bisecting fixing commit since d7e78d08fa77acdea351c8f628f49ca9a0e1029a building syzkaller on d5a3ae1f760e7cb2cd5a721d9645ae22eae114fe testing commit d7e78d08fa77acdea351c8f628f49ca9a0e1029a with gcc (GCC) 8.4.1 20210217 kernel signature: 852ae2c91adb57ef56c7f7324fb652f2ab2b467e207fb22290046657303c6b97 all runs: crashed: KASAN: use-after-free Read in u32_clear_hnode testing current HEAD ad8397a84e1e425e3f8221638cee2bfa237d9b2c testing commit ad8397a84e1e425e3f8221638cee2bfa237d9b2c with gcc (GCC) 8.4.1 20210217 kernel signature: a9e0e81d00f08059c3d6395d5744b7244bfa9d2ba368cb158f26ca22c9e2de41 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 27m9.515615274s (build: 19m59.114838771s, test: 6m38.410459095s) the crash still happens on HEAD commit msg: Linux 4.14.234 crash: unregister_netdevice: waiting for DEV to become free unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci5 command 0x0409 tx timeout Bluetooth: hci2 command 0x0409 tx timeout Bluetooth: hci1 command 0x0409 tx timeout Bluetooth: hci4 command 0x0409 tx timeout Bluetooth: hci0 command 0x0409 tx timeout Bluetooth: hci3 command 0x0409 tx timeout Bluetooth: hci3 command 0x041b tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci4 command 0x041b tx timeout Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci2 command 0x041b tx timeout Bluetooth: hci5 command 0x041b tx timeout Bluetooth: hci5 command 0x040f tx timeout Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci1 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout Bluetooth: hci3 command 0x040f tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci3 command 0x0419 tx timeout Bluetooth: hci4 command 0x0419 tx timeout Bluetooth: hci1 command 0x0419 tx timeout Bluetooth: hci2 command 0x0419 tx timeout Bluetooth: hci5 command 0x0419 tx timeout