xref: /titanic_50/usr/src/uts/common/vm/seg_kmem.c (revision 3b4b8bda7949c2c1bf610c9f0413accc9d26119a)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright (c) 1998, 2010, Oracle and/or its affiliates. All rights reserved.
23  * Copyright 2016 Joyent, Inc.
24  */
25 
26 #include <sys/types.h>
27 #include <sys/t_lock.h>
28 #include <sys/param.h>
29 #include <sys/sysmacros.h>
30 #include <sys/tuneable.h>
31 #include <sys/systm.h>
32 #include <sys/vm.h>
33 #include <sys/kmem.h>
34 #include <sys/vmem.h>
35 #include <sys/mman.h>
36 #include <sys/cmn_err.h>
37 #include <sys/debug.h>
38 #include <sys/dumphdr.h>
39 #include <sys/bootconf.h>
40 #include <sys/lgrp.h>
41 #include <vm/seg_kmem.h>
42 #include <vm/hat.h>
43 #include <vm/page.h>
44 #include <vm/vm_dep.h>
45 #include <vm/faultcode.h>
46 #include <sys/promif.h>
47 #include <vm/seg_kp.h>
48 #include <sys/bitmap.h>
49 #include <sys/mem_cage.h>
50 
51 #ifdef __sparc
52 #include <sys/ivintr.h>
53 #include <sys/panic.h>
54 #endif
55 
56 /*
57  * seg_kmem is the primary kernel memory segment driver.  It
58  * maps the kernel heap [kernelheap, ekernelheap), module text,
59  * and all memory which was allocated before the VM was initialized
60  * into kas.
61  *
62  * Pages which belong to seg_kmem are hashed into &kvp vnode at
63  * an offset equal to (u_offset_t)virt_addr, and have p_lckcnt >= 1.
64  * They must never be paged out since segkmem_fault() is a no-op to
65  * prevent recursive faults.
66  *
67  * Currently, seg_kmem pages are sharelocked (p_sharelock == 1) on
68  * __x86 and are unlocked (p_sharelock == 0) on __sparc.  Once __x86
69  * supports relocation the #ifdef kludges can be removed.
70  *
71  * seg_kmem pages may be subject to relocation by page_relocate(),
72  * provided that the HAT supports it; if this is so, segkmem_reloc
73  * will be set to a nonzero value. All boot time allocated memory as
74  * well as static memory is considered off limits to relocation.
75  * Pages are "relocatable" if p_state does not have P_NORELOC set, so
76  * we request P_NORELOC pages for memory that isn't safe to relocate.
77  *
78  * The kernel heap is logically divided up into four pieces:
79  *
80  *   heap32_arena is for allocations that require 32-bit absolute
81  *   virtual addresses (e.g. code that uses 32-bit pointers/offsets).
82  *
83  *   heap_core is for allocations that require 2GB *relative*
84  *   offsets; in other words all memory from heap_core is within
85  *   2GB of all other memory from the same arena. This is a requirement
86  *   of the addressing modes of some processors in supervisor code.
87  *
88  *   heap_arena is the general heap arena.
89  *
90  *   static_arena is the static memory arena.  Allocations from it
91  *   are not subject to relocation so it is safe to use the memory
92  *   physical address as well as the virtual address (e.g. the VA to
93  *   PA translations are static).  Caches may import from static_arena;
94  *   all other static memory allocations should use static_alloc_arena.
95  *
96  * On some platforms which have limited virtual address space, seg_kmem
97  * may share [kernelheap, ekernelheap) with seg_kp; if this is so,
98  * segkp_bitmap is non-NULL, and each bit represents a page of virtual
99  * address space which is actually seg_kp mapped.
100  */
101 
102 extern ulong_t *segkp_bitmap;   /* Is set if segkp is from the kernel heap */
103 
104 char *kernelheap;		/* start of primary kernel heap */
105 char *ekernelheap;		/* end of primary kernel heap */
106 struct seg kvseg;		/* primary kernel heap segment */
107 struct seg kvseg_core;		/* "core" kernel heap segment */
108 struct seg kzioseg;		/* Segment for zio mappings */
109 vmem_t *heap_arena;		/* primary kernel heap arena */
110 vmem_t *heap_core_arena;	/* core kernel heap arena */
111 char *heap_core_base;		/* start of core kernel heap arena */
112 char *heap_lp_base;		/* start of kernel large page heap arena */
113 char *heap_lp_end;		/* end of kernel large page heap arena */
114 vmem_t *hat_memload_arena;	/* HAT translation data */
115 struct seg kvseg32;		/* 32-bit kernel heap segment */
116 vmem_t *heap32_arena;		/* 32-bit kernel heap arena */
117 vmem_t *heaptext_arena;		/* heaptext arena */
118 struct as kas;			/* kernel address space */
119 int segkmem_reloc;		/* enable/disable relocatable segkmem pages */
120 vmem_t *static_arena;		/* arena for caches to import static memory */
121 vmem_t *static_alloc_arena;	/* arena for allocating static memory */
122 vmem_t *zio_arena = NULL;	/* arena for allocating zio memory */
123 vmem_t *zio_alloc_arena = NULL;	/* arena for allocating zio memory */
124 
125 /*
126  * seg_kmem driver can map part of the kernel heap with large pages.
127  * Currently this functionality is implemented for sparc platforms only.
128  *
129  * The large page size "segkmem_lpsize" for kernel heap is selected in the
130  * platform specific code. It can also be modified via /etc/system file.
131  * Setting segkmem_lpsize to PAGESIZE in /etc/system disables usage of large
132  * pages for kernel heap. "segkmem_lpshift" is adjusted appropriately to
133  * match segkmem_lpsize.
134  *
135  * At boot time we carve from kernel heap arena a range of virtual addresses
136  * that will be used for large page mappings. This range [heap_lp_base,
137  * heap_lp_end) is set up as a separate vmem arena - "heap_lp_arena". We also
138  * create "kmem_lp_arena" that caches memory already backed up by large
139  * pages. kmem_lp_arena imports virtual segments from heap_lp_arena.
140  */
141 
142 size_t	segkmem_lpsize;
143 static  uint_t	segkmem_lpshift = PAGESHIFT;
144 int	segkmem_lpszc = 0;
145 
146 size_t  segkmem_kmemlp_quantum = 0x400000;	/* 4MB */
147 size_t  segkmem_heaplp_quantum;
148 vmem_t *heap_lp_arena;
149 static  vmem_t *kmem_lp_arena;
150 static  vmem_t *segkmem_ppa_arena;
151 static	segkmem_lpcb_t segkmem_lpcb;
152 
153 /*
154  * We use "segkmem_kmemlp_max" to limit the total amount of physical memory
155  * consumed by the large page heap. By default this parameter is set to 1/8 of
156  * physmem but can be adjusted through /etc/system either directly or
157  * indirectly by setting "segkmem_kmemlp_pcnt" to the percent of physmem
158  * we allow for large page heap.
159  */
160 size_t  segkmem_kmemlp_max;
161 static  uint_t  segkmem_kmemlp_pcnt;
162 
163 /*
164  * Getting large pages for kernel heap could be problematic due to
165  * physical memory fragmentation. That's why we allow to preallocate
166  * "segkmem_kmemlp_min" bytes at boot time.
167  */
168 static  size_t	segkmem_kmemlp_min;
169 
170 /*
171  * Throttling is used to avoid expensive tries to allocate large pages
172  * for kernel heap when a lot of succesive attempts to do so fail.
173  */
174 static  ulong_t segkmem_lpthrottle_max = 0x400000;
175 static  ulong_t segkmem_lpthrottle_start = 0x40;
176 static  ulong_t segkmem_use_lpthrottle = 1;
177 
178 /*
179  * Freed pages accumulate on a garbage list until segkmem is ready,
180  * at which point we call segkmem_gc() to free it all.
181  */
182 typedef struct segkmem_gc_list {
183 	struct segkmem_gc_list	*gc_next;
184 	vmem_t			*gc_arena;
185 	size_t			gc_size;
186 } segkmem_gc_list_t;
187 
188 static segkmem_gc_list_t *segkmem_gc_list;
189 
190 /*
191  * Allocations from the hat_memload arena add VM_MEMLOAD to their
192  * vmflags so that segkmem_xalloc() can inform the hat layer that it needs
193  * to take steps to prevent infinite recursion.  HAT allocations also
194  * must be non-relocatable to prevent recursive page faults.
195  */
196 static void *
197 hat_memload_alloc(vmem_t *vmp, size_t size, int flags)
198 {
199 	flags |= (VM_MEMLOAD | VM_NORELOC);
200 	return (segkmem_alloc(vmp, size, flags));
201 }
202 
203 /*
204  * Allocations from static_arena arena (or any other arena that uses
205  * segkmem_alloc_permanent()) require non-relocatable (permanently
206  * wired) memory pages, since these pages are referenced by physical
207  * as well as virtual address.
208  */
209 void *
210 segkmem_alloc_permanent(vmem_t *vmp, size_t size, int flags)
211 {
212 	return (segkmem_alloc(vmp, size, flags | VM_NORELOC));
213 }
214 
215 /*
216  * Initialize kernel heap boundaries.
217  */
218 void
219 kernelheap_init(
220 	void *heap_start,
221 	void *heap_end,
222 	char *first_avail,
223 	void *core_start,
224 	void *core_end)
225 {
226 	uintptr_t textbase;
227 	size_t core_size;
228 	size_t heap_size;
229 	vmem_t *heaptext_parent;
230 	size_t	heap_lp_size = 0;
231 #ifdef __sparc
232 	size_t kmem64_sz = kmem64_aligned_end - kmem64_base;
233 #endif	/* __sparc */
234 
235 	kernelheap = heap_start;
236 	ekernelheap = heap_end;
237 
238 #ifdef __sparc
239 	heap_lp_size = (((uintptr_t)heap_end - (uintptr_t)heap_start) / 4);
240 	/*
241 	 * Bias heap_lp start address by kmem64_sz to reduce collisions
242 	 * in 4M kernel TSB between kmem64 area and heap_lp
243 	 */
244 	kmem64_sz = P2ROUNDUP(kmem64_sz, MMU_PAGESIZE256M);
245 	if (kmem64_sz <= heap_lp_size / 2)
246 		heap_lp_size -= kmem64_sz;
247 	heap_lp_base = ekernelheap - heap_lp_size;
248 	heap_lp_end = heap_lp_base + heap_lp_size;
249 #endif	/* __sparc */
250 
251 	/*
252 	 * If this platform has a 'core' heap area, then the space for
253 	 * overflow module text should be carved out of the end of that
254 	 * heap.  Otherwise, it gets carved out of the general purpose
255 	 * heap.
256 	 */
257 	core_size = (uintptr_t)core_end - (uintptr_t)core_start;
258 	if (core_size > 0) {
259 		ASSERT(core_size >= HEAPTEXT_SIZE);
260 		textbase = (uintptr_t)core_end - HEAPTEXT_SIZE;
261 		core_size -= HEAPTEXT_SIZE;
262 	}
263 #ifndef __sparc
264 	else {
265 		ekernelheap -= HEAPTEXT_SIZE;
266 		textbase = (uintptr_t)ekernelheap;
267 	}
268 #endif
269 
270 	heap_size = (uintptr_t)ekernelheap - (uintptr_t)kernelheap;
271 	heap_arena = vmem_init("heap", kernelheap, heap_size, PAGESIZE,
272 	    segkmem_alloc, segkmem_free);
273 
274 	if (core_size > 0) {
275 		heap_core_arena = vmem_create("heap_core", core_start,
276 		    core_size, PAGESIZE, NULL, NULL, NULL, 0, VM_SLEEP);
277 		heap_core_base = core_start;
278 	} else {
279 		heap_core_arena = heap_arena;
280 		heap_core_base = kernelheap;
281 	}
282 
283 	/*
284 	 * reserve space for the large page heap. If large pages for kernel
285 	 * heap is enabled large page heap arean will be created later in the
286 	 * boot sequence in segkmem_heap_lp_init(). Otherwise the allocated
287 	 * range will be returned back to the heap_arena.
288 	 */
289 	if (heap_lp_size) {
290 		(void) vmem_xalloc(heap_arena, heap_lp_size, PAGESIZE, 0, 0,
291 		    heap_lp_base, heap_lp_end,
292 		    VM_NOSLEEP | VM_BESTFIT | VM_PANIC);
293 	}
294 
295 	/*
296 	 * Remove the already-spoken-for memory range [kernelheap, first_avail).
297 	 */
298 	(void) vmem_xalloc(heap_arena, first_avail - kernelheap, PAGESIZE,
299 	    0, 0, kernelheap, first_avail, VM_NOSLEEP | VM_BESTFIT | VM_PANIC);
300 
301 #ifdef __sparc
302 	heap32_arena = vmem_create("heap32", (void *)SYSBASE32,
303 	    SYSLIMIT32 - SYSBASE32 - HEAPTEXT_SIZE, PAGESIZE, NULL,
304 	    NULL, NULL, 0, VM_SLEEP);
305 	/*
306 	 * Prom claims the physical and virtual resources used by panicbuf
307 	 * and inter_vec_table. So reserve space for panicbuf, intr_vec_table,
308 	 * reserved interrupt vector data structures from 32-bit heap.
309 	 */
310 	(void) vmem_xalloc(heap32_arena, PANICBUFSIZE, PAGESIZE, 0, 0,
311 	    panicbuf, panicbuf + PANICBUFSIZE,
312 	    VM_NOSLEEP | VM_BESTFIT | VM_PANIC);
313 
314 	(void) vmem_xalloc(heap32_arena, IVSIZE, PAGESIZE, 0, 0,
315 	    intr_vec_table, (caddr_t)intr_vec_table + IVSIZE,
316 	    VM_NOSLEEP | VM_BESTFIT | VM_PANIC);
317 
318 	textbase = SYSLIMIT32 - HEAPTEXT_SIZE;
319 	heaptext_parent = NULL;
320 #else	/* __sparc */
321 	heap32_arena = heap_core_arena;
322 	heaptext_parent = heap_core_arena;
323 #endif	/* __sparc */
324 
325 	heaptext_arena = vmem_create("heaptext", (void *)textbase,
326 	    HEAPTEXT_SIZE, PAGESIZE, NULL, NULL, heaptext_parent, 0, VM_SLEEP);
327 
328 	/*
329 	 * Create a set of arenas for memory with static translations
330 	 * (e.g. VA -> PA translations cannot change).  Since using
331 	 * kernel pages by physical address implies it isn't safe to
332 	 * walk across page boundaries, the static_arena quantum must
333 	 * be PAGESIZE.  Any kmem caches that require static memory
334 	 * should source from static_arena, while direct allocations
335 	 * should only use static_alloc_arena.
336 	 */
337 	static_arena = vmem_create("static", NULL, 0, PAGESIZE,
338 	    segkmem_alloc_permanent, segkmem_free, heap_arena, 0, VM_SLEEP);
339 	static_alloc_arena = vmem_create("static_alloc", NULL, 0,
340 	    sizeof (uint64_t), vmem_alloc, vmem_free, static_arena,
341 	    0, VM_SLEEP);
342 
343 	/*
344 	 * Create an arena for translation data (ptes, hmes, or hblks).
345 	 * We need an arena for this because hat_memload() is essential
346 	 * to vmem_populate() (see comments in common/os/vmem.c).
347 	 *
348 	 * Note: any kmem cache that allocates from hat_memload_arena
349 	 * must be created as a KMC_NOHASH cache (i.e. no external slab
350 	 * and bufctl structures to allocate) so that slab creation doesn't
351 	 * require anything more than a single vmem_alloc().
352 	 */
353 	hat_memload_arena = vmem_create("hat_memload", NULL, 0, PAGESIZE,
354 	    hat_memload_alloc, segkmem_free, heap_arena, 0,
355 	    VM_SLEEP | VMC_POPULATOR | VMC_DUMPSAFE);
356 }
357 
358 void
359 boot_mapin(caddr_t addr, size_t size)
360 {
361 	caddr_t	 eaddr;
362 	page_t	*pp;
363 	pfn_t	 pfnum;
364 
365 	if (page_resv(btop(size), KM_NOSLEEP) == 0)
366 		panic("boot_mapin: page_resv failed");
367 
368 	for (eaddr = addr + size; addr < eaddr; addr += PAGESIZE) {
369 		pfnum = va_to_pfn(addr);
370 		if (pfnum == PFN_INVALID)
371 			continue;
372 		if ((pp = page_numtopp_nolock(pfnum)) == NULL)
373 			panic("boot_mapin(): No pp for pfnum = %lx", pfnum);
374 
375 		/*
376 		 * must break up any large pages that may have constituent
377 		 * pages being utilized for BOP_ALLOC()'s before calling
378 		 * page_numtopp().The locking code (ie. page_reclaim())
379 		 * can't handle them
380 		 */
381 		if (pp->p_szc != 0)
382 			page_boot_demote(pp);
383 
384 		pp = page_numtopp(pfnum, SE_EXCL);
385 		if (pp == NULL || PP_ISFREE(pp))
386 			panic("boot_alloc: pp is NULL or free");
387 
388 		/*
389 		 * If the cage is on but doesn't yet contain this page,
390 		 * mark it as non-relocatable.
391 		 */
392 		if (kcage_on && !PP_ISNORELOC(pp)) {
393 			PP_SETNORELOC(pp);
394 			PLCNT_XFER_NORELOC(pp);
395 		}
396 
397 		(void) page_hashin(pp, &kvp, (u_offset_t)(uintptr_t)addr, NULL);
398 		pp->p_lckcnt = 1;
399 #if defined(__x86)
400 		page_downgrade(pp);
401 #else
402 		page_unlock(pp);
403 #endif
404 	}
405 }
406 
407 /*
408  * Get pages from boot and hash them into the kernel's vp.
409  * Used after page structs have been allocated, but before segkmem is ready.
410  */
411 void *
412 boot_alloc(void *inaddr, size_t size, uint_t align)
413 {
414 	caddr_t addr = inaddr;
415 
416 	if (bootops == NULL)
417 		prom_panic("boot_alloc: attempt to allocate memory after "
418 		    "BOP_GONE");
419 
420 	size = ptob(btopr(size));
421 #ifdef __sparc
422 	if (bop_alloc_chunk(addr, size, align) != (caddr_t)addr)
423 		panic("boot_alloc: bop_alloc_chunk failed");
424 #else
425 	if (BOP_ALLOC(bootops, addr, size, align) != addr)
426 		panic("boot_alloc: BOP_ALLOC failed");
427 #endif
428 	boot_mapin((caddr_t)addr, size);
429 	return (addr);
430 }
431 
432 static void
433 segkmem_badop()
434 {
435 	panic("segkmem_badop");
436 }
437 
438 #define	SEGKMEM_BADOP(t)	(t(*)())segkmem_badop
439 
440 /*ARGSUSED*/
441 static faultcode_t
442 segkmem_fault(struct hat *hat, struct seg *seg, caddr_t addr, size_t size,
443 	enum fault_type type, enum seg_rw rw)
444 {
445 	pgcnt_t npages;
446 	spgcnt_t pg;
447 	page_t *pp;
448 	struct vnode *vp = seg->s_data;
449 
450 	ASSERT(RW_READ_HELD(&seg->s_as->a_lock));
451 
452 	if (seg->s_as != &kas || size > seg->s_size ||
453 	    addr < seg->s_base || addr + size > seg->s_base + seg->s_size)
454 		panic("segkmem_fault: bad args");
455 
456 	/*
457 	 * If it is one of segkp pages, call segkp_fault.
458 	 */
459 	if (segkp_bitmap && seg == &kvseg &&
460 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
461 		return (SEGOP_FAULT(hat, segkp, addr, size, type, rw));
462 
463 	if (rw != S_READ && rw != S_WRITE && rw != S_OTHER)
464 		return (FC_NOSUPPORT);
465 
466 	npages = btopr(size);
467 
468 	switch (type) {
469 	case F_SOFTLOCK:	/* lock down already-loaded translations */
470 		for (pg = 0; pg < npages; pg++) {
471 			pp = page_lookup(vp, (u_offset_t)(uintptr_t)addr,
472 			    SE_SHARED);
473 			if (pp == NULL) {
474 				/*
475 				 * Hmm, no page. Does a kernel mapping
476 				 * exist for it?
477 				 */
478 				if (!hat_probe(kas.a_hat, addr)) {
479 					addr -= PAGESIZE;
480 					while (--pg >= 0) {
481 						pp = page_find(vp, (u_offset_t)
482 						    (uintptr_t)addr);
483 						if (pp)
484 							page_unlock(pp);
485 						addr -= PAGESIZE;
486 					}
487 					return (FC_NOMAP);
488 				}
489 			}
490 			addr += PAGESIZE;
491 		}
492 		if (rw == S_OTHER)
493 			hat_reserve(seg->s_as, addr, size);
494 		return (0);
495 	case F_SOFTUNLOCK:
496 		while (npages--) {
497 			pp = page_find(vp, (u_offset_t)(uintptr_t)addr);
498 			if (pp)
499 				page_unlock(pp);
500 			addr += PAGESIZE;
501 		}
502 		return (0);
503 	default:
504 		return (FC_NOSUPPORT);
505 	}
506 	/*NOTREACHED*/
507 }
508 
509 static int
510 segkmem_setprot(struct seg *seg, caddr_t addr, size_t size, uint_t prot)
511 {
512 	ASSERT(RW_LOCK_HELD(&seg->s_as->a_lock));
513 
514 	if (seg->s_as != &kas || size > seg->s_size ||
515 	    addr < seg->s_base || addr + size > seg->s_base + seg->s_size)
516 		panic("segkmem_setprot: bad args");
517 
518 	/*
519 	 * If it is one of segkp pages, call segkp.
520 	 */
521 	if (segkp_bitmap && seg == &kvseg &&
522 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
523 		return (SEGOP_SETPROT(segkp, addr, size, prot));
524 
525 	if (prot == 0)
526 		hat_unload(kas.a_hat, addr, size, HAT_UNLOAD);
527 	else
528 		hat_chgprot(kas.a_hat, addr, size, prot);
529 	return (0);
530 }
531 
532 /*
533  * This is a dummy segkmem function overloaded to call segkp
534  * when segkp is under the heap.
535  */
536 /* ARGSUSED */
537 static int
538 segkmem_checkprot(struct seg *seg, caddr_t addr, size_t size, uint_t prot)
539 {
540 	ASSERT(RW_LOCK_HELD(&seg->s_as->a_lock));
541 
542 	if (seg->s_as != &kas)
543 		segkmem_badop();
544 
545 	/*
546 	 * If it is one of segkp pages, call into segkp.
547 	 */
548 	if (segkp_bitmap && seg == &kvseg &&
549 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
550 		return (SEGOP_CHECKPROT(segkp, addr, size, prot));
551 
552 	segkmem_badop();
553 	return (0);
554 }
555 
556 /*
557  * This is a dummy segkmem function overloaded to call segkp
558  * when segkp is under the heap.
559  */
560 /* ARGSUSED */
561 static int
562 segkmem_kluster(struct seg *seg, caddr_t addr, ssize_t delta)
563 {
564 	ASSERT(RW_LOCK_HELD(&seg->s_as->a_lock));
565 
566 	if (seg->s_as != &kas)
567 		segkmem_badop();
568 
569 	/*
570 	 * If it is one of segkp pages, call into segkp.
571 	 */
572 	if (segkp_bitmap && seg == &kvseg &&
573 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
574 		return (SEGOP_KLUSTER(segkp, addr, delta));
575 
576 	segkmem_badop();
577 	return (0);
578 }
579 
580 static void
581 segkmem_xdump_range(void *arg, void *start, size_t size)
582 {
583 	struct as *as = arg;
584 	caddr_t addr = start;
585 	caddr_t addr_end = addr + size;
586 
587 	while (addr < addr_end) {
588 		pfn_t pfn = hat_getpfnum(kas.a_hat, addr);
589 		if (pfn != PFN_INVALID && pfn <= physmax && pf_is_memory(pfn))
590 			dump_addpage(as, addr, pfn);
591 		addr += PAGESIZE;
592 		dump_timeleft = dump_timeout;
593 	}
594 }
595 
596 static void
597 segkmem_dump_range(void *arg, void *start, size_t size)
598 {
599 	caddr_t addr = start;
600 	caddr_t addr_end = addr + size;
601 
602 	/*
603 	 * If we are about to start dumping the range of addresses we
604 	 * carved out of the kernel heap for the large page heap walk
605 	 * heap_lp_arena to find what segments are actually populated
606 	 */
607 	if (SEGKMEM_USE_LARGEPAGES &&
608 	    addr == heap_lp_base && addr_end == heap_lp_end &&
609 	    vmem_size(heap_lp_arena, VMEM_ALLOC) < size) {
610 		vmem_walk(heap_lp_arena, VMEM_ALLOC | VMEM_REENTRANT,
611 		    segkmem_xdump_range, arg);
612 	} else {
613 		segkmem_xdump_range(arg, start, size);
614 	}
615 }
616 
617 static void
618 segkmem_dump(struct seg *seg)
619 {
620 	/*
621 	 * The kernel's heap_arena (represented by kvseg) is a very large
622 	 * VA space, most of which is typically unused.  To speed up dumping
623 	 * we use vmem_walk() to quickly find the pieces of heap_arena that
624 	 * are actually in use.  We do the same for heap32_arena and
625 	 * heap_core.
626 	 *
627 	 * We specify VMEM_REENTRANT to vmem_walk() because dump_addpage()
628 	 * may ultimately need to allocate memory.  Reentrant walks are
629 	 * necessarily imperfect snapshots.  The kernel heap continues
630 	 * to change during a live crash dump, for example.  For a normal
631 	 * crash dump, however, we know that there won't be any other threads
632 	 * messing with the heap.  Therefore, at worst, we may fail to dump
633 	 * the pages that get allocated by the act of dumping; but we will
634 	 * always dump every page that was allocated when the walk began.
635 	 *
636 	 * The other segkmem segments are dense (fully populated), so there's
637 	 * no need to use this technique when dumping them.
638 	 *
639 	 * Note: when adding special dump handling for any new sparsely-
640 	 * populated segments, be sure to add similar handling to the ::kgrep
641 	 * code in mdb.
642 	 */
643 	if (seg == &kvseg) {
644 		vmem_walk(heap_arena, VMEM_ALLOC | VMEM_REENTRANT,
645 		    segkmem_dump_range, seg->s_as);
646 #ifndef __sparc
647 		vmem_walk(heaptext_arena, VMEM_ALLOC | VMEM_REENTRANT,
648 		    segkmem_dump_range, seg->s_as);
649 #endif
650 	} else if (seg == &kvseg_core) {
651 		vmem_walk(heap_core_arena, VMEM_ALLOC | VMEM_REENTRANT,
652 		    segkmem_dump_range, seg->s_as);
653 	} else if (seg == &kvseg32) {
654 		vmem_walk(heap32_arena, VMEM_ALLOC | VMEM_REENTRANT,
655 		    segkmem_dump_range, seg->s_as);
656 		vmem_walk(heaptext_arena, VMEM_ALLOC | VMEM_REENTRANT,
657 		    segkmem_dump_range, seg->s_as);
658 	} else if (seg == &kzioseg) {
659 		/*
660 		 * We don't want to dump pages attached to kzioseg since they
661 		 * contain file data from ZFS.  If this page's segment is
662 		 * kzioseg return instead of writing it to the dump device.
663 		 */
664 		return;
665 	} else {
666 		segkmem_dump_range(seg->s_as, seg->s_base, seg->s_size);
667 	}
668 }
669 
670 /*
671  * lock/unlock kmem pages over a given range [addr, addr+len).
672  * Returns a shadow list of pages in ppp. If there are holes
673  * in the range (e.g. some of the kernel mappings do not have
674  * underlying page_ts) returns ENOTSUP so that as_pagelock()
675  * will handle the range via as_fault(F_SOFTLOCK).
676  */
677 /*ARGSUSED*/
678 static int
679 segkmem_pagelock(struct seg *seg, caddr_t addr, size_t len,
680 	page_t ***ppp, enum lock_type type, enum seg_rw rw)
681 {
682 	page_t **pplist, *pp;
683 	pgcnt_t npages;
684 	spgcnt_t pg;
685 	size_t nb;
686 	struct vnode *vp = seg->s_data;
687 
688 	ASSERT(ppp != NULL);
689 
690 	/*
691 	 * If it is one of segkp pages, call into segkp.
692 	 */
693 	if (segkp_bitmap && seg == &kvseg &&
694 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
695 		return (SEGOP_PAGELOCK(segkp, addr, len, ppp, type, rw));
696 
697 	npages = btopr(len);
698 	nb = sizeof (page_t *) * npages;
699 
700 	if (type == L_PAGEUNLOCK) {
701 		pplist = *ppp;
702 		ASSERT(pplist != NULL);
703 
704 		for (pg = 0; pg < npages; pg++) {
705 			pp = pplist[pg];
706 			page_unlock(pp);
707 		}
708 		kmem_free(pplist, nb);
709 		return (0);
710 	}
711 
712 	ASSERT(type == L_PAGELOCK);
713 
714 	pplist = kmem_alloc(nb, KM_NOSLEEP);
715 	if (pplist == NULL) {
716 		*ppp = NULL;
717 		return (ENOTSUP);	/* take the slow path */
718 	}
719 
720 	for (pg = 0; pg < npages; pg++) {
721 		pp = page_lookup(vp, (u_offset_t)(uintptr_t)addr, SE_SHARED);
722 		if (pp == NULL) {
723 			while (--pg >= 0)
724 				page_unlock(pplist[pg]);
725 			kmem_free(pplist, nb);
726 			*ppp = NULL;
727 			return (ENOTSUP);
728 		}
729 		pplist[pg] = pp;
730 		addr += PAGESIZE;
731 	}
732 
733 	*ppp = pplist;
734 	return (0);
735 }
736 
737 /*
738  * This is a dummy segkmem function overloaded to call segkp
739  * when segkp is under the heap.
740  */
741 /* ARGSUSED */
742 static int
743 segkmem_getmemid(struct seg *seg, caddr_t addr, memid_t *memidp)
744 {
745 	ASSERT(RW_LOCK_HELD(&seg->s_as->a_lock));
746 
747 	if (seg->s_as != &kas)
748 		segkmem_badop();
749 
750 	/*
751 	 * If it is one of segkp pages, call into segkp.
752 	 */
753 	if (segkp_bitmap && seg == &kvseg &&
754 	    BT_TEST(segkp_bitmap, btop((uintptr_t)(addr - seg->s_base))))
755 		return (SEGOP_GETMEMID(segkp, addr, memidp));
756 
757 	segkmem_badop();
758 	return (0);
759 }
760 
761 /*ARGSUSED*/
762 static lgrp_mem_policy_info_t *
763 segkmem_getpolicy(struct seg *seg, caddr_t addr)
764 {
765 	return (NULL);
766 }
767 
768 /*ARGSUSED*/
769 static int
770 segkmem_capable(struct seg *seg, segcapability_t capability)
771 {
772 	if (capability == S_CAPABILITY_NOMINFLT)
773 		return (1);
774 	return (0);
775 }
776 
777 struct seg_ops segkmem_ops = {
778 	SEGKMEM_BADOP(int),		/* dup */
779 	SEGKMEM_BADOP(int),		/* unmap */
780 	SEGKMEM_BADOP(void),		/* free */
781 	segkmem_fault,
782 	SEGKMEM_BADOP(faultcode_t),	/* faulta */
783 	segkmem_setprot,
784 	segkmem_checkprot,
785 	segkmem_kluster,
786 	SEGKMEM_BADOP(size_t),		/* swapout */
787 	SEGKMEM_BADOP(int),		/* sync */
788 	SEGKMEM_BADOP(size_t),		/* incore */
789 	SEGKMEM_BADOP(int),		/* lockop */
790 	SEGKMEM_BADOP(int),		/* getprot */
791 	SEGKMEM_BADOP(u_offset_t),	/* getoffset */
792 	SEGKMEM_BADOP(int),		/* gettype */
793 	SEGKMEM_BADOP(int),		/* getvp */
794 	SEGKMEM_BADOP(int),		/* advise */
795 	segkmem_dump,
796 	segkmem_pagelock,
797 	SEGKMEM_BADOP(int),		/* setpgsz */
798 	segkmem_getmemid,
799 	segkmem_getpolicy,		/* getpolicy */
800 	segkmem_capable,		/* capable */
801 	seg_inherit_notsup		/* inherit */
802 };
803 
804 int
805 segkmem_zio_create(struct seg *seg)
806 {
807 	ASSERT(seg->s_as == &kas && RW_WRITE_HELD(&kas.a_lock));
808 	seg->s_ops = &segkmem_ops;
809 	seg->s_data = &zvp;
810 	kas.a_size += seg->s_size;
811 	return (0);
812 }
813 
814 int
815 segkmem_create(struct seg *seg)
816 {
817 	ASSERT(seg->s_as == &kas && RW_WRITE_HELD(&kas.a_lock));
818 	seg->s_ops = &segkmem_ops;
819 	seg->s_data = &kvp;
820 	kas.a_size += seg->s_size;
821 	return (0);
822 }
823 
824 /*ARGSUSED*/
825 page_t *
826 segkmem_page_create(void *addr, size_t size, int vmflag, void *arg)
827 {
828 	struct seg kseg;
829 	int pgflags;
830 	struct vnode *vp = arg;
831 
832 	if (vp == NULL)
833 		vp = &kvp;
834 
835 	kseg.s_as = &kas;
836 	pgflags = PG_EXCL;
837 
838 	if (segkmem_reloc == 0 || (vmflag & VM_NORELOC))
839 		pgflags |= PG_NORELOC;
840 	if ((vmflag & VM_NOSLEEP) == 0)
841 		pgflags |= PG_WAIT;
842 	if (vmflag & VM_PANIC)
843 		pgflags |= PG_PANIC;
844 	if (vmflag & VM_PUSHPAGE)
845 		pgflags |= PG_PUSHPAGE;
846 	if (vmflag & VM_NORMALPRI) {
847 		ASSERT(vmflag & VM_NOSLEEP);
848 		pgflags |= PG_NORMALPRI;
849 	}
850 
851 	return (page_create_va(vp, (u_offset_t)(uintptr_t)addr, size,
852 	    pgflags, &kseg, addr));
853 }
854 
855 /*
856  * Allocate pages to back the virtual address range [addr, addr + size).
