xref: /linux/mm/shrinker.c (revision f95fcd7f28082524938db0b3808ce53630b8a718)
1 // SPDX-License-Identifier: GPL-2.0
2 #include <linux/memcontrol.h>
3 #include <linux/rwsem.h>
4 #include <linux/shrinker.h>
5 #include <linux/rculist.h>
6 #include <trace/events/vmscan.h>
7 
8 #include "internal.h"
9 
10 LIST_HEAD(shrinker_list);
11 DEFINE_MUTEX(shrinker_mutex);
12 
13 #ifdef CONFIG_MEMCG
14 static int shrinker_nr_max;
15 
16 static inline int shrinker_unit_size(int nr_items)
17 {
18 	return (DIV_ROUND_UP(nr_items, SHRINKER_UNIT_BITS) * sizeof(struct shrinker_info_unit *));
19 }
20 
21 static inline void shrinker_unit_free(struct shrinker_info *info, int start)
22 {
23 	struct shrinker_info_unit **unit;
24 	int nr, i;
25 
26 	if (!info)
27 		return;
28 
29 	unit = info->unit;
30 	nr = DIV_ROUND_UP(info->map_nr_max, SHRINKER_UNIT_BITS);
31 
32 	for (i = start; i < nr; i++) {
33 		if (!unit[i])
34 			break;
35 
36 		kfree(unit[i]);
37 		unit[i] = NULL;
38 	}
39 }
40 
41 static inline int shrinker_unit_alloc(struct shrinker_info *new,
42 				       struct shrinker_info *old, int nid)
43 {
44 	struct shrinker_info_unit *unit;
45 	int nr = DIV_ROUND_UP(new->map_nr_max, SHRINKER_UNIT_BITS);
46 	int start = old ? DIV_ROUND_UP(old->map_nr_max, SHRINKER_UNIT_BITS) : 0;
47 	int i;
48 
49 	for (i = start; i < nr; i++) {
50 		unit = kzalloc_node(sizeof(*unit), GFP_KERNEL, nid);
51 		if (!unit) {
52 			shrinker_unit_free(new, start);
53 			return -ENOMEM;
54 		}
55 
56 		new->unit[i] = unit;
57 	}
58 
59 	return 0;
60 }
61 
62 void free_shrinker_info(struct mem_cgroup *memcg)
63 {
64 	struct mem_cgroup_per_node *pn;
65 	struct shrinker_info *info;
66 	int nid;
67 
68 	for_each_node(nid) {
69 		pn = memcg->nodeinfo[nid];
70 		info = rcu_dereference_protected(pn->shrinker_info, true);
71 		shrinker_unit_free(info, 0);
72 		kvfree(info);
73 		rcu_assign_pointer(pn->shrinker_info, NULL);
74 	}
75 }
76 
77 int alloc_shrinker_info(struct mem_cgroup *memcg)
78 {
79 	int nid, ret = 0;
80 	int array_size = 0;
81 
82 	mutex_lock(&shrinker_mutex);
83 	array_size = shrinker_unit_size(shrinker_nr_max);
84 	for_each_node(nid) {
85 		struct shrinker_info *info = kvzalloc_node(sizeof(*info) + array_size,
86 							   GFP_KERNEL, nid);
87 		if (!info)
88 			goto err;
89 		info->map_nr_max = shrinker_nr_max;
90 		if (shrinker_unit_alloc(info, NULL, nid)) {
91 			kvfree(info);
92 			goto err;
93 		}
94 		rcu_assign_pointer(memcg->nodeinfo[nid]->shrinker_info, info);
95 	}
96 	mutex_unlock(&shrinker_mutex);
97 
98 	return ret;
99 
100 err:
101 	mutex_unlock(&shrinker_mutex);
102 	free_shrinker_info(memcg);
103 	return -ENOMEM;
104 }
105 
106 static struct shrinker_info *shrinker_info_protected(struct mem_cgroup *memcg,
107 						     int nid)
108 {
109 	return rcu_dereference_protected(memcg->nodeinfo[nid]->shrinker_info,
110 					 lockdep_is_held(&shrinker_mutex));
111 }
112 
113 static int expand_one_shrinker_info(struct mem_cgroup *memcg, int new_size,
114 				    int old_size, int new_nr_max)
115 {
116 	struct shrinker_info *new, *old;
117 	struct mem_cgroup_per_node *pn;
118 	int nid;
119 
120 	for_each_node(nid) {
121 		pn = memcg->nodeinfo[nid];
122 		old = shrinker_info_protected(memcg, nid);
123 		/* Not yet online memcg */
124 		if (!old)
125 			return 0;
126 
127 		/* Already expanded this shrinker_info */
128 		if (new_nr_max <= old->map_nr_max)
129 			continue;
130 
131 		new = kvzalloc_node(sizeof(*new) + new_size, GFP_KERNEL, nid);
132 		if (!new)
133 			return -ENOMEM;
134 
135 		new->map_nr_max = new_nr_max;
136 
137 		memcpy(new->unit, old->unit, old_size);
138 		if (shrinker_unit_alloc(new, old, nid)) {
139 			kvfree(new);
140 			return -ENOMEM;
141 		}
142 
143 		rcu_assign_pointer(pn->shrinker_info, new);
144 		kvfree_rcu(old, rcu);
145 	}
146 
147 	return 0;
148 }
149 
150 static int expand_shrinker_info(int new_id)
151 {
152 	int ret = 0;
153 	int new_nr_max = round_up(new_id + 1, SHRINKER_UNIT_BITS);
154 	int new_size, old_size = 0;
155 	struct mem_cgroup *memcg;
156 
157 	if (!root_mem_cgroup)
158 		goto out;
159 
160 	lockdep_assert_held(&shrinker_mutex);
161 
162 	new_size = shrinker_unit_size(new_nr_max);
163 	old_size = shrinker_unit_size(shrinker_nr_max);
164 
165 	memcg = mem_cgroup_iter(NULL, NULL, NULL);
166 	do {
167 		ret = expand_one_shrinker_info(memcg, new_size, old_size,
168 					       new_nr_max);
169 		if (ret) {
170 			mem_cgroup_iter_break(NULL, memcg);
171 			goto out;
172 		}
173 	} while ((memcg = mem_cgroup_iter(NULL, memcg, NULL)) != NULL);
174 out:
175 	if (!ret)
176 		shrinker_nr_max = new_nr_max;
177 
178 	return ret;
179 }
180 
181 static inline int shrinker_id_to_index(int shrinker_id)
182 {
183 	return shrinker_id / SHRINKER_UNIT_BITS;
184 }
185 
186 static inline int shrinker_id_to_offset(int shrinker_id)
187 {
188 	return shrinker_id % SHRINKER_UNIT_BITS;
189 }
190 
191 static inline int calc_shrinker_id(int index, int offset)
192 {
193 	return index * SHRINKER_UNIT_BITS + offset;
194 }
195 
196 void set_shrinker_bit(struct mem_cgroup *memcg, int nid, int shrinker_id)
197 {
198 	if (shrinker_id >= 0 && memcg && !mem_cgroup_is_root(memcg)) {
199 		struct shrinker_info *info;
200 		struct shrinker_info_unit *unit;
201 
202 		rcu_read_lock();
203 		info = rcu_dereference(memcg->nodeinfo[nid]->shrinker_info);
204 		unit = info->unit[shrinker_id_to_index(shrinker_id)];
205 		if (!WARN_ON_ONCE(shrinker_id >= info->map_nr_max)) {
206 			/* Pairs with smp mb in shrink_slab() */
207 			smp_mb__before_atomic();
208 			set_bit(shrinker_id_to_offset(shrinker_id), unit->map);
209 		}
210 		rcu_read_unlock();
211 	}
212 }
213 
214 static DEFINE_IDR(shrinker_idr);
215 
216 static int shrinker_memcg_alloc(struct shrinker *shrinker)
217 {
218 	int id, ret = -ENOMEM;
219 
220 	if (mem_cgroup_disabled())
221 		return -ENOSYS;
222 	if (mem_cgroup_kmem_disabled() && !(shrinker->flags & SHRINKER_NONSLAB))
223 		return -ENOSYS;
224 
