bisecting fixing commit since a35d65bedfbc38cffe2701798cd6810bbdf07892 building syzkaller on 6e821dbf79b49f1952fc147f237aa0f396790edc testing commit a35d65bedfbc38cffe2701798cd6810bbdf07892 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 8fa1a95d46426504dd50ad7b758f70bf8f959aefe7fbd07a87b7b290c72e20dc run #0: crashed: kernel BUG in vhost_get_vq_desc run #1: crashed: unregister_netdevice: waiting for DEV to become free run #2: crashed: unregister_netdevice: waiting for DEV to become free run #3: crashed: kernel BUG in vhost_get_vq_desc run #4: crashed: kernel BUG in vhost_get_vq_desc run #5: crashed: unregister_netdevice: waiting for DEV to become free run #6: crashed: unregister_netdevice: waiting for DEV to become free run #7: crashed: unregister_netdevice: waiting for DEV to become free run #8: crashed: unregister_netdevice: waiting for DEV to become free run #9: crashed: unregister_netdevice: waiting for DEV to become free run #10: crashed: unregister_netdevice: waiting for DEV to become free run #11: crashed: kernel BUG in vhost_get_vq_desc run #12: crashed: unregister_netdevice: waiting for DEV to become free run #13: crashed: kernel BUG in vhost_get_vq_desc run #14: crashed: unregister_netdevice: waiting for DEV to become free run #15: crashed: unregister_netdevice: waiting for DEV to become free run #16: crashed: unregister_netdevice: waiting for DEV to become free run #17: crashed: unregister_netdevice: waiting for DEV to become free run #18: crashed: unregister_netdevice: waiting for DEV to become free run #19: crashed: unregister_netdevice: waiting for DEV to become free testing current HEAD 004bfaafc45ccc95366b37c9b9e7844cd5156368 testing commit 004bfaafc45ccc95366b37c9b9e7844cd5156368 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: cfc49b37cf230b49bc6d47ad9de026d62b3f5f14f03ed82e5678286f53967ec7 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 23m3.777008619s (build: 15m51.427072328s, test: 6m50.156596313s) the crash still happens on HEAD commit msg: Linux 4.14.273 crash: unregister_netdevice: waiting for DEV to become free IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready syz-executor.0 (7947) used greatest stack depth: 24160 bytes left can: request_module (can-proto-0) failed. can: request_module (can-proto-0) failed. can: request_module (can-proto-0) failed. unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1