bisecting fixing commit since 27ce4f2a6817e38ca74c643d47a96359f6cc0c1c building syzkaller on 1bf9a662c66aa432ff2fe3bf2562578cef626c09 testing commit 27ce4f2a6817e38ca74c643d47a96359f6cc0c1c with gcc (GCC) 8.4.1 20210217 kernel signature: d78173d35a839930f6eb743f0bf0cfaf2f977818a0c4d776dfdfb698b4a3c0f7 run #0: crashed: KASAN: use-after-free Read in padata_do_parallel run #1: crashed: KASAN: use-after-free Write in padata_parallel_worker run #2: crashed: KASAN: use-after-free Write in padata_parallel_worker run #3: crashed: BUG: unable to handle kernel run #4: crashed: KASAN: use-after-free Read in padata_do_parallel run #5: crashed: BUG: unable to handle kernel NULL pointer dereference in corrupted run #6: crashed: BUG: unable to handle kernel NULL pointer dereference in pcrypt_aead_serial run #7: crashed: KASAN: use-after-free Write in padata_parallel_worker run #8: crashed: KASAN: use-after-free Write in padata_parallel_worker run #9: crashed: KASAN: use-after-free Read in padata_do_parallel run #10: crashed: BUG: unable to handle kernel NULL pointer dereference in pcrypt_aead_serial run #11: crashed: BUG: unable to handle kernel NULL pointer dereference in pcrypt_aead_serial run #12: crashed: BUG: unable to handle kernel NULL pointer dereference in pcrypt_aead_serial run #13: crashed: KASAN: use-after-free Read in padata_do_parallel run #14: crashed: KASAN: use-after-free Read in padata_do_parallel run #15: crashed: KASAN: use-after-free in padata_parallel_worker run #16: crashed: KASAN: use-after-free Write in padata_parallel_worker run #17: crashed: KASAN: use-after-free Read in padata_do_parallel run #18: crashed: KASAN: use-after-free Read in padata_do_parallel run #19: crashed: KASAN: use-after-free Write in padata_parallel_worker testing current HEAD 3d3abdc8ebd3c3082e4398fc73ceb4c852b66e85 testing commit 3d3abdc8ebd3c3082e4398fc73ceb4c852b66e85 with gcc (GCC) 8.4.1 20210217 kernel signature: db18c84292f403374647954671d8ddcb45ed17bb6b9b4fdd7d18c073ec50a4f5 all runs: crashed: unregister_netdevice: waiting for DEV to become free revisions tested: 2, total time: 22m44.55733955s (build: 15m48.558779583s, test: 6m31.605658544s) the crash still happens on HEAD commit msg: Linux 4.14.236 crash: unregister_netdevice: waiting for DEV to become free Bluetooth: hci4 command 0x0409 tx timeout Bluetooth: hci2 command 0x0409 tx timeout Bluetooth: hci3 command 0x0409 tx timeout Bluetooth: hci5 command 0x0409 tx timeout Bluetooth: hci0 command 0x0409 tx timeout unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1 Bluetooth: hci2 command 0x041b tx timeout Bluetooth: hci4 command 0x041b tx timeout Bluetooth: hci1 command 0x041b tx timeout Bluetooth: hci0 command 0x041b tx timeout Bluetooth: hci5 command 0x041b tx timeout Bluetooth: hci3 command 0x041b tx timeout Bluetooth: hci1 command 0x040f tx timeout Bluetooth: hci4 command 0x040f tx timeout Bluetooth: hci2 command 0x040f tx timeout Bluetooth: hci3 command 0x040f tx timeout Bluetooth: hci5 command 0x040f tx timeout Bluetooth: hci0 command 0x040f tx timeout Bluetooth: hci4 command 0x0419 tx timeout Bluetooth: hci2 command 0x0419 tx timeout Bluetooth: hci1 command 0x0419 tx timeout Bluetooth: hci0 command 0x0419 tx timeout Bluetooth: hci5 command 0x0419 tx timeout Bluetooth: hci3 command 0x0419 tx timeout