> selftests/bpf: add tests for the page_owner bpf_iter target
TL;DR:
- Selftest BPF program may fail to build, breaking test_progs, if
CONFIG_PAGE_OWNER types are missing from vmlinux.h
- Iterator read errors (e.g. -EAGAIN) silently end the test as a pass
- Skip gives no reason
> diff --git a/tools/testing/selftests/bpf/prog_tests/page_owner_iter.c
> b/tools/testing/selftests/bpf/prog_tests/page_owner_iter.c
> new file mode 100644
> index 000000000000..a621712272bc
> --- /dev/null
> +++ b/tools/testing/selftests/bpf/prog_tests/page_owner_iter.c
> @@ -0,0 +1,173 @@
[ ... ]
> +/* Count link_fd output lines; -1 on error. */
> +static long iter_record_count(int link_fd)
> +{
[ ... ]
> + f = fdopen(iter_fd, "r");
> + if (!f) {
> + close(iter_fd);
> + return -1;
> + }
> + while (getline(&line, &len, f) > 0)
> + count++;
> + err = ferror(f);
> + free(line);
> + fclose(f);
> + return err ? -1 : count;
> +}
[ ... ]
> +void serial_test_page_owner_iter(void)
> +{
[ ... ]
> + if (!page_owner_available()) {
> + test__skip();
> + return;
> + }
A subsystem pattern flags this as potentially concerning: a test that skips
silently, with no message.
test__skip() takes no message and nothing is printed before it, so the
result is a bare skip. The page_owner file only exists with
CONFIG_PAGE_OWNER=y, page_owner=on on the kernel command line, and debugfs
mounted, so someone reading the output cannot tell which of these was
missing.
Other prog_tests print the reason before skipping, for example in
bpf_iter.c:
printf("%s:SKIP:no __builtin_btf_type_id\n", __func__);
test__skip();
Could this print why it skipped, for example that page_owner debugfs is
unavailable and needs CONFIG_PAGE_OWNER plus page_owner=on?
That said, test_progs still reports the test as skipped in its summary, and
many existing prog_tests call test__skip() without a message, so only the
reason is missing here.
> +
> + skel = bpf_iter_page_owner__open_and_load();
> + if (!ASSERT_OK_PTR(skel, "bpf_iter_page_owner__open_and_load"))
> + return;
> +
> + /* --- seq file iterator: unfiltered run --- */
> + skel->bss->filter_en = 0;
> +
> + if (!ASSERT_OK(bpf_iter_page_owner__attach(skel), "skel_attach"))
> + goto destroy;
> +
> + link_fd = bpf_link__fd(skel->links.dump_page_owner);
> + iter_count = iter_record_count(link_fd);
> + if (iter_count < 0)
> + goto destroy;
If reading the iterator fails, can this test still report success without
running any of its checks?
iter_record_count() only records an assertion failure when bpf_iter_create()
fails. When fdopen() fails, or when getline() stops on a read error so that
ferror(f) is set, it quietly returns -1.
The two callers in serial_test_page_owner_iter(), the unfiltered pass here
and the pid-filtered pass below, then do:
if (iter_count < 0)
goto destroy;
Neither calls ASSERT_*() or test__fail(), so test_progs marks the test as
OK and skips the unfiltered, filtered, open-coded and memcg checks.
read() on a BPF iterator fd can fail with real errors from bpf_seq_read():
an ERR_PTR returned by the target's start()/next(), -E2BIG, -ENOMEM, or
-EAGAIN.
The -EAGAIN case looks like a likely trigger in the pid-filtered pass.
There dump_page_owner() returns 0 without printing for every page that does
not belong to the test's pid, and bpf_seq_read() returns -EAGAIN once
num_objs reaches MAX_ITER_OBJECTS (1000000) while offs == 0:
if (num_objs >= MAX_ITER_OBJECTS) {
if (offs == 0) {
err = -EAGAIN;
...
So on a machine where more than about 1M consecutive iterated pages do not
belong to the test process, the filtered pass would end in a silent pass.
Should these error paths fail the test, for example with ASSERT_OK_PTR() on
the FILE * and an assertion on ferror()? Should -EAGAIN be retried rather
than treated as an error?
[ ... ]
> diff --git a/tools/testing/selftests/bpf/progs/bpf_iter_page_owner.c
> b/tools/testing/selftests/bpf/progs/bpf_iter_page_owner.c
> new file mode 100644
> index 000000000000..fada6a314a15
> --- /dev/null
> +++ b/tools/testing/selftests/bpf/progs/bpf_iter_page_owner.c
> @@ -0,0 +1,161 @@
> +// SPDX-License-Identifier: GPL-2.0
> +/* Copyright (c) 2026 */
> +
> +#include <vmlinux.h>
> +#include <bpf/bpf_helpers.h>
[ ... ]
> +SEC("syscall")
> +int scan_open_coded(const void *ctx)
> +{
> + struct bpf_iter_page_owner it;
> + struct page_owner_scan *scan;
Does this program build against the kernels the BPF selftests are normally
built and run on?
The program needs several types from vmlinux.h: struct bpf_iter_page_owner
(declared as a stack variable here), struct page_owner_scan, struct
memcg_info, struct bpf_iter__page_owner, and struct page_owner (dereferenced
as po->pid and po->comm in dump_page_owner()).
struct page_owner is defined only in mm/page_owner.c, which is built only
when CONFIG_PAGE_OWNER=y (obj-$(CONFIG_PAGE_OWNER) += page_owner.o in
mm/Makefile). The new iterator and kfunc types live in the page_owner code
added by the earlier patches in this series, so they are in BTF only when
CONFIG_PAGE_OWNER is enabled too.
CONFIG_PAGE_OWNER is default n (mm/Kconfig.debug), and none of
tools/testing/selftests/bpf/config, config.vm or config.<arch> enables it.
This patch does not touch those files either.
The selftests build compiles every progs/*.c unconditionally:
Makefile.skel:
BPF_SRCS := $(notdir $(wildcard progs/*.c))
BPF_OBJS := $(patsubst %.c,$(RDIR)/%.bpf.o,$(BPF_SRCS))
Makefile:
$(OUTPUT)/test_progs: $(RUNNER_PREREQS) $(BPF_OBJS) $(ALL_SKELS) FORCE
vmlinux.h is generated from the VMLINUX_BTF of the kernel under test. On a
kernel built from the selftests config, this declaration fails with an
incomplete-type error:
struct bpf_iter_page_owner it;
and ctx->po / po->pid fail the same way. That would fail the whole
test_progs build, not just this test.
In the tree this patch was checked against, the earlier page_owner patches
are not present either, so the file cannot compile there at all.
The runtime check in page_owner_available() cannot help, because the
failure happens at build time.
Should CONFIG_PAGE_OWNER=y (plus its DEBUG_KERNEL dependency) be added to
tools/testing/selftests/bpf/config? Or should the program use local type
definitions with core relocations (___local flavors plus
bpf_core_type_exists()) so it still compiles when the types are missing?
Also, pageowner_init() creates /sys/kernel/debug/page_owner only when booted
with page_owner=on. Without that parameter the test will always skip on
test machines, even after the config is fixed.
---
AI reviewed your patch. Please fix the bug or email reply why it's not a bug.
See: https://github.com/kernel-patches/vmtest/blob/master/ci/claude/README.md
CI run summary: https://github.com/kernel-patches/bpf/actions/runs/37933988642
