BUG: Bad rss-counter state mm:000000005513cd90 type:MM_ANONPAGES val:7 Comm:syz-executor.0 Pid:10586 BUG: Bad rss-counter state mm:000000005513cd90 type:MM_SWAPENTS val:-2 Comm:syz-executor.0 Pid:10586 BUG: Bad rss-counter state mm:000000005513cd90 type:MM_SHMEMPAGES val:-2 Comm:syz-executor.0 Pid:10586 BUG: Bad rss-counter state mm:00000000e0c08368 type:MM_FILEPAGES val:-7407902634 Comm:modprobe Pid:10637 BUG: Bad rss-counter state mm:00000000e0c08368 type:MM_ANONPAGES val:1456 Comm:modprobe Pid:10637 BUG: Bad rss-counter state mm:00000000acb27197 type:MM_SHMEMPAGES val:6 Comm:systemd-udevd Pid:10648 kmemleak: Found object by alias at 0x607f1a6399ac CPU: 1 UID: 0 PID: 10657 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xca/0x120 __lookup_object+0x94/0xb0 delete_object_full+0x27/0x70 free_percpu+0x30/0x1160 futex_hash_free+0x38/0xc0 mmput+0x2d3/0x390 do_exit+0x79d/0x2970 do_group_exit+0xd3/0x2a0 __x64_sys_exit_group+0x3e/0x50 x64_sys_call+0x18c5/0x18d0 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff49c5d3b19 Code: Unable to access opcode bytes at 0x7ff49c5d3aef. RSP: 002b:00007ffda5b857d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007ff49c5d3b19 RDX: 00007ff49c58672b RSI: ffffffffffffffbc RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000001b2d62001c R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffda5b858c0 kmemleak: Object (percpu) 0x607f1a6399a8 (size 16): kmemleak: comm "syz-executor.2", pid 287, jiffies 4295586244 kmemleak: min_count = 1 kmemleak: count = 0 kmemleak: flags = 0x21 kmemleak: checksum = 0 kmemleak: backtrace: pcpu_alloc_noprof+0x87a/0x1170 __percpu_counter_init_many+0x44/0x360 mm_init+0xcac/0x1170 copy_process+0x3ab7/0x73c0 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f