333 .len = iov_iter_count(iter), 1334 .flags = IOMAP_DAX, 1335 }; 1336 loff_t done = 0; 1337 int ret; 1338 1339 if (iov_iter_rw(iter) == WRITE) { 1340 lockdep_assert_held_write(&iomi.inode->i_rwsem); 1341 iomi.flags |= IOMAP_WRITE; 1342 } else { 1343 lockdep_assert_held(&iomi.inode->i_rwsem); 1344 } 1345 1346 if (iocb->ki_flags & IOCB_NOWAIT) 1347 iomi.flags |= IOMAP_NOWAIT; 1348 1349 while ((ret = iomap_iter(&iomi, ops)) > 0) 1350 iomi.processed = dax_iomap_iter(&iomi, iter); 1351 1352 done = iomi.pos - iocb->ki_pos; 1353 iocb->ki_pos = iomi.pos; 1354 return done ? done : ret; 1355 } 1356 EXPORT_SYMBOL_GPL(dax_iomap_rw); 1357 1358 static vm_fault_t dax_fault_return(int error) 1359 { 1360 if (error == 0) 1361 return VM_FAULT_NOPAGE; 1362 return vmf_error(error); 1363 } 1364 1365 /* 1366 * MAP_SYNC on a dax mapping guarantees dirty metadata is 1367 * flushed on write-faults (non-cow), but not read-faults. 1368 */ 1369 static bool dax_fault_is_synchronous(unsigned long flags, 1370 struct vm_area_struct *vma, const struct iomap *iomap) 1371 { 1372 return (flags & IOMAP_WRITE) && (vma->vm_flags & VM_SYNC) 1373 && (iomap->flags & IOMAP_F_DIRTY); 1374 } 1375 1376 /* 1377 * When handling a synchronous page fault and the inode need a fsync, we can 1378 * insert the PTE/PMD into page tables only after that fsync happened. Skip 1379 * insertion for now and return the pfn so that caller can insert it after the 1380 * fsync is done. 1381 */ 1382 static vm_fault_t dax_fault_synchronous_pfnp(pfn_t *pfnp, pfn_t pfn) 1383 { 1384 if (WARN_ON_ONCE(!pfnp)) 1385 return VM_FAULT_SIGBUS; 1386 *pfnp = pfn; 1387 return VM_FAULT_NEEDDSYNC; 1388 } 1389 1390 static vm_fault_t dax_fault_cow_page(struct vm_fault *vmf, 1391 const struct iomap_iter *iter) 1392 { 1393 vm_fault_t ret; 1394 int error = 0; 1395 1396 switch (iter->iomap.type) { 1397 case IOMAP_HOLE: 1398 case IOMAP_UNWRITTEN: 1399 clear_user_highpage(vmf->cow_page, vmf->address); 1400 break; 1401 case IOMAP_MAPPED: 1402 error = copy_cow_page_dax(vmf, iter); 1403 break; 1404 default: 1405 WARN_ON_ONCE(1); 1406 error = -EIO; 1407 break; 1408 } 1409 1410 if (error) 1411 return dax_fault_return(error); 1412 1413 __SetPageUptodate(vmf->cow_page); 1414 ret = finish_fault(vmf); 1415 if (!ret) 1416 return VM_FAULT_DONE_COW; 1417 return ret; 1418 } 1419 1420 /** 1421 * dax_fault_iter - Common actor to handle pfn insertion in PTE/PMD fault. 1422 * @vmf: vm fault instance 1423 * @iter: iomap iter 1424 * @pfnp: pfn to be returned 1425 * @xas: the dax mapping tree of a file 1426 * @entry: an unlocked dax entry to be inserted 1427 * @pmd: distinguish whether it is a pmd fault 1428 */ 1429 static vm_fault_t dax_fault_iter(struct vm_fault *vmf, 1430 const struct iomap_iter *iter, pfn_t *pfnp, 1431 struct xa_state *xas, void **entry, bool pmd) 1432 { 1433 struct address_space *mapping = vmf->vma->vm_file->f_mapping; 1434 const struct iomap *iomap = &iter->iomap; 1435 size_t size = pmd ? PMD_SIZE : PAGE_SIZE; 1436 loff_t pos = (loff_t)xas->xa_index << PAGE_SHIFT; 1437 bool write = vmf->flags & FAULT_FLAG_WRITE; 1438 bool sync = dax_fault_is_synchronous(iter->flags, vmf->vma, iomap); 1439 unsigned long entry_flags = pmd ? DAX_PMD : 0; 1440 int err = 0; 1441 pfn_t pfn; 1442 1443 if (!pmd && vmf->cow_page) 1444 return dax_fault_cow_page(vmf, iter); 1445 1446 /* if we are reading UNWRITTEN and HOLE, return a hole. */ 1447 if (!write && 1448 (iomap->type == IOMAP_UNWRITTEN || iomap->type == IOMAP_HOLE)) { 1449 if (!pmd) 1450 return dax_load_hole(xas, mapping, entry, vmf); 1451 return dax_pmd_load_hole(xas, vmf, iomap, entry); 1452 } 1453 1454 if (iomap->type != IOMAP_MAPPED) { 1455 WARN_ON_ONCE(1); 1456 return pmd ? VM_FAULT_FALLBACK : VM_FAULT_SIGBUS; 1457 } 1458 1459 err = dax_iomap_pfn(&iter->iomap, pos, size, &pfn); 1460 if (err) 1461 return pmd ? VM_FAULT_FALLBACK : dax_fault_return(err); 1462 1463 *entry = dax_insert_entry(xas, mapping, vmf, *entry, pfn, entry_flags, 1464 write && !sync); 1465 1466 if (sync) 1467 return dax_fault_synchronous_pfnp(pfnp, pfn); 1468 1469 /* insert PMD pfn */ 1470 if (pmd) 1471 return vmf_insert_pfn_pmd(vmf, pfn, write); 1472 1473 /* insert PTE pfn */ 1474 if (write) 1475 return vmf_insert_mixed_mkwrite(vmf->vma, vmf->address, pfn); 1476 return vmf_insert_mixed(vmf->vma, vmf->address, pfn); 1477 } 1478 1479 static vm_fault_t dax_iomap_pte_fault(struct vm_fault *vmf, pfn_t *pfnp, 1480 int *iomap_errp, const struct iomap_ops *ops) 1481 { 1482 struct address_space *mapping = vmf->vma->vm_file->f_mapping; 1483 XA_STATE(xas, &mapping->i_pages, vmf->pgoff); 1484 struct iomap_iter iter = { 1485 .inode = mapping->host, 1486 .pos = (loff_t)vmf->pgoff << PAGE_SHIFT, 1487 .len = PAGE_SIZE, 1488 .flags = IOMAP_DAX | IOMAP_FAULT, 1489 }; 1490 vm_fault_t ret = 0; 1491 void *entry; 1492 int error; 1493 1494 trace_dax_pte_fault(iter.inode, vmf, ret); 1495 /* 1496 * Check whether offset isn't beyond end of file now. Caller is supposed 1497 * to hold locks serializing us with truncate / punch hole so this is 1498 * a reliable test. 1499 */ 1500 if (iter.pos >= i_size_read(iter.inode)) { 1501 ret = VM_FAULT_SIGBUS; 1502 goto out; 1503 } 1504 1505 if ((vmf->flags & FAULT_FLAG_WRITE) && !vmf->cow_page) 1506 iter.flags |= IOMAP_WRITE; 1507 1508 entry = grab_mapping_entry(&xas, mapping, 0); 1509 if (xa_is_internal(entry)) { 1510 ret = xa_to_internal(entry); 1511 goto out; 1512 } 1513 1514 /* 1515 * It is possible, particularly with mixed reads & writes to private 1516 * mappings, that we have raced with a PMD fault that overlaps with 1517 * the PTE we need to set up. If so just return and the fault will be 1518 * retried. 1519 */ 1520 if (pmd_trans_huge(*vmf->pmd) || pmd_devmap(*vmf->pmd)) { 1521 ret = VM_FAULT_NOPAGE; 1522 goto unlock_entry; 1523 } 1524 1525 while ((error = iomap_iter(&iter, ops)) > 0) { 1526 if (WARN_ON_ONCE(iomap_length(&iter) < PAGE_SIZE)) { 1527 iter.processed = -EIO; /* fs corruption? */ 1528 continue; 1529 } 1530 1531 ret = dax_fault_iter(vmf, &iter, pfnp, &xas, &entry, false); 1532 if (ret != VM_FAULT_SIGBUS && 1533 (iter.iomap.flags & IOMAP_F_NEW)) { 1534 count_vm_event(PGMAJFAULT); 1535 count_memcg_event_mm(vmf->vma->vm_mm, PGMAJFAULT); 1536 ret |= VM_FAULT_MAJOR; 1537 } 1538 1539 if (!(ret & VM_FAULT_ERROR)) 1540 iter.processed = PAGE_SIZE; 1541 } 1542 1543 if (iomap_errp) 1544 *iomap_errp = error; 1545 if (!ret && error) 1546 ret = dax_fault_return(error); 1547 1548 unlock_entry: 1549 dax_unlock_entry(&xas, entry); 1550 out: 1551 trace_dax_pte_fault_done(iter.inode, vmf, ret); 1552 return ret; 1553 } 1554 1555 #ifdef CONFIG_FS_DAX_PMD 1556 static bool dax_fault_check_fallback(struct vm_fault *vmf, struct xa_state *xas, 1557 pgoff_t max_pgoff) 1558 { 1559 unsigned long pmd_addr = vmf->address & PMD_MASK; 1560 bool write = vmf->flags & FAULT_FLAG_WRITE; 1561 1562 /* 1563 * Make sure that the faulting address's PMD offset (color) matches 1564 * the PMD offset from the start of the file. This is necessary so 1565 * that a PMD range in the page table overlaps exactly with a PMD 1566 * range in the page cache. 1567 */ 1568 if ((vmf->pgoff & PG_PMD_COLOUR) != 1569 ((vmf->address >> PAGE_SHIFT) & PG_PMD_COLOUR)) 1570 return true; 1571 1572 /* Fall back to PTEs if we're going to COW */ 1573 if (write && !(vmf->vma->vm_flags & VM_SHARED)) 1574 return true; 1575 1576 /* If the PMD would extend outside the VMA */ 1577 if (pmd_addr < vmf->vma->vm_start) 1578 return true; 1579 if ((pmd_addr + PMD_SIZE) > vmf->vma->vm_end) 1580 return true; 1581 1582 /* If the PMD would extend beyond the file size */ 1583 if ((xas->xa_index | PG_PMD_COLOUR) >= max_pgoff) 1584 return true; 1585 1586 return false; 1587 } 1588 1589 static vm_fault_t dax_iomap_pmd_fault(struct vm_fault *vmf, pfn_t *pfnp, 1590 const struct iomap_ops *ops) 1591 { 1592 struct address_space *mapping = vmf->vma->vm_file->f_mapping; 1593 XA_STATE_ORDER(xas, &mapping->i_pages, vmf->pgoff, PMD_ORDER); 1594 struct iomap_iter iter = { 1595 .inode = mapping->host, 1596 .len = PMD_SIZE, 1597 .flags = IOMAP_DAX | IOMAP_FAULT, 1598 }; 1599 vm_fault_t ret = VM_FAULT_FALLBACK; 1600 pgoff_t max_pgoff; 1601 void *entry; 1602 int error; 1603 1604 if (vmf->flags & FAULT_FLAG_WRITE) 1605 iter.flags |= IOMAP_WRITE; 1606 1607 /* 1608 * Check whether offset isn't beyond end of file now. Caller is 1609 * supposed to hold locks serializing us with truncate / punch hole so 1610 * this is a reliable test. 1611 */ 1612 max_pgoff = DIV_ROUND_UP(i_size_read(iter.inode), PAGE_SIZE); 1613 1614 trace_dax_pmd_fault(iter.inode, vmf, max_pgoff, 0); 1615 1616 if (xas.xa_index >= max_pgoff) { 1617 ret = VM_FAULT_SIGBUS; 1618 goto out; 1619 } 1620 1621 if (dax_fault_check_fallback(vmf, &xas, max_pgoff)) 1622 goto fallback; 1623 1624 /* 1625 * grab_mapping_entry() will make sure we get an empty PMD entry, 1626 * a zero PMD entry or a DAX PMD. If it can't (because a PTE 1627 * entry is already in the array, for instance), it will return 1628 * VM_FAULT_FALLBACK. 1629 */ 1630 entry = grab_mapping_entry(&xas, mapping, PMD_ORDER); 1631 if (xa_is_internal(entry)) { 1632 ret = xa_to_internal(entry); 1633 goto fallback; 1634 } 1635 1636 /* 1637 * It is possible, particularly with mixed reads & writes to private 1638 * mappings, that we have raced with a PTE fault that overlaps with 1639 * the PMD we need to set up. If so just return and the fault will be 1640 * retried. 1641 */ 1642 if (!pmd_none(*vmf->pmd) && !pmd_trans_huge(*vmf->pmd) && 1643 !pmd_devmap(*vmf->pmd)) { 1644 ret = 0; 1645 goto unlock_entry; 1646 } 1647 1648 iter.pos = (loff_t)xas.xa_index << PAGE_SHIFT; 1649 while ((error = iomap_iter(&iter, ops)) > 0) { 1650 if (iomap_length(&iter) < PMD_SIZE) 1651 continue; /* actually breaks out of the loop */ 1652 1653 ret = dax_fault_iter(vmf, &iter, pfnp, &xas, &entry, true); 1654 if (ret != VM_FAULT_FALLBACK) 1655 iter.processed = PMD_SIZE; 1656 } 1657 1658 unlock_entry: 1659 dax_unlock_entry(&xas, entry); 1660 fallback: 1661 if (ret == VM_FAULT_FALLBACK) { 1662 split_huge_pmd(vmf->vma, vmf->pmd, vmf->address); 1663 count_vm_event(THP_FAULT_FALLBACK); 1664 } 1665 out: 1666 trace_dax_pmd_fault_done(iter.inode, vmf, max_pgoff, ret); 1667 return ret; 1668 } 1669 #else 1670 static vm_fault_t dax_iomap_pmd_fault(struct vm_fault *vmf, pfn_t *pfnp, 1671 const struct iomap_ops *ops) 1672 { 1673 return VM_FAULT_FALLBACK; 1674 } 1675 #endif /* CONFIG_FS_DAX_PMD */ 1676 1677 /** 1678 * dax_iomap_fault - handle a page fault on a DAX file 1679 * @vmf: The description of the fault 1680 * @pe_size: Size of the page to fault in 1681 * @pfnp: PFN to insert for synchronous faults if fsync is required 1682 * @iomap_errp: Storage for detailed error code in case of error 1683 * @ops: Iomap ops passed from the file system 1684 * 1685 * When a page fault occurs, filesystems may call this helper in 1686 * their fault handler for DAX files. dax_iomap_fault() assumes the caller 1687 * has done all the necessary locking for page fault to proceed 1688 * successfully. 1689 */ 1690 vm_fault_t dax_iomap_fault(struct vm_fault *vmf, enum page_entry_size pe_size, 1691 pfn_t *pfnp, int *iomap_errp, const struct iomap_ops *ops) 1692 { 1693 switch (pe_size) { 1694 case PE_SIZE_PTE: 1695 return dax_iomap_pte_fault(vmf, pfnp, iomap_errp, ops); 1696 case PE_SIZE_PMD: 1697 return dax_iomap_pmd_fault(vmf, pfnp, ops); 1698 default: 1699 return VM_FAULT_FALLBACK; 1700 } 1701 } 1702 EXPORT_SYMBOL_GPL(dax_iomap_fault); 1703 1704 /* 1705 * dax_insert_pfn_mkwrite - insert PTE or PMD entry into page tables 1706 * @vmf: The description of the fault 1707 * @pfn: PFN to insert 1708 * @order: Order of entry to insert. 1709 * 1710 * This function inserts a writeable PTE or PMD entry into the page tables 1711 * for an mmaped DAX file. It also marks the page cache entry as dirty. 1712 */ 1713 static vm_fault_t 1714 dax_insert_pfn_mkwrite(struct vm_fault *vmf, pfn_t pfn, unsigned int order) 1715 { 1716 struct address_space *mapping = vmf->vma->vm_file->f_mapping; 1717 XA_STATE_ORDER(xas, &mapping->i_pages, vmf->pgoff, order); 1718 void *entry; 1719 vm_fault_t ret; 1720 1721 xas_lock_irq(&xas); 1722 entry = get_unlocked_entry(&xas, order); 1723 /* Did we race with someone splitting entry or so? */ 1724 if (!entry || dax_is_conflict(entry) || 1725 (order == 0 && !dax_is_pte_entry(entry))) { 1726 put_unlocked_entry(&xas, entry, WAKE_NEXT); 1727 xas_unlock_irq(&xas); 1728 trace_dax_insert_pfn_mkwrite_no_entry(mapping->host, vmf, 1729 VM_FAULT_NOPAGE); 1730 return VM_FAULT_NOPAGE; 1731 } 1732 xas_set_mark(&xas, PAGECACHE_TAG_DIRTY); 1733 dax_lock_entry(&xas, entry); 1734 xas_unlock_irq(&xas); 1735 if (order == 0) 1736 ret = vmf_insert_mixed_mkwrite(vmf->vma, vmf->address, pfn); 1737 #ifdef CONFIG_FS_DAX_PMD 1738 else if (order == PMD_ORDER) 1739 ret = vmf_insert_pfn_pmd(vmf, pfn, FAULT_FLAG_WRITE); 1740 #endif 1741 else 1742 ret = VM_FAULT_FALLBACK; 1743 dax_unlock_entry(&xas, entry); 1744 trace_dax_insert_pfn_mkwrite(mapping->host, vmf, ret); 1745 return ret; 1746 } 1747 1748 /** 1749 * dax_finish_sync_fault - finish synchronous page fault 1750 * @vmf: The description of the fault 1751 * @pe_size: Size of entry to be inserted 1752 * @pfn: PFN to insert 1753 * 1754 * This function ensures that the file range touched by the page fault is 1755 * stored persistently on the media and handles inserting of appropriate page 1756 * table entry. 1757 */ 1758 vm_fault_t dax_finish_sync_fault(struct vm_fault *vmf, 1759 enum page_entry_size pe_size, pfn_t pfn) 1760 { 1761 int err; 1762 loff_t start = ((loff_t)vmf->pgoff) << PAGE_SHIFT; 1763 unsigned int order = pe_order(pe_size); 1764 size_t len = PAGE_SIZE << order; 1765 1766 err = vfs_fsync_range(vmf->vma->vm_file, start, start + len - 1, 1); 1767 if (err) 1768 return VM_FAULT_SIGBUS; 1769 return dax_insert_pfn_mkwrite(vmf, pfn, order); 1770 } 1771 EXPORT_SYMBOL_GPL(dax_finish_sync_fault); 1772