bisecting fixing commit since 84f5ad468100f86d70096799e4ee716a17c2962f
building syzkaller on 438e1227121e9d4bbca7b12b6e1b715524d512c2
testing commit 84f5ad468100f86d70096799e4ee716a17c2962f with gcc (GCC) 8.1.0
kernel signature: fe1ffb6e2212e4a39611ac3caa502847c64d64f62288e9c6f8d40c93255472ca
run #0: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #1: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #2: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #3: OK
run #4: OK
run #5: OK
run #6: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #7: OK
run #8: OK
run #9: OK
testing current HEAD 78d697fc93f98054e36a3ab76dca1a88802ba7be
testing commit 78d697fc93f98054e36a3ab76dca1a88802ba7be with gcc (GCC) 8.1.0
kernel signature: 35bd54ede057b66ded8b0771a15baaddf0a611a721d3b32877b1c72b84cd51a0
run #0: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #1: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #2: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #3: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #4: OK
run #5: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #6: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #7: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #8: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free
run #9: OK
revisions tested: 2, total time: 37m42.82190819s (build: 17m28.45586218s, test: 18m55.372185889s)
the crash still happens on HEAD
commit msg: Linux 4.14.172
crash: WARNING: ODEBUG bug in batadv_nc_mesh_free
R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffa6e5836d4
R13: 00000000004c41b2 R14: 00000000004da748 R15: 00000000ffffffff
ODEBUG: assert_init not available (active state 0) object type: timer_list hint:           (null)
 2570
------------[ cut here ]------------
WARNING: CPU: 1 PID: 8107 at lib/debugobjects.c:290 debug_print_object.cold.13+0xa7/0xdb lib/debugobjects.c:287
Kernel panic - not syncing: panic_on_warn set ...

CPU: 1 PID: 8107 Comm: syz-executor.2 Not tainted 4.14.172-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:17 [inline]
 dump_stack+0xf7/0x13b lib/dump_stack.c:58
 panic+0x1b0/0x358 kernel/panic.c:183
 __warn.cold.8+0x25/0x2c kernel/panic.c:547
 report_bug+0x1a4/0x1f3 lib/bug.c:186
 fixup_bug arch/x86/kernel/traps.c:177 [inline]
 do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295
 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314
 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963
RIP: 0010:debug_print_object.cold.13+0xa7/0xdb lib/debugobjects.c:287
RSP: 0018:ffff88804732f038 EFLAGS: 00010082
RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000
RDX: 0000000000000061 RSI: 0000000000000000 RDI: ffffed1008e65dfe
RBP: ffff88804732f060 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000078 R11: ffff8880a68c04c0 R12: ffffffff86cbdd80
R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87f934a0
 debug_object_assert_init+0x24d/0x370 lib/debugobjects.c:656
 debug_timer_assert_init kernel/time/timer.c:707 [inline]
 debug_assert_init kernel/time/timer.c:755 [inline]
 del_timer+0x6c/0xf0 kernel/time/timer.c:1150
 try_to_grab_pending+0x219/0x590 kernel/workqueue.c:1225
 2570
 __cancel_work_timer+0x93/0x420 kernel/workqueue.c:2921
 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3082
 batadv_nc_mesh_free+0x3e/0x116 net/batman-adv/network-coding.c:1887
 batadv_mesh_free+0x73/0x160 net/batman-adv/main.c:231
 batadv_mesh_init+0x531/0x600 net/batman-adv/main.c:216
 batadv_softif_init_late+0xa32/0xd00 net/batman-adv/soft-interface.c:856
 register_netdevice+0x252/0xe50 net/core/dev.c:7590
 rtnl_newlink+0x10d8/0x1390 net/core/rtnetlink.c:2741
 rtnetlink_rcv_msg+0x34c/0x9e0 net/core/rtnetlink.c:4315
 netlink_rcv_skb+0x133/0x370 net/netlink/af_netlink.c:2432
 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4327
 netlink_unicast_kernel net/netlink/af_netlink.c:1286 [inline]
 netlink_unicast+0x40b/0x600 net/netlink/af_netlink.c:1312
 netlink_sendmsg+0x730/0xbd0 net/netlink/af_netlink.c:1877
 sock_sendmsg_nosec net/socket.c:646 [inline]
 sock_sendmsg+0xb5/0xf0 net/socket.c:656
 SYSC_sendto+0x1e3/0x2c0 net/socket.c:1763
 SyS_sendto+0x9/0x10 net/socket.c:1731
 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x42/0xb7
RIP: 0033:0x414c43
RSP: 002b:00007fffdd460b68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
RAX: ffffffffffffffda RBX: 0000000000a72200 RCX: 0000000000414c43
RDX: 000000000000003c RSI: 0000000000a72250 RDI: 0000000000000003
RBP: 0000000000000000 R08: 00007fffdd460b70 R09: 000000000000000c
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000a72250 R15: 0000000000000003
Kernel Offset: disabled
Rebooting in 86400 seconds..