syzbot


BUG: Bad rss-counter state (5)

Status: upstream: reported C repro on 2024/05/13 10:19
Subsystems: bcachefs mm
[Documentation on labels]
Reported-by: syzbot+f2bbbb592debc978d46d@syzkaller.appspotmail.com
First crash: 291d, last: 19m
Cause bisection: introduced by (bisect log) :
commit 1c05047ad01693ad92bdf8347fad3b5c2b25e8bb
Author: Baolin Wang <baolin.wang@linux.alibaba.com>
Date: Tue Jun 4 10:17:45 2024 +0000

  mm: memory: extend finish_fault() to support large folio

Crash: KASAN: slab-use-after-free Read in finish_fault (log)
Repro: C syz .config
  
Discussions (8)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (Feb 2025) 0 (1) 2025/02/05 12:44
[syzbot] Monthly mm report (Jan 2025) 0 (1) 2025/01/06 10:01
[syzbot] Monthly bcachefs report (Dec 2024) 0 (1) 2024/12/16 09:45
[syzbot] Monthly bcachefs report (Nov 2024) 0 (1) 2024/11/15 10:49
[syzbot] Monthly mm report (Aug 2024) 0 (1) 2024/08/02 16:15
[syzbot] Monthly mm report (Jul 2024) 0 (1) 2024/07/01 10:28
Re: [syzbot] BUG: Bad rss-counter state (5) 1 (2) 2024/06/14 16:18
[syzbot] BUG: Bad rss-counter state (5) 2 (6) 2024/06/14 15:50
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: Bad rss-counter state syz 20 2705d 2668d 0/28 closed as invalid on 2017/10/31 09:42
upstream BUG: Bad rss-counter state (2) kernel 11 2618d 2620d 0/28 closed as invalid on 2018/02/01 12:07
linux-4.19 BUG: Bad rss-counter state C error 18 1238d 1783d 0/1 upstream: reported C repro on 2020/04/03 02:55
upstream BUG: Bad rss-counter state (4) C done unreliable 124 647d 1738d 0/28 auto-obsoleted due to no activity on 2023/08/23 09:04
linux-4.14 BUG: Bad rss-counter state (2) 4 1439d 1536d 0/1 auto-closed as invalid on 2021/07/10 23:34
linux-4.14 BUG: Bad rss-counter state 1 1895d 1895d 0/1 auto-closed as invalid on 2020/04/11 05:38
upstream BUG: Bad rss-counter state (3) C unreliable done 438 2032d 2498d 15/28 fixed on 2020/01/31 18:49
android-54 BUG: Bad rss-counter state C 7 13d 1745d 0/2 upstream: reported C repro on 2020/05/11 02:06
android-49 BUG: Bad rss-counter state 11325 1904d 2138d 0/3 auto-closed as invalid on 2020/03/03 11:04
Last patch testing requests (11)
Created Duration User Patch Repo Result
2024/10/13 17:00 15m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 17:00 15m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 17:00 16m retest repro upstream report log
2024/10/13 15:33 15m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/10/13 15:33 16m retest repro upstream report log
2024/06/14 15:51 25m baolin.wang@linux.alibaba.com git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable OK log

Sample crash report:
BUG: Bad rss-counter state mm:ffff88802176da00 type:MM_ANONPAGES val:1