225 	mutex_lock(&shrinker_mutex);
226 	id = idr_alloc(&shrinker_idr, shrinker, 0, 0, GFP_KERNEL);
227 	if (id < 0)
228 		goto unlock;
229 
230 	if (id >= shrinker_nr_max) {
231 		if (expand_shrinker_info(id)) {
232 			idr_remove(&shrinker_idr, id);
233 			goto unlock;
234 		}
235 	}
236 	shrinker->id = id;
237 	ret = 0;
238 unlock:
239 	mutex_unlock(&shrinker_mutex);
240 	return ret;
241 }
242 
243 static void shrinker_memcg_remove(struct shrinker *shrinker)
244 {
245 	int id = shrinker->id;
246 
247 	BUG_ON(id < 0);
248 
249 	lockdep_assert_held(&shrinker_mutex);
250 
251 	idr_remove(&shrinker_idr, id);
252 }
253 
254 static long xchg_nr_deferred_memcg(int nid, struct shrinker *shrinker,
255 				   struct mem_cgroup *memcg)
256 {
257 	struct shrinker_info *info;
258 	struct shrinker_info_unit *unit;
259 	long nr_deferred;
260 
261 	rcu_read_lock();
262 	info = rcu_dereference(memcg->nodeinfo[nid]->shrinker_info);
263 	unit = info->unit[shrinker_id_to_index(shrinker->id)];
264 	nr_deferred = atomic_long_xchg(&unit->nr_deferred[shrinker_id_to_offset(shrinker->id)], 0);
265 	rcu_read_unlock();
266 
267 	return nr_deferred;
268 }
269 
270 static long add_nr_deferred_memcg(long nr, int nid, struct shrinker *shrinker,
271 				  struct mem_cgroup *memcg)
272 {
273 	struct shrinker_info *info;
274 	struct shrinker_info_unit *unit;
275 	long nr_deferred;
276 
277 	rcu_read_lock();
278 	info = rcu_dereference(memcg->nodeinfo[nid]->shrinker_info);
279 	unit = info->unit[shrinker_id_to_index(shrinker->id)];
280 	nr_deferred =
281 		atomic_long_add_return(nr, &unit->nr_deferred[shrinker_id_to_offset(shrinker->id)]);
282 	rcu_read_unlock();
283 
284 	return nr_deferred;
285 }
286 
287 void reparent_shrinker_deferred(struct mem_cgroup *memcg)
288 {
289 	int nid, index, offset;
290 	long nr;
291 	struct mem_cgroup *parent = parent_mem_cgroup(memcg);
292 	struct shrinker_info *child_info, *parent_info;
293 	struct shrinker_info_unit *child_unit, *parent_unit;
294 
295 	/* Prevent from concurrent shrinker_info expand */
296 	mutex_lock(&shrinker_mutex);
297 	for_each_node(nid) {
298 		child_info = shrinker_info_protected(memcg, nid);
299 		parent_info = shrinker_info_protected(parent, nid);
300 		for (index = 0; index < shrinker_id_to_index(child_info->map_nr_max); index++) {
301 			child_unit = child_info->unit[index];
302 			parent_unit = parent_info->unit[index];
303 			for (offset = 0; offset < SHRINKER_UNIT_BITS; offset++) {
304 				nr = atomic_long_read(&child_unit->nr_deferred[offset]);
305 				atomic_long_add(nr, &parent_unit->nr_deferred[offset]);
306 			}
307 		}
308 	}
309 	mutex_unlock(&shrinker_mutex);
310 }
311 #else
312 static int shrinker_memcg_alloc(struct shrinker *shrinker)
313 {
314 	return -ENOSYS;
315 }
316 
317 static void shrinker_memcg_remove(struct shrinker *shrinker)
318 {
319 }
320 
321 static long xchg_nr_deferred_memcg(int nid, struct shrinker *shrinker,
322 				   struct mem_cgroup *memcg)
323 {
324 	return 0;
325 }
326 
