Received-SPF: pass (google.com: domain of linux-kernel+bounces-215186-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
Message-ID: <4fc95571-7815-458f-9d34-5109b1be7399@linux.alibaba.com>
Date: Fri, 14 Jun 2024 23:50:58 +0800
Precedence: bulk
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: [syzbot] BUG: Bad rss-counter state (5)
To: syzbot <syzbot+f2bbbb592debc978d46d@syzkaller.appspotmail.com>
Cc: akpm@linux-foundation.org, linux-kernel@vger.kernel.org,
 linux-mm@kvack.org, syzkaller-bugs@googlegroups.com
References: <0000000000007f58de061adb8ea6@google.com>
From: Baolin Wang <baolin.wang@linux.alibaba.com>
In-Reply-To: <0000000000007f58de061adb8ea6@google.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit


On 2024/6/14 23:49, syzbot wrote:
>>
>>
>> On 2024/6/14 23:12, syzbot wrote:
>>> syzbot has bisected this issue to:
>>>
>>> commit 1c05047ad01693ad92bdf8347fad3b5c2b25e8bb
>>> Author: Baolin Wang <baolin.wang@linux.alibaba.com>
>>> Date:   Tue Jun 4 10:17:45 2024 +0000
>>>
>>>       mm: memory: extend finish_fault() to support large folio
>>>
>>> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=106e8e56980000
>>> start commit:   d35b2284e966 Add linux-next specific files for 20240607
>>> git tree:       linux-next
>>> final oops:     https://syzkaller.appspot.com/x/report.txt?x=126e8e56980000
>>> console output: https://syzkaller.appspot.com/x/log.txt?x=146e8e56980000
>>> kernel config:  https://syzkaller.appspot.com/x/.config?x=d8bf5cd6bcca7343
>>> dashboard link: https://syzkaller.appspot.com/bug?extid=f2bbbb592debc978d46d
>>> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=17f57a36980000
>>> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=10a57696980000
>>>
>>> Reported-by: syzbot+f2bbbb592debc978d46d@syzkaller.appspotmail.com
>>> Fixes: 1c05047ad016 ("mm: memory: extend finish_fault() to support large folio")
>>>
>>> For information about bisection process see: https://goo.gl/tpsmEJ#bisection
>>
>> Thanks. Please try the fix in mm-unstable branch
>>
>> #syz test:
> 
> want either no args or 2 args (repo, branch), got 1
> 
>> https://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git/commit/?h=mm-unstable&id=4135d2688b42f097f78062ef328f3056db32e3a0

#syz test: git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm.git 
mm-unstable