xref: /freebsd/sys/vm/vm_kern.c (revision 4c65b51f44af718bd3fcc1c77d1f771159a3d8bd)
1 /*-
2  * SPDX-License-Identifier: (BSD-3-Clause AND MIT-CMU)
3  *
4  * Copyright (c) 1991, 1993
5  *	The Regents of the University of California.  All rights reserved.
6  *
7  * This code is derived from software contributed to Berkeley by
8  * The Mach Operating System project at Carnegie-Mellon University.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  * 3. Neither the name of the University nor the names of its contributors
19  *    may be used to endorse or promote products derived from this software
20  *    without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
26  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32  * SUCH DAMAGE.
33  *
34  *
35  * Copyright (c) 1987, 1990 Carnegie-Mellon University.
36  * All rights reserved.
37  *
38  * Authors: Avadis Tevanian, Jr., Michael Wayne Young
39  *
40  * Permission to use, copy, modify and distribute this software and
41  * its documentation is hereby granted, provided that both the copyright
42  * notice and this permission notice appear in all copies of the
43  * software, derivative works or modified versions, and any portions
44  * thereof, and that both notices appear in supporting documentation.
45  *
46  * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
47  * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND
48  * FOR ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
49  *
50  * Carnegie Mellon requests users of this software to return to
51  *
52  *  Software Distribution Coordinator  or  Software.Distribution@CS.CMU.EDU
53  *  School of Computer Science
54  *  Carnegie Mellon University
55  *  Pittsburgh PA 15213-3890
56  *
57  * any improvements or extensions that they make and grant Carnegie the
58  * rights to redistribute these changes.
59  */
60 
61 /*
62  *	Kernel memory management.
63  */
64 
65 #include <sys/cdefs.h>
66 #include "opt_vm.h"
67 
68 #include <sys/param.h>
69 #include <sys/systm.h>
70 #include <sys/asan.h>
71 #include <sys/domainset.h>
72 #include <sys/eventhandler.h>
73 #include <sys/kernel.h>
74 #include <sys/lock.h>
75 #include <sys/malloc.h>
76 #include <sys/msan.h>
77 #include <sys/proc.h>
78 #include <sys/rwlock.h>
79 #include <sys/smp.h>
80 #include <sys/sysctl.h>
81 #include <sys/vmem.h>
82 #include <sys/vmmeter.h>
83 
84 #include <vm/vm.h>
85 #include <vm/vm_param.h>
86 #include <vm/vm_domainset.h>
87 #include <vm/vm_kern.h>
88 #include <vm/pmap.h>
89 #include <vm/vm_map.h>
90 #include <vm/vm_object.h>
91 #include <vm/vm_page.h>
92 #include <vm/vm_pageout.h>
93 #include <vm/vm_pagequeue.h>
94 #include <vm/vm_phys.h>
95 #include <vm/vm_radix.h>
96 #include <vm/vm_extern.h>
97 #include <vm/uma.h>
98 
99 struct vm_map kernel_map_store;
100 struct vm_map exec_map_store;
101 struct vm_map pipe_map_store;
102 
103 const void *zero_region;
104 CTASSERT((ZERO_REGION_SIZE & PAGE_MASK) == 0);
105 
106 /* NB: Used by kernel debuggers. */
107 const u_long vm_maxuser_address = VM_MAXUSER_ADDRESS;
108 
109 u_int exec_map_entry_size;
110 u_int exec_map_entries;
111 
112 SYSCTL_ULONG(_vm, OID_AUTO, min_kernel_address, CTLFLAG_RD,
113     SYSCTL_NULL_ULONG_PTR, VM_MIN_KERNEL_ADDRESS, "Min kernel address");
114 
115 SYSCTL_ULONG(_vm, OID_AUTO, max_kernel_address, CTLFLAG_RD,
116 #if defined(__arm__)
117     &vm_max_kernel_address, 0,
118 #else
119     SYSCTL_NULL_ULONG_PTR, VM_MAX_KERNEL_ADDRESS,
120 #endif
121     "Max kernel address");
122 
123 #if VM_NRESERVLEVEL > 1
124 #define	KVA_QUANTUM_SHIFT	(VM_LEVEL_1_ORDER + VM_LEVEL_0_ORDER + \
125     PAGE_SHIFT)
126 #elif VM_NRESERVLEVEL > 0
127 #define	KVA_QUANTUM_SHIFT	(VM_LEVEL_0_ORDER + PAGE_SHIFT)
128 #else
129 /* On non-superpage architectures we want large import sizes. */
130 #define	KVA_QUANTUM_SHIFT	(8 + PAGE_SHIFT)
131 #endif
132 #define	KVA_QUANTUM		(1ul << KVA_QUANTUM_SHIFT)
133 #define	KVA_NUMA_IMPORT_QUANTUM	(KVA_QUANTUM * 128)
134 
135 extern void     uma_startup2(void);
136 
137 /*
138  *	kva_alloc:
139  *
140  *	Allocate a virtual address range with no underlying object and
141  *	no initial mapping to physical memory.  Any mapping from this
142  *	range to physical memory must be explicitly created prior to
143  *	its use, typically with pmap_qenter().  Any attempt to create
144  *	a mapping on demand through vm_fault() will result in a panic.
145  */
146 vm_offset_t
kva_alloc(vm_size_t size)147 kva_alloc(vm_size_t size)
148 {
149 	vm_offset_t addr;
150 
151 	TSENTER();
152 	size = round_page(size);
153 	if (vmem_xalloc(kernel_arena, size, 0, 0, 0, VMEM_ADDR_MIN,
154 	    VMEM_ADDR_MAX, M_BESTFIT | M_NOWAIT, &addr))
155 		return (0);
156 	TSEXIT();
157 
158 	return (addr);
159 }
160 
161 /*
162  *	kva_alloc_aligned:
163  *
164  *	Allocate a virtual address range as in kva_alloc where the base
165  *	address is aligned to align.
