bisecting fixing commit since 414510bc00a5fc954d8340c170083f518d09aa55 building syzkaller on a60cb4cd840ce786236a00480e8bb1025e0c5fef testing commit 414510bc00a5fc954d8340c170083f518d09aa55 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 5dc0f4391d1614c7cd0c320094f054e8c027bed210c53960afe66d96bcdde368 run #0: crashed: kernel BUG in rxrpc_disconnect_client_call run #1: crashed: general protection fault in rxrpc_get_skb run #2: crashed: KASAN: use-after-free Read in rxrpc_get_skb run #3: crashed: general protection fault in rxrpc_get_skb run #4: crashed: BUG: unable to handle kernel NULL pointer dereference in rxrpc_send_data_packet run #5: crashed: kernel BUG in rxrpc_destroy_all_locals run #6: crashed: kernel BUG in rxrpc_destroy_all_locals run #7: crashed: kernel BUG in rxrpc_destroy_all_locals run #8: crashed: kernel BUG in rxrpc_destroy_all_locals run #9: crashed: kernel BUG in rxrpc_destroy_all_locals run #10: crashed: kernel BUG in rxrpc_destroy_all_locals run #11: crashed: kernel BUG in rxrpc_destroy_all_locals run #12: crashed: kernel BUG in rxrpc_destroy_all_locals run #13: crashed: kernel BUG in rxrpc_destroy_all_locals run #14: crashed: kernel BUG in rxrpc_destroy_all_locals run #15: crashed: kernel BUG in rxrpc_destroy_all_locals run #16: crashed: kernel BUG in rxrpc_destroy_all_locals run #17: crashed: kernel BUG in rxrpc_destroy_all_locals run #18: crashed: kernel BUG in rxrpc_destroy_all_locals run #19: crashed: kernel BUG in rxrpc_destroy_all_locals testing current HEAD 46914f96189be290174e378c6bf9ccadfdb9ca1e testing commit 46914f96189be290174e378c6bf9ccadfdb9ca1e compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 83af3d3343d06c32bee5cc412071af78669702f43fdbf2b9ccce86296cf5efea all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 33m4.840001068s (build: 19m41.138040757s, test: 12m42.218222488s) the crash still happens on HEAD commit msg: Linux 4.14.243 crash: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1