task_mmu.c 37.6 KB
Newer Older
L
Linus Torvalds 已提交
1
#include <linux/mm.h>
D
Davidlohr Bueso 已提交
2
#include <linux/vmacache.h>
L
Linus Torvalds 已提交
3
#include <linux/hugetlb.h>
4
#include <linux/huge_mm.h>
L
Linus Torvalds 已提交
5 6
#include <linux/mount.h>
#include <linux/seq_file.h>
M
Mauricio Lin 已提交
7
#include <linux/highmem.h>
K
Kees Cook 已提交
8
#include <linux/ptrace.h>
9
#include <linux/slab.h>
10 11
#include <linux/pagemap.h>
#include <linux/mempolicy.h>
12
#include <linux/rmap.h>
13 14
#include <linux/swap.h>
#include <linux/swapops.h>
15
#include <linux/mmu_notifier.h>
16
#include <linux/page_idle.h>
M
Mauricio Lin 已提交
17

L
Linus Torvalds 已提交
18 19
#include <asm/elf.h>
#include <asm/uaccess.h>
M
Mauricio Lin 已提交
20
#include <asm/tlbflush.h>
L
Linus Torvalds 已提交
21 22
#include "internal.h"

23
void task_mem(struct seq_file *m, struct mm_struct *mm)
L
Linus Torvalds 已提交
24
{
25
	unsigned long data, text, lib, swap, ptes, pmds;
26 27 28 29 30 31 32 33 34 35 36 37 38 39 40
	unsigned long hiwater_vm, total_vm, hiwater_rss, total_rss;

	/*
	 * Note: to minimize their overhead, mm maintains hiwater_vm and
	 * hiwater_rss only when about to *lower* total_vm or rss.  Any
	 * collector of these hiwater stats must therefore get total_vm
	 * and rss too, which will usually be the higher.  Barriers? not
	 * worth the effort, such snapshots can always be inconsistent.
	 */
	hiwater_vm = total_vm = mm->total_vm;
	if (hiwater_vm < mm->hiwater_vm)
		hiwater_vm = mm->hiwater_vm;
	hiwater_rss = total_rss = get_mm_rss(mm);
	if (hiwater_rss < mm->hiwater_rss)
		hiwater_rss = mm->hiwater_rss;
L
Linus Torvalds 已提交
41 42 43 44

	data = mm->total_vm - mm->shared_vm - mm->stack_vm;
	text = (PAGE_ALIGN(mm->end_code) - (mm->start_code & PAGE_MASK)) >> 10;
	lib = (mm->exec_vm << (PAGE_SHIFT-10)) - text;
K
KAMEZAWA Hiroyuki 已提交
45
	swap = get_mm_counter(mm, MM_SWAPENTS);
46 47
	ptes = PTRS_PER_PTE * sizeof(pte_t) * atomic_long_read(&mm->nr_ptes);
	pmds = PTRS_PER_PMD * sizeof(pmd_t) * mm_nr_pmds(mm);
48
	seq_printf(m,
49
		"VmPeak:\t%8lu kB\n"
L
Linus Torvalds 已提交
50 51
		"VmSize:\t%8lu kB\n"
		"VmLck:\t%8lu kB\n"
52
		"VmPin:\t%8lu kB\n"
53
		"VmHWM:\t%8lu kB\n"
L
Linus Torvalds 已提交
54 55 56 57 58
		"VmRSS:\t%8lu kB\n"
		"VmData:\t%8lu kB\n"
		"VmStk:\t%8lu kB\n"
		"VmExe:\t%8lu kB\n"
		"VmLib:\t%8lu kB\n"
K
KAMEZAWA Hiroyuki 已提交
59
		"VmPTE:\t%8lu kB\n"
60
		"VmPMD:\t%8lu kB\n"
K
KAMEZAWA Hiroyuki 已提交
61
		"VmSwap:\t%8lu kB\n",
62
		hiwater_vm << (PAGE_SHIFT-10),
63
		total_vm << (PAGE_SHIFT-10),
L
Linus Torvalds 已提交
64
		mm->locked_vm << (PAGE_SHIFT-10),
65
		mm->pinned_vm << (PAGE_SHIFT-10),
66 67
		hiwater_rss << (PAGE_SHIFT-10),
		total_rss << (PAGE_SHIFT-10),
L
Linus Torvalds 已提交
68 69
		data << (PAGE_SHIFT-10),
		mm->stack_vm << (PAGE_SHIFT-10), text, lib,
70 71
		ptes >> 10,
		pmds >> 10,
K
KAMEZAWA Hiroyuki 已提交
72
		swap << (PAGE_SHIFT-10));
L
Linus Torvalds 已提交
73 74 75 76 77 78 79
}

unsigned long task_vsize(struct mm_struct *mm)
{
	return PAGE_SIZE * mm->total_vm;
}

80 81 82
unsigned long task_statm(struct mm_struct *mm,
			 unsigned long *shared, unsigned long *text,
			 unsigned long *data, unsigned long *resident)
L
Linus Torvalds 已提交
83
{
K
KAMEZAWA Hiroyuki 已提交
84
	*shared = get_mm_counter(mm, MM_FILEPAGES);
L
Linus Torvalds 已提交
85 86 87
	*text = (PAGE_ALIGN(mm->end_code) - (mm->start_code & PAGE_MASK))
								>> PAGE_SHIFT;
	*data = mm->total_vm - mm->shared_vm;
K
KAMEZAWA Hiroyuki 已提交
88
	*resident = *shared + get_mm_counter(mm, MM_ANONPAGES);
L
Linus Torvalds 已提交
89 90 91
	return mm->total_vm;
}

92 93
#ifdef CONFIG_NUMA
/*
94
 * Save get_task_policy() for show_numa_map().
95 96 97 98 99 100
 */
static void hold_task_mempolicy(struct proc_maps_private *priv)
{
	struct task_struct *task = priv->task;

	task_lock(task);
101
	priv->task_mempolicy = get_task_policy(task);
102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117
	mpol_get(priv->task_mempolicy);
	task_unlock(task);
}
static void release_task_mempolicy(struct proc_maps_private *priv)
{
	mpol_put(priv->task_mempolicy);
}
#else
static void hold_task_mempolicy(struct proc_maps_private *priv)
{
}
static void release_task_mempolicy(struct proc_maps_private *priv)
{
}
#endif

118
static void vma_stop(struct proc_maps_private *priv)
119
{
120 121 122 123 124
	struct mm_struct *mm = priv->mm;

	release_task_mempolicy(priv);
	up_read(&mm->mmap_sem);
	mmput(mm);
125
}
126

127 128 129 130 131 132 133 134
static struct vm_area_struct *
m_next_vma(struct proc_maps_private *priv, struct vm_area_struct *vma)
{
	if (vma == priv->tail_vma)
		return NULL;
	return vma->vm_next ?: priv->tail_vma;
}

135 136 137 138 139 140
static void m_cache_vma(struct seq_file *m, struct vm_area_struct *vma)
{
	if (m->count < m->size)	/* vma is copied successfully */
		m->version = m_next_vma(m->private, vma) ? vma->vm_start : -1UL;
}

141
static void *m_start(struct seq_file *m, loff_t *ppos)
M
Mauricio Lin 已提交
142
{
143
	struct proc_maps_private *priv = m->private;
144
	unsigned long last_addr = m->version;
145
	struct mm_struct *mm;
146 147
	struct vm_area_struct *vma;
	unsigned int pos = *ppos;
148

149 150 151 152
	/* See m_cache_vma(). Zero at the start or after lseek. */
	if (last_addr == -1UL)
		return NULL;

153
	priv->task = get_proc_task(priv->inode);
154
	if (!priv->task)
A
Al Viro 已提交
155
		return ERR_PTR(-ESRCH);
156

157 158 159
	mm = priv->mm;
	if (!mm || !atomic_inc_not_zero(&mm->mm_users))
		return NULL;
160

161
	down_read(&mm->mmap_sem);
162
	hold_task_mempolicy(priv);
163
	priv->tail_vma = get_gate_vma(mm);
164

165 166 167 168 169 170 171
	if (last_addr) {
		vma = find_vma(mm, last_addr);
		if (vma && (vma = m_next_vma(priv, vma)))
			return vma;
	}

	m->version = 0;
172
	if (pos < mm->map_count) {
173 174
		for (vma = mm->mmap; pos; pos--) {
			m->version = vma->vm_start;
175
			vma = vma->vm_next;
176
		}
177
		return vma;
178
	}
179

180
	/* we do not bother to update m->version in this case */
181 182
	if (pos == mm->map_count && priv->tail_vma)
		return priv->tail_vma;
183 184 185

	vma_stop(priv);
	return NULL;
186 187 188 189 190
}

static void *m_next(struct seq_file *m, void *v, loff_t *pos)
{
	struct proc_maps_private *priv = m->private;
191
	struct vm_area_struct *next;
192 193

	(*pos)++;
194
	next = m_next_vma(priv, v);
195 196 197
	if (!next)
		vma_stop(priv);
	return next;
198 199 200 201 202 203
}

static void m_stop(struct seq_file *m, void *v)
{
	struct proc_maps_private *priv = m->private;

204 205
	if (!IS_ERR_OR_NULL(v))
		vma_stop(priv);
206
	if (priv->task) {
207
		put_task_struct(priv->task);
208 209
		priv->task = NULL;
	}
210 211
}

212 213 214 215 216 217 218 219
static int proc_maps_open(struct inode *inode, struct file *file,
			const struct seq_operations *ops, int psize)
{
	struct proc_maps_private *priv = __seq_open_private(file, ops, psize);

	if (!priv)
		return -ENOMEM;

220
	priv->inode = inode;
221 222 223 224 225 226 227 228
	priv->mm = proc_mem_open(inode, PTRACE_MODE_READ);
	if (IS_ERR(priv->mm)) {
		int err = PTR_ERR(priv->mm);

		seq_release_private(inode, file);
		return err;
	}

229 230 231
	return 0;
}

232 233 234 235 236 237 238 239 240 241 242
static int proc_map_release(struct inode *inode, struct file *file)
{
	struct seq_file *seq = file->private_data;
	struct proc_maps_private *priv = seq->private;

	if (priv->mm)
		mmdrop(priv->mm);

	return seq_release_private(inode, file);
}

243
static int do_maps_open(struct inode *inode, struct file *file,
244
			const struct seq_operations *ops)
245
{
246 247
	return proc_maps_open(inode, file, ops,
				sizeof(struct proc_maps_private));
248
}
M
Mauricio Lin 已提交
249

250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268
static pid_t pid_of_stack(struct proc_maps_private *priv,
				struct vm_area_struct *vma, bool is_pid)
{
	struct inode *inode = priv->inode;
	struct task_struct *task;
	pid_t ret = 0;

	rcu_read_lock();
	task = pid_task(proc_pid(inode), PIDTYPE_PID);
	if (task) {
		task = task_of_stack(task, vma, is_pid);
		if (task)
			ret = task_pid_nr_ns(task, inode->i_sb->s_fs_info);
	}
	rcu_read_unlock();

	return ret;
}

269 270
static void
show_map_vma(struct seq_file *m, struct vm_area_struct *vma, int is_pid)
L
Linus Torvalds 已提交
271
{
M
Mauricio Lin 已提交
272 273
	struct mm_struct *mm = vma->vm_mm;
	struct file *file = vma->vm_file;
274
	struct proc_maps_private *priv = m->private;
275
	vm_flags_t flags = vma->vm_flags;
L
Linus Torvalds 已提交
276
	unsigned long ino = 0;
277
	unsigned long long pgoff = 0;
278
	unsigned long start, end;
L
Linus Torvalds 已提交
279
	dev_t dev = 0;
280
	const char *name = NULL;
L
Linus Torvalds 已提交
281 282

	if (file) {
A
Al Viro 已提交
283
		struct inode *inode = file_inode(vma->vm_file);
L
Linus Torvalds 已提交
284 285
		dev = inode->i_sb->s_dev;
		ino = inode->i_ino;
286
		pgoff = ((loff_t)vma->vm_pgoff) << PAGE_SHIFT;
L
Linus Torvalds 已提交
287 288
	}

289 290
	/* We don't show the stack guard page in /proc/maps */
	start = vma->vm_start;
291 292 293 294 295
	if (stack_guard_page_start(vma, start))
		start += PAGE_SIZE;
	end = vma->vm_end;
	if (stack_guard_page_end(vma, end))
		end -= PAGE_SIZE;
296

297 298
	seq_setwidth(m, 25 + sizeof(void *) * 6 - 1);
	seq_printf(m, "%08lx-%08lx %c%c%c%c %08llx %02x:%02x %lu ",
299
			start,
300
			end,
L
Linus Torvalds 已提交
301 302 303 304
			flags & VM_READ ? 'r' : '-',
			flags & VM_WRITE ? 'w' : '-',
			flags & VM_EXEC ? 'x' : '-',
			flags & VM_MAYSHARE ? 's' : 'p',
305
			pgoff,
306
			MAJOR(dev), MINOR(dev), ino);
L
Linus Torvalds 已提交
307 308 309 310 311

	/*
	 * Print the dentry name for named mappings, and a
	 * special [heap] marker for the heap:
	 */
M
Mauricio Lin 已提交
312
	if (file) {
313
		seq_pad(m, ' ');
M
Miklos Szeredi 已提交
314
		seq_file_path(m, file, "\n");
315 316 317
		goto done;
	}

318 319 320 321 322 323
	if (vma->vm_ops && vma->vm_ops->name) {
		name = vma->vm_ops->name(vma);
		if (name)
			goto done;
	}

324 325 326 327 328 329 330 331 332 333 334 335 336 337 338
	name = arch_vma_name(vma);
	if (!name) {
		pid_t tid;

		if (!mm) {
			name = "[vdso]";
			goto done;
		}

		if (vma->vm_start <= mm->brk &&
		    vma->vm_end >= mm->start_brk) {
			name = "[heap]";
			goto done;
		}

339
		tid = pid_of_stack(priv, vma, is_pid);
340 341 342 343 344 345 346 347
		if (tid != 0) {
			/*
			 * Thread stack in /proc/PID/task/TID/maps or
			 * the main process stack.
			 */
			if (!is_pid || (vma->vm_start <= mm->start_stack &&
			    vma->vm_end >= mm->start_stack)) {
				name = "[stack]";
348
			} else {
349
				/* Thread stack in /proc/PID/maps */
350
				seq_pad(m, ' ');
351
				seq_printf(m, "[stack:%d]", tid);
L
Linus Torvalds 已提交
352
			}
353
		}
354 355 356 357
	}

done:
	if (name) {
358
		seq_pad(m, ' ');
359
		seq_puts(m, name);
L
Linus Torvalds 已提交
360 361
	}
	seq_putc(m, '\n');
362 363
}

364
static int show_map(struct seq_file *m, void *v, int is_pid)
365
{
366
	show_map_vma(m, v, is_pid);
367
	m_cache_vma(m, v);
L
Linus Torvalds 已提交
368 369 370
	return 0;
}

371 372 373 374 375 376 377 378 379 380
static int show_pid_map(struct seq_file *m, void *v)
{
	return show_map(m, v, 1);
}

static int show_tid_map(struct seq_file *m, void *v)
{
	return show_map(m, v, 0);
}

381
static const struct seq_operations proc_pid_maps_op = {
382 383 384
	.start	= m_start,
	.next	= m_next,
	.stop	= m_stop,
385 386 387 388 389 390 391 392
	.show	= show_pid_map
};

static const struct seq_operations proc_tid_maps_op = {
	.start	= m_start,
	.next	= m_next,
	.stop	= m_stop,
	.show	= show_tid_map
393 394
};

395
static int pid_maps_open(struct inode *inode, struct file *file)
396 397 398 399
{
	return do_maps_open(inode, file, &proc_pid_maps_op);
}

400 401 402 403 404 405 406 407 408
static int tid_maps_open(struct inode *inode, struct file *file)
{
	return do_maps_open(inode, file, &proc_tid_maps_op);
}

const struct file_operations proc_pid_maps_operations = {
	.open		= pid_maps_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
409
	.release	= proc_map_release,
410 411 412 413
};

const struct file_operations proc_tid_maps_operations = {
	.open		= tid_maps_open,
414 415
	.read		= seq_read,
	.llseek		= seq_lseek,
416
	.release	= proc_map_release,
417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437
};

/*
 * Proportional Set Size(PSS): my share of RSS.
 *
 * PSS of a process is the count of pages it has in memory, where each
 * page is divided by the number of processes sharing it.  So if a
 * process has 1000 pages all to itself, and 1000 shared with one other
 * process, its PSS will be 1500.
 *
 * To keep (accumulated) division errors low, we adopt a 64bit
 * fixed-point pss counter to minimize division errors. So (pss >>
 * PSS_SHIFT) would be the real byte count.
 *
 * A shift of 12 before division means (assuming 4K page size):
 * 	- 1M 3-user-pages add up to 8KB errors;
 * 	- supports mapcount up to 2^24, or 16M;
 * 	- supports PSS up to 2^52 bytes, or 4PB.
 */
#define PSS_SHIFT 12

438
#ifdef CONFIG_PROC_PAGE_MONITOR
P
Peter Zijlstra 已提交
439
struct mem_size_stats {
440 441 442 443 444 445
	unsigned long resident;
	unsigned long shared_clean;
	unsigned long shared_dirty;
	unsigned long private_clean;
	unsigned long private_dirty;
	unsigned long referenced;
446
	unsigned long anonymous;
447
	unsigned long anonymous_thp;
P
Peter Zijlstra 已提交
448
	unsigned long swap;
449
	u64 pss;
450
	u64 swap_pss;
451 452
};

453 454 455 456 457 458 459 460 461 462
static void smaps_account(struct mem_size_stats *mss, struct page *page,
		unsigned long size, bool young, bool dirty)
{
	int mapcount;

	if (PageAnon(page))
		mss->anonymous += size;

	mss->resident += size;
	/* Accumulate the size in pages that have been accessed. */
463
	if (young || page_is_young(page) || PageReferenced(page))
464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483
		mss->referenced += size;
	mapcount = page_mapcount(page);
	if (mapcount >= 2) {
		u64 pss_delta;

		if (dirty || PageDirty(page))
			mss->shared_dirty += size;
		else
			mss->shared_clean += size;
		pss_delta = (u64)size << PSS_SHIFT;
		do_div(pss_delta, mapcount);
		mss->pss += pss_delta;
	} else {
		if (dirty || PageDirty(page))
			mss->private_dirty += size;
		else
			mss->private_clean += size;
		mss->pss += (u64)size << PSS_SHIFT;
	}
}
484

485 486
static void smaps_pte_entry(pte_t *pte, unsigned long addr,
		struct mm_walk *walk)
487 488
{
	struct mem_size_stats *mss = walk->private;
489
	struct vm_area_struct *vma = walk->vma;
490
	struct page *page = NULL;
491

492 493 494 495
	if (pte_present(*pte)) {
		page = vm_normal_page(vma, addr, *pte);
	} else if (is_swap_pte(*pte)) {
		swp_entry_t swpent = pte_to_swp_entry(*pte);
496

497 498 499
		if (!non_swap_entry(swpent)) {
			int mapcount;

500
			mss->swap += PAGE_SIZE;
501 502 503 504 505 506 507 508 509 510
			mapcount = swp_swapcount(swpent);
			if (mapcount >= 2) {
				u64 pss_delta = (u64)PAGE_SIZE << PSS_SHIFT;

				do_div(pss_delta, mapcount);
				mss->swap_pss += pss_delta;
			} else {
				mss->swap_pss += (u64)PAGE_SIZE << PSS_SHIFT;
			}
		} else if (is_migration_entry(swpent))
511 512
			page = migration_entry_to_page(swpent);
	}
513 514 515

	if (!page)
		return;
516
	smaps_account(mss, page, PAGE_SIZE, pte_young(*pte), pte_dirty(*pte));
517 518
}

519 520 521 522 523
#ifdef CONFIG_TRANSPARENT_HUGEPAGE
static void smaps_pmd_entry(pmd_t *pmd, unsigned long addr,
		struct mm_walk *walk)
{
	struct mem_size_stats *mss = walk->private;
524
	struct vm_area_struct *vma = walk->vma;
525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541
	struct page *page;

	/* FOLL_DUMP will return -EFAULT on huge zero page */
	page = follow_trans_huge_pmd(vma, addr, pmd, FOLL_DUMP);
	if (IS_ERR_OR_NULL(page))
		return;
	mss->anonymous_thp += HPAGE_PMD_SIZE;
	smaps_account(mss, page, HPAGE_PMD_SIZE,
			pmd_young(*pmd), pmd_dirty(*pmd));
}
#else
static void smaps_pmd_entry(pmd_t *pmd, unsigned long addr,
		struct mm_walk *walk)
{
}
#endif

542
static int smaps_pte_range(pmd_t *pmd, unsigned long addr, unsigned long end,
D
Dave Hansen 已提交
543
			   struct mm_walk *walk)
M
Mauricio Lin 已提交
544
{
545
	struct vm_area_struct *vma = walk->vma;
546
	pte_t *pte;
547
	spinlock_t *ptl;
M
Mauricio Lin 已提交
548

549
	if (pmd_trans_huge_lock(pmd, vma, &ptl) == 1) {
550
		smaps_pmd_entry(pmd, addr, walk);
551
		spin_unlock(ptl);
552
		return 0;
553
	}
554 555 556

	if (pmd_trans_unstable(pmd))
		return 0;
557 558 559 560 561
	/*
	 * The mmap_sem held all the way back in m_start() is what
	 * keeps khugepaged out of here and from collapsing things
	 * in here.
	 */
562
	pte = pte_offset_map_lock(vma->vm_mm, pmd, addr, &ptl);
563
	for (; addr != end; pte++, addr += PAGE_SIZE)
564
		smaps_pte_entry(pte, addr, walk);
565 566
	pte_unmap_unlock(pte - 1, ptl);
	cond_resched();
567
	return 0;
M
Mauricio Lin 已提交
568 569
}

570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591
static void show_smap_vma_flags(struct seq_file *m, struct vm_area_struct *vma)
{
	/*
	 * Don't forget to update Documentation/ on changes.
	 */
	static const char mnemonics[BITS_PER_LONG][2] = {
		/*
		 * In case if we meet a flag we don't know about.
		 */
		[0 ... (BITS_PER_LONG-1)] = "??",

		[ilog2(VM_READ)]	= "rd",
		[ilog2(VM_WRITE)]	= "wr",
		[ilog2(VM_EXEC)]	= "ex",
		[ilog2(VM_SHARED)]	= "sh",
		[ilog2(VM_MAYREAD)]	= "mr",
		[ilog2(VM_MAYWRITE)]	= "mw",
		[ilog2(VM_MAYEXEC)]	= "me",
		[ilog2(VM_MAYSHARE)]	= "ms",
		[ilog2(VM_GROWSDOWN)]	= "gd",
		[ilog2(VM_PFNMAP)]	= "pf",
		[ilog2(VM_DENYWRITE)]	= "dw",
592 593 594
#ifdef CONFIG_X86_INTEL_MPX
		[ilog2(VM_MPX)]		= "mp",
#endif
595 596 597 598 599 600 601 602 603 604 605
		[ilog2(VM_LOCKED)]	= "lo",
		[ilog2(VM_IO)]		= "io",
		[ilog2(VM_SEQ_READ)]	= "sr",
		[ilog2(VM_RAND_READ)]	= "rr",
		[ilog2(VM_DONTCOPY)]	= "dc",
		[ilog2(VM_DONTEXPAND)]	= "de",
		[ilog2(VM_ACCOUNT)]	= "ac",
		[ilog2(VM_NORESERVE)]	= "nr",
		[ilog2(VM_HUGETLB)]	= "ht",
		[ilog2(VM_ARCH_1)]	= "ar",
		[ilog2(VM_DONTDUMP)]	= "dd",
606 607 608
#ifdef CONFIG_MEM_SOFT_DIRTY
		[ilog2(VM_SOFTDIRTY)]	= "sd",
#endif
609 610 611 612
		[ilog2(VM_MIXEDMAP)]	= "mm",
		[ilog2(VM_HUGEPAGE)]	= "hg",
		[ilog2(VM_NOHUGEPAGE)]	= "nh",
		[ilog2(VM_MERGEABLE)]	= "mg",
613 614
		[ilog2(VM_UFFD_MISSING)]= "um",
		[ilog2(VM_UFFD_WP)]	= "uw",
615 616 617 618 619 620 621 622 623 624 625 626 627
	};
	size_t i;

	seq_puts(m, "VmFlags: ");
	for (i = 0; i < BITS_PER_LONG; i++) {
		if (vma->vm_flags & (1UL << i)) {
			seq_printf(m, "%c%c ",
				   mnemonics[i][0], mnemonics[i][1]);
		}
	}
	seq_putc(m, '\n');
}

628
static int show_smap(struct seq_file *m, void *v, int is_pid)
M
Mauricio Lin 已提交
629 630 631
{
	struct vm_area_struct *vma = v;
	struct mem_size_stats mss;
D
Dave Hansen 已提交
632 633 634 635 636
	struct mm_walk smaps_walk = {
		.pmd_entry = smaps_pte_range,
		.mm = vma->vm_mm,
		.private = &mss,
	};
M
Mauricio Lin 已提交
637 638

	memset(&mss, 0, sizeof mss);
639
	/* mmap_sem is held in m_start */
640
	walk_page_vma(vma, &smaps_walk);
641

642
	show_map_vma(m, vma, is_pid);
643 644 645 646 647 648 649 650 651

	seq_printf(m,
		   "Size:           %8lu kB\n"
		   "Rss:            %8lu kB\n"
		   "Pss:            %8lu kB\n"
		   "Shared_Clean:   %8lu kB\n"
		   "Shared_Dirty:   %8lu kB\n"
		   "Private_Clean:  %8lu kB\n"
		   "Private_Dirty:  %8lu kB\n"
P
Peter Zijlstra 已提交
652
		   "Referenced:     %8lu kB\n"
653
		   "Anonymous:      %8lu kB\n"
654
		   "AnonHugePages:  %8lu kB\n"
655
		   "Swap:           %8lu kB\n"
656
		   "SwapPss:        %8lu kB\n"
657
		   "KernelPageSize: %8lu kB\n"
658 659
		   "MMUPageSize:    %8lu kB\n"
		   "Locked:         %8lu kB\n",
660 661 662 663 664 665 666
		   (vma->vm_end - vma->vm_start) >> 10,
		   mss.resident >> 10,
		   (unsigned long)(mss.pss >> (10 + PSS_SHIFT)),
		   mss.shared_clean  >> 10,
		   mss.shared_dirty  >> 10,
		   mss.private_clean >> 10,
		   mss.private_dirty >> 10,
P
Peter Zijlstra 已提交
667
		   mss.referenced >> 10,
668
		   mss.anonymous >> 10,
669
		   mss.anonymous_thp >> 10,
670
		   mss.swap >> 10,
671
		   (unsigned long)(mss.swap_pss >> (10 + PSS_SHIFT)),
672
		   vma_kernel_pagesize(vma) >> 10,
673 674 675
		   vma_mmu_pagesize(vma) >> 10,
		   (vma->vm_flags & VM_LOCKED) ?
			(unsigned long)(mss.pss >> (10 + PSS_SHIFT)) : 0);
676

677
	show_smap_vma_flags(m, vma);
678
	m_cache_vma(m, vma);
679
	return 0;
M
Mauricio Lin 已提交
680 681
}

682 683 684 685 686 687 688 689 690 691
static int show_pid_smap(struct seq_file *m, void *v)
{
	return show_smap(m, v, 1);
}

static int show_tid_smap(struct seq_file *m, void *v)
{
	return show_smap(m, v, 0);
}

692
static const struct seq_operations proc_pid_smaps_op = {
693 694 695
	.start	= m_start,
	.next	= m_next,
	.stop	= m_stop,
696 697 698 699 700 701 702 703
	.show	= show_pid_smap
};

static const struct seq_operations proc_tid_smaps_op = {
	.start	= m_start,
	.next	= m_next,
	.stop	= m_stop,
	.show	= show_tid_smap
704 705
};

706
static int pid_smaps_open(struct inode *inode, struct file *file)
707 708 709 710
{
	return do_maps_open(inode, file, &proc_pid_smaps_op);
}

711 712 713 714 715 716 717 718 719
static int tid_smaps_open(struct inode *inode, struct file *file)
{
	return do_maps_open(inode, file, &proc_tid_smaps_op);
}

const struct file_operations proc_pid_smaps_operations = {
	.open		= pid_smaps_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
720
	.release	= proc_map_release,
721 722 723 724
};

const struct file_operations proc_tid_smaps_operations = {
	.open		= tid_smaps_open,
725 726
	.read		= seq_read,
	.llseek		= seq_lseek,
727
	.release	= proc_map_release,
728 729
};

730 731 732 733
enum clear_refs_types {
	CLEAR_REFS_ALL = 1,
	CLEAR_REFS_ANON,
	CLEAR_REFS_MAPPED,
734
	CLEAR_REFS_SOFT_DIRTY,
735
	CLEAR_REFS_MM_HIWATER_RSS,
736 737 738
	CLEAR_REFS_LAST,
};

739
struct clear_refs_private {
740
	enum clear_refs_types type;
741 742
};

743
#ifdef CONFIG_MEM_SOFT_DIRTY
744 745 746 747 748 749 750 751 752 753
static inline void clear_soft_dirty(struct vm_area_struct *vma,
		unsigned long addr, pte_t *pte)
{
	/*
	 * The soft-dirty tracker uses #PF-s to catch writes
	 * to pages, so write-protect the pte as well. See the
	 * Documentation/vm/soft-dirty.txt for full description
	 * of how soft-dirty works.
	 */
	pte_t ptent = *pte;
754 755 756 757 758 759 760 761

	if (pte_present(ptent)) {
		ptent = pte_wrprotect(ptent);
		ptent = pte_clear_flags(ptent, _PAGE_SOFT_DIRTY);
	} else if (is_swap_pte(ptent)) {
		ptent = pte_swp_clear_soft_dirty(ptent);
	}

762 763 764
	set_pte_at(vma->vm_mm, addr, pte, ptent);
}

765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791
static inline void clear_soft_dirty_pmd(struct vm_area_struct *vma,
		unsigned long addr, pmd_t *pmdp)
{
	pmd_t pmd = *pmdp;

	pmd = pmd_wrprotect(pmd);
	pmd = pmd_clear_flags(pmd, _PAGE_SOFT_DIRTY);

	if (vma->vm_flags & VM_SOFTDIRTY)
		vma->vm_flags &= ~VM_SOFTDIRTY;

	set_pmd_at(vma->vm_mm, addr, pmdp, pmd);
}

#else

static inline void clear_soft_dirty(struct vm_area_struct *vma,
		unsigned long addr, pte_t *pte)
{
}

static inline void clear_soft_dirty_pmd(struct vm_area_struct *vma,
		unsigned long addr, pmd_t *pmdp)
{
}
#endif

792
static int clear_refs_pte_range(pmd_t *pmd, unsigned long addr,
D
Dave Hansen 已提交
793
				unsigned long end, struct mm_walk *walk)
794
{
795
	struct clear_refs_private *cp = walk->private;
796
	struct vm_area_struct *vma = walk->vma;
797 798 799 800
	pte_t *pte, ptent;
	spinlock_t *ptl;
	struct page *page;

801 802 803 804 805 806 807 808 809 810
	if (pmd_trans_huge_lock(pmd, vma, &ptl) == 1) {
		if (cp->type == CLEAR_REFS_SOFT_DIRTY) {
			clear_soft_dirty_pmd(vma, addr, pmd);
			goto out;
		}

		page = pmd_page(*pmd);

		/* Clear accessed and referenced bits. */
		pmdp_test_and_clear_young(vma, addr, pmd);
811
		test_and_clear_page_young(page);
812 813 814 815 816 817
		ClearPageReferenced(page);
out:
		spin_unlock(ptl);
		return 0;
	}

818 819
	if (pmd_trans_unstable(pmd))
		return 0;
820

821 822 823 824
	pte = pte_offset_map_lock(vma->vm_mm, pmd, addr, &ptl);
	for (; addr != end; pte++, addr += PAGE_SIZE) {
		ptent = *pte;

825 826 827 828 829
		if (cp->type == CLEAR_REFS_SOFT_DIRTY) {
			clear_soft_dirty(vma, addr, pte);
			continue;
		}

830 831 832
		if (!pte_present(ptent))
			continue;

833 834 835 836 837 838
		page = vm_normal_page(vma, addr, ptent);
		if (!page)
			continue;

		/* Clear accessed and referenced bits. */
		ptep_test_and_clear_young(vma, addr, pte);
839
		test_and_clear_page_young(page);
840 841 842 843 844 845 846
		ClearPageReferenced(page);
	}
	pte_unmap_unlock(pte - 1, ptl);
	cond_resched();
	return 0;
}

847 848 849 850 851 852
static int clear_refs_test_walk(unsigned long start, unsigned long end,
				struct mm_walk *walk)
{
	struct clear_refs_private *cp = walk->private;
	struct vm_area_struct *vma = walk->vma;

853 854 855
	if (vma->vm_flags & VM_PFNMAP)
		return 1;

856 857 858 859 860 861 862 863 864 865 866 867 868
	/*
	 * Writing 1 to /proc/pid/clear_refs affects all pages.
	 * Writing 2 to /proc/pid/clear_refs only affects anonymous pages.
	 * Writing 3 to /proc/pid/clear_refs only affects file mapped pages.
	 * Writing 4 to /proc/pid/clear_refs affects all pages.
	 */
	if (cp->type == CLEAR_REFS_ANON && vma->vm_file)
		return 1;
	if (cp->type == CLEAR_REFS_MAPPED && !vma->vm_file)
		return 1;
	return 0;
}

869 870
static ssize_t clear_refs_write(struct file *file, const char __user *buf,
				size_t count, loff_t *ppos)
871
{
872
	struct task_struct *task;
873
	char buffer[PROC_NUMBUF];
874
	struct mm_struct *mm;
875
	struct vm_area_struct *vma;
876 877
	enum clear_refs_types type;
	int itype;
A
Alexey Dobriyan 已提交
878
	int rv;
879

880 881 882 883 884
	memset(buffer, 0, sizeof(buffer));
	if (count > sizeof(buffer) - 1)
		count = sizeof(buffer) - 1;
	if (copy_from_user(buffer, buf, count))
		return -EFAULT;
885
	rv = kstrtoint(strstrip(buffer), 10, &itype);
A
Alexey Dobriyan 已提交
886 887
	if (rv < 0)
		return rv;
888 889
	type = (enum clear_refs_types)itype;
	if (type < CLEAR_REFS_ALL || type >= CLEAR_REFS_LAST)
890
		return -EINVAL;
891

A
Al Viro 已提交
892
	task = get_proc_task(file_inode(file));
893 894 895 896
	if (!task)
		return -ESRCH;
	mm = get_task_mm(task);
	if (mm) {
897
		struct clear_refs_private cp = {
898
			.type = type,
899
		};
900 901
		struct mm_walk clear_refs_walk = {
			.pmd_entry = clear_refs_pte_range,
902
			.test_walk = clear_refs_test_walk,
903
			.mm = mm,
904
			.private = &cp,
905
		};
906 907 908 909 910 911 912 913 914 915 916 917

		if (type == CLEAR_REFS_MM_HIWATER_RSS) {
			/*
			 * Writing 5 to /proc/pid/clear_refs resets the peak
			 * resident set size to this mm's current rss value.
			 */
			down_write(&mm->mmap_sem);
			reset_mm_hiwater_rss(mm);
			up_write(&mm->mmap_sem);
			goto out_mm;
		}

918
		down_read(&mm->mmap_sem);
919 920 921 922 923 924 925 926 927 928 929 930 931
		if (type == CLEAR_REFS_SOFT_DIRTY) {
			for (vma = mm->mmap; vma; vma = vma->vm_next) {
				if (!(vma->vm_flags & VM_SOFTDIRTY))
					continue;
				up_read(&mm->mmap_sem);
				down_write(&mm->mmap_sem);
				for (vma = mm->mmap; vma; vma = vma->vm_next) {
					vma->vm_flags &= ~VM_SOFTDIRTY;
					vma_set_page_prot(vma);
				}
				downgrade_write(&mm->mmap_sem);
				break;
			}
932
			mmu_notifier_invalidate_range_start(mm, 0, -1);
933
		}
934
		walk_page_range(0, ~0UL, &clear_refs_walk);
935 936
		if (type == CLEAR_REFS_SOFT_DIRTY)
			mmu_notifier_invalidate_range_end(mm, 0, -1);
937 938
		flush_tlb_mm(mm);
		up_read(&mm->mmap_sem);
939
out_mm:
940 941 942
		mmput(mm);
	}
	put_task_struct(task);
943 944

	return count;
945 946
}

947 948
const struct file_operations proc_clear_refs_operations = {
	.write		= clear_refs_write,
949
	.llseek		= noop_llseek,
950 951
};

952 953 954 955
typedef struct {
	u64 pme;
} pagemap_entry_t;

956
struct pagemapread {
957
	int pos, len;		/* units: PM_ENTRY_BYTES, not bytes */
958
	pagemap_entry_t *buffer;
959
	bool show_pfn;
960 961
};

962 963 964
#define PAGEMAP_WALK_SIZE	(PMD_SIZE)
#define PAGEMAP_WALK_MASK	(PMD_MASK)

965 966 967 968
#define PM_ENTRY_BYTES		sizeof(pagemap_entry_t)
#define PM_PFRAME_BITS		55
#define PM_PFRAME_MASK		GENMASK_ULL(PM_PFRAME_BITS - 1, 0)
#define PM_SOFT_DIRTY		BIT_ULL(55)
969
#define PM_MMAP_EXCLUSIVE	BIT_ULL(56)
970 971 972 973
#define PM_FILE			BIT_ULL(61)
#define PM_SWAP			BIT_ULL(62)
#define PM_PRESENT		BIT_ULL(63)

974 975
#define PM_END_OF_BUFFER    1

976
static inline pagemap_entry_t make_pme(u64 frame, u64 flags)
977
{
978
	return (pagemap_entry_t) { .pme = (frame & PM_PFRAME_MASK) | flags };
979 980 981
}

static int add_to_pagemap(unsigned long addr, pagemap_entry_t *pme,
982 983
			  struct pagemapread *pm)
{
984
	pm->buffer[pm->pos++] = *pme;
985
	if (pm->pos >= pm->len)
986
		return PM_END_OF_BUFFER;
987 988 989 990
	return 0;
}

static int pagemap_pte_hole(unsigned long start, unsigned long end,
D
Dave Hansen 已提交
991
				struct mm_walk *walk)
992
{
D
Dave Hansen 已提交
993
	struct pagemapread *pm = walk->private;
994
	unsigned long addr = start;
995
	int err = 0;
996

997 998
	while (addr < end) {
		struct vm_area_struct *vma = find_vma(walk->mm, addr);
999
		pagemap_entry_t pme = make_pme(0, 0);
1000 1001
		/* End of address space hole, which we mark as non-present. */
		unsigned long hole_end;
1002

1003 1004 1005 1006 1007 1008 1009 1010 1011
		if (vma)
			hole_end = min(end, vma->vm_start);
		else
			hole_end = end;

		for (; addr < hole_end; addr += PAGE_SIZE) {
			err = add_to_pagemap(addr, &pme, pm);
			if (err)
				goto out;
1012 1013
		}

1014 1015 1016 1017 1018
		if (!vma)
			break;

		/* Addresses in the VMA. */
		if (vma->vm_flags & VM_SOFTDIRTY)
1019
			pme = make_pme(0, PM_SOFT_DIRTY);
1020
		for (; addr < min(end, vma->vm_end); addr += PAGE_SIZE) {
1021 1022 1023 1024
			err = add_to_pagemap(addr, &pme, pm);
			if (err)
				goto out;
		}
1025
	}
1026
out:
1027 1028 1029
	return err;
}

1030
static pagemap_entry_t pte_to_pagemap_entry(struct pagemapread *pm,
1031
		struct vm_area_struct *vma, unsigned long addr, pte_t pte)
1032
{
1033
	u64 frame = 0, flags = 0;
1034
	struct page *page = NULL;
1035

1036
	if (pte_present(pte)) {
1037 1038
		if (pm->show_pfn)
			frame = pte_pfn(pte);
1039
		flags |= PM_PRESENT;
1040
		page = vm_normal_page(vma, addr, pte);
1041
		if (pte_soft_dirty(pte))
1042
			flags |= PM_SOFT_DIRTY;
1043
	} else if (is_swap_pte(pte)) {
1044 1045
		swp_entry_t entry;
		if (pte_swp_soft_dirty(pte))
1046
			flags |= PM_SOFT_DIRTY;
1047
		entry = pte_to_swp_entry(pte);
1048 1049
		frame = swp_type(entry) |
			(swp_offset(entry) << MAX_SWAPFILES_SHIFT);
1050
		flags |= PM_SWAP;
1051 1052 1053 1054 1055 1056
		if (is_migration_entry(entry))
			page = migration_entry_to_page(entry);
	}

	if (page && !PageAnon(page))
		flags |= PM_FILE;
1057 1058
	if (page && page_mapcount(page) == 1)
		flags |= PM_MMAP_EXCLUSIVE;
1059 1060
	if (vma->vm_flags & VM_SOFTDIRTY)
		flags |= PM_SOFT_DIRTY;
1061

1062
	return make_pme(frame, flags);
1063 1064
}

1065
static int pagemap_pmd_range(pmd_t *pmdp, unsigned long addr, unsigned long end,
D
Dave Hansen 已提交
1066
			     struct mm_walk *walk)
1067
{
1068
	struct vm_area_struct *vma = walk->vma;
D
Dave Hansen 已提交
1069
	struct pagemapread *pm = walk->private;
1070
	spinlock_t *ptl;
1071
	pte_t *pte, *orig_pte;
1072 1073
	int err = 0;

1074 1075 1076 1077
#ifdef CONFIG_TRANSPARENT_HUGEPAGE
	if (pmd_trans_huge_lock(pmdp, vma, &ptl) == 1) {
		u64 flags = 0, frame = 0;
		pmd_t pmd = *pmdp;
1078

1079
		if ((vma->vm_flags & VM_SOFTDIRTY) || pmd_soft_dirty(pmd))
1080
			flags |= PM_SOFT_DIRTY;
1081

1082 1083 1084 1085 1086 1087 1088
		/*
		 * Currently pmd for thp is always present because thp
		 * can not be swapped-out, migrated, or HWPOISONed
		 * (split in such cases instead.)
		 * This if-check is just to prepare for future implementation.
		 */
		if (pmd_present(pmd)) {
1089 1090 1091 1092 1093
			struct page *page = pmd_page(pmd);

			if (page_mapcount(page) == 1)
				flags |= PM_MMAP_EXCLUSIVE;

1094
			flags |= PM_PRESENT;
1095 1096 1097
			if (pm->show_pfn)
				frame = pmd_pfn(pmd) +
					((addr & ~PMD_MASK) >> PAGE_SHIFT);
1098 1099
		}

1100
		for (; addr != end; addr += PAGE_SIZE) {
1101
			pagemap_entry_t pme = make_pme(frame, flags);
1102

1103
			err = add_to_pagemap(addr, &pme, pm);
1104 1105
			if (err)
				break;
1106
			if (pm->show_pfn && (flags & PM_PRESENT))
1107
				frame++;
1108
		}
1109
		spin_unlock(ptl);
1110
		return err;
1111 1112
	}

1113
	if (pmd_trans_unstable(pmdp))
1114
		return 0;
1115
#endif /* CONFIG_TRANSPARENT_HUGEPAGE */
1116

1117 1118 1119 1120
	/*
	 * We can assume that @vma always points to a valid one and @end never
	 * goes beyond vma->vm_end.
	 */
1121
	orig_pte = pte = pte_offset_map_lock(walk->mm, pmdp, addr, &ptl);
1122 1123
	for (; addr < end; pte++, addr += PAGE_SIZE) {
		pagemap_entry_t pme;
1124

1125
		pme = pte_to_pagemap_entry(pm, vma, addr, *pte);
1126
		err = add_to_pagemap(addr, &pme, pm);
1127
		if (err)
1128
			break;
1129
	}
1130
	pte_unmap_unlock(orig_pte, ptl);
1131 1132 1133 1134 1135 1136

	cond_resched();

	return err;
}

1137
#ifdef CONFIG_HUGETLB_PAGE
1138
/* This function walks within one hugetlb entry in the single call */
1139
static int pagemap_hugetlb_range(pte_t *ptep, unsigned long hmask,
1140 1141
				 unsigned long addr, unsigned long end,
				 struct mm_walk *walk)
1142 1143
{
	struct pagemapread *pm = walk->private;
1144
	struct vm_area_struct *vma = walk->vma;
1145
	u64 flags = 0, frame = 0;
1146
	int err = 0;
1147
	pte_t pte;
1148

1149
	if (vma->vm_flags & VM_SOFTDIRTY)
1150
		flags |= PM_SOFT_DIRTY;
1151

1152 1153 1154 1155 1156 1157 1158
	pte = huge_ptep_get(ptep);
	if (pte_present(pte)) {
		struct page *page = pte_page(pte);

		if (!PageAnon(page))
			flags |= PM_FILE;

1159 1160 1161
		if (page_mapcount(page) == 1)
			flags |= PM_MMAP_EXCLUSIVE;

1162
		flags |= PM_PRESENT;
1163 1164 1165
		if (pm->show_pfn)
			frame = pte_pfn(pte) +
				((addr & ~hmask) >> PAGE_SHIFT);
1166 1167
	}

1168
	for (; addr != end; addr += PAGE_SIZE) {
1169 1170
		pagemap_entry_t pme = make_pme(frame, flags);

1171
		err = add_to_pagemap(addr, &pme, pm);
1172 1173
		if (err)
			return err;
1174
		if (pm->show_pfn && (flags & PM_PRESENT))
1175
			frame++;
1176 1177 1178 1179 1180 1181
	}

	cond_resched();

	return err;
}
1182
#endif /* HUGETLB_PAGE */
1183

1184 1185 1186
/*
 * /proc/pid/pagemap - an array mapping virtual pages to pfns
 *
1187 1188 1189
 * For each page in the address space, this file contains one 64-bit entry
 * consisting of the following:
 *
1190
 * Bits 0-54  page frame number (PFN) if present
1191
 * Bits 0-4   swap type if swapped
1192
 * Bits 5-54  swap offset if swapped
1193
 * Bit  55    pte is soft-dirty (see Documentation/vm/soft-dirty.txt)
1194 1195
 * Bit  56    page exclusively mapped
 * Bits 57-60 zero
1196
 * Bit  61    page is file-page or shared-anon
1197 1198 1199 1200 1201 1202
 * Bit  62    page swapped
 * Bit  63    page present
 *
 * If the page is not present but in swap, then the PFN contains an
 * encoding of the swap file number and the page's offset into the
 * swap. Unmapped pages return a null PFN. This allows determining
1203 1204 1205 1206 1207 1208 1209 1210 1211 1212
 * precisely which pages are mapped (or in swap) and comparing mapped
 * pages between processes.
 *
 * Efficient users of this interface will use /proc/pid/maps to
 * determine which areas of memory are actually mapped and llseek to
 * skip over unmapped regions.
 */
static ssize_t pagemap_read(struct file *file, char __user *buf,
			    size_t count, loff_t *ppos)
{
1213
	struct mm_struct *mm = file->private_data;
1214
	struct pagemapread pm;
1215
	struct mm_walk pagemap_walk = {};
1216 1217 1218 1219
	unsigned long src;
	unsigned long svpfn;
	unsigned long start_vaddr;
	unsigned long end_vaddr;
1220
	int ret = 0, copied = 0;
1221

1222
	if (!mm || !atomic_inc_not_zero(&mm->mm_users))
1223 1224 1225 1226
		goto out;

	ret = -EINVAL;
	/* file position must be aligned */
1227
	if ((*ppos % PM_ENTRY_BYTES) || (count % PM_ENTRY_BYTES))
1228
		goto out_mm;
1229 1230

	ret = 0;
1231
	if (!count)
1232
		goto out_mm;
1233

1234 1235 1236
	/* do not disclose physical addresses: attack vector */
	pm.show_pfn = file_ns_capable(file, &init_user_ns, CAP_SYS_ADMIN);

1237 1238
	pm.len = (PAGEMAP_WALK_SIZE >> PAGE_SHIFT);
	pm.buffer = kmalloc(pm.len * PM_ENTRY_BYTES, GFP_TEMPORARY);
1239
	ret = -ENOMEM;
1240
	if (!pm.buffer)
1241
		goto out_mm;
1242

1243
	pagemap_walk.pmd_entry = pagemap_pmd_range;
1244
	pagemap_walk.pte_hole = pagemap_pte_hole;
1245
#ifdef CONFIG_HUGETLB_PAGE
1246
	pagemap_walk.hugetlb_entry = pagemap_hugetlb_range;
1247
#endif
1248 1249 1250 1251 1252 1253
	pagemap_walk.mm = mm;
	pagemap_walk.private = &pm;

	src = *ppos;
	svpfn = src / PM_ENTRY_BYTES;
	start_vaddr = svpfn << PAGE_SHIFT;
1254
	end_vaddr = mm->task_size;
1255 1256

	/* watch out for wraparound */
1257
	if (svpfn > mm->task_size >> PAGE_SHIFT)
1258 1259 1260 1261 1262 1263 1264 1265
		start_vaddr = end_vaddr;

	/*
	 * The odds are that this will stop walking way
	 * before end_vaddr, because the length of the
	 * user buffer is tracked in "pm", and the walk
	 * will stop when we hit the end of the buffer.
	 */
1266 1267 1268 1269 1270 1271
	ret = 0;
	while (count && (start_vaddr < end_vaddr)) {
		int len;
		unsigned long end;

		pm.pos = 0;
1272
		end = (start_vaddr + PAGEMAP_WALK_SIZE) & PAGEMAP_WALK_MASK;
1273 1274 1275 1276 1277 1278 1279 1280 1281
		/* overflow ? */
		if (end < start_vaddr || end > end_vaddr)
			end = end_vaddr;
		down_read(&mm->mmap_sem);
		ret = walk_page_range(start_vaddr, end, &pagemap_walk);
		up_read(&mm->mmap_sem);
		start_vaddr = end;

		len = min(count, PM_ENTRY_BYTES * pm.pos);
1282
		if (copy_to_user(buf, pm.buffer, len)) {
1283
			ret = -EFAULT;
1284
			goto out_free;
1285 1286 1287 1288
		}
		copied += len;
		buf += len;
		count -= len;
1289
	}
1290 1291 1292 1293
	*ppos += copied;
	if (!ret || ret == PM_END_OF_BUFFER)
		ret = copied;

1294 1295
out_free:
	kfree(pm.buffer);
1296 1297
out_mm:
	mmput(mm);
1298 1299 1300 1301
out:
	return ret;
}

1302 1303
static int pagemap_open(struct inode *inode, struct file *file)
{
1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318
	struct mm_struct *mm;

	mm = proc_mem_open(inode, PTRACE_MODE_READ);
	if (IS_ERR(mm))
		return PTR_ERR(mm);
	file->private_data = mm;
	return 0;
}

static int pagemap_release(struct inode *inode, struct file *file)
{
	struct mm_struct *mm = file->private_data;

	if (mm)
		mmdrop(mm);
1319 1320 1321
	return 0;
}

1322 1323 1324
const struct file_operations proc_pagemap_operations = {
	.llseek		= mem_lseek, /* borrow this */
	.read		= pagemap_read,
1325
	.open		= pagemap_open,
1326
	.release	= pagemap_release,
1327
};
1328
#endif /* CONFIG_PROC_PAGE_MONITOR */
1329

1330 1331
#ifdef CONFIG_NUMA

1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342
struct numa_maps {
	unsigned long pages;
	unsigned long anon;
	unsigned long active;
	unsigned long writeback;
	unsigned long mapcount_max;
	unsigned long dirty;
	unsigned long swapcache;
	unsigned long node[MAX_NUMNODES];
};

1343 1344 1345 1346 1347
struct numa_maps_private {
	struct proc_maps_private proc_maps;
	struct numa_maps md;
};

1348 1349
static void gather_stats(struct page *page, struct numa_maps *md, int pte_dirty,
			unsigned long nr_pages)
1350 1351 1352
{
	int count = page_mapcount(page);

1353
	md->pages += nr_pages;
1354
	if (pte_dirty || PageDirty(page))
1355
		md->dirty += nr_pages;
1356 1357

	if (PageSwapCache(page))
1358
		md->swapcache += nr_pages;
1359 1360

	if (PageActive(page) || PageUnevictable(page))
1361
		md->active += nr_pages;
1362 1363

	if (PageWriteback(page))
1364
		md->writeback += nr_pages;
1365 1366

	if (PageAnon(page))
1367
		md->anon += nr_pages;
1368 1369 1370 1371

	if (count > md->mapcount_max)
		md->mapcount_max = count;

1372
	md->node[page_to_nid(page)] += nr_pages;
1373 1374
}

1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391
static struct page *can_gather_numa_stats(pte_t pte, struct vm_area_struct *vma,
		unsigned long addr)
{
	struct page *page;
	int nid;

	if (!pte_present(pte))
		return NULL;

	page = vm_normal_page(vma, addr, pte);
	if (!page)
		return NULL;

	if (PageReserved(page))
		return NULL;

	nid = page_to_nid(page);
1392
	if (!node_isset(nid, node_states[N_MEMORY]))
1393 1394 1395 1396 1397
		return NULL;

	return page;
}

1398 1399 1400
static int gather_pte_stats(pmd_t *pmd, unsigned long addr,
		unsigned long end, struct mm_walk *walk)
{
1401 1402
	struct numa_maps *md = walk->private;
	struct vm_area_struct *vma = walk->vma;
1403 1404 1405 1406
	spinlock_t *ptl;
	pte_t *orig_pte;
	pte_t *pte;

