bisecting fixing commit since c6db52a88798e5a0dfef80041ad4d33cc8cf04eb building syzkaller on 2420d1bcbcd9f5d5893c1aab8096cce81721dac2 testing commit c6db52a88798e5a0dfef80041ad4d33cc8cf04eb compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: 289f648f2c881fd2332f4cf910757c704bfd54de39c10449a83b6370a6c778e8 run #0: crashed: KASAN: use-after-free Read in bcm_can_tx run #1: crashed: KASAN: use-after-free Read in bcm_can_tx run #2: crashed: KASAN: use-after-free Read in tasklet_action run #3: crashed: WARNING: ODEBUG bug in bcm_remove_op run #4: crashed: KASAN: use-after-free Read in bcm_can_tx run #5: crashed: KASAN: use-after-free Read in bcm_can_tx run #6: crashed: KASAN: use-after-free Read in tasklet_action run #7: crashed: WARNING: ODEBUG bug in bcm_remove_op run #8: crashed: KASAN: use-after-free Read in tasklet_action run #9: crashed: KASAN: use-after-free Read in tasklet_action run #10: crashed: KASAN: use-after-free Read in bcm_can_tx run #11: crashed: KASAN: use-after-free Read in bcm_can_tx run #12: crashed: KASAN: use-after-free Read in tasklet_action run #13: crashed: KASAN: use-after-free Read in bcm_can_tx run #14: crashed: KASAN: use-after-free Read in tasklet_action run #15: crashed: KASAN: use-after-free Read in tasklet_action run #16: crashed: KASAN: use-after-free Read in tasklet_action run #17: crashed: KASAN: use-after-free Read in bcm_can_tx run #18: crashed: KASAN: use-after-free Read in tasklet_action run #19: crashed: KASAN: use-after-free Read in bcm_tx_start_timer testing current HEAD 5f9f3b0057d5c5782985784ba0159b05b4083055 testing commit 5f9f3b0057d5c5782985784ba0159b05b4083055 compiler: gcc version 8.4.1 20210217 (GCC) kernel signature: b15bb7b76d4e83187b5c32ae747d6ddd61eddf0ce2b3e11d9f94954ce8e15115 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 30m31.304459543s (build: 17m52.943118341s, test: 12m3.289790234s) the crash still happens on HEAD commit msg: Linux 4.14.255 crash: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1