From: Brendan Jackman <jackmanb@google.com>
To: Borislav Petkov <bp@alien8.de>,
Dave Hansen <dave.hansen@linux.intel.com>,
Peter Zijlstra <peterz@infradead.org>,
Andrew Morton <akpm@linux-foundation.org>,
David Hildenbrand <david@kernel.org>,
Vlastimil Babka <vbabka@kernel.org>, Wei Xu <weixugc@google.com>,
Johannes Weiner <hannes@cmpxchg.org>, Zi Yan <ziy@nvidia.com>,
Lorenzo Stoakes <ljs@kernel.org>
Cc: linux-mm@kvack.org, linux-kernel@vger.kernel.org, x86@kernel.org,
rppt@kernel.org, Sumit Garg <sumit.garg@oss.qualcomm.com>,
derkling@google.com, reijiw@google.com,
Will Deacon <will@kernel.org>,
rientjes@google.com, "Kalyazin, Nikita" <kalyazin@amazon.co.uk>,
patrick.roy@linux.dev, "Itazuri, Takahiro" <itazur@amazon.co.uk>,
Andy Lutomirski <luto@kernel.org>,
David Kaplan <david.kaplan@amd.com>,
Thomas Gleixner <tglx@kernel.org>,
Brendan Jackman <jackmanb@google.com>,
Yosry Ahmed <yosry@kernel.org>
Subject: [PATCH v2 07/22] mm: KUnit tests for the mermap
Date: Fri, 20 Mar 2026 18:23:31 +0000 [thread overview]
Message-ID: <20260320-page_alloc-unmapped-v2-7-28bf1bd54f41@google.com> (raw)
In-Reply-To: <20260320-page_alloc-unmapped-v2-0-28bf1bd54f41@google.com>
Some simple smoke-tests for the mermap. Mainly aiming to test:
1. That there aren't any silly off-by-ones.
2. That the pagetables are not completely broken.
3. That the TLB appears to get flushed basically when expected.
This last point requires a bit of ifdeffery to detect when the flushing
has been performed.
Signed-off-by: Brendan Jackman <jackmanb@google.com>
---
include/linux/mermap_types.h | 3 +
mm/Kconfig | 11 ++
mm/Makefile | 1 +
mm/tests/mermap_kunit.c | 250 +++++++++++++++++++++++++++++++++++++++++++
4 files changed, 265 insertions(+)
diff --git a/include/linux/mermap_types.h b/include/linux/mermap_types.h
index c1c83b223c28d..13110fcb4c387 100644
--- a/include/linux/mermap_types.h
+++ b/include/linux/mermap_types.h
@@ -24,6 +24,9 @@ struct mermap_cpu {
unsigned long next_addr;
struct mermap_alloc normal_allocs[3];
struct mermap_alloc reserve_alloc;
+#if IS_ENABLED(CONFIG_MERMAP_KUNIT_TEST)
+ u64 tlb_flushes;
+#endif
};
struct mermap {
diff --git a/mm/Kconfig b/mm/Kconfig
index 2bf1dbcc8cb10..e98db58d515fc 100644
--- a/mm/Kconfig
+++ b/mm/Kconfig
@@ -1494,4 +1494,15 @@ config MERMAP
help
Support for epheMERal mappings within the kernel.
+config MERMAP_KUNIT_TEST
+ tristate "KUnit tests for the mermap" if !KUNIT_ALL_TESTS
+ depends on ARCH_SUPPORTS_MERMAP
+ depends on KUNIT
+ depends on MERMAP
+ default KUNIT_ALL_TESTS
+ help
+ KUnit test for the mermap.
+
+ If unsure, say N.
+
endmenu
diff --git a/mm/Makefile b/mm/Makefile
index 0c45677f4a538..93a1756303cf9 100644
--- a/mm/Makefile
+++ b/mm/Makefile
@@ -151,3 +151,4 @@ obj-$(CONFIG_EXECMEM) += execmem.o
obj-$(CONFIG_TMPFS_QUOTA) += shmem_quota.o
obj-$(CONFIG_LAZY_MMU_MODE_KUNIT_TEST) += tests/lazy_mmu_mode_kunit.o
obj-$(CONFIG_MERMAP) += mermap.o
+obj-$(CONFIG_MERMAP_KUNIT_TEST) += tests/mermap_kunit.o
diff --git a/mm/tests/mermap_kunit.c b/mm/tests/mermap_kunit.c
new file mode 100644
index 0000000000000..4ac6bce2d75f7
--- /dev/null
+++ b/mm/tests/mermap_kunit.c
@@ -0,0 +1,250 @@
+// SPDX-License-Identifier: GPL-2.0-only
+#include <linux/cacheflush.h>
+#include <linux/kthread.h>
+#include <linux/mermap.h>
+#include <linux/pgtable.h>
+
+#include <kunit/test.h>
+
+#define NR_NORMAL_ALLOCS ARRAY_SIZE(((struct mm_struct *)NULL)->mermap.cpu->normal_allocs)
+
+KUNIT_DEFINE_ACTION_WRAPPER(__free_page_wrapper, __free_page, struct page *);
+
+static inline struct page *alloc_page_wrapper(struct kunit *test, gfp_t gfp)
+{
+ struct page *page = alloc_page(gfp);
+
+ KUNIT_ASSERT_NOT_NULL(test, page);
+ KUNIT_ASSERT_EQ(test, kunit_add_action_or_reset(test, __free_page_wrapper, page), 0);
+ return page;
+}
+
+KUNIT_DEFINE_ACTION_WRAPPER(mmput_wrapper, mmput, struct mm_struct *);
+
+static inline struct mm_struct *mm_alloc_wrapper(struct kunit *test)
+{
+ struct mm_struct *mm = mm_alloc();
+
+ KUNIT_ASSERT_NOT_NULL(test, mm);
+ KUNIT_ASSERT_EQ(test, kunit_add_action_or_reset(test, mmput_wrapper, mm), 0);
+ return mm;
+}
+
+static inline struct mm_struct *get_mm(struct kunit *test)
+{
+ struct mm_struct *mm = mm_alloc_wrapper(test);
+
+ KUNIT_ASSERT_EQ(test, mermap_mm_prepare(mm), 0);
+ return mm;
+}
+
+struct __mermap_put_args {
+ struct mm_struct *mm;
+ struct mermap_alloc *alloc;
+ unsigned long size;
+};
+
+static inline void __mermap_put_wrapper(void *ctx)
+{
+ struct __mermap_put_args *args = (struct __mermap_put_args *)ctx;
+
+ __mermap_put(args->mm, args->alloc);
+}
+
+/* Call __mermap_get() with use_reserve=false, deal with cleanup. */
+static inline struct __mermap_put_args *
+__mermap_get_wrapper(struct kunit *test, struct mm_struct *mm,
+ struct page *page, unsigned long size, pgprot_t prot)
+{
+ struct __mermap_put_args *args =
+ kunit_kmalloc(test, sizeof(struct __mermap_put_args), GFP_KERNEL);
+
+ KUNIT_ASSERT_NOT_NULL(test, args);
+ args->mm = mm;
+ args->alloc = __mermap_get(mm, page, size, prot, false);
+ args->size = size;
+
+ if (args->alloc) {
+ int err = kunit_add_action_or_reset(test, __mermap_put_wrapper, args);
+
+ KUNIT_ASSERT_EQ(test, err, 0);
+ }
+
+ return args;
+}
+
+/* Do the cleanup from __mermap_get_wrapper, now. */
+static inline void __mermap_put_early(struct kunit *test, struct __mermap_put_args *args)
+{
+ kunit_release_action(test, __mermap_put_wrapper, args);
+}
+
+static void test_basic_alloc(struct kunit *test)
+{
+ struct page *page = alloc_page_wrapper(test, GFP_KERNEL);
+ struct mm_struct *mm = get_mm(test);
+ struct __mermap_put_args *args;
+
+ args = __mermap_get_wrapper(test, mm, page, PAGE_SIZE, PAGE_KERNEL);
+ KUNIT_ASSERT_NOT_NULL(test, args->alloc);
+}
+
+/* Dumb check for off-by-ones. */
+static void test_size(struct kunit *test)
+{
+ struct page *page = alloc_page_wrapper(test, GFP_KERNEL);
+ struct __mermap_put_args *full, *large, *small, *fail;
+ struct mm_struct *mm = get_mm(test);
+ unsigned long region_size, large_size;
+ struct mermap_alloc *alloc;
+ int cpu;
+
+ migrate_disable();
+ cpu = raw_smp_processor_id();
+ region_size = mermap_cpu_end(cpu) - mermap_cpu_base(cpu) - PAGE_SIZE;
+ large_size = region_size - PAGE_SIZE;
+
+ /* Allocate whole region at once. */
+ full = __mermap_get_wrapper(test, mm, page, region_size, PAGE_KERNEL);
+ KUNIT_ASSERT_NOT_NULL(test, full->alloc);
+ __mermap_put_early(test, full);
+
+ /* Allocate larger than region size. */
+ fail = __mermap_get_wrapper(test, mm, page, region_size + PAGE_SIZE, PAGE_KERNEL);
+ KUNIT_ASSERT_NULL(test, fail->alloc);
+
+ /* Tiptoe up to the edge then past it. */
+ large = __mermap_get_wrapper(test, mm, page, large_size, PAGE_KERNEL);
+ KUNIT_ASSERT_NOT_NULL(test, large->alloc);
+ small = __mermap_get_wrapper(test, mm, page, PAGE_SIZE, PAGE_KERNEL);
+ KUNIT_ASSERT_NOT_NULL(test, small->alloc);
+ fail = __mermap_get_wrapper(test, mm, page, PAGE_SIZE, PAGE_KERNEL);
+ KUNIT_ASSERT_NULL(test, fail->alloc);
+
+ /* Can still allocate the reserved page. */
+ local_irq_disable();
+ alloc = __mermap_get(mm, page, PAGE_SIZE, PAGE_KERNEL, true);
+ local_irq_enable();
+ KUNIT_ASSERT_NOT_NULL(test, alloc);
+ __mermap_put(mm, alloc);
+}
+
+static void test_multiple_allocs(struct kunit *test)
+{
+ struct __mermap_put_args *argss[NR_NORMAL_ALLOCS] = { };
+ struct page *pages[NR_NORMAL_ALLOCS + 1];
+ struct mermap_alloc *reserved_alloc;
+ struct mm_struct *mm = get_mm(test);
+ int magic = 0xE4A4;
+
+ for (int i = 0; i < ARRAY_SIZE(pages); i++) {
+ pages[i] = alloc_page_wrapper(test, GFP_KERNEL);
+ WRITE_ONCE(*(int *)page_to_virt(pages[i]), magic + i);
+ }
+
+ for (int i = 0; i < ARRAY_SIZE(argss); i++) {
+ unsigned long base = mermap_cpu_base(raw_smp_processor_id());
+ unsigned long end = mermap_cpu_end(raw_smp_processor_id());
+ unsigned long addr;
+
+ argss[i] = __mermap_get_wrapper(test, mm, pages[i], PAGE_SIZE, PAGE_KERNEL);
+ KUNIT_ASSERT_NOT_NULL_MSG(test, argss[i], "alloc %d failed", i);
+
+ addr = (unsigned long) mermap_addr(argss[i]->alloc);
+ KUNIT_EXPECT_GE_MSG(test, addr, base, "alloc %d out of range", i);
+ KUNIT_EXPECT_LT_MSG(test, addr, end, "alloc %d out of range", i);
+ };
+
+ /*
+ * Read through the mappings to try and detect if they point to the
+ * pages we wrote earlier.
+ */
+ kthread_use_mm(mm);
+ for (int i = 0; i < ARRAY_SIZE(pages) - 1; i++) {
+ int *ptr = (int *)mermap_addr(argss[i]->alloc);
+
+ KUNIT_EXPECT_EQ(test, *ptr, magic + i);
+ }
+
+ /* Run out of alloc structures, only reserved allocs should succeed now. */
+ KUNIT_ASSERT_NULL(test, __mermap_get(mm, pages[NR_NORMAL_ALLOCS],
+ PAGE_SIZE, PAGE_KERNEL, false));
+ preempt_disable();
+ reserved_alloc = __mermap_get(mm, pages[NR_NORMAL_ALLOCS],
+ PAGE_SIZE, PAGE_KERNEL, true);
+ KUNIT_EXPECT_NOT_NULL(test, reserved_alloc);
+ /* Also check if this mapping seems correct*/
+ if (reserved_alloc) {
+ int *ptr = (int *)mermap_addr(reserved_alloc);
+
+ KUNIT_EXPECT_EQ(test, *ptr, magic + NR_NORMAL_ALLOCS);
+
+ mermap_put(reserved_alloc);
+ }
+ preempt_enable();
+
+ kthread_unuse_mm(mm);
+}
+
+static void test_tlb_flushed(struct kunit *test)
+{
+ struct page *page = alloc_page_wrapper(test, GFP_KERNEL);
+ struct mm_struct *mm = get_mm(test);
+ unsigned long addr, prev_addr = 0;
+ /* Avoid running for ever in failure case. */
+ unsigned long max_iters = 1000000;
+ struct mermap_cpu *mc;
+
+ migrate_disable();
+ mc = this_cpu_ptr(mm->mermap.cpu);
+
+ /*
+ * Allocate until we see an address less than what we had before - assume
+ * that means a reuse.
+ */
+ for (int i = 0; i < max_iters; i++) {
+ struct mermap_alloc *alloc;
+
+ /*
+ * Obviously flushing the TLB already is not wrong per se, but
+ * it's unexpected and probably means there's some bug.
+ * Use ASSERT to avoid spamming the log in the failure case.
+ */
+ KUNIT_ASSERT_EQ_MSG(test, mc->tlb_flushes, 0,
+ "unexpected flush before alloc %d", i);
+
+ alloc = __mermap_get(mm, page, PAGE_SIZE, PAGE_KERNEL, false);
+ KUNIT_ASSERT_NOT_NULL_MSG(test, alloc, "alloc %d failed", i);
+
+ addr = (unsigned long)mermap_addr(alloc);
+ __mermap_put(mm, alloc);
+ if (addr < prev_addr)
+ break;
+
+ prev_addr = addr;
+ cond_resched();
+ }
+ KUNIT_ASSERT_TRUE_MSG(test, addr < prev_addr, "no address reuse");
+ /* Again, more than one flush isn't wrong per se, but probably a bug. */
+ KUNIT_ASSERT_EQ(test, mc->tlb_flushes, 1);
+
+ migrate_enable();
+}
+
+static struct kunit_case mermap_test_cases[] = {
+ KUNIT_CASE(test_basic_alloc),
+ KUNIT_CASE(test_size),
+ KUNIT_CASE(test_multiple_allocs),
+ KUNIT_CASE(test_tlb_flushed),
+ {}
+};
+
+static struct kunit_suite mermap_test_suite = {
+ .name = "mermap",
+ .test_cases = mermap_test_cases,
+};
+kunit_test_suite(mermap_test_suite);
+
+MODULE_DESCRIPTION("Mermap unit tests");
+MODULE_LICENSE("GPL");
+MODULE_IMPORT_NS("EXPORTED_FOR_KUNIT_TESTING");
--
2.51.2
next prev parent reply other threads:[~2026-03-20 18:23 UTC|newest]
Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-03-20 18:23 [PATCH v2 00/22] mm: Add __GFP_UNMAPPED Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 01/22] x86/mm: split out preallocate_sub_pgd() Brendan Jackman
2026-03-20 19:42 ` Dave Hansen
2026-03-23 11:01 ` Brendan Jackman
2026-03-24 15:27 ` Borislav Petkov
2026-03-25 13:28 ` Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 02/22] x86/mm: Generalize LDT remap into "mm-local region" Brendan Jackman
2026-03-20 19:47 ` Dave Hansen
2026-03-23 12:01 ` Brendan Jackman
2026-03-23 12:57 ` Brendan Jackman
2026-03-25 14:23 ` Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 03/22] x86/tlb: Expose some flush function declarations to modules Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 04/22] mm: Create flags arg for __apply_to_page_range() Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 05/22] mm: Add more flags " Brendan Jackman
2026-03-26 16:14 ` Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 06/22] x86/mm: introduce the mermap Brendan Jackman
2026-03-20 18:23 ` Brendan Jackman [this message]
2026-03-24 8:00 ` [PATCH v2 07/22] mm: KUnit tests for " kernel test robot
2026-03-20 18:23 ` [PATCH v2 08/22] mm: introduce for_each_free_list() Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 09/22] mm/page_alloc: don't overload migratetype in find_suitable_fallback() Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 10/22] mm: introduce freetype_t Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 11/22] mm: move migratetype definitions to freetype.h Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 12/22] mm: add definitions for allocating unmapped pages Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 13/22] mm: rejig pageblock mask definitions Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 14/22] mm: encode freetype flags in pageblock flags Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 15/22] mm/page_alloc: remove ifdefs from pindex helpers Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 16/22] mm/page_alloc: separate pcplists by freetype flags Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 17/22] mm/page_alloc: rename ALLOC_NON_BLOCK back to _HARDER Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 18/22] mm/page_alloc: introduce ALLOC_NOBLOCK Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 19/22] mm/page_alloc: implement __GFP_UNMAPPED allocations Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 20/22] mm/page_alloc: implement __GFP_UNMAPPED|__GFP_ZERO allocations Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 21/22] mm: Minimal KUnit tests for some new page_alloc logic Brendan Jackman
2026-03-20 18:23 ` [PATCH v2 22/22] mm/secretmem: Use __GFP_UNMAPPED when available Brendan Jackman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260320-page_alloc-unmapped-v2-7-28bf1bd54f41@google.com \
--to=jackmanb@google.com \
--cc=akpm@linux-foundation.org \
--cc=bp@alien8.de \
--cc=dave.hansen@linux.intel.com \
--cc=david.kaplan@amd.com \
--cc=david@kernel.org \
--cc=derkling@google.com \
--cc=hannes@cmpxchg.org \
--cc=itazur@amazon.co.uk \
--cc=kalyazin@amazon.co.uk \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=ljs@kernel.org \
--cc=luto@kernel.org \
--cc=patrick.roy@linux.dev \
--cc=peterz@infradead.org \
--cc=reijiw@google.com \
--cc=rientjes@google.com \
--cc=rppt@kernel.org \
--cc=sumit.garg@oss.qualcomm.com \
--cc=tglx@kernel.org \
--cc=vbabka@kernel.org \
--cc=weixugc@google.com \
--cc=will@kernel.org \
--cc=x86@kernel.org \
--cc=yosry@kernel.org \
--cc=ziy@nvidia.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox