syzbot


BUG: Bad rss-counter state (5)

Status: upstream: reported C repro on 2024/05/13 10:19
Subsystems: bcachefs mm
[Documentation on labels]
Reported-by: syzbot+f2bbbb592debc978d46d@syzkaller.appspotmail.com
First crash: 327d, last: 2h57m
Cause bisection: introduced by (bisect log) :
commit 1c05047ad01693ad92bdf8347fad3b5c2b25e8bb
Author: Baolin Wang <baolin.wang@linux.alibaba.com>
Date: Tue Jun 4 10:17:45 2024 +0000

  mm: memory: extend finish_fault() to support large folio

Crash: KASAN: slab-use-after-free Read in finish_fault (log)
Repro: C syz .config
  
Discussions (9)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (Mar 2025) 0 (1) 2025/03/08 22:16
[syzbot] Monthly mm report (Feb 2025) 0 (1) 2025/02/05 12:44
[syzbot] Monthly mm report (Jan 2025) 0 (1) 2025/01/06 10:01
[syzbot] Monthly bcachefs report (Dec 2024) 0 (1) 2024/12/16 09:45
[syzbot] Monthly bcachefs report (Nov 2024) 0 (1) 2024/11/15 10:49
[syzbot] Monthly mm report (Aug 2024) 0 (1) 2024/08/02 16:15
[syzbot] Monthly mm report (Jul 2024) 0 (1) 2024/07/01 10:28
Re: [syzbot] BUG: Bad rss-counter state (5) 1 (2) 2024/06/14 16:18
[syzbot] BUG: Bad rss-counter state (5) 2 (6) 2024/06/14 15:50
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: Bad rss-counter state syz 20 2741d 2704d 0/28 closed as invalid on 2017/10/31 09:42
upstream BUG: Bad rss-counter state (2) kernel 11 2654d 2656d 0/28 closed as invalid on 2018/02/01 12:07
linux-4.19 BUG: Bad rss-counter state C error 18 1274d 1820d 0/1 upstream: reported C repro on 2020/04/03 02:55
upstream BUG: Bad rss-counter state (4) C done unreliable 124 683d 1774d 0/28 auto-obsoleted due to no activity on 2023/08/23 09:04
linux-4.14 BUG: Bad rss-counter state (2) 4 1476d 1572d 0/1 auto-closed as invalid on 2021/07/10 23:34
linux-4.14 BUG: Bad rss-counter state 1 1932d 1932d 0/1 auto-closed as invalid on 2020/04/11 05:38
upstream BUG: Bad rss-counter state (3) C unreliable done 438 2068d 2534d 15/28 fixed on 2020/01/31 18:49
android-54 BUG: Bad rss-counter state C 11 1h07m 1782d 0/2 upstream: reported C repro on 2020/05/11 02:06
android-49 BUG: Bad rss-counter state 11325 1940d 2174d 0/3 auto-closed as invalid on 2020/03/03 11:04
Last patch testing requests (11)
Created Duration User Patch Repo Result
2024/10/13 17:00 15m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 17:00 15m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 15:33 15m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/06/14 15:51 25m baolin.wang@linux.alibaba.com git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable OK log

Sample crash report:
BUG: Bad rss-counter state mm:ffff88802176da00 type:MM_ANONPAGES val:1

Crashes (2325):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/04 00:24 upstream 2014c95afece a21a8419 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2024/09/29 08:32 upstream 3efc57369a0c ba29ff75 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/28 08:41 upstream e477dba5442c 440b26ec .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/26 08:39 upstream 11a299a7933e 0d19f247 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/24 02:22 upstream 18ba6034468e 89298aad .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/23 15:52 upstream de5cb0dcb74c 49f9c2d2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/12/26 02:00 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/26 00:33 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/25 23:51 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/25 23:13 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/03/12 17:27 upstream 0fed89a961ea ee70e6db .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2025/03/01 22:29 upstream 03d38806a902 c3901742 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root BUG: Bad rss-counter state
2025/02/18 04:52 upstream 2408a807bfc3 429ea007 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/11/15 19:06 upstream cfaaa7d010d1 eeafb645 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/30 17:47 upstream c1e939a21eb1 f3a00767 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/28 06:40 upstream ea1fda89f5b2 65e8686b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/28 00:18 upstream ea1fda89f5b2 65e8686b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/17 13:46 upstream c964ced77262 666f77ed .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/25 21:28 upstream 684a64bf32b6 0b45cac3 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/25 19:19 upstream 684a64bf32b6 0b45cac3 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/23 00:34 upstream af9c191ac2a0 6f888b75 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/22 18:10 upstream 88264981f208 6f888b75 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/16 09:39 upstream 98f7e32f20d2 08d8a733 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/12/05 23:02 linux-next af2ea8ab7a54 6e50d07b .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/05/30 17:29 upstream 4a4be1ad3a6e 34889ee3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/06/09 13:17 linux-next d35b2284e966 82c05ab8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/03/27 11:38 upstream 1e1ba8d23dae 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/03/26 22:36 upstream 2df0c02dab82 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/26 18:43 upstream 2df0c02dab82 20510e88 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/25 06:07 upstream 2f2d52945852 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/25 04:46 upstream 2f2d52945852 875573af .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/19 13:48 upstream 81e4f8d68c66 8d0a2921 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: Bad rss-counter state
2025/03/12 00:26 upstream 0b46b049d6ec ee70e6db .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/10 10:08 upstream 80e54e84911a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/10 04:51 upstream 80e54e84911a 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/09 22:40 upstream 1110ce6a1e34 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/09 20:34 upstream 1110ce6a1e34 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/08 04:23 upstream 21e4543a2e2f 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/03/07 13:48 upstream 00a7d39898c8 7e3bd60d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/03/06 21:40 upstream 848e07631744 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/06 05:08 upstream bb2281fb05e5 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/03 20:31 upstream 7eb172143d55 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/03/03 10:27 upstream 7eb172143d55 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/27 11:49 upstream 5394eea10651 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/27 06:26 upstream 5394eea10651 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/26 22:56 upstream 5394eea10651 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/25 18:15 upstream 2a1944bff549 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/25 15:17 upstream d082ecbc71e9 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/24 04:26 upstream d082ecbc71e9 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/23 20:03 upstream 27102b38b8ca d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/23 12:16 upstream 27102b38b8ca d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/22 22:08 upstream 5cf80612d3f7 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/20 00:46 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/19 09:24 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: Bad rss-counter state
2025/02/19 00:44 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2024/05/12 05:34 upstream cf87f46fd34d 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2024/05/08 07:30 upstream dccb07f2914c 4cf3f9b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/20 03:38 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/12 04:32 upstream 09fbf3d50205 f2baddf5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream BUG: Bad rss-counter state
2025/02/19 14:46 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/05/25 03:24 upstream 02c438bbfffe a10a183e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/11/24 08:41 net fcc79e1714e8 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce BUG: Bad rss-counter state
2025/01/14 23:16 bpf-next be339ddf9e39 7315a7cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce BUG: Bad rss-counter state
2025/02/11 20:57 linux-next df5d6180169a f2baddf5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/03/28 03:41 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a2392f333575 6c09fb82 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/27 02:14 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a2392f333575 89d30d73 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/22 10:18 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a2392f333575 c6512ef7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/19 05:54 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b5737d35364f 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/18 22:21 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b5737d35364f 22a6c2b1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/17 19:52 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a5618886fdab 948c34e4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/16 21:41 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a5618886fdab e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/14 20:32 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 059f6cbcfa70 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/14 19:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 059f6cbcfa70 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/14 04:04 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 059f6cbcfa70 e2826670 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/09 19:01 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 77c95b8c7a16 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/09 09:26 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 77c95b8c7a16 163f510d .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/06 14:13 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 14d05f12084d 831e3629 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/05 07:02 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/04 23:03 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/04 19:49 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/04 11:29 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/03 06:37 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/03 03:11 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/03/02 19:28 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci e056da87c780 c3901742 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/02/27 16:20 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a1c24ab82279 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/02/26 18:59 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a1c24ab82279 6a8fcbc4 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/02/26 02:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a1c24ab82279 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2025/02/25 19:47 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a1c24ab82279 d34966d1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/05/04 21:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 78186bd77b47 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
* Struck through repros no longer work on HEAD.