bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 4a77ae0bdc5cd75ebe88ce7c896aae6bbf457a29 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: efcb65b8ce1fb0278367cdac80051f73ebf3b00aab5ee11a11b996392ef52565 run #0: crashed: KASAN: use-after-free Read in vgem_fence_attach_ioctl run #1: crashed: general protection fault in vgem_fence_attach_ioctl run #2: crashed: general protection fault in vgem_fence_attach_ioctl run #3: crashed: WARNING in mutex_destroy run #4: crashed: general protection fault in vgem_fence_attach_ioctl run #5: crashed: general protection fault in vgem_fence_attach_ioctl run #6: crashed: general protection fault in vgem_fence_attach_ioctl run #7: crashed: WARNING in mutex_destroy run #8: crashed: general protection fault in vgem_fence_attach_ioctl run #9: crashed: general protection fault in vgem_fence_attach_ioctl run #10: crashed: general protection fault in vgem_fence_attach_ioctl run #11: crashed: general protection fault in vgem_fence_attach_ioctl run #12: crashed: WARNING in mutex_destroy run #13: crashed: WARNING in mutex_destroy run #14: crashed: general protection fault in vgem_fence_attach_ioctl run #15: crashed: general protection fault in vgem_fence_attach_ioctl run #16: crashed: general protection fault in vgem_fence_attach_ioctl run #17: crashed: general protection fault in vgem_fence_attach_ioctl run #18: OK run #19: OK testing current HEAD 424a46ea058e160ae6fdd0693092ba79da533f26 testing commit 424a46ea058e160ae6fdd0693092ba79da533f26 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: a31386899a1c7288f161d6a6c223088cfe7990596a9b900acbf3e8fc4ba08212 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 35m32.281049493s (build: 19m56.604185215s, test: 15m5.620993149s) the crash still happens on HEAD commit msg: Linux 4.14.288 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout