bisecting fixing commit since 5b7a52cd2eef952cee8a72512ef370bcdef46636 building syzkaller on 96e03c1c31a7f2e7f80b2d8b9f3df117df5030d1 testing commit 5b7a52cd2eef952cee8a72512ef370bcdef46636 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 095562a7e05f331dcbfc0bccb1ede8714fbf90375d9f89d74556f206805b56a6 all runs: crashed: KASAN: use-after-free Read in ext4_xattr_set_entry testing current HEAD 8ea4f73cfa7e0555dc03aedde52db54a6587ab43 testing commit 8ea4f73cfa7e0555dc03aedde52db54a6587ab43 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 46627a25c24399733918d7c4bd49694f5854251a9e92768fcabf702e6a6f3579 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 22m31.905933774s (build: 14m57.25418267s, test: 7m11.488743739s) the crash still happens on HEAD commit msg: Linux 4.14.247 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci1 command 0x0409 tx timeout Bluetooth: hci2 command 0x0409 tx timeout Bluetooth: hci4 command 0x0409 tx timeout Bluetooth: hci5 command 0x0409 tx timeout Bluetooth: hci3 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci3 command 0x041b tx timeout Bluetooth: hci2 command 0x041b tx timeout Bluetooth: hci5 command 0x041b tx timeout Bluetooth: hci4 command 0x041b tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci1 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout Bluetooth: hci5 command 0x040f tx timeout Bluetooth: hci3 command 0x040f tx timeout Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci1 command 0x0419 tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci2 command 0x0419 tx timeout Bluetooth: hci3 command 0x0419 tx timeout Bluetooth: hci5 command 0x0419 tx timeout Bluetooth: hci4 command 0x0419 tx timeout