dax.c 23.0 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
/*
 * fs/dax.c - Direct Access filesystem code
 * Copyright (c) 2013-2014 Intel Corporation
 * Author: Matthew Wilcox <matthew.r.wilcox@intel.com>
 * Author: Ross Zwisler <ross.zwisler@linux.intel.com>
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 */

#include <linux/atomic.h>
#include <linux/blkdev.h>
#include <linux/buffer_head.h>
20
#include <linux/dax.h>
21 22
#include <linux/fs.h>
#include <linux/genhd.h>
23 24 25
#include <linux/highmem.h>
#include <linux/memcontrol.h>
#include <linux/mm.h>
26
#include <linux/mutex.h>
27
#include <linux/pmem.h>
28
#include <linux/sched.h>
29
#include <linux/uio.h>
30
#include <linux/vmstat.h>
31
#include <linux/sizes.h>
32

33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58
static long dax_map_atomic(struct block_device *bdev, struct blk_dax_ctl *dax)
{
	struct request_queue *q = bdev->bd_queue;
	long rc = -EIO;

	dax->addr = (void __pmem *) ERR_PTR(-EIO);
	if (blk_queue_enter(q, true) != 0)
		return rc;

	rc = bdev_direct_access(bdev, dax);
	if (rc < 0) {
		dax->addr = (void __pmem *) ERR_PTR(rc);
		blk_queue_exit(q);
		return rc;
	}
	return rc;
}

static void dax_unmap_atomic(struct block_device *bdev,
		const struct blk_dax_ctl *dax)
{
	if (IS_ERR(dax->addr))
		return;
	blk_queue_exit(bdev->bd_queue);
}

59 60 61 62 63
/*
 * dax_clear_blocks() is called from within transaction context from XFS,
 * and hence this means the stack from this point must follow GFP_NOFS
 * semantics for all operations.
 */
64
int dax_clear_blocks(struct inode *inode, sector_t block, long _size)
65 66
{
	struct block_device *bdev = inode->i_sb->s_bdev;
67 68 69 70
	struct blk_dax_ctl dax = {
		.sector = block << (inode->i_blkbits - 9),
		.size = _size,
	};
71 72 73

	might_sleep();
	do {
74
		long count, sz;
75

76
		count = dax_map_atomic(bdev, &dax);
77 78
		if (count < 0)
			return count;
79
		sz = min_t(long, count, SZ_128K);
80 81 82 83
		clear_pmem(dax.addr, sz);
		dax.size -= sz;
		dax.sector += sz / 512;
		dax_unmap_atomic(bdev, &dax);
84
		cond_resched();
85
	} while (dax.size);
86

87
	wmb_pmem();
88 89 90 91
	return 0;
}
EXPORT_SYMBOL_GPL(dax_clear_blocks);

92
/* the clear_pmem() calls are ordered by a wmb_pmem() in the caller */
93 94
static void dax_new_buf(void __pmem *addr, unsigned size, unsigned first,
		loff_t pos, loff_t end)
95 96 97 98
{
	loff_t final = end - pos + first; /* The final byte of the buffer */

	if (first > 0)
99
		clear_pmem(addr, first);
100
	if (final < size)
101
		clear_pmem(addr + final, size - final);
102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120
}

static bool buffer_written(struct buffer_head *bh)
{
	return buffer_mapped(bh) && !buffer_unwritten(bh);
}

/*
 * When ext4 encounters a hole, it returns without modifying the buffer_head
 * which means that we can't trust b_size.  To cope with this, we set b_state
 * to 0 before calling get_block and, if any bit is set, we know we can trust
 * b_size.  Unfortunate, really, since ext4 knows precisely how long a hole is
 * and would save us time calling get_block repeatedly.
 */
static bool buffer_size_valid(struct buffer_head *bh)
{
	return bh->b_state != 0;
}

121 122 123 124 125 126 127 128 129

static sector_t to_sector(const struct buffer_head *bh,
		const struct inode *inode)
{
	sector_t sector = bh->b_blocknr << (inode->i_blkbits - 9);

	return sector;
}

O
Omar Sandoval 已提交
130 131 132
static ssize_t dax_io(struct inode *inode, struct iov_iter *iter,
		      loff_t start, loff_t end, get_block_t get_block,
		      struct buffer_head *bh)
133
{
134 135 136 137 138 139 140 141 142 143
	loff_t pos = start, max = start, bh_max = start;
	bool hole = false, need_wmb = false;
	struct block_device *bdev = NULL;
	int rw = iov_iter_rw(iter), rc;
	long map_len = 0;
	struct blk_dax_ctl dax = {
		.addr = (void __pmem *) ERR_PTR(-EIO),
	};

	if (rw == READ)
144 145 146
		end = min(end, i_size_read(inode));

	while (pos < end) {
147
		size_t len;
148 149
		if (pos == max) {
			unsigned blkbits = inode->i_blkbits;
150 151
			long page = pos >> PAGE_SHIFT;
			sector_t block = page << (PAGE_SHIFT - blkbits);
152 153 154 155 156 157
			unsigned first = pos - (block << blkbits);
			long size;

			if (pos == bh_max) {
				bh->b_size = PAGE_ALIGN(end - pos);
				bh->b_state = 0;
158 159
				rc = get_block(inode, block, bh, rw == WRITE);
				if (rc)
160 161 162 163
					break;
				if (!buffer_size_valid(bh))
					bh->b_size = 1 << blkbits;
				bh_max = pos - first + bh->b_size;
164
				bdev = bh->b_bdev;
165 166 167 168 169 170 171
			} else {
				unsigned done = bh->b_size -
						(bh_max - (pos - first));
				bh->b_blocknr += done >> blkbits;
				bh->b_size -= done;
			}

172
			hole = rw == READ && !buffer_written(bh);
173 174 175
			if (hole) {
				size = bh->b_size - first;
			} else {
176 177 178 179 180 181
				dax_unmap_atomic(bdev, &dax);
				dax.sector = to_sector(bh, inode);
				dax.size = bh->b_size;
				map_len = dax_map_atomic(bdev, &dax);
				if (map_len < 0) {
					rc = map_len;
182
					break;
183
				}
184
				if (buffer_unwritten(bh) || buffer_new(bh)) {
185 186
					dax_new_buf(dax.addr, map_len, first,
							pos, end);
187 188
					need_wmb = true;
				}
189 190
				dax.addr += first;
				size = map_len - first;
191 192 193 194
			}
			max = min(pos + size, end);
		}

195
		if (iov_iter_rw(iter) == WRITE) {
196
			len = copy_from_iter_pmem(dax.addr, max - pos, iter);
197 198
			need_wmb = true;
		} else if (!hole)
199
			len = copy_to_iter((void __force *) dax.addr, max - pos,
200
					iter);
201 202 203
		else
			len = iov_iter_zero(max - pos, iter);

204
		if (!len) {
205
			rc = -EFAULT;
206
			break;
207
		}
208 209

		pos += len;
210 211
		if (!IS_ERR(dax.addr))
			dax.addr += len;
212 213
	}

214 215
	if (need_wmb)
		wmb_pmem();
216
	dax_unmap_atomic(bdev, &dax);
217

218
	return (pos == start) ? rc : pos - start;
219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237
}

/**
 * dax_do_io - Perform I/O to a DAX file
 * @iocb: The control block for this I/O
 * @inode: The file which the I/O is directed at
 * @iter: The addresses to do I/O from or to
 * @pos: The file offset where the I/O starts
 * @get_block: The filesystem method used to translate file offsets to blocks
 * @end_io: A filesystem callback for I/O completion
 * @flags: See below
 *
 * This function uses the same locking scheme as do_blockdev_direct_IO:
 * If @flags has DIO_LOCKING set, we assume that the i_mutex is held by the
 * caller for writes.  For reads, we take and release the i_mutex ourselves.
 * If DIO_LOCKING is not set, the filesystem takes care of its own locking.
 * As with do_blockdev_direct_IO(), we increment i_dio_count while the I/O
 * is in progress.
 */
O
Omar Sandoval 已提交
238 239 240
ssize_t dax_do_io(struct kiocb *iocb, struct inode *inode,
		  struct iov_iter *iter, loff_t pos, get_block_t get_block,
		  dio_iodone_t end_io, int flags)
241 242 243 244 245 246 247
{
	struct buffer_head bh;
	ssize_t retval = -EINVAL;
	loff_t end = pos + iov_iter_count(iter);

	memset(&bh, 0, sizeof(bh));

O
Omar Sandoval 已提交
248
	if ((flags & DIO_LOCKING) && iov_iter_rw(iter) == READ) {
249 250 251 252 253 254 255 256 257 258
		struct address_space *mapping = inode->i_mapping;
		mutex_lock(&inode->i_mutex);
		retval = filemap_write_and_wait_range(mapping, pos, end - 1);
		if (retval) {
			mutex_unlock(&inode->i_mutex);
			goto out;
		}
	}

	/* Protects against truncate */
259 260
	if (!(flags & DIO_SKIP_DIO_COUNT))
		inode_dio_begin(inode);
261

O
Omar Sandoval 已提交
262
	retval = dax_io(inode, iter, pos, end, get_block, &bh);
263

O
Omar Sandoval 已提交
264
	if ((flags & DIO_LOCKING) && iov_iter_rw(iter) == READ)
265 266 267 268 269
		mutex_unlock(&inode->i_mutex);

	if ((retval > 0) && end_io)
		end_io(iocb, pos, retval, bh.b_private);

270 271
	if (!(flags & DIO_SKIP_DIO_COUNT))
		inode_dio_end(inode);
272 273 274 275
 out:
	return retval;
}
EXPORT_SYMBOL_GPL(dax_do_io);
276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306

/*
 * The user has performed a load from a hole in the file.  Allocating
 * a new page in the file would cause excessive storage usage for
 * workloads with sparse files.  We allocate a page cache page instead.
 * We'll kick it out of the page cache if it's ever written to,
 * otherwise it will simply fall out of the page cache under memory
 * pressure without ever having been dirtied.
 */
static int dax_load_hole(struct address_space *mapping, struct page *page,
							struct vm_fault *vmf)
{
	unsigned long size;
	struct inode *inode = mapping->host;
	if (!page)
		page = find_or_create_page(mapping, vmf->pgoff,
						GFP_KERNEL | __GFP_ZERO);
	if (!page)
		return VM_FAULT_OOM;
	/* Recheck i_size under page lock to avoid truncate race */
	size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
	if (vmf->pgoff >= size) {
		unlock_page(page);
		page_cache_release(page);
		return VM_FAULT_SIGBUS;
	}

	vmf->page = page;
	return VM_FAULT_LOCKED;
}

307 308
static int copy_user_bh(struct page *to, struct inode *inode,
		struct buffer_head *bh, unsigned long vaddr)
309
{
310 311 312 313 314
	struct blk_dax_ctl dax = {
		.sector = to_sector(bh, inode),
		.size = bh->b_size,
	};
	struct block_device *bdev = bh->b_bdev;
315 316
	void *vto;

317 318
	if (dax_map_atomic(bdev, &dax) < 0)
		return PTR_ERR(dax.addr);
319
	vto = kmap_atomic(to);
320
	copy_user_page(vto, (void __force *)dax.addr, vaddr, to);
321
	kunmap_atomic(vto);
322
	dax_unmap_atomic(bdev, &dax);
323 324 325 326 327 328 329
	return 0;
}

static int dax_insert_mapping(struct inode *inode, struct buffer_head *bh,
			struct vm_area_struct *vma, struct vm_fault *vmf)
{
	unsigned long vaddr = (unsigned long)vmf->virtual_address;
330 331 332 333 334 335
	struct address_space *mapping = inode->i_mapping;
	struct block_device *bdev = bh->b_bdev;
	struct blk_dax_ctl dax = {
		.sector = to_sector(bh, inode),
		.size = bh->b_size,
	};
336 337 338
	pgoff_t size;
	int error;

R
Ross Zwisler 已提交
339 340
	i_mmap_lock_read(mapping);

341 342 343 344 345 346 347 348 349 350 351 352 353
	/*
	 * Check truncate didn't happen while we were allocating a block.
	 * If it did, this block may or may not be still allocated to the
	 * file.  We can't tell the filesystem to free it because we can't
	 * take i_mutex here.  In the worst case, the file still has blocks
	 * allocated past the end of the file.
	 */
	size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
	if (unlikely(vmf->pgoff >= size)) {
		error = -EIO;
		goto out;
	}

354 355
	if (dax_map_atomic(bdev, &dax) < 0) {
		error = PTR_ERR(dax.addr);
356 357 358
		goto out;
	}

359
	if (buffer_unwritten(bh) || buffer_new(bh)) {
360
		clear_pmem(dax.addr, PAGE_SIZE);
361 362
		wmb_pmem();
	}
363
	dax_unmap_atomic(bdev, &dax);
364

365
	error = vm_insert_mixed(vma, vaddr, dax.pfn);
366 367

 out:
R
Ross Zwisler 已提交
368 369
	i_mmap_unlock_read(mapping);

370 371 372
	return error;
}

373 374 375 376 377
/**
 * __dax_fault - handle a page fault on a DAX file
 * @vma: The virtual memory area where the fault occurred
 * @vmf: The description of the fault
 * @get_block: The filesystem method used to translate file offsets to blocks
378 379 380 381 382 383
 * @complete_unwritten: The filesystem method used to convert unwritten blocks
 *	to written so the data written to them is exposed. This is required for
 *	required by write faults for filesystems that will return unwritten
 *	extent mappings from @get_block, but it is optional for reads as
 *	dax_insert_mapping() will always zero unwritten blocks. If the fs does
 *	not support unwritten extents, the it should pass NULL.
384 385 386 387 388 389
 *
 * When a page fault occurs, filesystems may call this helper in their
 * fault handler for DAX files. __dax_fault() assumes the caller has done all
 * the necessary locking for the page fault to proceed successfully.
 */
int __dax_fault(struct vm_area_struct *vma, struct vm_fault *vmf,
390
			get_block_t get_block, dax_iodone_t complete_unwritten)
391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430
{
	struct file *file = vma->vm_file;
	struct address_space *mapping = file->f_mapping;
	struct inode *inode = mapping->host;
	struct page *page;
	struct buffer_head bh;
	unsigned long vaddr = (unsigned long)vmf->virtual_address;
	unsigned blkbits = inode->i_blkbits;
	sector_t block;
	pgoff_t size;
	int error;
	int major = 0;

	size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
	if (vmf->pgoff >= size)
		return VM_FAULT_SIGBUS;

	memset(&bh, 0, sizeof(bh));
	block = (sector_t)vmf->pgoff << (PAGE_SHIFT - blkbits);
	bh.b_size = PAGE_SIZE;

 repeat:
	page = find_get_page(mapping, vmf->pgoff);
	if (page) {
		if (!lock_page_or_retry(page, vma->vm_mm, vmf->flags)) {
			page_cache_release(page);
			return VM_FAULT_RETRY;
		}
		if (unlikely(page->mapping != mapping)) {
			unlock_page(page);
			page_cache_release(page);
			goto repeat;
		}
		size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
		if (unlikely(vmf->pgoff >= size)) {
			/*
			 * We have a struct page covering a hole in the file
			 * from a read fault and we've raced with a truncate
			 */
			error = -EIO;
R
Ross Zwisler 已提交
431
			goto unlock_page;
432 433 434 435 436 437 438
		}
	}

	error = get_block(inode, block, &bh, 0);
	if (!error && (bh.b_size < PAGE_SIZE))
		error = -EIO;		/* fs corruption? */
	if (error)
R
Ross Zwisler 已提交
439
		goto unlock_page;
440 441 442 443 444 445 446 447 448 449

	if (!buffer_mapped(&bh) && !buffer_unwritten(&bh) && !vmf->cow_page) {
		if (vmf->flags & FAULT_FLAG_WRITE) {
			error = get_block(inode, block, &bh, 1);
			count_vm_event(PGMAJFAULT);
			mem_cgroup_count_vm_event(vma->vm_mm, PGMAJFAULT);
			major = VM_FAULT_MAJOR;
			if (!error && (bh.b_size < PAGE_SIZE))
				error = -EIO;
			if (error)
R
Ross Zwisler 已提交
450
				goto unlock_page;
451 452 453 454 455 456 457 458
		} else {
			return dax_load_hole(mapping, page, vmf);
		}
	}

	if (vmf->cow_page) {
		struct page *new_page = vmf->cow_page;
		if (buffer_written(&bh))
459
			error = copy_user_bh(new_page, inode, &bh, vaddr);
460 461 462
		else
			clear_user_highpage(new_page, vaddr);
		if (error)
R
Ross Zwisler 已提交
463
			goto unlock_page;
464 465
		vmf->page = page;
		if (!page) {
R
Ross Zwisler 已提交
466
			i_mmap_lock_read(mapping);
467 468 469 470
			/* Check we didn't race with truncate */
			size = (i_size_read(inode) + PAGE_SIZE - 1) >>
								PAGE_SHIFT;
			if (vmf->pgoff >= size) {
R
Ross Zwisler 已提交
471
				i_mmap_unlock_read(mapping);
472
				error = -EIO;
R
Ross Zwisler 已提交
473
				goto out;
474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490
			}
		}
		return VM_FAULT_LOCKED;
	}

	/* Check we didn't race with a read fault installing a new page */
	if (!page && major)
		page = find_lock_page(mapping, vmf->pgoff);

	if (page) {
		unmap_mapping_range(mapping, vmf->pgoff << PAGE_SHIFT,
							PAGE_CACHE_SIZE, 0);
		delete_from_page_cache(page);
		unlock_page(page);
		page_cache_release(page);
	}

491 492 493 494 495 496 497 498 499 500
	/*
	 * If we successfully insert the new mapping over an unwritten extent,
	 * we need to ensure we convert the unwritten extent. If there is an
	 * error inserting the mapping, the filesystem needs to leave it as
	 * unwritten to prevent exposure of the stale underlying data to
	 * userspace, but we still need to call the completion function so
	 * the private resources on the mapping buffer can be released. We
	 * indicate what the callback should do via the uptodate variable, same
	 * as for normal BH based IO completions.
	 */
501
	error = dax_insert_mapping(inode, &bh, vma, vmf);
502 503 504 505 506 507
	if (buffer_unwritten(&bh)) {
		if (complete_unwritten)
			complete_unwritten(&bh, !error);
		else
			WARN_ON_ONCE(!(vmf->flags & FAULT_FLAG_WRITE));
	}
508 509 510 511 512 513 514 515 516

 out:
	if (error == -ENOMEM)
		return VM_FAULT_OOM | major;
	/* -EBUSY is fine, somebody else faulted on the same PTE */
	if ((error < 0) && (error != -EBUSY))
		return VM_FAULT_SIGBUS | major;
	return VM_FAULT_NOPAGE | major;

R
Ross Zwisler 已提交
517
 unlock_page:
518 519 520 521 522 523
	if (page) {
		unlock_page(page);
		page_cache_release(page);
	}
	goto out;
}
524
EXPORT_SYMBOL(__dax_fault);
525 526 527 528 529 530 531 532 533 534 535

/**
 * dax_fault - handle a page fault on a DAX file
 * @vma: The virtual memory area where the fault occurred
 * @vmf: The description of the fault
 * @get_block: The filesystem method used to translate file offsets to blocks
 *
 * When a page fault occurs, filesystems may call this helper in their
 * fault handler for DAX files.
 */
int dax_fault(struct vm_area_struct *vma, struct vm_fault *vmf,
536
	      get_block_t get_block, dax_iodone_t complete_unwritten)
537 538 539 540 541 542 543 544
{
	int result;
	struct super_block *sb = file_inode(vma->vm_file)->i_sb;

	if (vmf->flags & FAULT_FLAG_WRITE) {
		sb_start_pagefault(sb);
		file_update_time(vma->vm_file);
	}
545
	result = __dax_fault(vma, vmf, get_block, complete_unwritten);
546 547 548 549 550 551
	if (vmf->flags & FAULT_FLAG_WRITE)
		sb_end_pagefault(sb);

	return result;
}
EXPORT_SYMBOL_GPL(dax_fault);
552

553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570
#ifdef CONFIG_TRANSPARENT_HUGEPAGE
/*
 * The 'colour' (ie low bits) within a PMD of a page offset.  This comes up
 * more often than one might expect in the below function.
 */
#define PG_PMD_COLOUR	((PMD_SIZE >> PAGE_SHIFT) - 1)

int __dax_pmd_fault(struct vm_area_struct *vma, unsigned long address,
		pmd_t *pmd, unsigned int flags, get_block_t get_block,
		dax_iodone_t complete_unwritten)
{
	struct file *file = vma->vm_file;
	struct address_space *mapping = file->f_mapping;
	struct inode *inode = mapping->host;
	struct buffer_head bh;
	unsigned blkbits = inode->i_blkbits;
	unsigned long pmd_addr = address & PMD_MASK;
	bool write = flags & FAULT_FLAG_WRITE;
571
	struct block_device *bdev;
572
	pgoff_t size, pgoff;
573
	sector_t block;
574 575
	int result = 0;

D
Dan Williams 已提交
576 577 578 579
	/* dax pmd mappings are broken wrt gup and fork */
	if (!IS_ENABLED(CONFIG_FS_DAX_PMD))
		return VM_FAULT_FALLBACK;

580 581 582 583 584 585 586 587 588
	/* Fall back to PTEs if we're going to COW */
	if (write && !(vma->vm_flags & VM_SHARED))
		return VM_FAULT_FALLBACK;
	/* If the PMD would extend outside the VMA */
	if (pmd_addr < vma->vm_start)
		return VM_FAULT_FALLBACK;
	if ((pmd_addr + PMD_SIZE) > vma->vm_end)
		return VM_FAULT_FALLBACK;

M
Matthew Wilcox 已提交
589
	pgoff = linear_page_index(vma, pmd_addr);
590 591 592 593 594 595 596 597 598 599 600
	size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
	if (pgoff >= size)
		return VM_FAULT_SIGBUS;
	/* If the PMD would cover blocks out of the file */
	if ((pgoff | PG_PMD_COLOUR) >= size)
		return VM_FAULT_FALLBACK;

	memset(&bh, 0, sizeof(bh));
	block = (sector_t)pgoff << (PAGE_SHIFT - blkbits);

	bh.b_size = PMD_SIZE;
601
	if (get_block(inode, block, &bh, write) != 0)
602
		return VM_FAULT_SIGBUS;
603
	bdev = bh.b_bdev;
R
Ross Zwisler 已提交
604
	i_mmap_lock_read(mapping);
605 606 607 608 609 610 611 612 613

	/*
	 * If the filesystem isn't willing to tell us the length of a hole,
	 * just fall back to PTEs.  Calling get_block 512 times in a loop
	 * would be silly.
	 */
	if (!buffer_size_valid(&bh) || bh.b_size < PMD_SIZE)
		goto fallback;

614 615 616 617 618
	/*
	 * If we allocated new storage, make sure no process has any
	 * zero pages covering this hole
	 */
	if (buffer_new(&bh)) {
R
Ross Zwisler 已提交
619
		i_mmap_unlock_read(mapping);
620
		unmap_mapping_range(mapping, pgoff << PAGE_SHIFT, PMD_SIZE, 0);
R
Ross Zwisler 已提交
621
		i_mmap_lock_read(mapping);
622 623
	}

624 625 626 627 628 629
	/*
	 * If a truncate happened while we were allocating blocks, we may
	 * leave blocks allocated to the file that are beyond EOF.  We can't
	 * take i_mutex here, so just leave them hanging; they'll be freed
	 * when the file is deleted.
	 */
630 631 632 633 634 635 636 637 638 639
	size = (i_size_read(inode) + PAGE_SIZE - 1) >> PAGE_SHIFT;
	if (pgoff >= size) {
		result = VM_FAULT_SIGBUS;
		goto out;
	}
	if ((pgoff | PG_PMD_COLOUR) >= size)
		goto fallback;

	if (!write && !buffer_mapped(&bh) && buffer_uptodate(&bh)) {
		spinlock_t *ptl;
640
		pmd_t entry;
641
		struct page *zero_page = get_huge_zero_page();
642

643 644 645
		if (unlikely(!zero_page))
			goto fallback;

646 647 648 649 650 651 652 653 654
		ptl = pmd_lock(vma->vm_mm, pmd);
		if (!pmd_none(*pmd)) {
			spin_unlock(ptl);
			goto fallback;
		}

		entry = mk_pmd(zero_page, vma->vm_page_prot);
		entry = pmd_mkhuge(entry);
		set_pmd_at(vma->vm_mm, pmd_addr, pmd, entry);
655
		result = VM_FAULT_NOPAGE;
656
		spin_unlock(ptl);
657
	} else {
658 659 660 661 662 663
		struct blk_dax_ctl dax = {
			.sector = to_sector(&bh, inode),
			.size = PMD_SIZE,
		};
		long length = dax_map_atomic(bdev, &dax);

664 665 666 667
		if (length < 0) {
			result = VM_FAULT_SIGBUS;
			goto out;
		}
668 669
		if ((length < PMD_SIZE) || (dax.pfn & PG_PMD_COLOUR)) {
			dax_unmap_atomic(bdev, &dax);
670
			goto fallback;
671
		}
672

D
Dan Williams 已提交
673 674 675 676
		/*
		 * TODO: teach vmf_insert_pfn_pmd() to support
		 * 'pte_special' for pmds
		 */
677 678
		if (pfn_valid(dax.pfn)) {
			dax_unmap_atomic(bdev, &dax);
D
Dan Williams 已提交
679
			goto fallback;
680
		}
D
Dan Williams 已提交
681

R
Ross Zwisler 已提交
682
		if (buffer_unwritten(&bh) || buffer_new(&bh)) {
683
			clear_pmem(dax.addr, PMD_SIZE);
R
Ross Zwisler 已提交
684 685 686 687 688
			wmb_pmem();
			count_vm_event(PGMAJFAULT);
			mem_cgroup_count_vm_event(vma->vm_mm, PGMAJFAULT);
			result |= VM_FAULT_MAJOR;
		}
689
		dax_unmap_atomic(bdev, &dax);
R
Ross Zwisler 已提交
690

691
		result |= vmf_insert_pfn_pmd(vma, address, pmd, dax.pfn, write);
692 693 694
	}

 out:
R
Ross Zwisler 已提交
695 696
	i_mmap_unlock_read(mapping);

697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736
	if (buffer_unwritten(&bh))
		complete_unwritten(&bh, !(result & VM_FAULT_ERROR));

	return result;

 fallback:
	count_vm_event(THP_FAULT_FALLBACK);
	result = VM_FAULT_FALLBACK;
	goto out;
}
EXPORT_SYMBOL_GPL(__dax_pmd_fault);

/**
 * dax_pmd_fault - handle a PMD fault on a DAX file
 * @vma: The virtual memory area where the fault occurred
 * @vmf: The description of the fault
 * @get_block: The filesystem method used to translate file offsets to blocks
 *
 * When a page fault occurs, filesystems may call this helper in their
 * pmd_fault handler for DAX files.
 */
int dax_pmd_fault(struct vm_area_struct *vma, unsigned long address,
			pmd_t *pmd, unsigned int flags, get_block_t get_block,
			dax_iodone_t complete_unwritten)
{
	int result;
	struct super_block *sb = file_inode(vma->vm_file)->i_sb;

	if (flags & FAULT_FLAG_WRITE) {
		sb_start_pagefault(sb);
		file_update_time(vma->vm_file);
	}
	result = __dax_pmd_fault(vma, address, pmd, flags, get_block,
				complete_unwritten);
	if (flags & FAULT_FLAG_WRITE)
		sb_end_pagefault(sb);

	return result;
}
EXPORT_SYMBOL_GPL(dax_pmd_fault);
737
#endif /* CONFIG_TRANSPARENT_HUGEPAGE */
738

739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755
/**
 * dax_pfn_mkwrite - handle first write to DAX page
 * @vma: The virtual memory area where the fault occurred
 * @vmf: The description of the fault
 *
 */
int dax_pfn_mkwrite(struct vm_area_struct *vma, struct vm_fault *vmf)
{
	struct super_block *sb = file_inode(vma->vm_file)->i_sb;

	sb_start_pagefault(sb);
	file_update_time(vma->vm_file);
	sb_end_pagefault(sb);
	return VM_FAULT_NOPAGE;
}
EXPORT_SYMBOL_GPL(dax_pfn_mkwrite);

756
/**
M
Matthew Wilcox 已提交
757
 * dax_zero_page_range - zero a range within a page of a DAX file
758 759
 * @inode: The file being truncated
 * @from: The file offset that is being truncated to
M
Matthew Wilcox 已提交
760
 * @length: The number of bytes to zero
761 762
 * @get_block: The filesystem method used to translate file offsets to blocks
 *
M
Matthew Wilcox 已提交
763 764 765 766
 * This function can be called by a filesystem when it is zeroing part of a
 * page in a DAX file.  This is intended for hole-punch operations.  If
 * you are truncating a file, the helper function dax_truncate_page() may be
 * more convenient.
767 768 769 770 771
 *
 * We work in terms of PAGE_CACHE_SIZE here for commonality with
 * block_truncate_page(), but we could go down to PAGE_SIZE if the filesystem
 * took care of disposing of the unnecessary blocks.  Even if the filesystem
 * block size is smaller than PAGE_SIZE, we have to zero the rest of the page
M
Matthew Wilcox 已提交
772
 * since the file might be mmapped.
773
 */
M
Matthew Wilcox 已提交
774 775
int dax_zero_page_range(struct inode *inode, loff_t from, unsigned length,
							get_block_t get_block)
776 777 778 779 780 781 782 783 784
{
	struct buffer_head bh;
	pgoff_t index = from >> PAGE_CACHE_SHIFT;
	unsigned offset = from & (PAGE_CACHE_SIZE-1);
	int err;

	/* Block boundary? Nothing to do */
	if (!length)
		return 0;
M
Matthew Wilcox 已提交
785
	BUG_ON((offset + length) > PAGE_CACHE_SIZE);
786 787 788 789 790 791 792

	memset(&bh, 0, sizeof(bh));
	bh.b_size = PAGE_CACHE_SIZE;
	err = get_block(inode, index, &bh, 0);
	if (err < 0)
		return err;
	if (buffer_written(&bh)) {
793 794 795 796 797 798 799 800 801
		struct block_device *bdev = bh.b_bdev;
		struct blk_dax_ctl dax = {
			.sector = to_sector(&bh, inode),
			.size = PAGE_CACHE_SIZE,
		};

		if (dax_map_atomic(bdev, &dax) < 0)
			return PTR_ERR(dax.addr);
		clear_pmem(dax.addr + offset, length);
802
		wmb_pmem();
803
		dax_unmap_atomic(bdev, &dax);
804 805 806 807
	}

	return 0;
}
M
Matthew Wilcox 已提交
808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829
EXPORT_SYMBOL_GPL(dax_zero_page_range);

/**
 * dax_truncate_page - handle a partial page being truncated in a DAX file
 * @inode: The file being truncated
 * @from: The file offset that is being truncated to
 * @get_block: The filesystem method used to translate file offsets to blocks
 *
 * Similar to block_truncate_page(), this function can be called by a
 * filesystem when it is truncating a DAX file to handle the partial page.
 *
 * We work in terms of PAGE_CACHE_SIZE here for commonality with
 * block_truncate_page(), but we could go down to PAGE_SIZE if the filesystem
 * took care of disposing of the unnecessary blocks.  Even if the filesystem
 * block size is smaller than PAGE_SIZE, we have to zero the rest of the page
 * since the file might be mmapped.
 */
int dax_truncate_page(struct inode *inode, loff_t from, get_block_t get_block)
{
	unsigned length = PAGE_CACHE_ALIGN(from) - from;
	return dax_zero_page_range(inode, from, length, get_block);
}
830
EXPORT_SYMBOL_GPL(dax_truncate_page);