857  * If addr is NULL, allocate the virtual address space as well.
858  */
859 void *
860 segkmem_xalloc(vmem_t *vmp, void *inaddr, size_t size, int vmflag, uint_t attr,
861 	page_t *(*page_create_func)(void *, size_t, int, void *), void *pcarg)
862 {
863 	page_t *ppl;
864 	caddr_t addr = inaddr;
865 	pgcnt_t npages = btopr(size);
866 	int allocflag;
867 
868 	if (inaddr == NULL && (addr = vmem_alloc(vmp, size, vmflag)) == NULL)
869 		return (NULL);
870 
871 	ASSERT(((uintptr_t)addr & PAGEOFFSET) == 0);
872 
873 	if (page_resv(npages, vmflag & VM_KMFLAGS) == 0) {
874 		if (inaddr == NULL)
875 			vmem_free(vmp, addr, size);
876 		return (NULL);
877 	}
878 
879 	ppl = page_create_func(addr, size, vmflag, pcarg);
880 	if (ppl == NULL) {
881 		if (inaddr == NULL)
882 			vmem_free(vmp, addr, size);
883 		page_unresv(npages);
884 		return (NULL);
885 	}
886 
887 	/*
888 	 * Under certain conditions, we need to let the HAT layer know
889 	 * that it cannot safely allocate memory.  Allocations from
890 	 * the hat_memload vmem arena always need this, to prevent
891 	 * infinite recursion.
892 	 *
893 	 * In addition, the x86 hat cannot safely do memory
894 	 * allocations while in vmem_populate(), because there
895 	 * is no simple bound on its usage.
896 	 */
897 	if (vmflag & VM_MEMLOAD)
898 		allocflag = HAT_NO_KALLOC;
899 #if defined(__x86)
900 	else if (vmem_is_populator())
901 		allocflag = HAT_NO_KALLOC;
902 #endif
903 	else
904 		allocflag = 0;
905 
906 	while (ppl != NULL) {
907 		page_t *pp = ppl;
908 		page_sub(&ppl, pp);
909 		ASSERT(page_iolock_assert(pp));
910 		ASSERT(PAGE_EXCL(pp));
911 		page_io_unlock(pp);
912 		hat_memload(kas.a_hat, (caddr_t)(uintptr_t)pp->p_offset, pp,
913 		    (PROT_ALL & ~PROT_USER) | HAT_NOSYNC | attr,
914 		    HAT_LOAD_LOCK | allocflag);
915 		pp->p_lckcnt = 1;
916 #if defined(__x86)
917 		page_downgrade(pp);
918 #else
919 		if (vmflag & SEGKMEM_SHARELOCKED)
920 			page_downgrade(pp);
921 		else
922 			page_unlock(pp);
923 #endif
924 	}
925 
926 	return (addr);
927 }
928 
929 static void *
930 segkmem_alloc_vn(vmem_t *vmp, size_t size, int vmflag, struct vnode *vp)
931 {
932 	void *addr;
933 	segkmem_gc_list_t *gcp, **prev_gcpp;
934 
935 	ASSERT(vp != NULL);
936 
937 	if (kvseg.s_base == NULL) {
938 #ifndef __sparc
939 		if (bootops->bsys_alloc == NULL)
940 			halt("Memory allocation between bop_alloc() and "
941 			    "kmem_alloc().\n");
942 #endif
943 
944 		/*
945 		 * There's not a lot of memory to go around during boot,
946 		 * so recycle it if we can.
947 		 */
948 		for (prev_gcpp = &segkmem_gc_list; (gcp = *prev_gcpp) != NULL;
949 		    prev_gcpp = &gcp->gc_next) {
950 			if (gcp->gc_arena == vmp && gcp->gc_size == size) {
951 				*prev_gcpp = gcp->gc_next;
952 				return (gcp);
953 			}
954 		}
955 
956 		addr = vmem_alloc(vmp, size, vmflag | VM_PANIC);
957 		if (boot_alloc(addr, size, BO_NO_ALIGN) != addr)
958 			panic("segkmem_alloc: boot_alloc failed");
959 		return (addr);
960 	}
961 	return (segkmem_xalloc(vmp, NULL, size, vmflag, 0,
962 	    segkmem_page_create, vp));
963 }
964 
965 void *
966 segkmem_alloc(vmem_t *vmp, size_t size, int vmflag)
967 {
968 	return (segkmem_alloc_vn(vmp, size, vmflag, &kvp));
969 }
970 
971 void *
972 segkmem_zio_alloc(vmem_t *vmp, size_t size, int vmflag)
973 {
974 	return (segkmem_alloc_vn(vmp, size, vmflag, &zvp));
975 }
976 
977 /*
978  * Any changes to this routine must also be carried over to
979  * devmap_free_pages() in the seg_dev driver. This is because
980  * we currently don't have a special kernel segment for non-paged
981  * kernel memory that is exported by drivers to user space.
982  */
983 static void
984 segkmem_free_vn(vmem_t *vmp, void *inaddr, size_t size, struct vnode *vp,
985     void (*func)(page_t *))
986 {
987 	page_t *pp;
988 	caddr_t addr = inaddr;
989 	caddr_t eaddr;
990 	pgcnt_t npages = btopr(size);
991 
992 	ASSERT(((uintptr_t)addr & PAGEOFFSET) == 0);
993 	ASSERT(vp != NULL);
994 
995 	if (kvseg.s_base == NULL) {
996 		segkmem_gc_list_t *gc = inaddr;
997 		gc->gc_arena = vmp;
998 		gc->gc_size = size;
999 		gc->gc_next = segkmem_gc_list;
1000 		segkmem_gc_list = gc;
1001 		return;
1002 	}
1003 
1004 	hat_unload(kas.a_hat, addr, size, HAT_UNLOAD_UNLOCK);
1005 
1006 	for (eaddr = addr + size; addr < eaddr; addr += PAGESIZE) {
1007 #if defined(__x86)
1008 		pp = page_find(vp, (u_offset_t)(uintptr_t)addr);
1009 		if (pp == NULL)
1010 			panic("segkmem_free: page not found");
1011 		if (!page_tryupgrade(pp)) {
1012 			/*
1013 			 * Some other thread has a sharelock. Wait for
1014 			 * it to drop the lock so we can free this page.
1015 			 */
1016 			page_unlock(pp);
1017 			pp = page_lookup(vp, (u_offset_t)(uintptr_t)addr,
1018 			    SE_EXCL);
1019 		}
1020 #else
1021 		pp = page_lookup(vp, (u_offset_t)(uintptr_t)addr, SE_EXCL);
1022 #endif
1023 		if (pp == NULL)
1024 			panic("segkmem_free: page not found");
1025 		/* Clear p_lckcnt so page_destroy() doesn't update availrmem */
1026 		pp->p_lckcnt = 0;
1027 		if (func)
1028 			func(pp);
1029 		else
1030 			page_destroy(pp, 0);
1031 	}
1032 	if (func == NULL)
1033 		page_unresv(npages);
1034 
1035 	if (vmp != NULL)
1036 		vmem_free(vmp, inaddr, size);
1037 
1038 }
1039 
1040 void
1041 segkmem_xfree(vmem_t *vmp, void *inaddr, size_t size, void (*func)(page_t *))
1042 {
1043 	segkmem_free_vn(vmp, inaddr, size, &kvp, func);
1044 }
1045 
1046 void
1047 segkmem_free(vmem_t *vmp, void *inaddr, size_t size)
1048 {
1049 	segkmem_free_vn(vmp, inaddr, size, &kvp, NULL);
1050 }
1051 
1052 void
1053 segkmem_zio_free(vmem_t *vmp, void *inaddr, size_t size)
1054 {
1055 	segkmem_free_vn(vmp, inaddr, size, &zvp, NULL);
1056 }
1057 
1058 void
1059 segkmem_gc(void)
1060 {
1061 	ASSERT(kvseg.s_base != NULL);
1062 	while (segkmem_gc_list != NULL) {
1063 		segkmem_gc_list_t *gc = segkmem_gc_list;
1064 		segkmem_gc_list = gc->gc_next;
1065 		segkmem_free(gc->gc_arena, gc, gc->gc_size);
1066 	}
1067 }
1068 
1069 /*
1070  * Legacy entry points from here to end of file.
1071  */
1072 void
1073 segkmem_mapin(struct seg *seg, void *addr, size_t size, uint_t vprot,
1074     pfn_t pfn, uint_t flags)
1075 {
1076 	hat_unload(seg->s_as->a_hat, addr, size, HAT_UNLOAD_UNLOCK);
1077 	hat_devload(seg->s_as->a_hat, addr, size, pfn, vprot,
1078 	    flags | HAT_LOAD_LOCK);
1079 }
1080 
1081 void
1082 segkmem_mapout(struct seg *seg, void *addr, size_t size)
1083 {
1084 	hat_unload(seg->s_as->a_hat, addr, size, HAT_UNLOAD_UNLOCK);
1085 }
1086 
1087 void *
1088 kmem_getpages(pgcnt_t npages, int kmflag)
1089 {
1090 	return (kmem_alloc(ptob(npages), kmflag));
1091 }
1092 
1093 void
1094 kmem_freepages(void *addr, pgcnt_t npages)
1095 {
1096 	kmem_free(addr, ptob(npages));
1097 }
1098 
1099 /*
1100  * segkmem_page_create_large() allocates a large page to be used for the kmem
1101  * caches. If kpr is enabled we ask for a relocatable page unless requested
1102  * otherwise. If kpr is disabled we have to ask for a non-reloc page
1103  */
1104 static page_t *
1105 segkmem_page_create_large(void *addr, size_t size, int vmflag, void *arg)
1106 {
1107 	int pgflags;
1108 
1109 	pgflags = PG_EXCL;
1110 
1111 	if (segkmem_reloc == 0 || (vmflag & VM_NORELOC))
1112 		pgflags |= PG_NORELOC;
1113 	if (!(vmflag & VM_NOSLEEP))
1114 		pgflags |= PG_WAIT;
1115 	if (vmflag & VM_PUSHPAGE)
1116 		pgflags |= PG_PUSHPAGE;
1117 	if (vmflag & VM_NORMALPRI)
1118 		pgflags |= PG_NORMALPRI;
1119 
1120 	return (page_create_va_large(&kvp, (u_offset_t)(uintptr_t)addr, size,
1121 	    pgflags, &kvseg, addr, arg));
1122 }
1123 
1124 /*
1125  * Allocate a large page to back the virtual address range
1126  * [addr, addr + size).  If addr is NULL, allocate the virtual address
1127  * space as well.
1128  */
1129 static void *
1130 segkmem_xalloc_lp(vmem_t *vmp, void *inaddr, size_t size, int vmflag,
1131     uint_t attr, page_t *(*page_create_func)(void *, size_t, int, void *),
1132     void *pcarg)
1133 {
1134 	caddr_t addr = inaddr, pa;
1135 	size_t  lpsize = segkmem_lpsize;
1136 	pgcnt_t npages = btopr(size);
1137 	pgcnt_t nbpages = btop(lpsize);
1138 	pgcnt_t nlpages = size >> segkmem_lpshift;
1139 	size_t  ppasize = nbpages * sizeof (page_t *);
1140 	page_t *pp, *rootpp, **ppa, *pplist = NULL;
1141 	int i;
1142 
1143 	vmflag |= VM_NOSLEEP;
1144 
1145 	if (page_resv(npages, vmflag & VM_KMFLAGS) == 0) {
1146 		return (NULL);
1147 	}
1148 
1149 	/*
1150 	 * allocate an array we need for hat_memload_array.
1151 	 * we use a separate arena to avoid recursion.
1152 	 * we will not need this array when hat_memload_array learns pp++
1153 	 */
1154 	if ((ppa = vmem_alloc(segkmem_ppa_arena, ppasize, vmflag)) == NULL) {
1155 		goto fail_array_alloc;
1156 	}
1157 
1158 	if (inaddr == NULL && (addr = vmem_alloc(vmp, size, vmflag)) == NULL)
1159 		goto fail_vmem_alloc;
1160 
1161 	ASSERT(((uintptr_t)addr & (lpsize - 1)) == 0);
1162 
1163 	/* create all the pages */
1164 	for (pa = addr, i = 0; i < nlpages; i++, pa += lpsize) {
1165 		if ((pp = page_create_func(pa, lpsize, vmflag, pcarg)) == NULL)
1166 			goto fail_page_create;
1167 		page_list_concat(&pplist, &pp);
1168 	}
1169 
1170 	/* at this point we have all the resource to complete the request */
1171 	while ((rootpp = pplist) != NULL) {
1172 		for (i = 0; i < nbpages; i++) {
1173 			ASSERT(pplist != NULL);
1174 			pp = pplist;
1175 			page_sub(&pplist, pp);
1176 			ASSERT(page_iolock_assert(pp));
1177 			page_io_unlock(pp);
1178 			ppa[i] = pp;
1179 		}
1180 		/*
1181 		 * Load the locked entry. It's OK to preload the entry into the
1182 		 * TSB since we now support large mappings in the kernel TSB.
1183 		 */
1184 		hat_memload_array(kas.a_hat,
1185 		    (caddr_t)(uintptr_t)rootpp->p_offset, lpsize,
1186 		    ppa, (PROT_ALL & ~PROT_USER) | HAT_NOSYNC | attr,
1187 		    HAT_LOAD_LOCK);
1188 
1189 		for (--i; i >= 0; --i) {
1190 			ppa[i]->p_lckcnt = 1;
1191 			page_unlock(ppa[i]);
1192 		}
1193 	}
1194 
1195 	vmem_free(segkmem_ppa_arena, ppa, ppasize);
1196 	return (addr);
1197 
1198 fail_page_create:
1199 	while ((rootpp = pplist) != NULL) {
1200 		for (i = 0, pp = pplist; i < nbpages; i++, pp = pplist) {
1201 			ASSERT(pp != NULL);
1202 			page_sub(&pplist, pp);
1203 			ASSERT(page_iolock_assert(pp));
1204 			page_io_unlock(pp);
1205 		}
1206 		page_destroy_pages(rootpp);
1207 	}
1208 
1209 	if (inaddr == NULL)
1210 		vmem_free(vmp, addr, size);
1211 
1212 fail_vmem_alloc:
1213 	vmem_free(segkmem_ppa_arena, ppa, ppasize);
1214 
1215 fail_array_alloc:
1216 	page_unresv(npages);
1217 
1218 	return (NULL);
1219 }
1220 
1221 static void
1222 segkmem_free_one_lp(caddr_t addr, size_t size)
1223 {
1224 	page_t		*pp, *rootpp = NULL;
1225 	pgcnt_t 	pgs_left = btopr(size);
1226 
1227 	ASSERT(size == segkmem_lpsize);
1228 
1229 	hat_unload(kas.a_hat, addr, size, HAT_UNLOAD_UNLOCK);
1230 
1231 	for (; pgs_left > 0; addr += PAGESIZE, pgs_left--) {
1232 		pp = page_lookup(&kvp, (u_offset_t)(uintptr_t)addr, SE_EXCL);
1233 		if (pp == NULL)
1234 			panic("segkmem_free_one_lp: page not found");
1235 		ASSERT(PAGE_EXCL(pp));
1236 		pp->p_lckcnt = 0;
1237 		if (rootpp == NULL)
1238 			rootpp = pp;
1239 	}
1240 	ASSERT(rootpp != NULL);
1241 	page_destroy_pages(rootpp);
1242 
1243 	/* page_unresv() is done by the caller */
1244 }
1245 
1246 /*
1247  * This function is called to import new spans into the vmem arenas like
1248  * kmem_default_arena and kmem_oversize_arena. It first tries to import
1249  * spans from large page arena - kmem_lp_arena. In order to do this it might
1250  * have to "upgrade the requested size" to kmem_lp_arena quantum. If
1251  * it was not able to satisfy the upgraded request it then calls regular
1252  * segkmem_alloc() that satisfies the request by importing from "*vmp" arena
1253  */
1254 /*ARGSUSED*/
1255 void *
1256 segkmem_alloc_lp(vmem_t *vmp, size_t *sizep, size_t align, int vmflag)
1257 {
1258 	size_t size;
1259 	kthread_t *t = curthread;
1260 	segkmem_lpcb_t *lpcb = &segkmem_lpcb;
1261 
1262 	ASSERT(sizep != NULL);
1263 
1264 	size = *sizep;
1265 
1266 	if (lpcb->lp_uselp && !(t->t_flag & T_PANIC) &&
1267 	    !(vmflag & SEGKMEM_SHARELOCKED)) {
1268 
1269 		size_t kmemlp_qnt = segkmem_kmemlp_quantum;
1270 		size_t asize = P2ROUNDUP(size, kmemlp_qnt);
1271 		void  *addr = NULL;
1272 		ulong_t *lpthrtp = &lpcb->lp_throttle;
1273 		ulong_t lpthrt = *lpthrtp;
1274 		int	dowakeup = 0;
1275 		int	doalloc = 1;
1276 
1277 		ASSERT(kmem_lp_arena != NULL);
1278 		ASSERT(asize >= size);
1279 
1280 		if (lpthrt != 0) {
1281 			/* try to update the throttle value */
1282 			lpthrt = atomic_inc_ulong_nv(lpthrtp);
1283 			if (lpthrt >= segkmem_lpthrottle_max) {
1284 				lpthrt = atomic_cas_ulong(lpthrtp, lpthrt,
1285 				    segkmem_lpthrottle_max / 4);
1286 			}
1287 
1288 			/*
1289 			 * when we get above throttle start do an exponential
1290 			 * backoff at trying large pages and reaping
1291 			 */
1292 			if (lpthrt > segkmem_lpthrottle_start &&
1293 			    !ISP2(lpthrt)) {
1294 				lpcb->allocs_throttled++;
1295 				lpthrt--;
1296 				if (ISP2(lpthrt))
1297 					kmem_reap();
1298 				return (segkmem_alloc(vmp, size, vmflag));
1299 			}
1300 		}
1301 
1302 		if (!(vmflag & VM_NOSLEEP) &&
1303 		    segkmem_heaplp_quantum >= (8 * kmemlp_qnt) &&
1304 		    vmem_size(kmem_lp_arena, VMEM_FREE) <= kmemlp_qnt &&
1305 		    asize < (segkmem_heaplp_quantum - kmemlp_qnt)) {
1306 
1307 			/*
1308 			 * we are low on free memory in kmem_lp_arena
1309 			 * we let only one guy to allocate heap_lp
1310 			 * quantum size chunk that everybody is going to
1311 			 * share
1312 			 */
1313 			mutex_enter(&lpcb->lp_lock);
1314 
1315 			if (lpcb->lp_wait) {
1316 
1317 				/* we are not the first one - wait */
1318 				cv_wait(&lpcb->lp_cv, &lpcb->lp_lock);
1319 				if (vmem_size(kmem_lp_arena, VMEM_FREE) <
1320 				    kmemlp_qnt)  {
1321 					doalloc = 0;
1322 				}
1323 			} else if (vmem_size(kmem_lp_arena, VMEM_FREE) <=
1324 			    kmemlp_qnt) {
1325 
1326 				/*
1327 				 * we are the first one, make sure we import
1328 				 * a large page
1329 				 */
1330 				if (asize == kmemlp_qnt)
1331 					asize += kmemlp_qnt;
1332 				dowakeup = 1;
1333 				lpcb->lp_wait = 1;
1334 			}
1335 
1336 			mutex_exit(&lpcb->lp_lock);
1337 		}
1338 
1339 		/*
1340 		 * VM_ABORT flag prevents sleeps in vmem_xalloc when
1341 		 * large pages are not available. In that case this allocation
1342 		 * attempt will fail and we will retry allocation with small
1343 		 * pages. We also do not want to panic if this allocation fails
1344 		 * because we are going to retry.
1345 		 */
1346 		if (doalloc) {
1347 			addr = vmem_alloc(kmem_lp_arena, asize,
1348 			    (vmflag | VM_ABORT) & ~VM_PANIC);
1349 
1350 			if (dowakeup) {
1351 				mutex_enter(&lpcb->lp_lock);
1352 				ASSERT(lpcb->lp_wait != 0);
1353 				lpcb->lp_wait = 0;
1354 				cv_broadcast(&lpcb->lp_cv);
1355 				mutex_exit(&lpcb->lp_lock);
1356 			}
1357 		}
1358 
1359 		if (addr != NULL) {
1360 			*sizep = asize;
1361 			*lpthrtp = 0;
1362 			return (addr);
1363 		}
1364 
1365 		if (vmflag & VM_NOSLEEP)
1366 			lpcb->nosleep_allocs_failed++;
1367 		else
1368 			lpcb->sleep_allocs_failed++;
1369 		lpcb->alloc_bytes_failed += size;
1370 
1371 		/* if large page throttling is not started yet do it */
1372 		if (segkmem_use_lpthrottle && lpthrt == 0) {
1373 			lpthrt = atomic_cas_ulong(lpthrtp, lpthrt, 1);
1374 		}
1375 	}
1376 	return (segkmem_alloc(vmp, size, vmflag));
1377 }
1378 
1379 void
1380 segkmem_free_lp(vmem_t *vmp, void *inaddr, size_t size)
1381 {
1382 	if (kmem_lp_arena == NULL || !IS_KMEM_VA_LARGEPAGE((caddr_t)inaddr)) {
1383 		segkmem_free(vmp, inaddr, size);
1384 	} else {
1385 		vmem_free(kmem_lp_arena, inaddr, size);
1386 	}
1387 }
1388 
1389 /*
1390  * segkmem_alloc_lpi() imports virtual memory from large page heap arena
1391  * into kmem_lp arena. In the process it maps the imported segment with
1392  * large pages
1393  */
1394 static void *
1395 segkmem_alloc_lpi(vmem_t *vmp, size_t size, int vmflag)
1396 {
1397 	segkmem_lpcb_t *lpcb = &segkmem_lpcb;
1398 	void  *addr;
1399 
1400 	ASSERT(size != 0);
1401 	ASSERT(vmp == heap_lp_arena);
1402 
1403 	/* do not allow large page heap grow beyound limits */
1404 	if (vmem_size(vmp, VMEM_ALLOC) >= segkmem_kmemlp_max) {
1405 		lpcb->allocs_limited++;
1406 		return (NULL);
1407 	}
1408 
1409 	addr = segkmem_xalloc_lp(vmp, NULL, size, vmflag, 0,
1410 	    segkmem_page_create_large, NULL);
1411 	return (addr);
1412 }
1413 
1414 /*
1415  * segkmem_free_lpi() returns virtual memory back into large page heap arena
1416  * from kmem_lp arena. Beore doing this it unmaps the segment and frees
1417  * large pages used to map it.
1418  */
1419 static void
1420 segkmem_free_lpi(vmem_t *vmp, void *inaddr, size_t size)
1421 {
1422 	pgcnt_t		nlpages = size >> segkmem_lpshift;
1423 	size_t		lpsize = segkmem_lpsize;
1424 	caddr_t		addr = inaddr;
1425 	pgcnt_t 	npages = btopr(size);
1426 	int		i;
1427 
1428 	ASSERT(vmp == heap_lp_arena);
1429 	ASSERT(IS_KMEM_VA_LARGEPAGE(addr));
1430 	ASSERT(((uintptr_t)inaddr & (lpsize - 1)) == 0);
1431 
1432 	for (i = 0; i < nlpages; i++) {
1433 		segkmem_free_one_lp(addr, lpsize);
1434 		addr += lpsize;
1435 	}
1436 
1437 	page_unresv(npages);
1438 
1439 	vmem_free(vmp, inaddr, size);
1440 }
1441 
1442 /*
1443  * This function is called at system boot time by kmem_init right after
1444  * /etc/system file has been read. It checks based on hardware configuration
1445  * and /etc/system settings if system is going to use large pages. The
1446  * initialiazation necessary to actually start using large pages
1447  * happens later in the process after segkmem_heap_lp_init() is called.
1448  */
1449 int
1450 segkmem_lpsetup()
1451 {
1452 	int use_large_pages = 0;
1453 
1454 #ifdef __sparc
1455 
1456 	size_t memtotal = physmem * PAGESIZE;
1457 
1458 	if (heap_lp_base == NULL) {
1459 		segkmem_lpsize = PAGESIZE;
1460 		return (0);
1461 	}
1462 
1463 	/* get a platform dependent value of large page size for kernel heap */
1464 	segkmem_lpsize = get_segkmem_lpsize(segkmem_lpsize);
1465 
1466 	if (segkmem_lpsize <= PAGESIZE) {
1467 		/*
1468 		 * put virtual space reserved for the large page kernel
1469 		 * back to the regular heap
1470 		 */
1471 		vmem_xfree(heap_arena, heap_lp_base,
1472 		    heap_lp_end - heap_lp_base);
1473 		heap_lp_base = NULL;
1474 		heap_lp_end = NULL;
1475 		segkmem_lpsize = PAGESIZE;
1476 		return (0);
1477 	}
1478 
1479 	/* set heap_lp quantum if necessary */
1480 	if (segkmem_heaplp_quantum == 0 || !ISP2(segkmem_heaplp_quantum) ||
1481 	    P2PHASE(segkmem_heaplp_quantum, segkmem_lpsize)) {
1482 		segkmem_heaplp_quantum = segkmem_lpsize;
1483 	}
1484 
1485 	/* set kmem_lp quantum if necessary */
1486 	if (segkmem_kmemlp_quantum == 0 || !ISP2(segkmem_kmemlp_quantum) ||
1487 	    segkmem_kmemlp_quantum > segkmem_heaplp_quantum) {
1488 		segkmem_kmemlp_quantum = segkmem_heaplp_quantum;
1489 	}
1490 
1491 	/* set total amount of memory allowed for large page kernel heap */
1492 	if (segkmem_kmemlp_max == 0) {
1493 		if (segkmem_kmemlp_pcnt == 0 || segkmem_kmemlp_pcnt > 100)
1494 			segkmem_kmemlp_pcnt = 12;
1495 		segkmem_kmemlp_max = (memtotal * segkmem_kmemlp_pcnt) / 100;
1496 	}
1497 	segkmem_kmemlp_max = P2ROUNDUP(segkmem_kmemlp_max,
1498 	    segkmem_heaplp_quantum);
1499 
1500 	/* fix lp kmem preallocation request if necesssary */
1501 	if (segkmem_kmemlp_min) {
1502 		segkmem_kmemlp_min = P2ROUNDUP(segkmem_kmemlp_min,
1503 		    segkmem_heaplp_quantum);
1504 		if (segkmem_kmemlp_min > segkmem_kmemlp_max)
1505 			segkmem_kmemlp_min = segkmem_kmemlp_max;
1506 	}
1507 
1508 	use_large_pages = 1;
1509 	segkmem_lpszc = page_szc(segkmem_lpsize);
1510 	segkmem_lpshift = page_get_shift(segkmem_lpszc);
1511 
1512 #endif
1513 	return (use_large_pages);
1514 }
1515 
1516 void
1517 segkmem_zio_init(void *zio_mem_base, size_t zio_mem_size)
1518 {
1519 	ASSERT(zio_mem_base != NULL);
1520 	ASSERT(zio_mem_size != 0);
1521 
1522 	/*
1523 	 * To reduce VA space fragmentation, we set up quantum caches for the
1524 	 * smaller sizes;  we chose 32k because that translates to 128k VA
1525 	 * slabs, which matches nicely with the common 128k zio_data bufs.
1526 	 */
1527 	zio_arena = vmem_create("zfs_file_data", zio_mem_base, zio_mem_size,
1528 	    PAGESIZE, NULL, NULL, NULL, 32 * 1024, VM_SLEEP);
1529 
1530 	zio_alloc_arena = vmem_create("zfs_file_data_buf", NULL, 0, PAGESIZE,
1531 	    segkmem_zio_alloc, segkmem_zio_free, zio_arena, 0, VM_SLEEP);
1532 
1533 	ASSERT(zio_arena != NULL);
1534 	ASSERT(zio_alloc_arena != NULL);
1535 }
1536 
1537 #ifdef __sparc
1538 
1539 
1540 static void *
1541 segkmem_alloc_ppa(vmem_t *vmp, size_t size, int vmflag)
1542 {
1543 	size_t ppaquantum = btopr(segkmem_lpsize) * sizeof (page_t *);
1544 	void   *addr;
1545 
1546 	if (ppaquantum <= PAGESIZE)
1547 		return (segkmem_alloc(vmp, size, vmflag));
1548 
1549 	ASSERT((size & (ppaquantum - 1)) == 0);
1550 
1551 	addr = vmem_xalloc(vmp, size, ppaquantum, 0, 0, NULL, NULL, vmflag);
1552 	if (addr != NULL && segkmem_xalloc(vmp, addr, size, vmflag, 0,
1553 	    segkmem_page_create, NULL) == NULL) {
1554 		vmem_xfree(vmp, addr, size);
1555 		addr = NULL;
1556 	}
1557 
1558 	return (addr);
1559 }
1560 
1561 static void
1562 segkmem_free_ppa(vmem_t *vmp, void *addr, size_t size)
1563 {
1564 	size_t ppaquantum = btopr(segkmem_lpsize) * sizeof (page_t *);
1565 
1566 	ASSERT(addr != NULL);
1567 
1568 	if (ppaquantum <= PAGESIZE) {
1569 		segkmem_free(vmp, addr, size);
1570 	} else {
1571 		segkmem_free(NULL, addr, size);
1572 		vmem_xfree(vmp, addr, size);
1573 	}
1574 }
1575 
1576 void
1577 segkmem_heap_lp_init()
1578 {
1579 	segkmem_lpcb_t *lpcb = &segkmem_lpcb;
1580 	size_t heap_lp_size = heap_lp_end - heap_lp_base;
1581 	size_t lpsize = segkmem_lpsize;
1582 	size_t ppaquantum;
1583 	void   *addr;
1584 
1585 	if (segkmem_lpsize <= PAGESIZE) {
1586 		ASSERT(heap_lp_base == NULL);
1587 		ASSERT(heap_lp_end == NULL);
1588 		return;
1589 	}
1590 
1591 	ASSERT(segkmem_heaplp_quantum >= lpsize);
1592 	ASSERT((segkmem_heaplp_quantum & (lpsize - 1)) == 0);
1593 	ASSERT(lpcb->lp_uselp == 0);
1594 	ASSERT(heap_lp_base != NULL);
1595 	ASSERT(heap_lp_end != NULL);
1596 	ASSERT(heap_lp_base < heap_lp_end);
1597 	ASSERT(heap_lp_arena == NULL);
1598 	ASSERT(((uintptr_t)heap_lp_base & (lpsize - 1)) == 0);
1599 	ASSERT(((uintptr_t)heap_lp_end & (lpsize - 1)) == 0);
1600 
1601 	/* create large page heap arena */
1602 	heap_lp_arena = vmem_create("heap_lp", heap_lp_base, heap_lp_size,
1603 	    segkmem_heaplp_quantum, NULL, NULL, NULL, 0, VM_SLEEP);
1604 
1605 	ASSERT(heap_lp_arena != NULL);
1606 
1607 	/* This arena caches memory already mapped by large pages */
1608 	kmem_lp_arena = vmem_create("kmem_lp", NULL, 0, segkmem_kmemlp_quantum,
1609 	    segkmem_alloc_lpi, segkmem_free_lpi, heap_lp_arena, 0, VM_SLEEP);
1610 
1611 	ASSERT(kmem_lp_arena != NULL);
1612 
1613 	mutex_init(&lpcb->lp_lock, NULL, MUTEX_DEFAULT, NULL);
1614 	cv_init(&lpcb->lp_cv, NULL, CV_DEFAULT, NULL);
1615 
1616 	/*
1617 	 * this arena is used for the array of page_t pointers necessary
1618 	 * to call hat_mem_load_array
1619 	 */
1620 	ppaquantum = btopr(lpsize) * sizeof (page_t *);
1621 	segkmem_ppa_arena = vmem_create("segkmem_ppa", NULL, 0, ppaquantum,
1622 	    segkmem_alloc_ppa, segkmem_free_ppa, heap_arena, ppaquantum,
1623 	    VM_SLEEP);
1624 
1625 	ASSERT(segkmem_ppa_arena != NULL);
1626 
1627 	/* prealloacate some memory for the lp kernel heap */
1628 	if (segkmem_kmemlp_min) {
1629 
1630 		ASSERT(P2PHASE(segkmem_kmemlp_min,
1631 		    segkmem_heaplp_quantum) == 0);
1632 
1633 		if ((addr = segkmem_alloc_lpi(heap_lp_arena,
1634 		    segkmem_kmemlp_min, VM_SLEEP)) != NULL) {
1635 
1636 			addr = vmem_add(kmem_lp_arena, addr,
1637 			    segkmem_kmemlp_min, VM_SLEEP);
1638 			ASSERT(addr != NULL);
1639 		}
1640 	}
1641 
1642 	lpcb->lp_uselp = 1;
1643 }
1644 
1645 #endif
1646