VMsize is the "address space" that this process uses: the number of addresses available. These addresses should not have physical memory attached to them. (The attached physical memory is an RSS digit)
You can verify this by allocating a chunk of memory with p = malloc(4 * 1024 * 1024); and doing nothing for *p : VmSize will increase by 1K pages, but RSS will be (roughly) the same. (your program will have more addressable memory, but it does not access it, so memory does not need to be attached)
source share