From: Ackerley Tng <ackerleytng@google.com>
To: willy@infradead.org, akpm@linux-foundation.org,
linux-fsdevel@vger.kernel.org, linux-mm@kvack.org,
linux-kernel@vger.kernel.org
Cc: david@redhat.com, michael.roth@amd.com, dev.jain@arm.com,
vannapurve@google.com, Ackerley Tng <ackerleytng@google.com>
Subject: [RFC PATCH v1 0/2] Fix storing in XArray check_split tests
Date: Fri, 30 Jan 2026 16:15:36 -0800 [thread overview]
Message-ID: <cover.1769817142.git.ackerleytng@google.com> (raw)
Hi,
I hit an assertion while making some modifications to
lib/test_xarray.c [1] and I believe this is the fix.
In check_split, the tests split the XArray node and then store values
after the split to verify that splitting worked. While storing and
retrieval works as expected, the node's metadata, specifically
node->nr_values, is not updated correctly.
This led to the assertion being hit in [1], since the storing process
did not increment node->nr_values sufficiently, while the erasing
process assumed the fully-incremented node->nr_values state.
Would like to check my understanding on these:
1. In the multi-index xarray world, is node->nr_values definitely the
total number of values *and siblings* in the node?
2. IIUC xas_store() has significantly different behavior when entry is
NULL vs non-NULL: when entry is NULL, xas_store() does not make
assumptions on the number of siblings and erases all the way till
the next non-sibling entry. This sounds fair to me, but it's also
kind of surprising that it is differently handled when entry is
non-NULL, where xas_store() respects xas->xa_sibs.
3. If xas_store() is dependent on its caller to set up xas correctly
(also sounds fair), then there are places where xas_store() is
used, like replace_page_cache_folio() or
migrate_huge_page_move_mapping(), where xas is set up assuming 0
order pages. Are those buggy?
[1] https://lore.kernel.org/all/20251028223414.299268-1-ackerleytng@google.com/
Ackerley Tng (2):
XArray tests: Fix check_split tests to store correctly
XArray tests: Verify xa_erase behavior in check_split
lib/test_xarray.c | 28 ++++++++++++++++++++++++----
1 file changed, 24 insertions(+), 4 deletions(-)
--
2.53.0.rc1.225.gd81095ad13-goog
next reply other threads:[~2026-01-31 0:15 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-01-31 0:15 Ackerley Tng [this message]
2026-02-09 19:16 Ackerley Tng
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=cover.1769817142.git.ackerleytng@google.com \
--to=ackerleytng@google.com \
--cc=akpm@linux-foundation.org \
--cc=david@redhat.com \
--cc=dev.jain@arm.com \
--cc=linux-fsdevel@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=michael.roth@amd.com \
--cc=vannapurve@google.com \
--cc=willy@infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox