bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 4a77ae0bdc5cd75ebe88ce7c896aae6bbf457a29 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 9fd407c8c004379b4da78f28ce295db1718787e5ff81585950cc1f181337d758 run #0: crashed: general protection fault in vgem_fence_attach_ioctl run #1: crashed: KASAN: use-after-free Read in reservation_object_reserve_shared run #2: crashed: WARNING in mutex_destroy run #3: crashed: general protection fault in vgem_fence_attach_ioctl run #4: crashed: WARNING in mutex_destroy run #5: crashed: general protection fault in vgem_fence_attach_ioctl run #6: crashed: WARNING in mutex_destroy run #7: crashed: general protection fault in vgem_fence_attach_ioctl run #8: crashed: general protection fault in vgem_fence_attach_ioctl run #9: crashed: general protection fault in vgem_fence_attach_ioctl run #10: crashed: general protection fault in vgem_fence_attach_ioctl run #11: crashed: WARNING in mutex_destroy run #12: crashed: general protection fault in vgem_fence_attach_ioctl run #13: crashed: general protection fault in vgem_fence_attach_ioctl run #14: OK run #15: OK run #16: OK run #17: crashed: KASAN: use-after-free Read in reservation_object_test_signaled_rcu run #18: OK run #19: OK testing current HEAD dffb5c6ff09c51ed585e3e7665143df103867fc8 testing commit dffb5c6ff09c51ed585e3e7665143df103867fc8 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 55c964a4fcff038d0265d3e077833c908f4f699d563f01942f67e882c909dc0d all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 34m0.856696051s (build: 18m59.171717327s, test: 14m24.415343856s) the crash still happens on HEAD commit msg: Linux 4.14.280 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout