bisecting fixing commit since cbfa1702aaf69b2311ea1b35e04f113c48368c67 building syzkaller on 54289b0835634ca07a8117613c48b73e9e647d13 testing commit cbfa1702aaf69b2311ea1b35e04f113c48368c67 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: ef5c7110295b6d499c7cf4088672721635424e068b34d3833de29ce0e6f778b4 all runs: crashed: KASAN: slab-out-of-bounds Read in find_first_zero_bit testing current HEAD bfdef05c8da46b022172695aa493cff7ac667a4b testing commit bfdef05c8da46b022172695aa493cff7ac667a4b compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b6bcd9549035ae632b6e4f4cfe2472a22fdd5922b3e303d7ed06b6ce51140b16 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 30m3.171234595s (build: 22m41.096550173s, test: 6m29.774002741s) the crash still happens on HEAD commit msg: Linux 4.14.261 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci1 command 0x0409 tx timeout Bluetooth: hci5 command 0x0409 tx timeout Bluetooth: hci4 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci2 command 0x0409 tx timeout Bluetooth: hci0 command 0x0409 tx timeout Bluetooth: hci3 command 0x0409 tx timeout Bluetooth: hci4 command 0x041b tx timeout Bluetooth: hci5 command 0x041b tx timeout Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci3 command 0x041b tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci2 command 0x041b tx timeout Bluetooth: hci1 command 0x040f tx timeout Bluetooth: hci5 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci3 command 0x040f tx timeout Bluetooth: hci4 command 0x0419 tx timeout Bluetooth: hci5 command 0x0419 tx timeout Bluetooth: hci1 command 0x0419 tx timeout Bluetooth: hci3 command 0x0419 tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci2 command 0x0419 tx timeout