bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 5abc3f1ab298244473b613c289f1536e366fcf04 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fa3df96ff2bb5a850665d0b7773fbd47e6fb6e92fddad287dd7b5d0b8c6b9e87 run #0: crashed: KASAN: use-after-free Read in diFree run #1: crashed: KASAN: use-after-free Read in diFree run #2: crashed: KASAN: use-after-free Read in diFree run #3: crashed: KASAN: use-after-free Read in diFree run #4: crashed: general protection fault in diFree run #5: crashed: general protection fault in diFree run #6: crashed: KASAN: use-after-free Read in diFree run #7: crashed: KASAN: use-after-free Read in diFree run #8: crashed: KASAN: use-after-free Read in diFree run #9: crashed: KASAN: use-after-free Read in diFree run #10: crashed: general protection fault in diFree run #11: crashed: general protection fault in diFree run #12: crashed: general protection fault in diFree run #13: crashed: KASAN: use-after-free Read in diFree run #14: crashed: general protection fault in diFree run #15: crashed: KASAN: use-after-free Read in diFree run #16: crashed: general protection fault in diFree run #17: crashed: general protection fault in diFree run #18: crashed: general protection fault in diFree run #19: crashed: KASAN: use-after-free Read in diFree testing current HEAD cd529693461026636f76d0395a42cb2439bbd368 testing commit cd529693461026636f76d0395a42cb2439bbd368 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fb61b7f3701c3d87436a573af762323f50d62ae37e7cc04a01ff732c1b0c1fd0 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 25m3.384069138s (build: 17m59.349289295s, test: 6m34.830605767s) the crash still happens on HEAD commit msg: Linux 4.14.253 crash: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci1 command 0x0409 tx timeout Bluetooth: hci0 command 0x0409 tx timeout Bluetooth: hci4 command 0x0409 tx timeout Bluetooth: hci2 command 0x0409 tx timeout Bluetooth: hci3 command 0x0409 tx timeout Bluetooth: hci5 command 0x0409 tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci5 command 0x041b tx timeout Bluetooth: hci3 command 0x041b tx timeout Bluetooth: hci2 command 0x041b tx timeout Bluetooth: hci4 command 0x041b tx timeout Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci5 command 0x040f tx timeout Bluetooth: hci1 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci3 command 0x040f tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci1 command 0x0419 tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci3 command 0x0419 tx timeout Bluetooth: hci2 command 0x0419 tx timeout Bluetooth: hci4 command 0x0419 tx timeout Bluetooth: hci5 command 0x0419 tx timeout