bisecting fixing commit since 14b58326976de6ef3998eefec1dd7f8b38b97a75 building syzkaller on ff51e5229e0ee846d2fd687cb0dbca13de758c66 testing commit 14b58326976de6ef3998eefec1dd7f8b38b97a75 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 007103c91300ef3bcf8cd1bfd86e133c2e90bb6eb9a237bb8001eb592b27bccb run #0: crashed: BUG: corrupted list in l2cap_chan_put run #1: crashed: BUG: corrupted list in l2cap_chan_put run #2: crashed: BUG: corrupted list in l2cap_chan_put run #3: crashed: BUG: corrupted list in l2cap_chan_put run #4: crashed: KASAN: use-after-free Read in l2cap_recv_frame run #5: crashed: BUG: corrupted list in l2cap_chan_put run #6: crashed: BUG: corrupted list in l2cap_chan_put run #7: crashed: BUG: corrupted list in l2cap_chan_put run #8: crashed: BUG: corrupted list in l2cap_chan_put run #9: crashed: BUG: corrupted list in l2cap_chan_put run #10: crashed: BUG: corrupted list in l2cap_chan_put run #11: crashed: BUG: corrupted list in l2cap_chan_put run #12: crashed: KASAN: use-after-free Read in l2cap_sock_shutdown run #13: crashed: BUG: corrupted list in l2cap_chan_put run #14: crashed: BUG: corrupted list in l2cap_chan_put run #15: crashed: KASAN: use-after-free Read in l2cap_chan_put run #16: crashed: BUG: corrupted list in l2cap_chan_put run #17: crashed: BUG: corrupted list in l2cap_chan_put run #18: crashed: BUG: corrupted list in l2cap_chan_put run #19: crashed: BUG: corrupted list in l2cap_chan_put testing current HEAD 964f3712e6a7447d9d3203f2be3f6c50e78ea179 testing commit 964f3712e6a7447d9d3203f2be3f6c50e78ea179 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b646dd61d1636b21d65725e5631a14834a3913b3a0500ff0b9ed402fef6fb8a9 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 33m22.202180927s (build: 20m39.649770245s, test: 12m14.320196409s) the crash still happens on HEAD commit msg: Linux 4.14.240 crash: unregister_netdevice: waiting for DEV to become free can: request_module (can-proto-0) failed. can: request_module (can-proto-0) failed. unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1