BUG: unable to handle kernel paging request at ffffc90008a75000
IP: strlen+0x60/0xa0 lib/string.c:482
PGD 1dad2f067 P4D 1dad2f067 PUD 1dad30067 PMD 1daeb8067 PTE 0
Oops: 0000 [#1] SMP KASAN
kernel msg: ebtables bug: please report to author: Wrong len argument
Dumping ftrace buffer:
   (ftrace buffer empty)
Modules linked in:
CPU: 0 PID: 13752 Comm: syz-executor1 Not tainted 4.16.0-rc3+ #240
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:strlen+0x60/0xa0 lib/string.c:482
RSP: 0018:ffff8801b074f800 EFLAGS: 00010246
audit: type=1400 audit(1519675133.435:53): avc:  denied  { create } for  pid=13750 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1
RAX: ffffc90008a75000 RBX: dffffc0000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffffc9000377e000 RDI: ffffc90008a74130
RBP: ffff8801b074f818 R08: ffffed00360e9f1e R09: ffffed00360e9f1e
R10: 0000000000000002 R11: ffffed00360e9f1d R12: ffffc90008a74130
R13: dffffc0000000000 R14: ffff8801b074fa08 R15: ffffc90008a74130
FS:  0000000000000000(0000) GS:ffff8801db200000(0063) knlGS:00000000f7704b40
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: ffffc90008a75000 CR3: 00000001ce6cc006 CR4: 00000000001606f0
DR0: 0000000020000000 DR1: 0000000020000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600
audit: type=1400 audit(1519675133.435:54): avc:  denied  { getattr } for  pid=13750 comm="syz-executor4" path="socket:[36573]" dev="sockfs" ino=36573 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1
Call Trace:
 strlen include/linux/string.h:267 [inline]
 strlcpy include/linux/string.h:293 [inline]
 compat_mtw_from_user net/bridge/netfilter/ebtables.c:1944 [inline]
 ebt_size_mwt net/bridge/netfilter/ebtables.c:2042 [inline]
 size_entry_mwt net/bridge/netfilter/ebtables.c:2122 [inline]
 compat_copy_entries+0x4e9/0x1050 net/bridge/netfilter/ebtables.c:2160
 compat_do_replace+0x398/0x7c0 net/bridge/netfilter/ebtables.c:2249
 compat_do_ebt_set_ctl+0x22a/0x2d0 net/bridge/netfilter/ebtables.c:2330
 compat_nf_sockopt net/netfilter/nf_sockopt.c:144 [inline]
 compat_nf_setsockopt+0x88/0x130 net/netfilter/nf_sockopt.c:156
 compat_ip_setsockopt+0x8b/0xd0 net/ipv4/ip_sockglue.c:1285
 compat_raw_setsockopt+0xb7/0xd0 net/ipv4/raw.c:879
 compat_sock_common_setsockopt+0xb2/0x140 net/core/sock.c:2986
 C_SYSC_setsockopt net/compat.c:403 [inline]
 compat_SyS_setsockopt+0x17c/0x410 net/compat.c:386
 do_syscall_32_irqs_on arch/x86/entry/common.c:330 [inline]
 do_fast_syscall_32+0x3ec/0xf9f arch/x86/entry/common.c:392
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
RIP: 0023:0xf7f08c99
RSP: 002b:00000000f770409c EFLAGS: 00000286 ORIG_RAX: 000000000000016e
RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000
RDX: 0000000000000080 RSI: 00000000200001c0 RDI: 000000000000019b
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Code: 89 c4 74 38 48 bb 00 00 00 00 00 fc ff df 48 83 c0 01 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 2b <80> 38 00 75 de 48 83 c4 08 4c 29 e0 5b 41 5c 5d c3 48 83 c4 08 
RIP: strlen+0x60/0xa0 lib/string.c:482 RSP: ffff8801b074f800
CR2: ffffc90008a75000
---[ end trace 09f25000171122a6 ]---