Crashes (2258):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2025/02/04 00:24 upstream 2014c95afece a21a8419 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2024/09/29 08:32 upstream 3efc57369a0c ba29ff75 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/28 08:41 upstream e477dba5442c 440b26ec .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/26 08:39 upstream 11a299a7933e 0d19f247 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/24 02:22 upstream 18ba6034468e 89298aad .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/23 15:52 upstream de5cb0dcb74c 49f9c2d2 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/12/26 02:00 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/26 00:33 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/25 23:51 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/12/25 23:13 linux-next 8155b4ef3466 444551c4 .config strace log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/02/18 04:52 upstream 2408a807bfc3 429ea007 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/11/15 19:06 upstream cfaaa7d010d1 eeafb645 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/30 17:47 upstream c1e939a21eb1 f3a00767 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/28 06:40 upstream ea1fda89f5b2 65e8686b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/28 00:18 upstream ea1fda89f5b2 65e8686b .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/10/17 13:46 upstream c964ced77262 666f77ed .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/25 21:28 upstream 684a64bf32b6 0b45cac3 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/25 19:19 upstream 684a64bf32b6 0b45cac3 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/23 00:34 upstream af9c191ac2a0 6f888b75 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/22 18:10 upstream 88264981f208 6f888b75 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro #1] [mounted in repro #2] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/09/16 09:39 upstream 98f7e32f20d2 08d8a733 .config console log report syz / log [disk image (non-bootable)] [vmlinux] [kernel image] [mounted in repro] ci-snapshot-upstream-root BUG: Bad rss-counter state
2024/12/05 23:02 linux-next af2ea8ab7a54 6e50d07b .config console log report syz / log [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/05/30 17:29 upstream 4a4be1ad3a6e 34889ee3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/06/09 13:17 linux-next d35b2284e966 82c05ab8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/02/19 22:00 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/19 20:45 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/19 18:50 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/19 18:47 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/19 12:01 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/19 09:24 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-qemu-gce-upstream-auto BUG: Bad rss-counter state
2025/02/19 08:16 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/19 06:44 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/19 05:38 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/19 00:44 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2025/02/18 23:44 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 22:43 upstream 6537cfb395f3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 21:40 upstream 6537cfb395f3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 17:08 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/18 15:50 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2025/02/18 15:31 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/18 14:09 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 07:52 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 04:33 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/18 01:25 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/18 00:16 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/17 19:29 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/17 17:27 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/17 15:12 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/17 13:46 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/17 12:11 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/17 10:53 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/17 10:20 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/17 06:04 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2025/02/17 03:42 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2025/02/17 00:30 upstream ad1b832bf1cf 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce BUG: Bad rss-counter state
2025/02/16 23:35 upstream ad1b832bf1cf 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-selinux-root BUG: Bad rss-counter state
2025/02/16 11:02 upstream ad1b832bf1cf 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/15 18:29 upstream 7ff71e6d9239 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-badwrites-root BUG: Bad rss-counter state
2024/05/12 05:34 upstream cf87f46fd34d 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2024/05/08 07:30 upstream dccb07f2914c 4cf3f9b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2025/02/19 15:54 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/19 10:38 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/19 10:35 upstream 6537cfb395f3 9a14138f .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/18 18:47 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/18 09:10 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/18 01:34 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 22:52 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 22:07 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 21:53 upstream 2408a807bfc3 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 18:25 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 17:04 upstream 0ad2507d5d93 9be4ace3 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/17 07:05 upstream 0ad2507d5d93 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-386 BUG: Bad rss-counter state
2025/02/19 17:44 upstream 6537cfb395f3 cbd8edab .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root BUG: Bad rss-counter state
2025/02/18 11:41 upstream 2408a807bfc3 c37c7249 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root BUG: Bad rss-counter state
2025/02/18 06:52 upstream 2408a807bfc3 429ea007 .config console log report [disk image (non-bootable)] [vmlinux] [kernel image] ci-snapshot-upstream-root BUG: Bad rss-counter state
2025/02/12 04:32 upstream 09fbf3d50205 f2baddf5 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream BUG: Bad rss-counter state
2025/02/19 14:46 upstream 6537cfb395f3 cbd8edab .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2025/02/18 12:50 upstream 2408a807bfc3 c37c7249 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2025/02/18 09:47 upstream 2408a807bfc3 429ea007 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2025/02/17 08:51 upstream ba643b6d8440 40a34ec9 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/05/25 03:24 upstream 02c438bbfffe a10a183e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/11/24 08:41 net fcc79e1714e8 68da6d95 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-net-this-kasan-gce BUG: Bad rss-counter state
2025/01/14 23:16 bpf-next be339ddf9e39 7315a7cf .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-bpf-next-kasan-gce BUG: Bad rss-counter state
2025/02/11 20:57 linux-next df5d6180169a f2baddf5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2025/02/15 05:22 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci a64dcfb451e2 40a34ec9 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/05/04 21:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 78186bd77b47 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
* Struck through repros no longer work on HEAD.