bisecting fixing commit since 9a95f25269bd9257ab9fba7bb14355d50b5f39ec building syzkaller on c8e81ce4c7e3b59e7c83c6fab56c217916f3b3b6 testing commit 9a95f25269bd9257ab9fba7bb14355d50b5f39ec with gcc (GCC) 8.1.0 kernel signature: 8be05d5cdb66e2a0b249b48745437112d41f5088bd198ab05203dfb3927e45fc all runs: crashed: invalid opcode in nft_bitwise_ops testing current HEAD 050272a0423e68207fd2367831ae610680129062 testing commit 050272a0423e68207fd2367831ae610680129062 with gcc (GCC) 8.1.0 kernel signature: ba22df608e797f77b2728088846dcd2cec8a654bef248a123b04a9df3ea8f387 all runs: crashed: invalid opcode in nft_bitwise_ops revisions tested: 2, total time: 23m55.872773198s (build: 16m46.239833331s, test: 6m18.297850925s) the crash still happens on HEAD commit msg: Linux 4.14.177 crash: invalid opcode in nft_bitwise_ops IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready device veth1_macvtap entered promiscuous mode IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready invalid opcode: 0000 [#1] PREEMPT SMP KASAN IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready Modules linked in: CPU: 1 PID: 7700 Comm: syz-executor.3 Not tainted 4.14.177-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888089fd6680 task.stack: ffff88808e600000 RIP: 0010:nft_bitwise_ops+0x5/0x80 RSP: 0018:ffff88808e607098 EFLAGS: 00010286 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 1ffffffff1165f9d RSI: ffff88808e6070d8 RDI: ffff88808e607138 RBP: ffff88808e6071c0 R08: dffffc0000000000 R09: 0000000000000000 R10: ffffed1011cc0e2c R11: ffff88808e607167 R12: ffff88808e607138 R13: ffff8880a7c11dc0 R14: ffffffff88b2fcb0 R15: ffff88808e607198 FS: 00007f2f07c8f700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000280 CR3: 00000000899b9000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ctnetlink_parse_nat_setup+0x61/0x3d0 net/netfilter/nf_conntrack_netlink.c:1421 ctnetlink_setup_nat net/netfilter/nf_conntrack_netlink.c:1491 [inline] ctnetlink_create_conntrack+0x366/0xf10 net/netfilter/nf_conntrack_netlink.c:1840 ctnetlink_new_conntrack+0x432/0xd30 net/netfilter/nf_conntrack_netlink.c:1964 nfnetlink_rcv_msg+0x89a/0xa70 net/netfilter/nfnetlink.c:214 netlink_rcv_skb+0x133/0x370 net/netlink/af_netlink.c:2433 nfnetlink_rcv+0x176/0x1570 net/netfilter/nfnetlink.c:515 IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready netlink_unicast_kernel net/netlink/af_netlink.c:1287 [inline] netlink_unicast+0x40b/0x600 net/netlink/af_netlink.c:1313 netlink_sendmsg+0x730/0xbd0 net/netlink/af_netlink.c:1878 sock_sendmsg_nosec net/socket.c:646 [inline] sock_sendmsg+0xb5/0xf0 net/socket.c:656 ___sys_sendmsg+0x625/0x920 net/socket.c:2062 __sys_sendmsg+0xc1/0x140 net/socket.c:2096 SYSC_sendmsg net/socket.c:2107 [inline] SyS_sendmsg+0xd/0x20 net/socket.c:2103 do_syscall_64+0x1c7/0x5b0 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x42/0xb7 RIP: 0033:0x45b349 RSP: 002b:00007f2f07c8ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f2f07c8f6d4 RCX: 000000000045b349 RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 0000000000000941 R14: 00000000004ca9f7 R15: 000000000075bf2c Code: 00 IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00 IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 f0 4b 85 ff ff ff 00 00 00 00 00 00 00 00 30 00 00 00 00 00 00 00 50 f4 RIP: nft_bitwise_ops+0x5/0x80 RSP: ffff88808e607098 ---[ end trace e2981e7d2d860d5a ]--- IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready