syzbot


BUG: Bad rss-counter state (5)

Status: upstream: reported C repro on 2024/05/13 10:19
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+f2bbbb592debc978d46d@syzkaller.appspotmail.com
First crash: 79d, last: 4d04h
Cause bisection: introduced by (bisect log) :
commit 1c05047ad01693ad92bdf8347fad3b5c2b25e8bb
Author: Baolin Wang <baolin.wang@linux.alibaba.com>
Date: Tue Jun 4 10:17:45 2024 +0000

  mm: memory: extend finish_fault() to support large folio

Crash: KASAN: slab-use-after-free Read in finish_fault (log)
Repro: C syz .config
  
Discussions (3)
Title Replies (including bot) Last reply
[syzbot] Monthly mm report (Jul 2024) 0 (1) 2024/07/01 10:28
Re: [syzbot] BUG: Bad rss-counter state (5) 1 (2) 2024/06/14 16:18
[syzbot] BUG: Bad rss-counter state (5) 2 (6) 2024/06/14 15:50
Similar bugs (9)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream BUG: Bad rss-counter state syz 20 2493d 2456d 0/27 closed as invalid on 2017/10/31 09:42
upstream BUG: Bad rss-counter state (2) kernel 11 2406d 2408d 0/27 closed as invalid on 2018/02/01 12:07
linux-4.19 BUG: Bad rss-counter state C error 18 1026d 1571d 0/1 upstream: reported C repro on 2020/04/03 02:55
upstream BUG: Bad rss-counter state (4) C done unreliable 124 435d 1526d 0/27 auto-obsoleted due to no activity on 2023/08/23 09:04
linux-4.14 BUG: Bad rss-counter state (2) 4 1227d 1324d 0/1 auto-closed as invalid on 2021/07/10 23:34
linux-4.14 BUG: Bad rss-counter state 1 1683d 1683d 0/1 auto-closed as invalid on 2020/04/11 05:38
upstream BUG: Bad rss-counter state (3) C unreliable done 438 1820d 2286d 15/27 fixed on 2020/01/31 18:49
android-54 BUG: Bad rss-counter state C 5 33d 1533d 0/2 upstream: reported C repro on 2020/05/11 02:06
android-49 BUG: Bad rss-counter state 11325 1692d 1926d 0/3 auto-closed as invalid on 2020/03/03 11:04
Last patch testing requests (1)
Created Duration User Patch Repo Result
2024/06/14 15:51 25m baolin.wang@linux.alibaba.com git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git mm-unstable OK log

Sample crash report:
BUG: Bad rss-counter state mm:00000000b0f34aa6 type:MM_SWAPENTS val:-78

Crashes (786):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/30 17:29 upstream 4a4be1ad3a6e 34889ee3 .config console log report syz / log C [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/06/09 13:17 linux-next d35b2284e966 82c05ab8 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/07/18 16:59 upstream b1bc554e009e 7403ec00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2024/06/18 05:26 upstream 2ccbdf43d5e7 1f11cfd7 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2024/06/18 00:02 upstream 2ccbdf43d5e7 1f11cfd7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2024/06/10 03:59 upstream 771ed66105de 82c05ab8 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-smack-root BUG: Bad rss-counter state
2024/05/12 05:34 upstream cf87f46fd34d 9026e142 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-kasan-gce-root BUG: Bad rss-counter state
2024/05/08 07:30 upstream dccb07f2914c 4cf3f9b3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-upstream-fs BUG: Bad rss-counter state
2024/06/26 11:04 upstream 55027e689933 dec8bc94 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/26 08:09 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/26 05:28 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/26 03:58 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/26 02:45 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 23:41 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 22:19 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 21:17 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 18:48 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 17:44 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 16:04 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 14:34 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 11:17 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 05:58 upstream 55027e689933 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/25 01:05 upstream 626737a5791b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 22:26 upstream 626737a5791b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 20:40 upstream 626737a5791b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 19:12 upstream 626737a5791b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 14:19 upstream f2661062f16b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 13:56 upstream f2661062f16b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/24 02:32 upstream f2661062f16b c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 22:29 upstream 5f583a3162ff c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 20:30 upstream 5f583a3162ff c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 16:13 upstream 5f583a3162ff c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 14:44 upstream 5f583a3162ff c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 11:58 upstream 5f583a3162ff c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 08:27 upstream 563a50672d8a c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/23 02:18 upstream 563a50672d8a c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 22:52 upstream 563a50672d8a c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 21:32 upstream 563a50672d8a c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 18:11 upstream 35bb670d65fc c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 15:42 upstream 35bb670d65fc c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 13:33 upstream 35bb670d65fc c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 09:13 upstream 35bb670d65fc c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 06:59 upstream 66cc544fd75c c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/22 04:28 upstream 66cc544fd75c c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/21 23:25 upstream 66cc544fd75c c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/21 18:48 upstream 66cc544fd75c c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/21 14:12 upstream 50736169ecc8 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/21 12:45 upstream 50736169ecc8 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/06/21 11:02 upstream 50736169ecc8 c2e07261 .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu-upstream-386 BUG: Bad rss-counter state
2024/05/25 03:24 upstream 02c438bbfffe a10a183e .config console log report info [disk image (non-bootable)] [vmlinux] [kernel image] ci-qemu2-arm64-mte BUG: Bad rss-counter state
2024/06/17 09:05 linux-next a957267fa7e9 f429ab00 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-linux-next-kasan-gce-root BUG: Bad rss-counter state
2024/07/07 05:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 8a03d70c27fc bc4ebbb5 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/07/02 10:42 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci fdd6064ff31c 8373af66 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/06/30 09:05 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 5e456a31d1ac 757f06b1 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/06/28 02:42 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b4a3f9b4863a b62c7d46 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/06/27 17:34 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci b4a3f9b4863a 5c045c04 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/06/23 13:24 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci ac2193b4b460 edc5149a .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
2024/05/04 21:17 git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git for-kernelci 78186bd77b47 610f2a54 .config console log report info [disk image] [vmlinux] [kernel image] ci-upstream-gce-arm64 BUG: Bad rss-counter state
* Struck through repros no longer work on HEAD.