bisecting fixing commit since c98875d930e915d01e8c40c7d3c16f00b3c8abe1 building syzkaller on b617407b25b37a7a8efa47127005d1f20dd0abe1 testing commit c98875d930e915d01e8c40c7d3c16f00b3c8abe1 with gcc (GCC) 8.1.0 kernel signature: dd51247a4b4aa198fa722d5b5e11c67f0f4adcac all runs: crashed: WARNING in __vm_enough_memory testing current HEAD 672481c2deffb371d8a7dfdc009e44c09864a869 testing commit 672481c2deffb371d8a7dfdc009e44c09864a869 with gcc (GCC) 8.1.0 kernel signature: 98fe49333c0f453da7bd18fff60f66c00f36e809 all runs: crashed: WARNING in __vm_enough_memory revisions tested: 2, total time: 28m38.191775535s (build: 20m50.470702745s, test: 6m33.298553785s) the crash still happens on HEAD commit msg: Linux 4.19.91 crash: WARNING in __vm_enough_memory audit: type=1400 audit(1577597269.773:41): avc: denied { map } for pid=6962 comm="syz-executor.2" path="/dev/ashmem" dev="devtmpfs" ino=16718 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 8021q: adding VLAN 0 to HW filter on device batadv0 ------------[ cut here ]------------ memory commitment underflow WARNING: CPU: 0 PID: 6964 at mm/util.c:652 __vm_enough_memory+0x3c3/0x4b0 mm/util.c:650 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 6964 Comm: blkid Not tainted 4.19.91-syzkaller #0 IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x123/0x177 lib/dump_stack.c:118 IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready panic+0x1cd/0x387 kernel/panic.c:186 __warn.cold.8+0x1b/0x3c kernel/panic.c:541 report_bug+0x1a4/0x200 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:178 [inline] do_error_trap+0x200/0x350 arch/x86/kernel/traps.c:296 kobject: 'loop5' (00000000f3abd34c): kobject_uevent_env do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:316 invalid_op+0x14/0x20 arch/x86/entry/entry_64.S:1037 RIP: 0010:__vm_enough_memory+0x3c3/0x4b0 mm/util.c:650 Code: ea 02 48 29 d0 e9 3b ff ff ff 80 3d bd ff 2a 07 00 0f 85 ec fc ff ff 48 c7 c7 a0 77 d1 86 c6 05 a9 ff 2a 07 01 e8 90 70 b7 ff <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 RSP: 0018:ffff88808d9bfa28 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffffffff8801afc0 RCX: 1ffff1101113ed41 RDX: 1ffffffff0fe4131 RSI: ffff8880889f69e8 RDI: 0000000000000282 RBP: ffff88808d9bfa60 R08: ffff8880889f6a08 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000020 R13: ffff88809999d6c0 R14: 0000000000000001 R15: fff8000000012817 IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready security_vm_enough_memory_mm+0x78/0xa0 security/security.c:338 acct_stack_growth mm/mmap.c:2288 [inline] expand_downwards+0x421/0xab0 mm/mmap.c:2430 expand_stack+0x9/0x10 mm/mmap.c:2505 kobject: 'loop5' (00000000f3abd34c): fill_kobj_path: path = '/devices/virtual/block/loop5' setup_arg_pages+0x4ab/0x720 fs/exec.c:790 load_elf_binary+0x9c4/0x4d40 fs/binfmt_elf.c:887 search_binary_handler+0x130/0x640 fs/exec.c:1653 exec_binprm fs/exec.c:1695 [inline] __do_execve_file.isra.31+0x10d8/0x1dc0 fs/exec.c:1819 do_execveat_common fs/exec.c:1866 [inline] do_execve fs/exec.c:1883 [inline] __do_sys_execve fs/exec.c:1964 [inline] __se_sys_execve fs/exec.c:1959 [inline] __x64_sys_execve+0x8a/0xb0 fs/exec.c:1959 do_syscall_64+0xd6/0x4e0 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7fc4c6b04207 Code: Bad RIP value. RSP: 002b:00007ffd28a889c8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fc4c6b04207 RDX: 0000000001faa8f0 RSI: 00007ffd28a88ac0 RDI: 00007ffd28a89ad0 RBP: 0000000000625500 R08: 0000000000001ab1 R09: 0000000000001ab1 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000001faa8f0 R13: 0000000000000007 R14: 0000000001e19030 R15: 0000000000000005 Kernel Offset: disabled Rebooting in 86400 seconds..