1407
	if (pmd_trans_huge_lock(pmd, vma, &ptl) == 1) {
1408 1409 1410
		pte_t huge_pte = *(pte_t *)pmd;
		struct page *page;

1411
		page = can_gather_numa_stats(huge_pte, vma, addr);
1412 1413 1414
		if (page)
			gather_stats(page, md, pte_dirty(huge_pte),
				     HPAGE_PMD_SIZE/PAGE_SIZE);
1415
		spin_unlock(ptl);
1416
		return 0;
1417 1418
	}

1419 1420
	if (pmd_trans_unstable(pmd))
		return 0;
1421 1422
	orig_pte = pte = pte_offset_map_lock(walk->mm, pmd, addr, &ptl);
	do {
1423
		struct page *page = can_gather_numa_stats(*pte, vma, addr);
1424 1425
		if (!page)
			continue;
1426
		gather_stats(page, md, pte_dirty(*pte), 1);
1427 1428 1429 1430 1431 1432

	} while (pte++, addr += PAGE_SIZE, addr != end);
	pte_unmap_unlock(orig_pte, ptl);
	return 0;
}
#ifdef CONFIG_HUGETLB_PAGE
1433
static int gather_hugetlb_stats(pte_t *pte, unsigned long hmask,
1434 1435 1436 1437 1438
		unsigned long addr, unsigned long end, struct mm_walk *walk)
{
	struct numa_maps *md;
	struct page *page;

1439
	if (!pte_present(*pte))
1440 1441 1442 1443 1444 1445 1446
		return 0;

	page = pte_page(*pte);
	if (!page)
		return 0;

	md = walk->private;
1447
	gather_stats(page, md, pte_dirty(*pte), 1);
1448 1449 1450 1451
	return 0;
}

#else
1452
static int gather_hugetlb_stats(pte_t *pte, unsigned long hmask,
1453 1454 1455 1456 1457 1458 1459 1460 1461
		unsigned long addr, unsigned long end, struct mm_walk *walk)
{
	return 0;
}
#endif

/*
 * Display pages allocated per node and memory policy via /proc.
 */
1462
static int show_numa_map(struct seq_file *m, void *v, int is_pid)
1463
{
1464 1465
	struct numa_maps_private *numa_priv = m->private;
	struct proc_maps_private *proc_priv = &numa_priv->proc_maps;
1466
	struct vm_area_struct *vma = v;
1467
	struct numa_maps *md = &numa_priv->md;
1468 1469
	struct file *file = vma->vm_file;
	struct mm_struct *mm = vma->vm_mm;
1470 1471 1472 1473 1474 1475
	struct mm_walk walk = {
		.hugetlb_entry = gather_hugetlb_stats,
		.pmd_entry = gather_pte_stats,
		.private = md,
		.mm = mm,
	};
1476
	struct mempolicy *pol;
1477 1478
	char buffer[64];
	int nid;
1479 1480 1481 1482

	if (!mm)
		return 0;

1483 1484
	/* Ensure we start with an empty set of numa_maps statistics. */
	memset(md, 0, sizeof(*md));
1485

1486 1487 1488 1489 1490 1491 1492
	pol = __get_vma_policy(vma, vma->vm_start);
	if (pol) {
		mpol_to_str(buffer, sizeof(buffer), pol);
		mpol_cond_put(pol);
	} else {
		mpol_to_str(buffer, sizeof(buffer), proc_priv->task_mempolicy);
	}
1493 1494 1495 1496

	seq_printf(m, "%08lx %s", vma->vm_start, buffer);

	if (file) {
1497
		seq_puts(m, " file=");
M
Miklos Szeredi 已提交
1498
		seq_file_path(m, file, "\n\t= ");
1499
	} else if (vma->vm_start <= mm->brk && vma->vm_end >= mm->start_brk) {
1500
		seq_puts(m, " heap");
1501
	} else {
1502
		pid_t tid = pid_of_stack(proc_priv, vma, is_pid);
1503 1504 1505 1506 1507 1508 1509
		if (tid != 0) {
			/*
			 * Thread stack in /proc/PID/task/TID/maps or
			 * the main process stack.
			 */
			if (!is_pid || (vma->vm_start <= mm->start_stack &&
			    vma->vm_end >= mm->start_stack))
1510
				seq_puts(m, " stack");
1511 1512 1513
			else
				seq_printf(m, " stack:%d", tid);
		}
1514 1515
	}

1516
	if (is_vm_hugetlb_page(vma))
1517
		seq_puts(m, " huge");
1518

1519 1520
	/* mmap_sem is held by m_start */
	walk_page_vma(vma, &walk);
1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545

	if (!md->pages)
		goto out;

	if (md->anon)
		seq_printf(m, " anon=%lu", md->anon);

	if (md->dirty)
		seq_printf(m, " dirty=%lu", md->dirty);

	if (md->pages != md->anon && md->pages != md->dirty)
		seq_printf(m, " mapped=%lu", md->pages);

	if (md->mapcount_max > 1)
		seq_printf(m, " mapmax=%lu", md->mapcount_max);

	if (md->swapcache)
		seq_printf(m, " swapcache=%lu", md->swapcache);

	if (md->active < md->pages && !is_vm_hugetlb_page(vma))
		seq_printf(m, " active=%lu", md->active);

	if (md->writeback)
		seq_printf(m, " writeback=%lu", md->writeback);

1546 1547 1548
	for_each_node_state(nid, N_MEMORY)
		if (md->node[nid])
			seq_printf(m, " N%d=%lu", nid, md->node[nid]);
1549 1550

	seq_printf(m, " kernelpagesize_kB=%lu", vma_kernel_pagesize(vma) >> 10);
1551 1552
out:
	seq_putc(m, '\n');
1553
	m_cache_vma(m, vma);
1554 1555
	return 0;
}
1556

1557 1558 1559 1560 1561 1562 1563 1564 1565 1566
static int show_pid_numa_map(struct seq_file *m, void *v)
{
	return show_numa_map(m, v, 1);
}

static int show_tid_numa_map(struct seq_file *m, void *v)
{
	return show_numa_map(m, v, 0);
}

1567
static const struct seq_operations proc_pid_numa_maps_op = {
1568 1569 1570 1571
	.start  = m_start,
	.next   = m_next,
	.stop   = m_stop,
	.show   = show_pid_numa_map,
1572
};
1573

1574 1575 1576 1577 1578 1579 1580 1581 1582
static const struct seq_operations proc_tid_numa_maps_op = {
	.start  = m_start,
	.next   = m_next,
	.stop   = m_stop,
	.show   = show_tid_numa_map,
};

static int numa_maps_open(struct inode *inode, struct file *file,
			  const struct seq_operations *ops)
1583
{
1584 1585
	return proc_maps_open(inode, file, ops,
				sizeof(struct numa_maps_private));
1586 1587
}

1588 1589 1590 1591 1592 1593 1594 1595 1596 1597 1598 1599 1600 1601
static int pid_numa_maps_open(struct inode *inode, struct file *file)
{
	return numa_maps_open(inode, file, &proc_pid_numa_maps_op);
}

static int tid_numa_maps_open(struct inode *inode, struct file *file)
{
	return numa_maps_open(inode, file, &proc_tid_numa_maps_op);
}

const struct file_operations proc_pid_numa_maps_operations = {
	.open		= pid_numa_maps_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
1602
	.release	= proc_map_release,
1603 1604 1605 1606
};

const struct file_operations proc_tid_numa_maps_operations = {
	.open		= tid_numa_maps_open,
1607 1608
	.read		= seq_read,
	.llseek		= seq_lseek,
1609
	.release	= proc_map_release,
1610
};
1611
#endif /* CONFIG_NUMA */