[PATCH v2 07/13] mm/slab: abstract slabobj_ext.ref access

From: Vlastimil Babka (SUSE)

Date: Mon Jul 20 2026 - 10:29:29 EST


In preparation for changes to the structure, abstract access to the ref
field with a slab_obj_ext_codetag_ref() function. Rename the field to
_ctref to make an unexpected direct access a compile error.

No functional change intended.

Reviewed-by: Suren Baghdasaryan <surenb@xxxxxxxxxx>
Signed-off-by: Vlastimil Babka (SUSE) <vbabka@xxxxxxxxxx>
---
mm/slab.h | 10 +++++++++-
mm/slub.c | 42 +++++++++++++++++++++++++++++-------------
2 files changed, 38 insertions(+), 14 deletions(-)

diff --git a/mm/slab.h b/mm/slab.h
index 1d1771f97aca..62d6366d7d79 100644
--- a/mm/slab.h
+++ b/mm/slab.h
@@ -558,7 +558,7 @@ struct slabobj_ext {
struct obj_cgroup *_objcg;
#endif
#ifdef CONFIG_MEM_ALLOC_PROFILING
- union codetag_ref ref;
+ union codetag_ref _ctref;
#endif
} __aligned(8);

@@ -675,6 +675,14 @@ static inline void slab_obj_ext_set_objcg(struct slabobj_ext *obj_ext,
}
#endif

+#ifdef CONFIG_MEM_ALLOC_PROFILING
+static inline union codetag_ref *
+slab_obj_ext_codetag_ref(struct slab *slab, struct slabobj_ext *obj_ext)
+{
+ return &obj_ext->_ctref;
+}
+#endif
+
int alloc_slab_obj_exts(struct slab *slab, struct kmem_cache *s,
gfp_t gfp, unsigned int alloc_flags);

diff --git a/mm/slub.c b/mm/slub.c
index f2ffadde879d..cf999cbe75d1 100644
--- a/mm/slub.c
+++ b/mm/slub.c
@@ -2071,23 +2071,25 @@ static inline void mark_obj_codetag_empty(const void *obj)
slab_exts = slab_obj_exts(obj_slab);
if (slab_exts) {
struct slabobj_ext *ext;
+ union codetag_ref *ref;

get_slab_obj_exts(slab_exts);
ext = slab_obj_ext(obj_slab->slab_cache, obj_slab, slab_exts, obj);
+ ref = slab_obj_ext_codetag_ref(obj_slab, ext);

if (is_kfence_address(obj)) {
put_slab_obj_exts(slab_exts);
return;
}

- if (unlikely(is_codetag_empty(&ext->ref))) {
+ if (unlikely(is_codetag_empty(ref))) {
put_slab_obj_exts(slab_exts);
return;
}

/* codetag should be NULL here */
- WARN_ON(ext->ref.ct);
- set_codetag_empty(&ext->ref);
+ WARN_ON(ref->ct);
+ set_codetag_empty(ref);
put_slab_obj_exts(slab_exts);
}
}
@@ -2097,8 +2099,8 @@ static inline bool mark_failed_objexts_alloc(struct slab *slab)
return cmpxchg(&slab->obj_exts, 0, OBJEXTS_ALLOC_FAIL) == 0;
}

-static inline void handle_failed_objexts_alloc(unsigned long obj_exts,
- struct slabobj_ext *vec, unsigned int objects)
+static inline void handle_failed_objexts_alloc(struct slab *slab,
+ unsigned long obj_exts, struct slabobj_ext *vec)
{
if (!mem_alloc_profiling_enabled())
return;
@@ -2108,9 +2110,14 @@ static inline void handle_failed_objexts_alloc(unsigned long obj_exts,
* objects with no tag reference. Mark all references in this
* vector as empty to avoid warnings later on.
*/
- if (obj_exts == OBJEXTS_ALLOC_FAIL) {
- for (unsigned int i = 0; i < objects; i++)
- set_codetag_empty(&vec[i].ref);
+ if (obj_exts != OBJEXTS_ALLOC_FAIL)
+ return;
+
+ for (unsigned int i = 0; i < slab->objects; i++) {
+ union codetag_ref *ref = slab_obj_ext_codetag_ref(slab, vec);
+
+ set_codetag_empty(ref);
+ vec++;
}
}

@@ -2118,8 +2125,8 @@ static inline void handle_failed_objexts_alloc(unsigned long obj_exts,

static inline void mark_obj_codetag_empty(const void *obj) {}
static inline bool mark_failed_objexts_alloc(struct slab *slab) { return false; }
-static inline void handle_failed_objexts_alloc(unsigned long obj_exts,
- struct slabobj_ext *vec, unsigned int objects) {}
+static inline void handle_failed_objexts_alloc(struct slab *slab,
+ unsigned long obj_exts, struct slabobj_ext *vec) {}

#endif /* CONFIG_MEM_ALLOC_PROFILING_DEBUG */

@@ -2187,7 +2194,7 @@ int alloc_slab_obj_exts(struct slab *slab, struct kmem_cache *s,
#endif
retry:
old_exts = READ_ONCE(slab->obj_exts);
- handle_failed_objexts_alloc(old_exts, vec, slab->objects);
+ handle_failed_objexts_alloc(slab, old_exts, vec);

if (new_slab) {
/*
@@ -2367,9 +2374,15 @@ __alloc_tagging_slab_alloc_hook(struct kmem_cache *s, void *object, gfp_t flags,
* check should be added before alloc_tag_add().
*/
if (obj_exts) {
+ union codetag_ref *ref;
+
get_slab_obj_exts(obj_exts);
+
obj_ext = slab_obj_ext(s, slab, obj_exts, object);
- alloc_tag_add(&obj_ext->ref, current->alloc_tag, s->size);
+ ref = slab_obj_ext_codetag_ref(slab, obj_ext);
+
+ alloc_tag_add(ref, current->alloc_tag, s->size);
+
put_slab_obj_exts(obj_exts);
} else {
alloc_tag_set_inaccurate(current->alloc_tag);
@@ -2401,10 +2414,13 @@ __alloc_tagging_slab_free_hook(struct kmem_cache *s, struct slab *slab, void **p

get_slab_obj_exts(obj_exts);
for (int i = 0; i < objects; i++) {
+ struct slabobj_ext *ext;
+
if (is_kfence_address(p[i]))
continue;

- alloc_tag_sub(&slab_obj_ext(s, slab, obj_exts, p[i])->ref, s->size);
+ ext = slab_obj_ext(s, slab, obj_exts, p[i]);
+ alloc_tag_sub(slab_obj_ext_codetag_ref(slab, ext), s->size);
}
put_slab_obj_exts(obj_exts);
}

--
2.55.0