From nobody Thu Apr 9 19:00:50 2026 Received: from out-189.mta1.migadu.com (out-189.mta1.migadu.com [95.215.58.189]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B152133F392 for ; Fri, 6 Mar 2026 11:51:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=95.215.58.189 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772797872; cv=none; b=LWIKl4Kt17QsXPB1ugvTo7bG7zWoJEgsJNwVoPjWn8sz2tg0c57CH//l4QzKAhumKRVKbOpfUdIbdr4Br0v04Q3ZLWsy0yvXicPpWNuxHJYsn8QTtlOkXQ+qRwm8U1OBM8VBTR2tf4t9IB9UXQEV/fHM4fpNHfGcGrfd8n5BUpg= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772797872; c=relaxed/simple; bh=J2IvZFkJs/jAnH1ff1YlObO2es+kOzOgbyxmdTcGZ/A=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=ugr6pgVAYNs7jMvOB3QJtcx9K8M+fqNu4FeSgwsv5LboTXx+h7BvKclrxvzush9SGzOwSG1YubiUZfwg9Exm18c+4w0AwFBFQWcYR9ZRQN2mxXWZKER3vFCnANDkrOlanIE7Qi1uXMgp9DTdUJAEbLvrQDZO9BM70VRDh3qAKNE= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev; spf=pass smtp.mailfrom=linux.dev; arc=none smtp.client-ip=95.215.58.189 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.dev X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. From: Hui Zhu To: Andrew Morton , Chris Li , Kairui Song , Kemeng Shi , Nhat Pham , Baoquan He , Barry Song , linux-mm@kvack.org, linux-kernel@vger.kernel.org Cc: Hui Zhu Subject: [PATCH 1/2] mm/swap: fix missing locks in swap_reclaim_work() Date: Fri, 6 Mar 2026 19:50:36 +0800 Message-ID: <02f5912caa6c427705bf8da43497801caf3b102f.1772797581.git.zhuhui@kylinos.cn> In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Hui Zhu swap_cluster_alloc_table() assumes that the caller holds the following locks: ci->lock percpu_swap_cluster.lock si->global_cluster_lock (required for non-SWP_SOLIDSTATE devices) There are five call paths leading to swap_cluster_alloc_table(): swap_alloc_hibernation_slot->cluster_alloc_swap_entry ->alloc_swap_scan_list->isolate_lock_cluster->swap_cluster_alloc_table swap_alloc_slow->cluster_alloc_swap_entry->alloc_swap_scan_list ->isolate_lock_cluster->swap_cluster_alloc_table swap_alloc_hibernation_slot->cluster_alloc_swap_entry ->swap_reclaim_full_clusters->isolate_lock_cluster ->swap_cluster_alloc_table swap_alloc_slow->cluster_alloc_swap_entry->swap_reclaim_full_clusters ->isolate_lock_cluster->swap_cluster_alloc_table swap_reclaim_work->swap_reclaim_full_clusters->isolate_lock_cluster ->swap_cluster_alloc_table Other paths correctly acquire the necessary locks before calling swap_cluster_alloc_table(). But the swap_reclaim_work() path fails to acquire percpu_swap_cluster.lock and, for non-SWP_SOLIDSTATE devices, si->global_cluster_lock. This patch fixes the issue by ensuring swap_reclaim_work() properly acquires the required locks before proceeding with the swap cluster allocation. Signed-off-by: Hui Zhu --- mm/swapfile.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/mm/swapfile.c b/mm/swapfile.c index 94af29d1de88..2e8717f84ba3 100644 --- a/mm/swapfile.c +++ b/mm/swapfile.c @@ -1031,7 +1031,15 @@ static void swap_reclaim_work(struct work_struct *wo= rk) =20 si =3D container_of(work, struct swap_info_struct, reclaim_work); =20 + local_lock(&percpu_swap_cluster.lock); + if (!(si->flags & SWP_SOLIDSTATE)) + spin_lock(&si->global_cluster_lock); + swap_reclaim_full_clusters(si, true); + + if (!(si->flags & SWP_SOLIDSTATE)) + spin_unlock(&si->global_cluster_lock); + local_unlock(&percpu_swap_cluster.lock); } =20 /* --=20 2.43.0