bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 6bfdbe8950b22b1c832478bd397754f3108df040 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 0ca95f5097953367f1f0bbcdfdfe1bb924b2c8258ffef3482a3c3c2a1c436e02 all runs: crashed: KASAN: use-after-free Read in hci_chan_del testing current HEAD e3a56aaade89bc89f33baec11b12538fc22536e2 testing commit e3a56aaade89bc89f33baec11b12538fc22536e2 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: fa21896ba2987915bd056cbca84daf6f29ff5a7ca2fc08f705cc7586d3779d75 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 21m42.503659713s (build: 14m50.542784988s, test: 6m19.598729786s) the crash still happens on HEAD commit msg: Linux 4.14.277 crash: unregister_netdevice: waiting for DEV to become free IPVS: ftp: loaded support on port[0] = 21 can: request_module (can-proto-0) failed. can: request_module (can-proto-0) failed. can: request_module (can-proto-0) failed. unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout