BUG: unable to handle kernel paging request at ffffc90006a56000 IP: strlen+0x60/0xa0 lib/string.c:482 PGD 1dad2f067 P4D 1dad2f067 PUD 1dad30067 PMD 1b9bc1067 PTE 0 Oops: 0000 [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linked in: CPU: 0 PID: 7846 Comm: syz-executor6 Not tainted 4.16.0-rc3+ #247 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:strlen+0x60/0xa0 lib/string.c:482 RSP: 0018:ffff8801c5ac7800 EFLAGS: 00010246 RAX: ffffc90006a56000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffc900026b6000 RDI: ffffc90006a55318 RBP: ffff8801c5ac7818 R08: ffffed0038b58f1e R09: ffffed0038b58f1e R10: 0000000000000002 R11: ffffed0038b58f1d R12: ffffc90006a55318 R13: dffffc0000000000 R14: ffff8801c5ac7a08 R15: ffffc90006a55318 FS: 0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f77cbb40 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 CR2: ffffc90006a56000 CR3: 00000001d7af6002 CR4: 00000000001606f0 DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: strlen include/linux/string.h:267 [inline] strlcpy include/linux/string.h:293 [inline] compat_mtw_from_user net/bridge/netfilter/ebtables.c:1944 [inline] ebt_size_mwt net/bridge/netfilter/ebtables.c:2042 [inline] size_entry_mwt net/bridge/netfilter/ebtables.c:2122 [inline] compat_copy_entries+0x4e9/0x1050 net/bridge/netfilter/ebtables.c:2160 compat_do_replace+0x398/0x7c0 net/bridge/netfilter/ebtables.c:2249 compat_do_ebt_set_ctl+0x22a/0x2d0 net/bridge/netfilter/ebtables.c:2330 compat_nf_sockopt net/netfilter/nf_sockopt.c:144 [inline] compat_nf_setsockopt+0x88/0x130 net/netfilter/nf_sockopt.c:156 compat_ip_setsockopt+0x8b/0xd0 net/ipv4/ip_sockglue.c:1285 compat_raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:879 compat_sock_common_setsockopt+0xb2/0x140 net/core/sock.c:2986 C_SYSC_setsockopt net/compat.c:403 [inline] compat_SyS_setsockopt+0x17c/0x410 net/compat.c:386 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline] do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139 RIP: 0023:0xf7fcfc99 RSP: 002b:00000000f77cb09c EFLAGS: 00000286 ORIG_RAX: 000000000000016e RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000 RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000387 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Code: 89 c4 74 38 48 bb 00 00 00 00 00 fc ff df 48 83 c0 01 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 2b <80> 38 00 75 de 48 83 c4 08 4c 29 e0 5b 41 5c 5d c3 48 83 c4 08 RIP: strlen+0x60/0xa0 lib/string.c:482 RSP: ffff8801c5ac7800 CR2: ffffc90006a56000 ---[ end trace 871761ef56831023 ]---