327 static long add_nr_deferred_memcg(long nr, int nid, struct shrinker *shrinker,
328 				  struct mem_cgroup *memcg)
329 {
330 	return 0;
331 }
332 #endif /* CONFIG_MEMCG */
333 
334 static long xchg_nr_deferred(struct shrinker *shrinker,
335 			     struct shrink_control *sc)
336 {
337 	int nid = sc->nid;
338 
339 	if (!(shrinker->flags & SHRINKER_NUMA_AWARE))
340 		nid = 0;
341 
342 	if (sc->memcg &&
343 	    (shrinker->flags & SHRINKER_MEMCG_AWARE))
344 		return xchg_nr_deferred_memcg(nid, shrinker,
345 					      sc->memcg);
346 
347 	return atomic_long_xchg(&shrinker->nr_deferred[nid], 0);
348 }
349 
350 
351 static long add_nr_deferred(long nr, struct shrinker *shrinker,
352 			    struct shrink_control *sc)
353 {
354 	int nid = sc->nid;
355 
356 	if (!(shrinker->flags & SHRINKER_NUMA_AWARE))
357 		nid = 0;
358 
359 	if (sc->memcg &&
360 	    (shrinker->flags & SHRINKER_MEMCG_AWARE))
361 		return add_nr_deferred_memcg(nr, nid, shrinker,
362 					     sc->memcg);
363 
364 	return atomic_long_add_return(nr, &shrinker->nr_deferred[nid]);
365 }
366 
367 #define SHRINK_BATCH 128
368 
369 static unsigned long do_shrink_slab(struct shrink_control *shrinkctl,
370 				    struct shrinker *shrinker, int priority)
371 {
372 	unsigned long freed = 0;
373 	unsigned long long delta;
374 	long total_scan;
375 	long freeable;
376 	long nr;
377 	long new_nr;
378 	long batch_size = shrinker->batch ? shrinker->batch
379 					  : SHRINK_BATCH;
380 	long scanned = 0, next_deferred;
381 
382 	freeable = shrinker->count_objects(shrinker, shrinkctl);
383 	if (freeable == 0 || freeable == SHRINK_EMPTY)
384 		return freeable;
385 
386 	/*
387 	 * copy the current shrinker scan count into a local variable
388 	 * and zero it so that other concurrent shrinker invocations
389 	 * don't also do this scanning work.
390 	 */
391 	nr = xchg_nr_deferred(shrinker, shrinkctl);
392 
393 	if (shrinker->seeks) {
394 		delta = freeable >> priority;
395 		delta *= 4;
396 		do_div(delta, shrinker->seeks);
397 	} else {
398 		/*
399 		 * These objects don't require any IO to create. Trim
400 		 * them aggressively under memory pressure to keep
401 		 * them from causing refetches in the IO caches.
402 		 */
403 		delta = freeable / 2;
404 	}
405 
406 	total_scan = nr >> priority;
407 	total_scan += delta;
408 	total_scan = min(total_scan, (2 * freeable));
409 
410 	trace_mm_shrink_slab_start(shrinker, shrinkctl, nr,
411 				   freeable, delta, total_scan, priority,
412 				   shrinkctl->memcg);
413 
414 	/*
415 	 * Normally, we should not scan less than batch_size objects in one
416 	 * pass to avoid too frequent shrinker calls, but if the slab has less
417 	 * than batch_size objects in total and we are really tight on memory,
418 	 * we will try to reclaim all available objects, otherwise we can end
419 	 * up failing allocations although there are plenty of reclaimable
420 	 * objects spread over several slabs with usage less than the
421 	 * batch_size.
422 	 *
423 	 * We detect the "tight on memory" situations by looking at the total
424 	 * number of objects we want to scan (total_scan). If it is greater
425 	 * than the total number of objects on slab (freeable), we must be
426 	 * scanning at high prio and therefore should try to reclaim as much as
427 	 * possible.
428 	 */
429 	while (total_scan >= batch_size ||
430 	       total_scan >= freeable) {
431 		unsigned long ret;
432 		unsigned long nr_to_scan = min(batch_size, total_scan);
433 
434 		shrinkctl->nr_to_scan = nr_to_scan;
435 		shrinkctl->nr_scanned = nr_to_scan;
436 		ret = shrinker->scan_objects(shrinker, shrinkctl);
437 		if (ret == SHRINK_STOP)
438 			break;
439 		freed += ret;
440 
441 		count_vm_events(SLABS_SCANNED, shrinkctl->nr_scanned);
442 		total_scan -= shrinkctl->nr_scanned;
443 		scanned += shrinkctl->nr_scanned;
444 
445 		cond_resched();
446 	}
447 
448 	/*
449 	 * The deferred work is increased by any new work (delta) that wasn't
450 	 * done, decreased by old deferred work that was done now.
451 	 *
452 	 * And it is capped to two times of the freeable items.
453 	 */
454 	next_deferred = max_t(long, (nr + delta - scanned), 0);
455 	next_deferred = min(next_deferred, (2 * freeable));
456 
457 	/*
458 	 * move the unused scan count back into the shrinker in a
459 	 * manner that handles concurrent updates.
460 	 */
461 	new_nr = add_nr_deferred(next_deferred, shrinker, shrinkctl);
462 
463 	trace_mm_shrink_slab_end(shrinker, shrinkctl->nid, freed, nr, new_nr, total_scan,
464 				 shrinkctl->memcg);
465 	return freed;
466 }
467 
468 #ifdef CONFIG_MEMCG
469 static unsigned long shrink_slab_memcg(gfp_t gfp_mask, int nid,
470 			struct mem_cgroup *memcg, int priority)
471 {
472 	struct shrinker_info *info;
473 	unsigned long ret, freed = 0;
474 	int offset, index = 0;
475 
476 	if (!mem_cgroup_online(memcg))
477 		return 0;
478 
479 	/*
480 	 * lockless algorithm of memcg shrink.
481 	 *
482 	 * The shrinker_info may be freed asynchronously via RCU in the
483 	 * expand_one_shrinker_info(), so the rcu_read_lock() needs to be used
484 	 * to ensure the existence of the shrinker_info.
485 	 *
486 	 * The shrinker_info_unit is never freed unless its corresponding memcg
487 	 * is destroyed. Here we already hold the refcount of memcg, so the
488 	 * memcg will not be destroyed, and of course shrinker_info_unit will
489 	 * not be freed.
490 	 *
491 	 * So in the memcg shrink:
492 	 *  step 1: use rcu_read_lock() to guarantee existence of the
493 	 *          shrinker_info.
494 	 *  step 2: after getting shrinker_info_unit we can safely release the
495 	 *          RCU lock.
496 	 *  step 3: traverse the bitmap and calculate shrinker_id
497 	 *  step 4: use rcu_read_lock() to guarantee existence of the shrinker.
498 	 *  step 5: use shrinker_id to find the shrinker, then use
499 	 *          shrinker_try_get() to guarantee existence of the shrinker,
500 	 *          then we can release the RCU lock to do do_shrink_slab() that
501 	 *          may sleep.
502 	 *  step 6: do shrinker_put() paired with step 5 to put the refcount,
503 	 *          if the refcount reaches 0, then wake up the waiter in
504 	 *          shrinker_free() by calling complete().
505 	 *          Note: here is different from the global shrink, we don't
506 	 *                need to acquire the RCU lock to guarantee existence of
507 	 *                the shrinker, because we don't need to use this
508 	 *                shrinker to traverse the next shrinker in the bitmap.
509 	 *  step 7: we have already exited the read-side of rcu critical section
510 	 *          before calling do_shrink_slab(), the shrinker_info may be
511 	 *          released in expand_one_shrinker_info(), so go back to step 1
512 	 *          to reacquire the shrinker_info.
513 	 */
514 again:
515 	rcu_read_lock();
516 	info = rcu_dereference(memcg->nodeinfo[nid]->shrinker_info);
517 	if (unlikely(!info))
518 		goto unlock;
519 
520 	if (index < shrinker_id_to_index(info->map_nr_max)) {
521 		struct shrinker_info_unit *unit;
522 
523 		unit = info->unit[index];
524 
525 		rcu_read_unlock();
526 
527 		for_each_set_bit(offset, unit->map, SHRINKER_UNIT_BITS) {
528 			struct shrink_control sc = {
529 				.gfp_mask = gfp_mask,
530 				.nid = nid,
531 				.memcg = memcg,
532 			};
533 			struct shrinker *shrinker;
534 			int shrinker_id = calc_shrinker_id(index, offset);
535 
536 			rcu_read_lock();
537 			shrinker = idr_find(&shrinker_idr, shrinker_id);
538 			if (unlikely(!shrinker || !shrinker_try_get(shrinker))) {
539 				clear_bit(offset, unit->map);
540 				rcu_read_unlock();
541 				continue;
542 			}
543 			rcu_read_unlock();
544 
545 			/* Call non-slab shrinkers even though kmem is disabled */
546 			if (!memcg_kmem_online() &&
547 			    !(shrinker->flags & SHRINKER_NONSLAB)) {
548 				clear_bit(offset, unit->map);
549 				shrinker_put(shrinker);
550 				continue;
551 			}
552 
553 			ret = do_shrink_slab(&sc, shrinker, priority);
554 			if (ret == SHRINK_EMPTY) {
555 				clear_bit(offset, unit->map);
556 				/*
557 				 * After the shrinker reported that it had no objects to
558 				 * free, but before we cleared the corresponding bit in
559 				 * the memcg shrinker map, a new object might have been
560 				 * added. To make sure, we have the bit set in this
561 				 * case, we invoke the shrinker one more time and reset
562 				 * the bit if it reports that it is not empty anymore.
563 				 * The memory barrier here pairs with the barrier in
564 				 * set_shrinker_bit():
565 				 *
566 				 * list_lru_add()     shrink_slab_memcg()
567 				 *   list_add_tail()    clear_bit()
568 				 *   <MB>               <MB>
569 				 *   set_bit()          do_shrink_slab()
570 				 */
571 				smp_mb__after_atomic();
572 				ret = do_shrink_slab(&sc, shrinker, priority);
573 				if (ret == SHRINK_EMPTY)
574 					ret = 0;
575 				else
576 					set_shrinker_bit(memcg, nid, shrinker_id);
577 			}
578 			freed += ret;
579 			shrinker_put(shrinker);
580 		}
581 
582 		index++;
583 		goto again;
584 	}
585 unlock:
586 	rcu_read_unlock();
587 	return freed;
588 }
589 #else /* !CONFIG_MEMCG */
590 static unsigned long shrink_slab_memcg(gfp_t gfp_mask, int nid,
591 			struct mem_cgroup *memcg, int priority)
592 {
593 	return 0;
594 }
595 #endif /* CONFIG_MEMCG */
596 
597 /**
598  * shrink_slab - shrink slab caches
599  * @gfp_mask: allocation context
600  * @nid: node whose slab caches to target
601  * @memcg: memory cgroup whose slab caches to target
602  * @priority: the reclaim priority
603  *
604  * Call the shrink functions to age shrinkable caches.
605  *
606  * @nid is passed along to shrinkers with SHRINKER_NUMA_AWARE set,
607  * unaware shrinkers will receive a node id of 0 instead.
608  *
609  * @memcg specifies the memory cgroup to target. Unaware shrinkers
610  * are called only if it is the root cgroup.
611  *
612  * @priority is sc->priority, we take the number of objects and >> by priority
613  * in order to get the scan target.
614  *
615  * Returns the number of reclaimed slab objects.
616  */
617 unsigned long shrink_slab(gfp_t gfp_mask, int nid, struct mem_cgroup *memcg,
618 			  int priority)
619 {
620 	unsigned long ret, freed = 0;
621 	struct shrinker *shrinker;
622 
623 	/*
624 	 * The root memcg might be allocated even though memcg is disabled
625 	 * via "cgroup_disable=memory" boot parameter.  This could make
626 	 * mem_cgroup_is_root() return false, then just run memcg slab
627 	 * shrink, but skip global shrink.  This may result in premature
628 	 * oom.
629 	 */
630 	if (!mem_cgroup_disabled() && !mem_cgroup_is_root(memcg))
631 		return shrink_slab_memcg(gfp_mask, nid, memcg, priority);
632 
633 	/*
634 	 * lockless algorithm of global shrink.
635 	 *
636 	 * In the unregistration setp, the shrinker will be freed asynchronously
637 	 * via RCU after its refcount reaches 0. So both rcu_read_lock() and
638 	 * shrinker_try_get() can be used to ensure the existence of the shrinker.
639 	 *
640 	 * So in the global shrink:
641 	 *  step 1: use rcu_read_lock() to guarantee existence of the shrinker
642 	 *          and the validity of the shrinker_list walk.
643 	 *  step 2: use shrinker_try_get() to try get the refcount, if successful,
644 	 *          then the existence of the shrinker can also be guaranteed,
645 	 *          so we can release the RCU lock to do do_shrink_slab() that
646 	 *          may sleep.
647 	 *  step 3: *MUST* to reacquire the RCU lock before calling shrinker_put(),
648 	 *          which ensures that neither this shrinker nor the next shrinker
649 	 *          will be freed in the next traversal operation.
650 	 *  step 4: do shrinker_put() paired with step 2 to put the refcount,
651 	 *          if the refcount reaches 0, then wake up the waiter in
652 	 *          shrinker_free() by calling complete().
653 	 */
654 	rcu_read_lock();
655 	list_for_each_entry_rcu(shrinker, &shrinker_list, list) {
656 		struct shrink_control sc = {
657 			.gfp_mask = gfp_mask,
658 			.nid = nid,
659 			.memcg = memcg,
660 		};
661 
662 		if (!shrinker_try_get(shrinker))
663 			continue;
664 
665 		rcu_read_unlock();
666 
667 		ret = do_shrink_slab(&sc, shrinker, priority);
668 		if (ret == SHRINK_EMPTY)
669 			ret = 0;
670 		freed += ret;
671 
672 		rcu_read_lock();
673 		shrinker_put(shrinker);
674 	}
675 
676 	rcu_read_unlock();
677 	cond_resched();
678 	return freed;
679 }
680 
681 struct shrinker *shrinker_alloc(unsigned int flags, const char *fmt, ...)
682 {
683 	struct shrinker *shrinker;
684 	unsigned int size;
685 	va_list ap;
686 	int err;
687 
688 	shrinker = kzalloc_obj(struct shrinker);
689 	if (!shrinker)
690 		return NULL;
691 
692 	va_start(ap, fmt);
693 	err = shrinker_debugfs_name_alloc(shrinker, fmt, ap);
694 	va_end(ap);
695 	if (err)
696 		goto err_name;
697 
698 	shrinker->flags = flags | SHRINKER_ALLOCATED;
699 	shrinker->seeks = DEFAULT_SEEKS;
700 
701 	if (flags & SHRINKER_MEMCG_AWARE) {
702 		err = shrinker_memcg_alloc(shrinker);
703 		if (err == -ENOSYS) {
704 			/* Memcg is not supported, fallback to non-memcg-aware shrinker. */
705 			shrinker->flags &= ~SHRINKER_MEMCG_AWARE;
706 			goto non_memcg;
707 		}
708 
709 		if (err)
710 			goto err_flags;
711 
712 		return shrinker;
713 	}
714 
715 non_memcg:
716 	/*
717 	 * The nr_deferred is available on per memcg level for memcg aware
718 	 * shrinkers, so only allocate nr_deferred in the following cases:
719 	 *  - non-memcg-aware shrinkers
720 	 *  - !CONFIG_MEMCG
721 	 *  - memcg is disabled by kernel command line
722 	 *  - non-slab shrinkers: when memcg kmem is disabled
723 	 */
724 	size = sizeof(*shrinker->nr_deferred);
725 	if (flags & SHRINKER_NUMA_AWARE)
726 		size *= nr_node_ids;
727 
728 	shrinker->nr_deferred = kzalloc(size, GFP_KERNEL);
729 	if (!shrinker->nr_deferred)
730 		goto err_flags;
731 
732 	return shrinker;
733 
734 err_flags:
735 	shrinker_debugfs_name_free(shrinker);
736 err_name:
737 	kfree(shrinker);
738 	return NULL;
739 }
740 EXPORT_SYMBOL_GPL(shrinker_alloc);
741 
742 void shrinker_register(struct shrinker *shrinker)
743 {
744 	if (unlikely(!(shrinker->flags & SHRINKER_ALLOCATED))) {
745 		pr_warn("Must use shrinker_alloc() to dynamically allocate the shrinker");
746 		return;
747 	}
748 
749 	mutex_lock(&shrinker_mutex);
750 	list_add_tail_rcu(&shrinker->list, &shrinker_list);
751 	shrinker->flags |= SHRINKER_REGISTERED;
752 	shrinker_debugfs_add(shrinker);
753 	mutex_unlock(&shrinker_mutex);
754 
755 	init_completion(&shrinker->done);
756 	/*
757 	 * Now the shrinker is fully set up, take the first reference to it to
758 	 * indicate that lookup operations are now allowed to use it via
759 	 * shrinker_try_get().
760 	 */
761 	refcount_set(&shrinker->refcount, 1);
762 }
763 EXPORT_SYMBOL_GPL(shrinker_register);
764 
765 static void shrinker_free_rcu_cb(struct rcu_head *head)
766 {
767 	struct shrinker *shrinker = container_of(head, struct shrinker, rcu);
768 
769 	kfree(shrinker->nr_deferred);
770 	kfree(shrinker);
771 }
772 
773 void shrinker_free(struct shrinker *shrinker)
774 {
775 	struct dentry *debugfs_entry = NULL;
776 	int debugfs_id;
777 
778 	if (!shrinker)
779 		return;
780 
781 	if (shrinker->flags & SHRINKER_REGISTERED) {
782 		/* drop the initial refcount */
783 		shrinker_put(shrinker);
784 		/*
785 		 * Wait for all lookups of the shrinker to complete, after that,
786 		 * no shrinker is running or will run again, then we can safely
787 		 * free it asynchronously via RCU and safely free the structure
788 		 * where the shrinker is located, such as super_block etc.
789 		 */
790 		wait_for_completion(&shrinker->done);
791 	}
792 
793 	mutex_lock(&shrinker_mutex);
794 	if (shrinker->flags & SHRINKER_REGISTERED) {
795 		/*
796 		 * Now we can safely remove it from the shrinker_list and then
797 		 * free it.
798 		 */
799 		list_del_rcu(&shrinker->list);
800 		debugfs_entry = shrinker_debugfs_detach(shrinker, &debugfs_id);
801 		shrinker->flags &= ~SHRINKER_REGISTERED;
802 	}
803 
804 	shrinker_debugfs_name_free(shrinker);
805 
806 	if (shrinker->flags & SHRINKER_MEMCG_AWARE)
807 		shrinker_memcg_remove(shrinker);
808 	mutex_unlock(&shrinker_mutex);
809 
810 	if (debugfs_entry)
811 		shrinker_debugfs_remove(debugfs_entry, debugfs_id);
812 
813 	call_rcu(&shrinker->rcu, shrinker_free_rcu_cb);
814 }
815 EXPORT_SYMBOL_GPL(shrinker_free);
816