c7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:21 executing program 2: 09:38:21 executing program 4: [ 1205.997212] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1206.023446] hfs: can't find a HFS filesystem on dev loop0 09:38:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:21 executing program 4: [ 1206.109496] hfs: can't find a HFS filesystem on dev loop0 09:38:21 executing program 2: [ 1206.156358] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:21 executing program 4: 09:38:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='j']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:21 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 09:38:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:21 executing program 2: 09:38:22 executing program 4: [ 1206.282100] hfs: can't find a HFS filesystem on dev loop0 [ 1206.319247] Unknown ioctl 5 [ 1206.332860] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1206.349943] hfs: can't find a HFS filesystem on dev loop0 [ 1206.392760] Unknown ioctl 5 09:38:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:22 executing program 2: 09:38:22 executing program 4: 09:38:22 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x171000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000480)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000002f80)=0xac) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000004800)='/proc/self/attr/exec\x00', 0x2, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/vsock\x00', 0x800, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004400)=0x0) getresuid(&(0x7f0000004440), &(0x7f0000004480), &(0x7f00000044c0)=0x0) stat(&(0x7f0000004500)='./file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000004600)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000043c0)=[{&(0x7f00000004c0)={0x2350, 0x1b, 0x300, 0x70bd28, 0x25dfdbfd, "", [@generic, @nested={0x9c, 0x10, [@generic="49b07fde8b743cbf58f8c20595d076e590988950669aaca7c519a7fd7ec90602cbd6f02321f5471db15543747d0c0146", @generic="d653c9e20bf0250cce22b080b60dedd7d1ef1dbfe6522ea9d396cc5725415438d81f19d28f86ce59376fa19ec2f34495fbfc840c1db3ebac78adaad283169688189a5ce50425dac8ee09d875372fbd48d7fdabf006d1c5276fa181e089caa5b868fe95046e6e"]}, @nested={0x10c0, 0x7e, [@typed={0xc, 0x6e, @u64=0x5}, @typed={0x4, 0x48}, @generic="f0c17f995c254108978ba53f925457f69ee7b1b5ad599eb0c79226da050e17fb076b9618931e948a0d76d031f037648046e7a61e3b0ca46796abf1ce", @typed={0x8, 0x88, @pid=r1}, @typed={0x8, 0x19, @uid=r2}, @typed={0x8, 0x71, @uid=r3}, @generic="7e0693eddf60cccbe366bc8c4d64a7c807", @generic="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", @generic="1a322e996ca56d83074d8edc00b158899f8903898bf629fabb6c4279a1f3449ba3b63dee2dbcd027a743d9a3ff0716ff09f0a4d41b307b591632634f16506405a728e2cbc5"]}, @nested={0x1064, 0x81, [@generic="c4687d39075f114734775ba4bff965c213d403e0a1231b38f33efca0c4cc573b0531a745530350b1864d31539c9fe2e38ae73a629318a3e84e67c6c6d28603dc02a68c68ffab8f8d5dba41ccc01fc2", @typed={0x8, 0x36, @uid=r4}, @typed={0x8, 0x4d, @pid=r5}, @generic="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"]}, @generic="415f8e172367ffc03d6ec121f1d5f92eca33e4e7d8fe9f55b778d950dd9a0d676c4a19d0610d7b6c898a02e0a13ca5e6c2f4e7f0ec7ef3ebebbb888e134d6eea2f431f57f624e5f981bef9a0cefa500ab589bdfe9d32ebecc776aa4669775aa0c3584420dff6dd8723996f9f0c44bb2d87d000f36c27c7bd17d103b8a5f8594c1292cbf003d850e5ff3f3814f7e39ee342c059d16430dc394b966002dea9b24b4efae751133078a279230bd8f42f55b9851f605dd82dc3f5b69d6cf04b8d1105cf1e0a8d88ac64fb", @generic="d8fbbc0047455414c786bfdd6e62", @generic="74fb3974c9b0516ac136c3ae1bda8e2c3daf955d525443881baccb0854ed3359021fbe8dd6acb25e6733f2ec2ff60381da2ec86036b4108529ce84bb7af9c7053a447524735d3a986283f26d6f84f39d060277cfcb15cea5af0a70e6f48d1727de0d83015c8e5d70a86a1484d093a4618215e10b108159e7a4a313013bb70f6ec41a78bd49820006d485e059e0a218c2d25e7f1e79dbfd5775ba73835df69aff6720859b0896e71935dd"]}, 0x2350}, {&(0x7f00000028c0)={0x524, 0x39, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x460, 