bisecting fixing commit since 78d697fc93f98054e36a3ab76dca1a88802ba7be building syzkaller on 35f53e457420e79fa28e3260cdbbf9f37b9f97e4 testing commit 78d697fc93f98054e36a3ab76dca1a88802ba7be with gcc (GCC) 8.1.0 kernel signature: 7846967cc85ec538e72b5da0ba737bd4c8ed2cb6bb7690629ad026cfb27acf0c run #0: OK run #1: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #2: OK run #3: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #4: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #5: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #6: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #7: OK run #8: OK run #9: OK testing current HEAD d71f695ce745df9544a85d8a762f16d72e72df00 testing commit d71f695ce745df9544a85d8a762f16d72e72df00 with gcc (GCC) 8.1.0 kernel signature: 8ae81c9fedb4491ce4951e176638e3ddd56decda8f03ecb8308e9a733218077c run #0: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #1: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #2: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #3: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #4: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #5: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #6: crashed: WARNING: ODEBUG bug in batadv_nc_mesh_free run #7: OK run #8: OK run #9: OK revisions tested: 2, total time: 39m55.873905129s (build: 19m23.655127307s, test: 19m22.983390451s) the crash still happens on HEAD commit msg: Linux 4.14.179 crash: WARNING: ODEBUG bug in batadv_nc_mesh_free R13: 0000000000000365 R14: 00000000004c59ae R15: 000000000076bfcc 0 pages cma reserved 0 ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) ------------[ cut here ]------------ WARNING: CPU: 0 PID: 12451 at lib/debugobjects.c:290 debug_print_object.cold.13+0xa7/0xdb lib/debugobjects.c:287 Kernel panic - not syncing: panic_on_warn set ... CPU: 0 PID: 12451 Comm: syz-executor.2 Not tainted 4.14.179-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:17 [inline] dump_stack+0xf7/0x13b lib/dump_stack.c:58 panic+0x1b0/0x358 kernel/panic.c:183 0 0 __warn.cold.8+0x25/0x2c kernel/panic.c:547 0 report_bug+0x1a4/0x1f3 lib/bug.c:186 fixup_bug arch/x86/kernel/traps.c:177 [inline] do_error_trap+0x1bd/0x310 arch/x86/kernel/traps.c:295 do_invalid_op+0x1b/0x20 arch/x86/kernel/traps.c:314 invalid_op+0x1b/0x40 arch/x86/entry/entry_64.S:963 0 RIP: 0010:debug_print_object.cold.13+0xa7/0xdb lib/debugobjects.c:287 Node 0 RSP: 0018:ffff8881c441f038 EFLAGS: 00010082 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 RDX: 0000000000000061 RSI: ffffffff86cbeaa0 RDI: ffffed1038883dfe RBP: ffff8881c441f060 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000028 R11: dffffc0000000000 R12: ffffffff86cb9ce0 R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87f8e860 debug_object_assert_init+0x24d/0x370 lib/debugobjects.c:656 debug_timer_assert_init kernel/time/timer.c:707 [inline] debug_assert_init kernel/time/timer.c:755 [inline] del_timer+0x6c/0xf0 kernel/time/timer.c:1150 try_to_grab_pending+0x219/0x590 kernel/workqueue.c:1225 __cancel_work_timer+0x93/0x420 kernel/workqueue.c:2923 cancel_delayed_work_sync+0xe/0x10 kernel/workqueue.c:3084 batadv_nc_mesh_free+0x3e/0x116 net/batman-adv/network-coding.c:1887 batadv_mesh_free+0x73/0x160 net/batman-adv/main.c:231 lowmem_reserve[]: batadv_mesh_init+0x531/0x600 net/batman-adv/main.c:216 batadv_softif_init_late+0xa38/0xd00 net/batman-adv/soft-interface.c:856 register_netdevice+0x252/0xe50 net/core/dev.c:7591 rtnl_newlink+0x10d8/0x1390 net/core/rtnetlink.c:2741 rtnetlink_rcv_msg+0x34c/0x9e0 net/core/rtnetlink.c:4315 0 0 netlink_rcv_skb+0x133/0x370 net/netlink/af_netlink.c:2433 rtnetlink_rcv+0x10/0x20 net/core/rtnetlink.c:4327 netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x600 net/netlink/af_netlink.c:1313 0 netlink_sendmsg+0x730/0xbd0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:656 SYSC_sendto+0x1e3/0x2c0 net/socket.c:1763 0 0 Node 1 Normal free:26716kB min:53504kB low:66880kB high:80256kB active_anon:264kB inactive_anon:7148kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:448kB pagetables:200kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB SyS_sendto+0x9/0x10 net/socket.c:1731 lowmem_reserve[]: do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 0 0 entry_SYSCALL_64_after_hwframe+0x42/0xb7 0 RIP: 0033:0x4161a3 0 RSP: 002b:00007fffce4c0ba8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000c82200 RCX: 00000000004161a3 RDX: 000000000000003c RSI: 0000000000c82250 RDI: 0000000000000003 RBP: 0000000000000000 R08: 00007fffce4c0bb0 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000c82250 R15: 0000000000000003 Kernel Offset: disabled Rebooting in 86400 seconds..