bisecting fixing commit since 670d6552eda8ff0c5f396d3d6f0174237917c66c building syzkaller on a8529b82fb3bb45832b08a099e7eb51707da9b37 testing commit 670d6552eda8ff0c5f396d3d6f0174237917c66c compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 2dc16ce4bbc2b7b70a51d052234df78c5fa78f18995659695dff9985db49263a all runs: crashed: KASAN: use-after-free Read in ip_tunnel_xmit testing current HEAD 501eec4f9e138b958fc7438e7a745c0d6a7c68b3 testing commit 501eec4f9e138b958fc7438e7a745c0d6a7c68b3 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 3ec6f42accb4e3795131c1bf1c74f717c24fabba7aa6e77db863517651b02405 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 26m43.479751919s (build: 19m58.127091103s, test: 5m59.76516908s) the crash still happens on HEAD commit msg: Linux 4.14.281 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout