linux-mm.kvack.org archive mirror
 help / color / mirror / Atom feed
From: "David Hildenbrand (Arm)" <david@kernel.org>
To: Zw Tang <shicenci@gmail.com>,
	"linux-mm@kvack.org" <linux-mm@kvack.org>,
	rcu@vger.kernel.org
Cc: "hughd@google.com" <hughd@google.com>,
	"akpm@linux-foundation.org" <akpm@linux-foundation.org>,
	chrisl@kernel.org, kasong@tencent.com, paulmck@kernel.org,
	frederic@kernel.org,
	"linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: Re: [BUG] rcu detected stall in shmem_file_write_iter
Date: Thu, 5 Feb 2026 14:44:37 +0100	[thread overview]
Message-ID: <90226c5d-4f0a-4a29-8c5f-1b891e724c2b@kernel.org> (raw)
In-Reply-To: <CAPHJ_V+75SmoRQmoQmAT0GfdP-JotzwW801uPHZtHyynwdSOgw@mail.gmail.com>

On 2/5/26 13:57, Zw Tang wrote:
> Hi,
> 
> I am reporting a reproducible RCU stall observed on Linux 6.19.0-rc7,
> triggered by a syzkaller C reproducer.
> 
> The stall is reported while a userspace task is executing the tmpfs
> (shmem) write path. The blocked task is a syz-executor process, and the
> RCU report consistently shows it running in the shmem write / folio
> allocation path for an extended period of time.
> 
> The relevant call trace of the stalled task is:
> 
>    shmem_file_write_iter
>      shmem_write_begin
>        shmem_get_folio_gfp
>          __folio_batch_add_and_move
>            folio_batch_move_lru
>              lru_add
>                __mod_zone_page_state
> 

lru_add()->lruvec_add_folio() calls 
update_lru_size()->__update_lru_size()->__mod_zone_page_state().

On SMP systems we end up in mm/vmstat.c:__mod_zone_page_state().

I don't see anything that could block in there.

Livelocking? Or we're actually stuck somewhere else and the 
__mod_zone_page_state is misleading.

Can you try running with lockdep to see if anything pops up?

-- 
Cheers,

David


  reply	other threads:[~2026-02-05 13:44 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-05 12:57 Zw Tang
2026-02-05 13:44 ` David Hildenbrand (Arm) [this message]
2026-02-06  7:37 ` Kunwu Chan
     [not found]   ` <PS1PPF7E1D7501F6FE46DF307FFB8086E2FAB66A@PS1PPF7E1D7501F.apcprd02.prod.outlook.com>
2026-02-06 12:16     ` 回复: " Zw Tang
2026-02-09  7:34       ` Kunwu Chan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=90226c5d-4f0a-4a29-8c5f-1b891e724c2b@kernel.org \
    --to=david@kernel.org \
    --cc=akpm@linux-foundation.org \
    --cc=chrisl@kernel.org \
    --cc=frederic@kernel.org \
    --cc=hughd@google.com \
    --cc=kasong@tencent.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mm@kvack.org \
    --cc=paulmck@kernel.org \
    --cc=rcu@vger.kernel.org \
    --cc=shicenci@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox