kernel msg: ebtables bug: please report to author: Wrong len argument general protection fault: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 4.20.0-rc4+ #323 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: events smc_tcp_listen_work RIP: 0010:kernel_accept+0x5a/0x310 net/socket.c:3245 Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 kobject: 'pim6reg' (00000000a29f2c7d): kobject_add_internal: parent: 'net', set: 'devices' RSP: 0018:ffff8881d945f5b0 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1103b28a1d1 RDX: 000000000000006a RSI: ffffffff8624b77f RDI: 0000000000000350 RBP: ffff8881d945f5e0 R08: ffff8881d9450e88 R09: 0000000000000006 R10: 0000000000000000 R11: ffff8881d94505c0 R12: ffff8881d945f690 netlink: 'syz-executor0': attribute type 1 has an invalid length. R13: ffff8881ccea1480 R14: 0000000000000000 R15: ffff8881c0de18f8 FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fca38b8c518 CR3: 0000000197c0d000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 netlink: 'syz-executor0': attribute type 1 has an invalid length. Call Trace: smc_clcsock_accept net/smc/af_smc.c:840 [inline] smc_tcp_listen_work+0x218/0x11c0 net/smc/af_smc.c:1307 process_one_work+0xc90/0x1c40 kernel/workqueue.c:2153 kobject: 'pim6reg' (00000000a29f2c7d): kobject_uevent_env kobject: 'pim6reg' (00000000a29f2c7d): fill_kobj_path: path = '/devices/virtual/net/pim6reg' kobject: 'queues' (00000000fc85a74f): kobject_add_internal: parent: 'pim6reg', set: '' kobject: 'queues' (00000000fc85a74f): kobject_uevent_env kobject: 'queues' (00000000fc85a74f): kobject_uevent_env: filter function caused the event to drop! kobject: 'rx-0' (000000003c6f98e9): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'rx-0' (000000003c6f98e9): kobject_uevent_env worker_thread+0x17f/0x1390 kernel/workqueue.c:2296 kobject: 'rx-0' (000000003c6f98e9): fill_kobj_path: path = '/devices/virtual/net/pim6reg/queues/rx-0' kobject: 'tx-0' (00000000a5b7d8da): kobject_add_internal: parent: 'queues', set: 'queues' kobject: 'tx-0' (00000000a5b7d8da): kobject_uevent_env kobject: 'tx-0' (00000000a5b7d8da): fill_kobj_path: path = '/devices/virtual/net/pim6reg/queues/tx-0' netlink: 'syz-executor4': attribute type 1 has an invalid length. netlink: 'syz-executor0': attribute type 1 has an invalid length. netlink: 'syz-executor0': attribute type 1 has an invalid length. kthread+0x35a/0x440 kernel/kthread.c:246 ret_from_fork+0x3a/0x50 arch/x86/entry/entry_64.S:352 Modules linked in: kobject: 'loop3' (00000000d5d933c8): kobject_uevent_env kobject: 'loop3' (00000000d5d933c8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop4' (0000000090a656cc): kobject_uevent_env kobject: 'loop4' (0000000090a656cc): fill_kobj_path: path = '/devices/virtual/block/loop4' netlink: 'syz-executor4': attribute type 1 has an invalid length. kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop4' (0000000090a656cc): kobject_uevent_env kobject: 'loop4' (0000000090a656cc): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop0' (000000006b19df24): kobject_uevent_env kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop4' (0000000090a656cc): kobject_uevent_env kobject: 'loop4' (0000000090a656cc): fill_kobj_path: path = '/devices/virtual/block/loop4' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop0' (000000006b19df24): kobject_uevent_env kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop0' (000000006b19df24): kobject_uevent_env kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop3' (00000000d5d933c8): kobject_uevent_env kobject: 'loop3' (00000000d5d933c8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop3' (00000000d5d933c8): kobject_uevent_env kobject: 'loop3' (00000000d5d933c8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop2' (0000000043d88922): kobject_uevent_env kobject: 'loop2' (0000000043d88922): fill_kobj_path: path = '/devices/virtual/block/loop2' kobject: 'loop0' (000000006b19df24): kobject_uevent_env kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' kobject: 'loop3' (00000000d5d933c8): kobject_uevent_env kobject: 'loop3' (00000000d5d933c8): fill_kobj_path: path = '/devices/virtual/block/loop3' kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env ---[ end trace 802182564c765cc6 ]--- kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' RIP: 0010:kernel_accept+0x5a/0x310 net/socket.c:3245 Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 kobject: 'loop0' (000000006b19df24): kobject_uevent_env kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0' RSP: 0018:ffff8881d945f5b0 EFLAGS: 00010206 kobject: 'loop1' (000000002b9958f7): kobject_uevent_env kobject: 'loop1' (000000002b9958f7): fill_kobj_path: path = '/devices/virtual/block/loop1' RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1103b28a1d1 RDX: 000000000000006a RSI: ffffffff8624b77f RDI: 0000000000000350 RBP: ffff8881d945f5e0 R08: ffff8881d9450e88 R09: 0000000000000006 kobject: 'loop5' (0000000080e8fc0a): kobject_uevent_env kobject: 'loop5' (0000000080e8fc0a): fill_kobj_path: path = '/devices/virtual/block/loop5' R10: 0000000000000000 R11: ffff8881d94505c0 R12: ffff8881d945f690 R13: ffff8881ccea1480 R14: 0000000000000000 R15: ffff8881c0de18f8 kobject: 'loop3' (00000000d5d933c8): kobject_uevent_env FS: 0000000000000000(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 kobject: 'loop3' (00000000d5d933c8): fill_kobj_path: path = '/devices/virtual/block/loop3' CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kobject: 'loop4' (0000000090a656cc): kobject_uevent_env CR2: 0000000000728000 CR3: 000000018585a000 CR4: 00000000001406e0 kobject: 'loop4' (0000000090a656cc): fill_kobj_path: path = '/devices/virtual/block/loop4' DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 kobject: 'loop0' (000000006b19df24): kobject_uevent_env DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 kobject: 'loop0' (000000006b19df24): fill_kobj_path: path = '/devices/virtual/block/loop0'