bisecting fixing commit since 6a24ca2506d64598eac5d5219e99acca9bde4ca5
building syzkaller on 6436ce4bcd8e2c7dcca0b171ac91f51e96d973f8
testing commit 6a24ca2506d64598eac5d5219e99acca9bde4ca5
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: b3b4cd740ef28de52cc80db85db10b419a2b8659df67f2a31c13c2a13e33becc
run #0: crashed: WARNING: ODEBUG bug in bt_host_release
run #1: crashed: WARNING: ODEBUG bug in bt_host_release
run #2: crashed: general protection fault in __queue_work
run #3: OK
run #4: crashed: WARNING: ODEBUG bug in bt_host_release
run #5: crashed: WARNING: ODEBUG bug in bt_host_release
run #6: crashed: WARNING: ODEBUG bug in bt_host_release
run #7: crashed: KASAN: use-after-free Read in __queue_work
run #8: crashed: WARNING: ODEBUG bug in bt_host_release
run #9: crashed: general protection fault in __queue_work
run #10: crashed: WARNING: ODEBUG bug in netdev_freemem
run #11: crashed: WARNING: ODEBUG bug in bt_host_release
run #12: OK
run #13: OK
run #14: OK
run #15: OK
run #16: OK
run #17: OK
run #18: OK
run #19: OK
testing current HEAD fa33f9094f36943ea32f7fbe323293b62e96151d
testing commit fa33f9094f36943ea32f7fbe323293b62e96151d
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 7e031b5e628f27dc3c80b2d8189eec4d4274a221bd083a8cd07685ccd2eff30d
all runs: crashed: unregister_netdevice: waiting for DEV to become free
revisions tested: 2, total time: 33m4.534405218s (build: 20m17.824059648s, test: 11m56.951668866s)
the crash still happens on HEAD
commit msg: Linux 4.14.268
crash: unregister_netdevice: waiting for DEV to become free
Bluetooth: hci2 command 0x0409 tx timeout
Bluetooth: hci0 command 0x0409 tx timeout
Bluetooth: hci1 command 0x0409 tx timeout
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1
Bluetooth: hci3 command 0x0409 tx timeout
Bluetooth: hci5 command 0x0409 tx timeout
Bluetooth: hci4 command 0x0409 tx timeout
Bluetooth: hci1 command 0x041b tx timeout
Bluetooth: hci0 command 0x041b tx timeout
Bluetooth: hci2 command 0x041b tx timeout
Bluetooth: hci4 command 0x041b tx timeout
Bluetooth: hci5 command 0x041b tx timeout
Bluetooth: hci3 command 0x041b tx timeout
Bluetooth: hci2 command 0x040f tx timeout
Bluetooth: hci0 command 0x040f tx timeout
Bluetooth: hci1 command 0x040f tx timeout
Bluetooth: hci3 command 0x040f tx timeout
Bluetooth: hci5 command 0x040f tx timeout
Bluetooth: hci4 command 0x040f tx timeout
Bluetooth: hci1 command 0x0419 tx timeout
Bluetooth: hci0 command 0x0419 tx timeout
Bluetooth: hci2 command 0x0419 tx timeout
Bluetooth: hci4 command 0x0419 tx timeout
Bluetooth: hci5 command 0x0419 tx timeout
Bluetooth: hci3 command 0x0419 tx timeout