bisecting fixing commit since c6db52a88798e5a0dfef80041ad4d33cc8cf04eb
building syzkaller on 2420d1bcbcd9f5d5893c1aab8096cce81721dac2
testing commit c6db52a88798e5a0dfef80041ad4d33cc8cf04eb
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 078b3b3f8b1ec88333e10436a15809964bcac029f0d8e8854a48d9cff2a97c14
run #0: crashed: KASAN: use-after-free Read in bcm_can_tx
run #1: crashed: WARNING: ODEBUG bug in bcm_remove_op
run #2: crashed: KASAN: use-after-free Read in tasklet_action
run #3: crashed: KASAN: use-after-free Read in tasklet_action
run #4: crashed: KASAN: use-after-free Read in bcm_can_tx
run #5: crashed: KASAN: use-after-free Write in __tasklet_schedule
run #6: crashed: KASAN: use-after-free Read in tasklet_action
run #7: crashed: KASAN: use-after-free Read in tasklet_action
run #8: crashed: KASAN: use-after-free Read in tasklet_action
run #9: crashed: KASAN: use-after-free Read in bcm_can_tx
run #10: crashed: KASAN: use-after-free Read in bcm_can_tx
run #11: crashed: KASAN: use-after-free Read in tasklet_action
run #12: crashed: KASAN: use-after-free Read in tasklet_action
run #13: crashed: KASAN: use-after-free Read in bcm_can_tx
run #14: crashed: KASAN: use-after-free Read in bcm_can_tx
run #15: crashed: KASAN: use-after-free Read in bcm_can_tx
run #16: crashed: KASAN: use-after-free Write in __tasklet_schedule
run #17: crashed: KASAN: use-after-free Read in tasklet_action
run #18: crashed: KASAN: use-after-free Read in tasklet_action
run #19: crashed: KASAN: use-after-free Read in bcm_can_tx
testing current HEAD f96eb53cbd76415edfba99c2cfa88567a885a428
testing commit f96eb53cbd76415edfba99c2cfa88567a885a428
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 3b977449d425636d4ad02384bf95de429ca8564aea7631b991e63e06f2eb22b5
all runs: crashed: unregister_netdevice: waiting for DEV to become free
revisions tested: 2, total time: 34m26.903273821s (build: 19m33.55633567s, test: 14m22.632672269s)
the crash still happens on HEAD
commit msg: Linux 4.14.246
crash: unregister_netdevice: waiting for DEV to become free
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1