bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67
building syzkaller on fa79ed2ae1c546ca48519cfcd80d43b51b502750
testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 with gcc (GCC) 8.4.1 20210217
kernel signature: 0fbe3b36b48156dfb0b11a00c3ef062ce35f6528baef4ac31c38260c477c3a17
all runs: crashed: BUG: unable to handle kernel paging request in cfb_imageblit
testing current HEAD ad8397a84e1e425e3f8221638cee2bfa237d9b2c
testing commit ad8397a84e1e425e3f8221638cee2bfa237d9b2c with gcc (GCC) 8.4.1 20210217
kernel signature: 3f75367fbae2fd02d1474809a2b397050111f3ddb534d16e9825fb20fb66eb62
all runs: crashed: unregister_netdevice: waiting for DEV to become free
revisions tested: 2, total time: 29m7.138684112s (build: 22m19.366057345s, test: 6m14.641782202s)
the crash still happens on HEAD
commit msg: Linux 4.14.234
crash: unregister_netdevice: waiting for DEV to become free
Bluetooth: hci0 command 0x0409 tx timeout
Bluetooth: hci2 command 0x0409 tx timeout
Bluetooth: hci1 command 0x0409 tx timeout
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1
Bluetooth: hci5 command 0x0409 tx timeout
Bluetooth: hci4 command 0x0409 tx timeout
Bluetooth: hci3 command 0x0409 tx timeout
Bluetooth: hci1 command 0x041b tx timeout
Bluetooth: hci2 command 0x041b tx timeout
Bluetooth: hci0 command 0x041b tx timeout
Bluetooth: hci3 command 0x041b tx timeout
Bluetooth: hci5 command 0x041b tx timeout
Bluetooth: hci4 command 0x041b tx timeout
Bluetooth: hci0 command 0x040f tx timeout
Bluetooth: hci2 command 0x040f tx timeout
Bluetooth: hci1 command 0x040f tx timeout
Bluetooth: hci4 command 0x040f tx timeout
Bluetooth: hci3 command 0x040f tx timeout
Bluetooth: hci5 command 0x040f tx timeout
Bluetooth: hci1 command 0x0419 tx timeout
Bluetooth: hci2 command 0x0419 tx timeout
Bluetooth: hci0 command 0x0419 tx timeout
Bluetooth: hci5 command 0x0419 tx timeout
Bluetooth: hci3 command 0x0419 tx timeout
Bluetooth: hci4 command 0x0419 tx timeout
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1