From nobody Sun Feb 8 12:19:02 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CAA0D36CDFD; Tue, 27 Jan 2026 19:30:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769542231; cv=none; b=cH2d7rX0r4dMUF6kL7VUbe0dyRe5ZJ1eEK3UC9hlFgt0ZzIHSuHpMyGhXmDgY8dFR4xKXZXz3TGgbkbmI3yoI1lzqnzFJu9HFeeb+UNC8XUFZhJS+Tg41aSZjEU9KiSwdj9F+HdnmL0WpeEwaI7TpHwrPz0yl+bvu4PUYnWu3XY= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769542231; c=relaxed/simple; bh=i5BbhYRwDwFgqsHdXlkHyjBIxCxCm4W2Vuq3+WqFKuE=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=jsLWg+/ZdNffXi82rAeCTg0sYsKxOThkXsQlf6YIp5BjTZzwtVqGRxj2eVuyFJgsXiIXVbYXunof5+OKxQu/mKERTIZDeQ5q4iG3lF9tVlmGAA/9pmrWQtp241XIsn+8m/67d+8Sv/CtHkLC2l/5mNj+PAfxsYfmBtLm6v4xmQI= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=t5//S+1U; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="t5//S+1U" Received: by smtp.kernel.org (Postfix) with ESMTPSA id AA792C116C6; Tue, 27 Jan 2026 19:30:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1769542231; bh=i5BbhYRwDwFgqsHdXlkHyjBIxCxCm4W2Vuq3+WqFKuE=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=t5//S+1UtIYnXDs6Hs6NxKOKKNNWqptdM+gvy6dRVE+BudwOJTk0JU18Kgu8Is/i8 S4mij5QllCQ0bLDP9j4PXhyhphk6rZsJnwO66kQ2KnBjlo98h9WsU+/CtVyuyfrDcb YaDIC2cQY75LBXYYQ6dkdIl4lRxAqFoZ+QW+6+mHOUU/uxwZSmtZvmd9yKdmJePJbh 7icJnfNaiIn2NFwCBRLDTEeXkx8acI0L8/XRNxVWlWsjzzJK+zvIf6d5ZkMJ2/yiYO 82FLdFAV0IXtjX6eBrCoibCK0vbQ+FMcvnhGLpbqCi9QS6JQProWOOMP0S1nskNgaR ARQpR/ChNCNDw== From: Mike Rapoport To: linux-mm@kvack.org Cc: Andrea Arcangeli , Andrew Morton , Axel Rasmussen , Baolin Wang , David Hildenbrand , Hugh Dickins , James Houghton , "Liam R. Howlett" , Lorenzo Stoakes , Michal Hocko , Mike Rapoport , Muchun Song , Nikita Kalyazin , Oscar Salvador , Paolo Bonzini , Peter Xu , Sean Christopherson , Shuah Khan , Suren Baghdasaryan , Vlastimil Babka , linux-kernel@vger.kernel.org, kvm@vger.kernel.org, linux-kselftest@vger.kernel.org Subject: [PATCH RFC 07/17] userfaultfd: introduce vm_uffd_ops Date: Tue, 27 Jan 2026 21:29:26 +0200 Message-ID: <20260127192936.1250096-8-rppt@kernel.org> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20260127192936.1250096-1-rppt@kernel.org> References: <20260127192936.1250096-1-rppt@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: "Mike Rapoport (Microsoft)" Current userfaultfd implementation works only with memory managed by core MM: anonymous, shmem and hugetlb. First, there is no fundamental reason to limit userfaultfd support only to the core memory types and userfaults can be handled similarly to regular page faults provided a VMA owner implements appropriate callbacks. Second, historically various code paths were conditioned on vma_is_anonymous(), vma_is_shmem() and is_vm_hugetlb_page() and some of these conditions can be expressed as operations implemented by a particular memory type. Introduce vm_uffd_ops extension to vm_operations_struct that will delegate memory type specific operations to a VMA owner. Operations for anonymous memory are handled internally in userfaultfd using anon_uffd_ops that implicitly assigned to anonymous VMAs. Start with a single operation, ->can_userfault() that will verify that a VMA meets requirements for userfaultfd support at registration time. Implement that method for anonymous, shmem and hugetlb and move relevant parts of vma_can_userfault() into the new callbacks. Signed-off-by: Mike Rapoport (Microsoft) --- include/linux/mm.h | 5 +++++ include/linux/userfaultfd_k.h | 6 +++++ mm/hugetlb.c | 21 ++++++++++++++++++ mm/shmem.c | 23 ++++++++++++++++++++ mm/userfaultfd.c | 41 ++++++++++++++++++++++------------- 5 files changed, 81 insertions(+), 15 deletions(-) diff --git a/include/linux/mm.h b/include/linux/mm.h index 15076261d0c2..3c2caff646c3 100644 --- a/include/linux/mm.h +++ b/include/linux/mm.h @@ -732,6 +732,8 @@ struct vm_fault { */ }; =20 +struct vm_uffd_ops; + /* * These are the virtual MM functions - opening of an area, closing and * unmapping it (needed to keep files on disk up-to-date etc), pointer @@ -817,6 +819,9 @@ struct vm_operations_struct { struct page *(*find_normal_page)(struct vm_area_struct *vma, unsigned long addr); #endif /* CONFIG_FIND_NORMAL_PAGE */ +#ifdef CONFIG_USERFAULTFD + const struct vm_uffd_ops *uffd_ops; +#endif }; =20 #ifdef CONFIG_NUMA_BALANCING diff --git a/include/linux/userfaultfd_k.h b/include/linux/userfaultfd_k.h index a49cf750e803..56e85ab166c7 100644 --- a/include/linux/userfaultfd_k.h +++ b/include/linux/userfaultfd_k.h @@ -80,6 +80,12 @@ struct userfaultfd_ctx { =20 extern vm_fault_t handle_userfault(struct vm_fault *vmf, unsigned long rea= son); =20 +/* VMA userfaultfd operations */ +struct vm_uffd_ops { + /* Checks if a VMA can support userfaultfd */ + bool (*can_userfault)(struct vm_area_struct *vma, vm_flags_t vm_flags); +}; + /* A combined operation mode + behavior flags. */ typedef unsigned int __bitwise uffd_flags_t; =20 diff --git a/mm/hugetlb.c b/mm/hugetlb.c index 51273baec9e5..909131910c43 100644 --- a/mm/hugetlb.c +++ b/mm/hugetlb.c @@ -4797,6 +4797,24 @@ static vm_fault_t hugetlb_vm_op_fault(struct vm_faul= t *vmf) return 0; } =20 +#ifdef CONFIG_USERFAULTFD +static bool hugetlb_can_userfault(struct vm_area_struct *vma, + vm_flags_t vm_flags) +{ + /* + * If user requested uffd-wp but not enabled pte markers for + * uffd-wp, then hugetlb is not supported. + */ + if (!uffd_supports_wp_marker() && (vm_flags & VM_UFFD_WP)) + return false; + return true; +} + +static const struct vm_uffd_ops hugetlb_uffd_ops =3D { + .can_userfault =3D hugetlb_can_userfault, +}; +#endif + /* * When a new function is introduced to vm_operations_struct and added * to hugetlb_vm_ops, please consider adding the function to shm_vm_ops. @@ -4810,6 +4828,9 @@ const struct vm_operations_struct hugetlb_vm_ops =3D { .close =3D hugetlb_vm_op_close, .may_split =3D hugetlb_vm_op_split, .pagesize =3D hugetlb_vm_op_pagesize, +#ifdef CONFIG_USERFAULTFD + .uffd_ops =3D &hugetlb_uffd_ops, +#endif }; =20 static pte_t make_huge_pte(struct vm_area_struct *vma, struct folio *folio, diff --git a/mm/shmem.c b/mm/shmem.c index ec6c01378e9d..9b82cda271c4 100644 --- a/mm/shmem.c +++ b/mm/shmem.c @@ -5290,6 +5290,23 @@ static const struct super_operations shmem_ops =3D { #endif }; =20 +#ifdef CONFIG_USERFAULTFD +static bool shmem_can_userfault(struct vm_area_struct *vma, vm_flags_t vm_= flags) +{ + /* + * If user requested uffd-wp but not enabled pte markers for + * uffd-wp, then shmem is not supported. + */ + if (!uffd_supports_wp_marker() && (vm_flags & VM_UFFD_WP)) + return false; + return true; +} + +static const struct vm_uffd_ops shmem_uffd_ops =3D { + .can_userfault =3D shmem_can_userfault, +}; +#endif + static const struct vm_operations_struct shmem_vm_ops =3D { .fault =3D shmem_fault, .map_pages =3D filemap_map_pages, @@ -5297,6 +5314,9 @@ static const struct vm_operations_struct shmem_vm_ops= =3D { .set_policy =3D shmem_set_policy, .get_policy =3D shmem_get_policy, #endif +#ifdef CONFIG_USERFAULTFD + .uffd_ops =3D &shmem_uffd_ops, +#endif }; =20 static const struct vm_operations_struct shmem_anon_vm_ops =3D { @@ -5306,6 +5326,9 @@ static const struct vm_operations_struct shmem_anon_v= m_ops =3D { .set_policy =3D shmem_set_policy, .get_policy =3D shmem_get_policy, #endif +#ifdef CONFIG_USERFAULTFD + .uffd_ops =3D &shmem_uffd_ops, +#endif }; =20 int shmem_init_fs_context(struct fs_context *fc) diff --git a/mm/userfaultfd.c b/mm/userfaultfd.c index 786f0a245675..d035f5e17f07 100644 --- a/mm/userfaultfd.c +++ b/mm/userfaultfd.c @@ -34,6 +34,25 @@ struct mfill_state { pmd_t *pmd; }; =20 +static bool anon_can_userfault(struct vm_area_struct *vma, vm_flags_t vm_f= lags) +{ + /* anonymous memory does not support MINOR mode */ + if (vm_flags & VM_UFFD_MINOR) + return false; + return true; +} + +static const struct vm_uffd_ops anon_uffd_ops =3D { + .can_userfault =3D anon_can_userfault, +}; + +static const struct vm_uffd_ops *vma_uffd_ops(struct vm_area_struct *vma) +{ + if (vma_is_anonymous(vma)) + return &anon_uffd_ops; + return vma->vm_ops ? vma->vm_ops->uffd_ops : NULL; +} + static __always_inline bool validate_dst_vma(struct vm_area_struct *dst_vma, unsigned long dst_en= d) { @@ -2019,13 +2038,15 @@ ssize_t move_pages(struct userfaultfd_ctx *ctx, uns= igned long dst_start, bool vma_can_userfault(struct vm_area_struct *vma, vm_flags_t vm_flags, bool wp_async) { - vm_flags &=3D __VM_UFFD_FLAGS; + const struct vm_uffd_ops *ops =3D vma_uffd_ops(vma); =20 - if (vma->vm_flags & VM_DROPPABLE) + /* only VMAs that implement vm_uffd_ops are supported */ + if (!ops) return false; =20 - if ((vm_flags & VM_UFFD_MINOR) && - (!is_vm_hugetlb_page(vma) && !vma_is_shmem(vma))) + vm_flags &=3D __VM_UFFD_FLAGS; + + if (vma->vm_flags & VM_DROPPABLE) return false; =20 /* @@ -2035,18 +2056,8 @@ bool vma_can_userfault(struct vm_area_struct *vma, v= m_flags_t vm_flags, if (wp_async && (vm_flags =3D=3D VM_UFFD_WP)) return true; =20 - /* - * If user requested uffd-wp but not enabled pte markers for - * uffd-wp, then shmem & hugetlbfs are not supported but only - * anonymous. - */ - if (!uffd_supports_wp_marker() && (vm_flags & VM_UFFD_WP) && - !vma_is_anonymous(vma)) - return false; - /* By default, allow any of anon|shmem|hugetlb */ - return vma_is_anonymous(vma) || is_vm_hugetlb_page(vma) || - vma_is_shmem(vma); + return ops->can_userfault(vma, vm_flags); } =20 static void userfaultfd_set_vm_flags(struct vm_area_struct *vma, --=20 2.51.0