0x44, [@generic="2868ad58487245815254e22eff8dd0fb8549bedd3ddaadac757851c49712f7c7bff9db3d5c05c30e402e4b9a8c613e90e80cf3652e898fa70f60f87e8b52ce20a78a4a0a329f9789f885fd55b9c13964a6c606a775416859c5778c5b", @typed={0x8, 0x2f, @str='uid'}, @generic="a6cd9b29c9327183f76b851729fea12d85799d0b3097e0776bfe8383d2a4f904bc4abfcf4cd4c4b39a4e3b95a30ed99aa6e5863a08fea37090b6b4ab3616289d9e59d7f833dd226a9f997c4fa363506ffcd90143be4842f12e6ad90573db98d1b9f2f55cdfc6eb6993ab5f65f026fd0d5fd63c3c0d06488fef87d39828c8b80bf386de7054196044fe1f9cdecdf8bfc017992f54726e9fd5ae0e4b48ae4db3bd17", @generic="d6e00bb46d898c4f26fa691ac1f3ee73bbba58cb853c2b040497c47d7830f6bcf05e09598aeade15adeac34e7943437e2b44815142dd58960ac3db3e7063d6283e9e1d1a8edb5d3bab4111ad045df2840f7bbe840624dfd439371ef63268d7e820dd77eaf96c7af873fe1e97af7ec957291077c598bff244f49760394e2fee9944a56190c9d6c0b94781c0d493e9876e64aa2618f7236ae760ac62c6cdffe8a6f995d54f22ee1de79d22451fa1203406c09314d77b25c24ad45fdd4a37021345b9e2bb9f2bc6cd5cf7e1", @generic="57f9f7d4ae910137395b69d5d71a8a2587b44abf0e63d7ed5f2f3eadac984bb05408f4525f2ae29de6c43ff1cf3377cf865e49cd30b722d6b4e2d128072d55d6d934f349f55ae7b1c4fe47c2aa575fb5c15b0ff856c2eeb39f7108d15402bc489b1626edf13dd20044d2dd53af08bcafd465a668773591ff58a0b881522ff668c3df17709ac686c8e624d0812d93658f325d7f550a010843e361b981e5ac9747f6ffe9e0e89c71c536c97fbc823f4de24a0b2a95baf983b9feed7bd49ba7c131ccbb416864", @generic="d4096051d17945d1e8a249a7c950ed1f9f98ab50ba71da53280fc04dc585b4416efd21739dc3ebed3c49fd3831170b43003cec48758d62c4d40d43dd995a279eaf4a9f01f1e50667842646cc98622b4f73ceff78ae71c070acc1bd49627ef38da10a6554d54a37a5884d3bd175caca7b193567a3423f3050d0ca1c920f21e58dafba56acc1d9e648cc3614b9355eee921129ef6ec0b7b735f2fd681541e6b27687379ad08a60f542260c6a404e353cf19c229fd5126f1f55de28d814084ce3a04ba04e0634104759fd8eb6f87b4e340f54354bcbea4855597ea518", @generic="87446ee76650466224c83eb3ef48ea41265ba34c776a7fd0b99025c8366e170b3b611194f83fafda172408f5f9df857fdac7390fb4a1637e7da3c46db1c4664e5612fe73d1e26fb0a4422b11309dc4af7e21bb6770209234726ab694730eb0f7b0ca35443084a9afdb92b36e52e93e2a24fd5f699120c1c578efeef28af0f3b15a4eb95b2fabdb753fc05852bb521eb2a1e2ab89a8889af4ec58da8e0ecfe54d45ef3e6409c7808c7633631683ff4daf4dab5a0cb237f7de9e3e42c30ac34b369528ee7affc6894add3eea3cbc777918d311a5c5e4", @typed={0xc, 0x5f, @u64=0x7fffffff}, @typed={0xc, 0x83, @u64}]}, @generic="e6218df0d8ab5362fff80d9cf8f52249fe16b58d9e6ffd9c8926b677b9bb5302aac0df64a1e185bc416b2d819f26733b808df6cc31ada4a80b9301ca154a6fa642db041f6593a60b47c1ec0990e235c80daf0043c2bbc66e913a73b7f4b68f06f89a4114f1183a3674b5ea3b23f360df17bd75e12a2d0733b0aeb8b118cc2b6ae0a84df4d6b6352a06f8", @typed={0x14, 0x2f, @ipv6=@remote}, @typed={0x8, 0x3, @uid=r6}, @typed={0xc, 0x17, @u64=0x64}]}, 0x524}, {&(0x7f0000002e00)={0x17c, 0x29, 0x204, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x25, @u32=0xbf}, @generic="751c0b19ba91a17b999887ecd49534aded581d7e57ae3ad90f70d0ba062bb1b7d252d9ca8a2f1ad2b257a2aa0e0a41f51022fc0ab8add97ff0141da3e056af12105e5047431b4945d1cc4aa4ef17c1aede8ecd57b29592915fb6cee039f9874957334fd04a5ab6ff406aba17e1e2da1b9cf737d47b2a8a228c55197e70914db30022da083b19b3ce364d315cdc5a6191180161a6a2c3196f3c85ab5041394295c243b0f0c7a6", @generic, @nested={0xbc, 0x7e, [@typed={0x14, 0x83, @ipv6=@remote}, @typed={0xc, 0x1, @u64=0x7}, @typed={0xc, 0x23, @u64=0x3}, @generic="5cae562e307604b9938f32487e73ad668819ce6895ed3414ef78835480c640642698ce23770a12dcbbfaa3d1964e52fec494b4af7ef95628a757d221da23eb5161e5ffe4246d3d25f4cf08b5795d12de0410c168cd5814766265f645a069e48b21c393038a186a2cd0941cf92ac1b8d64397b1192c9391eb2b140f21eae464b9a23c603cd4394588acd8"]}]}, 0x17c}, {&(0x7f0000003000)=ANY=[@ANYBLOB="c01300002700000125bd7000fedbdf2508005600", @ANYRES32=r7, @ANYBLOB="4802850008005b00e1000000fa5f6de91e920803db7b687dd1dd48999e96e6efc6aa9e90ffc26f34d267866270d721925b39086b18f09ba40bdeeb9a434c6d917c667ae742edabe8467476a229dac00fd8c4f99049c55c4e777a6d21ebb3d4fff6806baf4308006b00", @ANYRES32=r8, @ANYBLOB="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"], 0x13c0}], 0x4, &(0x7f00000045c0)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x20, 0x20000040}, 0x8000) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) 