166  */
167 vm_offset_t
kva_alloc_aligned(vm_size_t size,vm_size_t align)168 kva_alloc_aligned(vm_size_t size, vm_size_t align)
169 {
170 	vm_offset_t addr;
171 
172 	TSENTER();
173 	size = round_page(size);
174 	if (vmem_xalloc(kernel_arena, size, align, 0, 0, VMEM_ADDR_MIN,
175 	    VMEM_ADDR_MAX, M_BESTFIT | M_NOWAIT, &addr))
176 		return (0);
177 	TSEXIT();
178 
179 	return (addr);
180 }
181 
182 /*
183  *	kva_free:
184  *
185  *	Release a region of kernel virtual memory allocated
186  *	with kva_alloc, and return the physical pages
187  *	associated with that region.
188  *
189  *	This routine may not block on kernel maps.
190  */
191 void
kva_free(vm_offset_t addr,vm_size_t size)192 kva_free(vm_offset_t addr, vm_size_t size)
193 {
194 
195 	size = round_page(size);
196 	vmem_xfree(kernel_arena, addr, size);
197 }
198 
199 /*
200  * Update sanitizer shadow state to reflect a new allocation.  Force inlining to
201  * help make KMSAN origin tracking more precise.
202  */
203 static __always_inline void
kmem_alloc_san(vm_offset_t addr,vm_size_t size,vm_size_t asize,int flags)204 kmem_alloc_san(vm_offset_t addr, vm_size_t size, vm_size_t asize, int flags)
205 {
206 	if ((flags & M_ZERO) == 0) {
207 		kmsan_mark((void *)addr, asize, KMSAN_STATE_UNINIT);
208 		kmsan_orig((void *)addr, asize, KMSAN_TYPE_KMEM,
209 		    KMSAN_RET_ADDR);
210 	} else {
211 		kmsan_mark((void *)addr, asize, KMSAN_STATE_INITED);
212 	}
213 	kasan_mark((void *)addr, size, asize, KASAN_KMEM_REDZONE);
214 }
215 
216 static vm_page_t
kmem_alloc_contig_pages(vm_object_t object,vm_pindex_t pindex,int domain,int pflags,u_long npages,vm_paddr_t low,vm_paddr_t high,u_long alignment,vm_paddr_t boundary,vm_memattr_t memattr)217 kmem_alloc_contig_pages(vm_object_t object, vm_pindex_t pindex, int domain,
218     int pflags, u_long npages, vm_paddr_t low, vm_paddr_t high,
219     u_long alignment, vm_paddr_t boundary, vm_memattr_t memattr)
220 {
221 	vm_page_t m;
222 	int tries;
223 	bool wait, reclaim;
224 
225 	VM_OBJECT_ASSERT_WLOCKED(object);
226 
227 	wait = (pflags & VM_ALLOC_WAITOK) != 0;
228 	reclaim = (pflags & VM_ALLOC_NORECLAIM) == 0;
229 	pflags &= ~(VM_ALLOC_NOWAIT | VM_ALLOC_WAITOK | VM_ALLOC_WAITFAIL);
230 	pflags |= VM_ALLOC_NOWAIT;
231 	for (tries = wait ? 3 : 1;; tries--) {
232 		m = vm_page_alloc_contig_domain(object, pindex, domain, pflags,
233 		    npages, low, high, alignment, boundary, memattr);
234 		if (m != NULL || tries == 0 || !reclaim)
235 			break;
236 
237 		VM_OBJECT_WUNLOCK(object);
238 		if (vm_page_reclaim_contig_domain(domain, pflags, npages,
239 		    low, high, alignment, boundary) == ENOMEM && wait)
240 			vm_wait_domain(domain);
241 		VM_OBJECT_WLOCK(object);
242 	}
243 	return (m);
244 }
245 
246 /*
247  *	Allocates a region from the kernel address map and physical pages
248  *	within the specified address range to the kernel object.  Creates a
249  *	wired mapping from this region to these pages, and returns the
250  *	region's starting virtual address.  The allocated pages are not
251  *	necessarily physically contiguous.  If M_ZERO is specified through the
252  *	given flags, then the pages are zeroed before they are mapped.
253  */
254 static void *
kmem_alloc_attr_domain(int domain,vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,vm_memattr_t memattr)255 kmem_alloc_attr_domain(int domain, vm_size_t size, int flags, vm_paddr_t low,
256     vm_paddr_t high, vm_memattr_t memattr)
257 {
258 	vmem_t *vmem;
259 	vm_object_t object;
260 	vm_offset_t addr, i, offset;
261 	vm_page_t m;
262 	vm_size_t asize;
263 	int pflags;
264 	vm_prot_t prot;
265 
266 	object = kernel_object;
267 	asize = round_page(size);
268 	vmem = vm_dom[domain].vmd_kernel_arena;
269 	if (vmem_alloc(vmem, asize, M_BESTFIT | flags, &addr))
270 		return (0);
271 	offset = addr - VM_MIN_KERNEL_ADDRESS;
272 	pflags = malloc2vm_flags(flags) | VM_ALLOC_WIRED;
273 	prot = (flags & M_EXEC) != 0 ? VM_PROT_ALL : VM_PROT_RW;
274 	VM_OBJECT_WLOCK(object);
275 	for (i = 0; i < asize; i += PAGE_SIZE) {
276 		m = kmem_alloc_contig_pages(object, atop(offset + i),
277 		    domain, pflags, 1, low, high, PAGE_SIZE, 0, memattr);
278 		if (m == NULL) {
279 			VM_OBJECT_WUNLOCK(object);
280 			kmem_unback(object, addr, i);
281 			vmem_free(vmem, addr, asize);
282 			return (0);
283 		}
284 		KASSERT(vm_page_domain(m) == domain,
285 		    ("kmem_alloc_attr_domain: Domain mismatch %d != %d",
286 		    vm_page_domain(m), domain));
287 		if ((flags & M_ZERO) && (m->flags & PG_ZERO) == 0)
288 			pmap_zero_page(m);
289 		vm_page_valid(m);
290 		pmap_enter(kernel_pmap, addr + i, m, prot,
291 		    prot | PMAP_ENTER_WIRED, 0);
292 	}
293 	VM_OBJECT_WUNLOCK(object);
294 	kmem_alloc_san(addr, size, asize, flags);
295 	return ((void *)addr);
296 }
297 
298 void *
kmem_alloc_attr(vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,vm_memattr_t memattr)299 kmem_alloc_attr(vm_size_t size, int flags, vm_paddr_t low, vm_paddr_t high,
300     vm_memattr_t memattr)
301 {
302 
303 	return (kmem_alloc_attr_domainset(DOMAINSET_RR(), size, flags, low,
304 	    high, memattr));
305 }
306 
307 void *
kmem_alloc_attr_domainset(struct domainset * ds,vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,vm_memattr_t memattr)308 kmem_alloc_attr_domainset(struct domainset *ds, vm_size_t size, int flags,
309     vm_paddr_t low, vm_paddr_t high, vm_memattr_t memattr)
310 {
311 	struct vm_domainset_iter di;
312 	vm_page_t bounds[2];
313 	void *addr;
314 	int domain;
315 	int start_segind;
316 
317 	start_segind = -1;
318 
319 	vm_domainset_iter_policy_init(&di, ds, &domain, &flags);
320 	do {
321 		addr = kmem_alloc_attr_domain(domain, size, flags, low, high,
322 		    memattr);
323 		if (addr != NULL)
324 			break;
325 		if (start_segind == -1)
326 			start_segind = vm_phys_lookup_segind(low);
327 		if (vm_phys_find_range(bounds, start_segind, domain,
328 		    atop(round_page(size)), low, high) == -1) {
329 			vm_domainset_iter_ignore(&di, domain);
330 		}
331 	} while (vm_domainset_iter_policy(&di, &domain) == 0);
332 
333 	return (addr);
334 }
335 
336 /*
337  *	Allocates a region from the kernel address map and physically
338  *	contiguous pages within the specified address range to the kernel
339  *	object.  Creates a wired mapping from this region to these pages, and
340  *	returns the region's starting virtual address.  If M_ZERO is specified
341  *	through the given flags, then the pages are zeroed before they are
342  *	mapped.
343  */
344 static void *
kmem_alloc_contig_domain(int domain,vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,u_long alignment,vm_paddr_t boundary,vm_memattr_t memattr)345 kmem_alloc_contig_domain(int domain, vm_size_t size, int flags, vm_paddr_t low,
346     vm_paddr_t high, u_long alignment, vm_paddr_t boundary,
347     vm_memattr_t memattr)
348 {
349 	vmem_t *vmem;
350 	vm_object_t object;
351 	vm_offset_t addr, offset, tmp;
352 	vm_page_t end_m, m;
353 	vm_size_t asize;
354 	u_long npages;
355 	int pflags;
356 
357 	object = kernel_object;
358 	asize = round_page(size);
359 	vmem = vm_dom[domain].vmd_kernel_arena;
360 	if (vmem_alloc(vmem, asize, flags | M_BESTFIT, &addr))
361 		return (NULL);
362 	offset = addr - VM_MIN_KERNEL_ADDRESS;
363 	pflags = malloc2vm_flags(flags) | VM_ALLOC_WIRED;
364 	npages = atop(asize);
365 	VM_OBJECT_WLOCK(object);
366 	m = kmem_alloc_contig_pages(object, atop(offset), domain,
367 	    pflags, npages, low, high, alignment, boundary, memattr);
368 	if (m == NULL) {
369 		VM_OBJECT_WUNLOCK(object);
370 		vmem_free(vmem, addr, asize);
371 		return (NULL);
372 	}
373 	KASSERT(vm_page_domain(m) == domain,
374 	    ("kmem_alloc_contig_domain: Domain mismatch %d != %d",
375 	    vm_page_domain(m), domain));
376 	end_m = m + npages;
377 	tmp = addr;
378 	for (; m < end_m; m++) {
379 		if ((flags & M_ZERO) && (m->flags & PG_ZERO) == 0)
380 			pmap_zero_page(m);
381 		vm_page_valid(m);
382 		pmap_enter(kernel_pmap, tmp, m, VM_PROT_RW,
383 		    VM_PROT_RW | PMAP_ENTER_WIRED, 0);
384 		tmp += PAGE_SIZE;
385 	}
386 	VM_OBJECT_WUNLOCK(object);
387 	kmem_alloc_san(addr, size, asize, flags);
388 	return ((void *)addr);
389 }
390 
391 void *
kmem_alloc_contig(vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,u_long alignment,vm_paddr_t boundary,vm_memattr_t memattr)392 kmem_alloc_contig(vm_size_t size, int flags, vm_paddr_t low, vm_paddr_t high,
393     u_long alignment, vm_paddr_t boundary, vm_memattr_t memattr)
394 {
395 
396 	return (kmem_alloc_contig_domainset(DOMAINSET_RR(), size, flags, low,
397 	    high, alignment, boundary, memattr));
398 }
399 
400 void *
kmem_alloc_contig_domainset(struct domainset * ds,vm_size_t size,int flags,vm_paddr_t low,vm_paddr_t high,u_long alignment,vm_paddr_t boundary,vm_memattr_t memattr)401 kmem_alloc_contig_domainset(struct domainset *ds, vm_size_t size, int flags,
402     vm_paddr_t low, vm_paddr_t high, u_long alignment, vm_paddr_t boundary,
403     vm_memattr_t memattr)
404 {
405 	struct vm_domainset_iter di;
406 	vm_page_t bounds[2];
407 	void *addr;
408 	int domain;
409 	int start_segind;
410 
411 	start_segind = -1;
412 
413 	vm_domainset_iter_policy_init(&di, ds, &domain, &flags);
414 	do {
415 		addr = kmem_alloc_contig_domain(domain, size, flags, low, high,
416 		    alignment, boundary, memattr);
417 		if (addr != NULL)
418 			break;
419 		if (start_segind == -1)
420 			start_segind = vm_phys_lookup_segind(low);
421 		if (vm_phys_find_range(bounds, start_segind, domain,
422 		    atop(round_page(size)), low, high) == -1) {
423 			vm_domainset_iter_ignore(&di, domain);
424 		}
425 	} while (vm_domainset_iter_policy(&di, &domain) == 0);
426 
427 	return (addr);
428 }
429 
430 /*
431  *	kmem_subinit:
432  *
433  *	Initializes a map to manage a subrange
434  *	of the kernel virtual address space.
435  *
436  *	Arguments are as follows:
437  *
438  *	parent		Map to take range from
439  *	min, max	Returned endpoints of map
440  *	size		Size of range to find
441  *	superpage_align	Request that min is superpage aligned
442  */
443 void
kmem_subinit(vm_map_t map,vm_map_t parent,vm_offset_t * min,vm_offset_t * max,vm_size_t size,bool superpage_align)444 kmem_subinit(vm_map_t map, vm_map_t parent, vm_offset_t *min, vm_offset_t *max,
445     vm_size_t size, bool superpage_align)
446 {
447 	int ret;
448 
449 	size = round_page(size);
450 
451 	*min = vm_map_min(parent);
452 	ret = vm_map_find(parent, NULL, 0, min, size, 0, superpage_align ?
453 	    VMFS_SUPER_SPACE : VMFS_ANY_SPACE, VM_PROT_ALL, VM_PROT_ALL,
454 	    MAP_ACC_NO_CHARGE);
455 	if (ret != KERN_SUCCESS)
456 		panic("kmem_subinit: bad status return of %d", ret);
457 	*max = *min + size;
458 	vm_map_init(map, vm_map_pmap(parent), *min, *max);
459 	if (vm_map_submap(parent, *min, *max, map) != KERN_SUCCESS)
460 		panic("kmem_subinit: unable to change range to submap");
461 }
462 
463 /*
464  *	kmem_malloc_domain:
465  *
466  *	Allocate wired-down pages in the kernel's address space.
467  */
468 static void *
kmem_malloc_domain(int domain,vm_size_t size,int flags)469 kmem_malloc_domain(int domain, vm_size_t size, int flags)
470 {
471 	vmem_t *arena;
472 	vm_offset_t addr;
473 	vm_size_t asize;
474 	int rv;
475 
476 	if (__predict_true((flags & (M_EXEC | M_NEVERFREED)) == 0))
477 		arena = vm_dom[domain].vmd_kernel_arena;
478 	else if ((flags & M_EXEC) != 0)
479 		arena = vm_dom[domain].vmd_kernel_rwx_arena;
480 	else
481 		arena = vm_dom[domain].vmd_kernel_nofree_arena;
482 	asize = round_page(size);
483 	if (vmem_alloc(arena, asize, flags | M_BESTFIT, &addr))
484 		return (0);
485 
486 	rv = kmem_back_domain(domain, kernel_object, addr, asize, flags);
487 	if (rv != KERN_SUCCESS) {
488 		vmem_free(arena, addr, asize);
489 		return (0);
490 	}
491 	kasan_mark((void *)addr, size, asize, KASAN_KMEM_REDZONE);
492 	return ((void *)addr);
493 }
494 
495 void *
kmem_malloc(vm_size_t size,int flags)496 kmem_malloc(vm_size_t size, int flags)
497 {
498 	void * p;
499 
500 	TSENTER();
501 	p = kmem_malloc_domainset(DOMAINSET_RR(), size, flags);
502 	TSEXIT();
503 	return (p);
504 }
505 
506 void *
kmem_malloc_domainset(struct domainset * ds,vm_size_t size,int flags)507 kmem_malloc_domainset(struct domainset *ds, vm_size_t size, int flags)
508 {
509 	struct vm_domainset_iter di;
510 	void *addr;
511 	int domain;
512 
513 	vm_domainset_iter_policy_init(&di, ds, &domain, &flags);
514 	do {
515 		addr = kmem_malloc_domain(domain, size, flags);
516 		if (addr != NULL)
517 			break;
518 	} while (vm_domainset_iter_policy(&di, &domain) == 0);
519 
520 	return (addr);
521 }
522 
523 /*
524  *	kmem_back_domain:
525  *
526  *	Allocate physical pages from the specified domain for the specified
527  *	virtual address range.
528  */
529 int
kmem_back_domain(int domain,vm_object_t object,vm_offset_t addr,vm_size_t size,int flags)530 kmem_back_domain(int domain, vm_object_t object, vm_offset_t addr,
531     vm_size_t size, int flags)
532 {
533 	struct pctrie_iter pages;
534 	vm_offset_t offset, i;
535 	vm_page_t m;
536 	vm_prot_t prot;
537 	int pflags;
538 
539 	KASSERT(object == kernel_object,
540 	    ("kmem_back_domain: only supports kernel object."));
541 
542 	offset = addr - VM_MIN_KERNEL_ADDRESS;
543 	pflags = malloc2vm_flags(flags) | VM_ALLOC_WIRED;
544 	pflags &= ~(VM_ALLOC_NOWAIT | VM_ALLOC_WAITOK | VM_ALLOC_WAITFAIL);
545 	if (flags & M_WAITOK)
546 		pflags |= VM_ALLOC_WAITFAIL;
547 	prot = (flags & M_EXEC) != 0 ? VM_PROT_ALL : VM_PROT_RW;
548 
549 	i = 0;
550 	vm_page_iter_init(&pages, object);
551 	VM_OBJECT_WLOCK(object);
552 retry:
553 	for (; i < size; i += PAGE_SIZE) {
554 		m = vm_page_alloc_domain_iter(object, atop(offset + i),
555 		    domain, pflags, &pages);
556 
557 		/*
558 		 * Ran out of space, free everything up and return. Don't need
559 		 * to lock page queues here as we know that the pages we got
560 		 * aren't on any queues.
561 		 */
562 		if (m == NULL) {
563 			if ((flags & M_NOWAIT) == 0)
564 				goto retry;
565 			VM_OBJECT_WUNLOCK(object);
566 			kmem_unback(object, addr, i);
567 			return (KERN_NO_SPACE);
568 		}
569 		KASSERT(vm_page_domain(m) == domain,
570 		    ("kmem_back_domain: Domain mismatch %d != %d",
571 		    vm_page_domain(m), domain));
572 		if (flags & M_ZERO && (m->flags & PG_ZERO) == 0)
573 			pmap_zero_page(m);
574 		KASSERT((m->oflags & VPO_UNMANAGED) != 0,
575 		    ("kmem_malloc: page %p is managed", m));
576 		vm_page_valid(m);
577 		pmap_enter(kernel_pmap, addr + i, m, prot,
578 		    prot | PMAP_ENTER_WIRED, 0);
579 		if (__predict_false((prot & VM_PROT_EXECUTE) != 0))
580 			m->oflags |= VPO_KMEM_EXEC;
581 	}
582 	VM_OBJECT_WUNLOCK(object);
583 	kmem_alloc_san(addr, size, size, flags);
584 	return (KERN_SUCCESS);
585 }
586 
587 /*
588  *	kmem_back:
589  *
590  *	Allocate physical pages for the specified virtual address range.
591  */
592 int
kmem_back(vm_object_t object,vm_offset_t addr,vm_size_t size,int flags)593 kmem_back(vm_object_t object, vm_offset_t addr, vm_size_t size, int flags)
594 {
595 	vm_offset_t end, next, start;
596 	int domain, rv;
597 
598 	KASSERT(object == kernel_object,
599 	    ("kmem_back: only supports kernel object."));
600 
601 	for (start = addr, end = addr + size; addr < end; addr = next) {
602 		/*
603 		 * We must ensure that pages backing a given large virtual page
604 		 * all come from the same physical domain.
605 		 */
606 		if (vm_ndomains > 1) {
607 			domain = (addr >> KVA_QUANTUM_SHIFT) % vm_ndomains;
608 			while (VM_DOMAIN_EMPTY(domain))
609 				domain++;
610 			next = roundup2(addr + 1, KVA_QUANTUM);
611 			if (next > end || next < start)
612 				next = end;
613 		} else {
614 			domain = 0;
615 			next = end;
616 		}
617 		rv = kmem_back_domain(domain, object, addr, next - addr, flags);
618 		if (rv != KERN_SUCCESS) {
619 			kmem_unback(object, start, addr - start);
620 			break;
621 		}
622 	}
623 	return (rv);
624 }
625 
626 /*
627  *	kmem_unback:
628  *
629  *	Unmap and free the physical pages underlying the specified virtual
630  *	address range.
631  *
632  *	A physical page must exist within the specified object at each index
633  *	that is being unmapped.
634  */
635 static struct vmem *
_kmem_unback(vm_object_t object,vm_offset_t addr,vm_size_t size)636 _kmem_unback(vm_object_t object, vm_offset_t addr, vm_size_t size)
637 {
638 	struct pctrie_iter pages;
639 	struct vmem *arena;
640 	vm_page_t m;
641 	vm_offset_t end, offset;
642 	int domain;
643 
644 	KASSERT(object == kernel_object,
645 	    ("kmem_unback: only supports kernel object."));
646 
647 	if (size == 0)
648 		return (NULL);
649 	pmap_remove(kernel_pmap, addr, addr + size);
650 	offset = addr - VM_MIN_KERNEL_ADDRESS;
651 	end = offset + size;
652 	vm_page_iter_init(&pages, object);
653 	VM_OBJECT_WLOCK(object);
654 	m = vm_radix_iter_lookup(&pages, atop(offset));
655 	domain = vm_page_domain(m);
656 	if (__predict_true((m->oflags & VPO_KMEM_EXEC) == 0))
657 		arena = vm_dom[domain].vmd_kernel_arena;
658 	else
659 		arena = vm_dom[domain].vmd_kernel_rwx_arena;
660 	for (; offset < end; offset += PAGE_SIZE,
661 	    m = vm_radix_iter_lookup(&pages, atop(offset))) {
662 		vm_page_xbusy_claim(m);
663 		vm_page_unwire_noq(m);
664 		vm_page_iter_free(&pages, m);
665 	}
666 	VM_OBJECT_WUNLOCK(object);
667 
668 	return (arena);
669 }
670 
671 void
kmem_unback(vm_object_t object,vm_offset_t addr,vm_size_t size)672 kmem_unback(vm_object_t object, vm_offset_t addr, vm_size_t size)
673 {
674 
675 	(void)_kmem_unback(object, addr, size);
676 }
677 
678 /*
679  *	kmem_free:
680  *
681  *	Free memory allocated with kmem_malloc.  The size must match the
682  *	original allocation.
683  */
684 void
kmem_free(void * addr,vm_size_t size)685 kmem_free(void *addr, vm_size_t size)
686 {
687 	struct vmem *arena;
688 
689 	size = round_page(size);
690 	kasan_mark(addr, size, size, 0);
691 	arena = _kmem_unback(kernel_object, (uintptr_t)addr, size);
692 	if (arena != NULL)
693 		vmem_free(arena, (uintptr_t)addr, size);
694 }
695 
696 /*
697  *	kmap_alloc_wait:
698  *
699  *	Allocates pageable memory from a sub-map of the kernel.  If the submap
700  *	has no room, the caller sleeps waiting for more memory in the submap.
701  *
702  *	This routine may block.
703  */
704 vm_offset_t
kmap_alloc_wait(vm_map_t map,vm_size_t size)705 kmap_alloc_wait(vm_map_t map, vm_size_t size)
706 {
707 	vm_offset_t addr;
708 
709 	size = round_page(size);
710 	if (!swap_reserve(size))
711 		return (0);
712 
713 	for (;;) {
714 		/*
715 		 * To make this work for more than one map, use the map's lock
716 		 * to lock out sleepers/wakers.
717 		 */
718 		vm_map_lock(map);
719 		addr = vm_map_findspace(map, vm_map_min(map), size);
720 		if (addr + size <= vm_map_max(map))
721 			break;
722 		/* no space now; see if we can ever get space */
723 		if (vm_map_max(map) - vm_map_min(map) < size) {
724 			vm_map_unlock(map);
725 			swap_release(size);
726 			return (0);
727 		}
728 		vm_map_modflags(map, MAP_NEEDS_WAKEUP, 0);
729 		vm_map_unlock_and_wait(map, 0);
730 	}
731 	vm_map_insert(map, NULL, 0, addr, addr + size, VM_PROT_RW, VM_PROT_RW,
732 	    MAP_ACC_CHARGED);
733 	vm_map_unlock(map);
734 	return (addr);
735 }
736 
737 /*
738  *	kmap_free_wakeup:
739  *
740  *	Returns memory to a submap of the kernel, and wakes up any processes
741  *	waiting for memory in that map.
742  */
743 void
kmap_free_wakeup(vm_map_t map,vm_offset_t addr,vm_size_t size)744 kmap_free_wakeup(vm_map_t map, vm_offset_t addr, vm_size_t size)
745 {
746 
747 	vm_map_lock(map);
748 	(void) vm_map_delete(map, trunc_page(addr), round_page(addr + size));
749 	if ((map->flags & MAP_NEEDS_WAKEUP) != 0) {
750 		vm_map_modflags(map, 0, MAP_NEEDS_WAKEUP);
751 		vm_map_wakeup(map);
752 	}
753 	vm_map_unlock(map);
754 }
755 
756 void
kmem_init_zero_region(void)757 kmem_init_zero_region(void)
758 {
759 	vm_offset_t addr, i;
760 	vm_page_t m;
761 
762 	/*
763 	 * Map a single physical page of zeros to a larger virtual range.
764 	 * This requires less looping in places that want large amounts of
765 	 * zeros, while not using much more physical resources.
766 	 */
767 	addr = kva_alloc(ZERO_REGION_SIZE);
768 	m = vm_page_alloc_noobj(VM_ALLOC_WIRED | VM_ALLOC_ZERO |
769 	    VM_ALLOC_NOFREE);
770 	for (i = 0; i < ZERO_REGION_SIZE; i += PAGE_SIZE)
771 		pmap_qenter(addr + i, &m, 1);
772 	pmap_protect(kernel_pmap, addr, addr + ZERO_REGION_SIZE, VM_PROT_READ);
773 
774 	zero_region = (const void *)addr;
775 }
776 
777 /*
778  * Import KVA from the kernel map into the kernel arena.
779  */
780 static int
kva_import(void * unused,vmem_size_t size,int flags,vmem_addr_t * addrp)781 kva_import(void *unused, vmem_size_t size, int flags, vmem_addr_t *addrp)
782 {
783 	vm_offset_t addr;
784 	int result;
785 
786 	TSENTER();
787 	KASSERT((size % KVA_QUANTUM) == 0,
788 	    ("kva_import: Size %jd is not a multiple of %d",
789 	    (intmax_t)size, (int)KVA_QUANTUM));
790 	addr = vm_map_min(kernel_map);
791 	result = vm_map_find(kernel_map, NULL, 0, &addr, size, 0,
792 	    VMFS_SUPER_SPACE, VM_PROT_ALL, VM_PROT_ALL, MAP_NOFAULT);
793 	if (result != KERN_SUCCESS) {
794 		TSEXIT();
795                 return (ENOMEM);
796 	}
797 
798 	*addrp = addr;
799 
800 	TSEXIT();
801 	return (0);
802 }
803 
804 /*
805  * Import KVA from a parent arena into a per-domain arena.  Imports must be
806  * KVA_QUANTUM-aligned and a multiple of KVA_QUANTUM in size.
807  */
808 static int
kva_import_domain(void * arena,vmem_size_t size,int flags,vmem_addr_t * addrp)809 kva_import_domain(void *arena, vmem_size_t size, int flags, vmem_addr_t *addrp)
810 {
811 
812 	KASSERT((size % KVA_QUANTUM) == 0,
813 	    ("kva_import_domain: Size %jd is not a multiple of %d",
814 	    (intmax_t)size, (int)KVA_QUANTUM));
815 	return (vmem_xalloc(arena, size, KVA_QUANTUM, 0, 0, VMEM_ADDR_MIN,
816 	    VMEM_ADDR_MAX, flags, addrp));
817 }
818 
819 /*
820  * 	kmem_init:
821  *
822  *	Create the kernel map; insert a mapping covering kernel text,
823  *	data, bss, and all space allocated thus far (`boostrap' data).  The
824  *	new map will thus map the range between VM_MIN_KERNEL_ADDRESS and
825  *	`start' as allocated, and the range between `start' and `end' as free.
826  *	Create the kernel vmem arena and its per-domain children.
827  */
828 void
kmem_init(vm_offset_t start,vm_offset_t end)829 kmem_init(vm_offset_t start, vm_offset_t end)
830 {
831 	vm_size_t quantum;
832 	int domain;
833 
834 	vm_map_init_system(kernel_map, kernel_pmap, VM_MIN_KERNEL_ADDRESS, end);
835 	vm_map_lock(kernel_map);
836 	/* N.B.: cannot use kgdb to debug, starting with this assignment ... */
837 	(void)vm_map_insert(kernel_map, NULL, 0,
838 #ifdef __amd64__
839 	    KERNBASE,
840 #else
841 	    VM_MIN_KERNEL_ADDRESS,
842 #endif
843 	    start, VM_PROT_ALL, VM_PROT_ALL, MAP_NOFAULT);
844 	/* ... and ending with the completion of the above `insert' */
845 
846 #ifdef __amd64__
847 	/*
848 	 * Mark KVA used for the page array as allocated.  Other platforms
849 	 * that handle vm_page_array allocation can simply adjust virtual_avail
850 	 * instead.
851 	 */
852 	(void)vm_map_insert(kernel_map, NULL, 0, (vm_offset_t)vm_page_array,
853 	    (vm_offset_t)vm_page_array + round_2mpage(vm_page_array_size *
854 	    sizeof(struct vm_page)),
855 	    VM_PROT_RW, VM_PROT_RW, MAP_NOFAULT);
856 #endif
857 	vm_map_unlock(kernel_map);
858 
859 	/*
860 	 * Use a large import quantum on NUMA systems.  This helps minimize
861 	 * interleaving of superpages, reducing internal fragmentation within
862 	 * the per-domain arenas.
863 	 */
864 	if (vm_ndomains > 1 && PMAP_HAS_DMAP)
865 		quantum = KVA_NUMA_IMPORT_QUANTUM;
866 	else
867 		quantum = KVA_QUANTUM;
868 
869 	/*
870 	 * Initialize the kernel_arena.  This can grow on demand.
871 	 */
872 	vmem_init(kernel_arena, "kernel arena", 0, 0, PAGE_SIZE, 0, 0);
873 	vmem_set_import(kernel_arena, kva_import, NULL, NULL, quantum);
874 
875 	for (domain = 0; domain < vm_ndomains; domain++) {
876 		/*
877 		 * Initialize the per-domain arenas.  These are used to color
878 		 * the KVA space in a way that ensures that virtual large pages
879 		 * are backed by memory from the same physical domain,
880 		 * maximizing the potential for superpage promotion.
881 		 */
882 		vm_dom[domain].vmd_kernel_arena = vmem_create(
883 		    "kernel arena domain", 0, 0, PAGE_SIZE, 0, M_WAITOK);
884 		vmem_set_import(vm_dom[domain].vmd_kernel_arena,
885 		    kva_import_domain, NULL, kernel_arena, quantum);
886 
887 		/*
888 		 * In architectures with superpages, maintain separate arenas
889 		 * for allocations with permissions that differ from the
890 		 * "standard" read/write permissions used for kernel memory
891 		 * and pages that are never released, so as not to inhibit
892 		 * superpage promotion.
893 		 *
894 		 * Use the base import quantum since these arenas are rarely
895 		 * used.
896 		 */
897 #if VM_NRESERVLEVEL > 0
898 		vm_dom[domain].vmd_kernel_rwx_arena = vmem_create(
899 		    "kernel rwx arena domain", 0, 0, PAGE_SIZE, 0, M_WAITOK);
900 		vm_dom[domain].vmd_kernel_nofree_arena = vmem_create(
901 		    "kernel NOFREE arena domain", 0, 0, PAGE_SIZE, 0, M_WAITOK);
902 		vmem_set_import(vm_dom[domain].vmd_kernel_rwx_arena,
903 		    kva_import_domain, (vmem_release_t *)vmem_xfree,
904 		    kernel_arena, KVA_QUANTUM);
905 		vmem_set_import(vm_dom[domain].vmd_kernel_nofree_arena,
906 		    kva_import_domain, (vmem_release_t *)vmem_xfree,
907 		    kernel_arena, KVA_QUANTUM);
908 #else
909 		vm_dom[domain].vmd_kernel_rwx_arena =
910 		    vm_dom[domain].vmd_kernel_arena;
911 		vm_dom[domain].vmd_kernel_nofree_arena =
912 		    vm_dom[domain].vmd_kernel_arena;
913 #endif
914 	}
915 
916 	/*
917 	 * This must be the very first call so that the virtual address
918 	 * space used for early allocations is properly marked used in
919 	 * the map.
920 	 */
921 	uma_startup2();
922 }
923 
924 /*
925  *	kmem_bootstrap_free:
926  *
927  *	Free pages backing preloaded data (e.g., kernel modules) to the
928  *	system.  Currently only supported on platforms that create a
929  *	vm_phys segment for preloaded data.
930  */
931 void
kmem_bootstrap_free(vm_offset_t start,vm_size_t size)932 kmem_bootstrap_free(vm_offset_t start, vm_size_t size)
933 {
934 #if defined(__i386__) || defined(__amd64__)
935 	struct vm_domain *vmd;
936 	vm_offset_t end, va;
937 	vm_paddr_t pa;
938 	vm_page_t m;
939 
940 	end = trunc_page(start + size);
941 	start = round_page(start);
942 
943 #ifdef __amd64__
944 	/*
945 	 * Preloaded files do not have execute permissions by default on amd64.
946 	 * Restore the default permissions to ensure that the direct map alias
947 	 * is updated.
948 	 */
949 	pmap_change_prot(start, end - start, VM_PROT_RW);
950 #endif
951 	for (va = start; va < end; va += PAGE_SIZE) {
952 		pa = pmap_kextract(va);
953 		m = PHYS_TO_VM_PAGE(pa);
954 
955 		vmd = vm_pagequeue_domain(m);
956 		vm_domain_free_lock(vmd);
957 		vm_phys_free_pages(m, m->pool, 0);
958 		vm_domain_free_unlock(vmd);
959 
960 		vm_domain_freecnt_inc(vmd, 1);
961 		vm_cnt.v_page_count++;
962 	}
963 	pmap_remove(kernel_pmap, start, end);
964 	(void)vmem_add(kernel_arena, start, end - start, M_WAITOK);
965 #endif
966 }
967 
968 #ifdef PMAP_WANT_ACTIVE_CPUS_NAIVE
969 void
pmap_active_cpus(pmap_t pmap,cpuset_t * res)970 pmap_active_cpus(pmap_t pmap, cpuset_t *res)
971 {
972 	struct thread *td;
973 	struct proc *p;
974 	struct vmspace *vm;
975 	int c;
976 
977 	CPU_ZERO(res);
978 	CPU_FOREACH(c) {
979 		td = cpuid_to_pcpu[c]->pc_curthread;
980 		p = td->td_proc;
981 		if (p == NULL)
982 			continue;
983 		vm = vmspace_acquire_ref(p);
984 		if (vm == NULL)
985 			continue;
986 		if (pmap == vmspace_pmap(vm))
987 			CPU_SET(c, res);
988 		vmspace_free(vm);
989 	}
990 }
991 #endif
992 
993 /*
994  * Allow userspace to directly trigger the VM drain routine for testing
995  * purposes.
996  */
997 static int
debug_vm_lowmem(SYSCTL_HANDLER_ARGS)998 debug_vm_lowmem(SYSCTL_HANDLER_ARGS)
999 {
1000 	int error, i;
1001 
1002 	i = 0;
1003 	error = sysctl_handle_int(oidp, &i, 0, req);
1004 	if (error != 0)
1005 		return (error);
1006 	if ((i & ~(VM_LOW_KMEM | VM_LOW_PAGES)) != 0)
1007 		return (EINVAL);
1008 	if (i != 0)
1009 		EVENTHANDLER_INVOKE(vm_lowmem, i);
1010 	return (0);
1011 }
1012 SYSCTL_PROC(_debug, OID_AUTO, vm_lowmem,
1013     CTLTYPE_INT | CTLFLAG_MPSAFE | CTLFLAG_RW, 0, 0, debug_vm_lowmem, "I",
1014     "set to trigger vm_lowmem event with given flags");
1015 
1016 static int
debug_uma_reclaim(SYSCTL_HANDLER_ARGS)1017 debug_uma_reclaim(SYSCTL_HANDLER_ARGS)
1018 {
1019 	int error, i;
1020 
1021 	i = 0;
1022 	error = sysctl_handle_int(oidp, &i, 0, req);
1023 	if (error != 0 || req->newptr == NULL)
1024 		return (error);
1025 	if (i != UMA_RECLAIM_TRIM && i != UMA_RECLAIM_DRAIN &&
1026 	    i != UMA_RECLAIM_DRAIN_CPU)
1027 		return (EINVAL);
1028 	uma_reclaim(i);
1029 	return (0);
1030 }
1031 SYSCTL_PROC(_debug, OID_AUTO, uma_reclaim,
1032     CTLTYPE_INT | CTLFLAG_MPSAFE | CTLFLAG_RW, 0, 0, debug_uma_reclaim, "I",
1033     "set to generate request to reclaim uma caches");
1034 
1035 static int
debug_uma_reclaim_domain(SYSCTL_HANDLER_ARGS)1036 debug_uma_reclaim_domain(SYSCTL_HANDLER_ARGS)
1037 {
1038 	int domain, error, request;
1039 
1040 	request = 0;
1041 	error = sysctl_handle_int(oidp, &request, 0, req);
1042 	if (error != 0 || req->newptr == NULL)
1043 		return (error);
1044 
1045 	domain = request >> 4;
1046 	request &= 0xf;
1047 	if (request != UMA_RECLAIM_TRIM && request != UMA_RECLAIM_DRAIN &&
1048 	    request != UMA_RECLAIM_DRAIN_CPU)
1049 		return (EINVAL);
1050 	if (domain < 0 || domain >= vm_ndomains)
1051 		return (EINVAL);
1052 	uma_reclaim_domain(request, domain);
1053 	return (0);
1054 }
1055 SYSCTL_PROC(_debug, OID_AUTO, uma_reclaim_domain,
1056     CTLTYPE_INT | CTLFLAG_MPSAFE | CTLFLAG_RW, 0, 0,
1057     debug_uma_reclaim_domain, "I",
1058     "");
1059