On Sat, 26 Sep 2026 11:41:05 +0100 "Lorenzo Stoakes (ARM)" <[email protected]>
wrote:
> Historically anonymous memory was obtained in linux by MAP_PRIVATE-mapping
> /dev/zero.
>
> The canonical way of doing these now is mmap() specifying MAP_PRIVATE |
> MAP_ANON, but we must continue to support the legacy means of obtaining these
> mappings.
>
> As-is these mappings are an unusual edge-case - they satisfy
> vma_is_anonymous() but have non-NULL vma->vm_file, and their page offset is
> the offset into the /dev/zero file.
>
> Commit 93c0c8dc87f6 ("mm/rmap: use anon pgoff to track MAP_PRIVATE
> file-backed anon folios") causes all other anonymous folios to be tracked
> by their anon index (vma->vm_start >> PAGE_SHIFT at the point of first
> fault), leaving MAP_PRIVATE-/dev/zero as the outlier.
>
> This series remedies the situation by making MAP_PRIVATE-/dev/zero mappings
> truly anonymous with !vma->vm_file and correct anonymous page offset.
>
> It starts by bringing the memory character driver into mm/ - this file
> implements /dev/zero, /dev/mem among other things and is already (as
> clearly indicated by its name) within the remit of memory management.
>
> By doing this, the file_is_dev_zero() function can be provided, internal to
> mm, which allows for positive identification of these mappings.
>
> Using this, first prevent any other mappings from mapping memory
> anonymously, then make these mappings truly anonymous and eliminate all
> code in the kernel that previously had to account for these strange beasts.
>
> Finally, it adds userland VMA tests to assert the behaviour and selftests
> to assert expected merge behaviour.
Thanks, I've updated mm-unstable to this version.
> v3:
> * Added tags (thanks David! :)
> * Moved the reworked mmap_prepare vm_ops comment to 3/6 where it is introduced
> and fixed a typo in it, as per David.
Here's how v3 altered mm.git. Includes a merge fix for the
recently-added hotfix "mm/vma: predicate setting mmap_prepare VMA
fields on new vma alloc", per yourself.
And... really? I already had David's tags so we did a full resend for
a single comment typo? Little -fixes had their role...
mm/vma.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/mm/vma.c~b
+++ a/mm/vma.c
@@ -2816,7 +2816,7 @@ static int call_mmap_prepare(struct mmap
if (err)
return err;
- /* It's invalid for mmap_preprare hooks to clear vm_ops. */
+ /* It's invalid for mmap_prepare hooks to clear vm_ops. */
if (!desc->vm_ops)
return -EINVAL;
@@ -2932,7 +2932,7 @@ static unsigned long __mmap_region(struc
allocated_new = true;
}
- if (have_mmap_prepare && allocated_new)
+ if (have_mmap_prepare && !map_is_anon(&map) && allocated_new)
set_vma_user_defined_fields(vma, &map);
__mmap_complete(&map, vma);
_
