On Tue, Jan 27, 2026 at 04:36:44PM -0500, Yury Norov wrote: > On Tue, Jan 27, 2026 at 02:40:03PM +0000, Lorenzo Stoakes wrote: > > On Tue, Jan 27, 2026 at 08:53:44AM -0500, Yury Norov wrote: > > > On Thu, Jan 22, 2026 at 04:06:09PM +0000, Lorenzo Stoakes wrote: > > ... > > > > Even if you expect adding more flags, u128 would double your capacity, > > > and people will still be able to use language-supported operation on > > > the bits in flag. Which looks simpler to me... > > > > u128 isn't supported on all architectures, VMA flags have to have absolutely > > What about big integers? > > typedef unsigned _BitInt(VMA_FLAGS_COUNT) vma_flags_t
There is no use of _BitInt anywhere in the kernel. That seems to be a C23-only feature with limited compiler support that we simply couldn't use yet. https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2025/p3639r0.html tells me that it's supported in clang 16+ and gcc 14+. We cannot put such a restriction on compilers in the kernel, obviously. > > > We want to be able to arbitrarily extend this as we please in the future. So > > using u64 wouldn't buy us _anything_ except getting the 32-bit kernels in > > line. > > So enabling 32-bit arches is a big deal, even if it's a temporary > solution. Again, how many flags in your opinion are blocked because of > 32-bit integer limitation? How soon 64-bit capacity will get fully > used? In my opinion? I'm not sure where my opinion comes into this? There are 43 VMA flags and 32-bits available in 32-bit kernels. As I said to you before Yury, when adding new flags you have to add a whole load of mess of #ifdef CONFIG_64BIT ... #endif etc. around things that have nothing to do with 64-bit vs 32-bit architecture as a result. It's a mess, we've run out. Also something that might not have occurred to you - there is a chilling effect of limited VMA flag availability - the bar to adding flags is higher, and features that might have used VMA flags but need general kernel support (incl. 32-bit) have to find other ways to store state like this. > > > Using an integral value doesn't give us any kind of type safety, nor does it > > give us as easy a means to track what users are doing with flags - both > > additional benefits of this change. > > I tried the below, and it works OK for me with i386: > > $ cat bi.c > #include <stdio.h> > #include <limits.h> > > int main() { > unsigned _BitInt(128) a = (_BitInt(128))1 << 65; > unsigned _BitInt(128) b = (_BitInt(128))1 << 66; > > printf("a | b == %llx\n", (unsigned long long)((a | b)>>64)); > printf("BITINT_MAXWIDTH == 0x%x\n", BITINT_MAXWIDTH); > > return 0; > } > > $ clang -m32 -std=c2x bi.c > $ ./a.out > a | b == 6 > BITINT_MAXWIDTH == 0x800000 I'm not sure why you're replying to my points about type safety, traceability with this program but OK? I mean thanks for that, I wasn't aware of the c23 standard (proposal?) _BitInt(). It's useful to know that. We can't use it right now, but it's good to know for the future. > > I didn't make GCC building it, at least out of the box. So the above > question about 64-bit capacity has a practical meaning. If we've got a > few years to let GCC fully support big integers as clang does, we don't > have to wish anything else. As long as you assume that all architectures will be supported, all compilers used by users to build the kernel will support it, and Linus will be fine with us using this. That could be years, that could be never. Also - and here's a really important point - the underlying implementation _doesn't matter_. Right now it's bitmaps. By abstracting the VMA flags into an opaque type and providing helper functions we also enable the ability to _change the implementation_. So if this time comes, we can simply switch everything over. Job done. Your suggested 'do nothing and hope' approach achieves none of this. > > I'd like to put it right. I maintain bitmaps, and I like it widely > adopted. But when it comes to flags, being able to use plain logic > operations looks so important to me so I'd like to make sure that > switching to bitmaps is the only working option. I'm not sure you're making a technical argument here? >From the point of view of mm, the ability to arbitrarily manipulate VMA flags is a bug not a feature. The other part of this series is to make changes to the f_op->mmap_prepare feature, which was explicitly implemented in order to avoid such arbitrarily behaviour from drivers. It's actually hugely valueable to make this change in such a way as we can trace, with type safety, VMA flag usage throughout the kernel, and know that for instance - on mmap setup - we don't need to worry about VMA stabilisation - which feeds into other work re: killable VMA locks. In summary, this series represents a workable and sensible means of addressing all of these issues in one fell swoop, similar to the means through which mm flags were extended across both 32-bit and 64-bit kernels. We can in future choose to use _BitInt(), u128, or whatever we please underneath, and which makes sense to use should conditions change and we choose to do so for good technical reasons. Any argument on the basis of 'allow the flags to continue to be manipulated as they are' is I think mistaken. Keep in mind that bitmap VMA flags are _already_ a merged feature in the kernel, and this series only works to add sensible helper functions to manipulate these flags and moves mmap_prepare to using them exclusively. If we find cases where somehow the compiler does the wrong thing, we already have functions in mm_types.h that allow us to address the first system-word bits of the underlying type and can restrict core flags to being at system word count or less. I hope that won't ever be necessary, but we have means of adressing that should any issue arise like that. Thanks, Lorenzo
