bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 6bfdbe8950b22b1c832478bd397754f3108df040 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 0e1c563ada2bac1a2b4ba6a845b0ce91b7a12cb113d1babdac55b0fcbb6235ce all runs: crashed: KASAN: use-after-free Read in hci_chan_del testing current HEAD b8f3be299d5176348b15cc59d55b85faa3dece68 testing commit b8f3be299d5176348b15cc59d55b85faa3dece68 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 064fce8a99d35847763f3de4f54afa342f06a537a94f36c24f36623fb92e26d2 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 24m40.631802047s (build: 17m57.203888835s, test: 6m5.170158439s) the crash still happens on HEAD commit msg: Linux 4.14.282 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout