bisecting fixing commit since c6db52a88798e5a0dfef80041ad4d33cc8cf04eb
building syzkaller on 2420d1bcbcd9f5d5893c1aab8096cce81721dac2
testing commit c6db52a88798e5a0dfef80041ad4d33cc8cf04eb
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 0b0eb1a228bcad3ddefbedcbdab39d59a2f340d4238104b884fea18549dce1ec
run #0: crashed: KASAN: use-after-free Read in tasklet_action
run #1: crashed: KASAN: use-after-free Read in tasklet_action
run #2: crashed: KASAN: use-after-free Read in tasklet_action
run #3: crashed: WARNING: ODEBUG bug in enqueue_hrtimer
run #4: crashed: WARNING: ODEBUG bug in bcm_remove_op
run #5: crashed: KASAN: use-after-free Read in bcm_can_tx
run #6: crashed: KASAN: use-after-free Read in tasklet_action
run #7: crashed: KASAN: use-after-free Read in tasklet_action
run #8: crashed: KASAN: use-after-free Read in bcm_can_tx
run #9: crashed: KASAN: use-after-free Read in bcm_can_tx
run #10: crashed: KASAN: use-after-free Read in bcm_can_tx
run #11: crashed: KASAN: use-after-free Read in bcm_can_tx
run #12: crashed: KASAN: use-after-free Read in bcm_can_tx
run #13: crashed: KASAN: use-after-free Read in lock_hrtimer_base
run #14: crashed: KASAN: use-after-free Read in bcm_can_tx
run #15: crashed: WARNING: ODEBUG bug in enqueue_hrtimer
run #16: crashed: KASAN: use-after-free Write in __tasklet_schedule
run #17: crashed: KASAN: use-after-free Read in bcm_can_tx
run #18: crashed: KASAN: use-after-free Read in tasklet_action
run #19: crashed: KASAN: use-after-free Read in tasklet_action
testing current HEAD ed99bf0e81b558df39f7db2fa96d0228be4198c6
testing commit ed99bf0e81b558df39f7db2fa96d0228be4198c6
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 67d44eb27c4e16e17163d45734cf38d5eab19f78d8aa2ff4a7e3c63d3b786e9e
all runs: crashed: unregister_netdevice: waiting for DEV to become free
revisions tested: 2, total time: 34m52.598969764s (build: 23m50.180562623s, test: 10m20.908938064s)
the crash still happens on HEAD
commit msg: Linux 4.14.250
crash: unregister_netdevice: waiting for DEV to become free
unregister_netdevice: waiting for ip6gre0 to become free. Usage count = -1