09:38:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) personality(0xfa0000f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:22 executing program 4: 09:38:22 executing program 2: [ 1206.596862] hfs: can't find a HFS filesystem on dev loop0 [ 1206.602639] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:22 executing program 2: 09:38:22 executing program 4: [ 1206.663461] hfs: can't find a HFS filesystem on dev loop0 [ 1206.703103] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:22 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) r0 = socket(0x3, 0x5, 0x401) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) fanotify_init(0x31, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x3, 0x518, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000300], 0x0, &(0x7f0000000080), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x40, 0x88fb, 'ip6gretap0\x00', 'veth1\x00', 'ifb0\x00', 'bcsf0\x00', @local, [0xff, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0xff], 0xe0, 0xe0, 0x128, [@stp={'stp\x00', 0x48, {{0x3de23564, {0x2, 0x200, 0x6, @local, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x5ed, 0x1f, 0x2, 0x100000000, @local, [0x0, 0xff], 0x4e23, 0x4e21, 0x1, 0x1, 0x1, 0x6e70643c, 0x100, 0x1, 0x9}, 0x695, 0x200}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x8, 0x7ae8f388, 0x813}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x9, 0x5, 0x0, 'bridge_slave_0\x00', 'yam0\x00', 'team_slave_1\x00', 'ip6gretap0\x00', @random="e5d4e04ed34f", [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0xd8, 0x178, 0x1c0, [@pkttype={'pkttype\x00', 0x8, {{0x1, 0x1}}}, @mac={'mac\x00', 0x10, {{@dev={[], 0xa}}}}]}, [@common=@log={'log\x00', 0x28, {{0x9, "8af0af54c05f6eb537c74ea47430ae6091e0fd9f09b26c3c8e8272fec564", 0xc}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', 0x7}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"56ffb949c62eaaa411cdf593c3000ada3c97c24408adc2644ccf0ea82084"}}}, {{{0xd, 0x4, 0x9aca, 'bcsf0\x00', 'dummy0\x00', 'bond_slave_0\x00', 'team_slave_0\x00', @local, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x120, 0x150, 0x1a0, [@mark_m={'mark_m\x00', 0x18, {{0x7e9b, 0x100000001, 0x1, 0x1}}}, @stp={'stp\x00', 0x48, {{0x0, {0x3, 0x6, 0x80a, @dev={[], 0xe}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x3, 0xd5b, 0x1, 0xffff, @dev={[], 0xd}, [0x0, 0xff], 0x4e20, 0x4e24, 0x9, 0xf979, 0x8, 0x81, 0x1ff, 0x4, 0xffffffffffffff3d, 0xb6bf}, 0x100, 0x40}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x101}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x8, 0x7}}}}]}]}, 0x590) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) name_to_handle_at(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xc0, 0x1, "bf576b4c589f73f8ba3824cd236b15652b6f314019a4c50f45016bab7bc8e8890a5a7a3011c82b0f9e8ab8fa028752a442f0f5f4003a88f6989ced9c1a64ca4efc16a1c5fdf3b9d9e3855daf6754a9e5eb7b9a8c870e409a483f73bb3e30efd8eaba32e0cd8df90077a1650c3f2b412c9d981de3fb7577703417254911a43442244e3654b573bbf9a3bb30d0ccaf2a93da4be1b5a885f0f1e7b87d4e8cf02fe4741d270b3564a4c22c880ea191733850a7bea91409206b25"}, &(0x7f0000000280), 0x1400) [ 1206.846053] hfs: can't find a HFS filesystem on dev loop0 [ 1206.922840] hfs: can't find a HFS filesystem on dev loop0 09:38:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:22 executing program 4: 09:38:22 executing program 2: 09:38:22 executing program 0: socket$bt_hidp(0x1f, 0x3, 0x6) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) [ 1207.214638] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1207.239723] hfs: can't find a HFS filesystem on dev loop0 [ 1207.263372] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000080)={0x1, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:23 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x1000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0x10000, 0xaaaaaaaaaaaac05, &(0x7f00000001c0), 0x800800, &(0x7f0000000280)={[{@file_umask={'file_umask', 0x3d, 0x7f}}]}) 09:38:23 executing program 2: 09:38:23 executing program 4: 09:38:23 executing program 2: [ 1207.489345] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:23 executing program 4: 09:38:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:23 executing program 2: 09:38:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="8755e3ec35f2e45af10000000085fa0924b5fab4a057ac65930b6e6276"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x34a, 0x0, &(0x7f0000000180), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40000000800, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ff8000/0x8000)=nil, 0x8000}) fdatasync(r1) 09:38:23 executing program 4: 09:38:23 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x181800) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) 09:38:23 executing program 4: 09:38:23 executing program 2: [ 1207.769064] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1207.812224] hfs: can't find a HFS filesystem on dev loop0 09:38:23 executing program 4: 09:38:23 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xfffffffffffffffb, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x550, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 09:38:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000640)="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") preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/149, 0x95}], 0x1, 0x0) [ 1207.938490] hfs: can't find a HFS filesystem on dev loop0 [ 1207.938559] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:23 executing program 2: mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x9, 0x2, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000240), 0x101, 0x0) 09:38:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000100)='./bus\x00', 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x4000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000001c0), &(0x7f0000000180)='./bus\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) 09:38:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000040), 0x10000000000000ed) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000300)="450f09660f72d1ed0f01cfc443f909dca8c74424000d010000c7442402bc330000ff2c2466460f388044830f3e67420ff1ad0055000048b841000000000000000f23d80f21f835400000700f23f8470f01ca470f07", 0x55}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:23 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x3, &(0x7f0000000840)=[{&(0x7f00000002c0)="2581766aebf9634c724b8521b37d5797e4d09a4d5da49cad44c080cbf633b5cc98c5d3ff45bda658c10b21", 0x2b, 0xc7a}, {&(0x7f0000000340)="104e5ee678ae6e", 0xfffffd97, 0x8}, {&(0x7f00000008c0)="970333b43eb69594784687a8481868820f927d0b913558ed03895df5935e115a4162606276ee643703daa0be8cca2412ec4b440116179f7e15674a6fcf346506184f268c2a78dbf0113f9279cd15df160636c1c8934b1f384a9a2bc2d560566e53bbf2c84b08ca4a7bed4d7a72c9b12a641962f3306a2d342c09f5ddc5ac4e6abba80ec9f89d39dee89228f020de61e6d922f9283131cce9a7463e4945d37880fa677e729df28cc8c6db2f9ed3e863915a22ea656e55951190ae84677469f54133801a3e6467ff46558006dc659840e87939e7f5cee8a6f7e350", 0xda, 0x5}], 0x58049, &(0x7f0000000640)=ANY=[@ANYBLOB="801a09a4ead97530cf1847e79d80362918495a5456ad684f678c0c07ff31d5c3329a038ae73ad73aa5a6fba92f9640efb39a652445137a99e1d289d1d83b51fa6ae2e681078f3a1cce224f3e9315907491ff84d3a989553c28219cec00d757008b6140459fc7910c7c49ecdd047202900f24b12be72be55e5d9b7d223dd55433c3f2ef3ca5df9102c8924ed2a411193e05da87776bcab3e0c000b503086d5560e5e5fedf2a287cc728fa38195126130fad531101a7fc38346b0be6c9b4778cf7f9793953df17c34d257f59c3", @ANYRESHEX=0x0, @ANYBLOB="d66a"]) r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000480)=""/254, &(0x7f0000000580)=0xfe) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x80000001, 0x600) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x5, 0x400000) r3 = request_key(&(0x7f0000000380)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000400)='/dev/midi#\x00', 0xfffffffffffffffd) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) keyctl$set_timeout(0xf, r3, 0xd5c5) write$selinux_attr(r2, &(0x7f0000000240)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21) bind$vsock_dgram(r1, &(0x7f00000005c0)={0x28, 0x0, 0x2711, @host}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'nr0\x00'}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)=""/196, 0xc4) keyctl$session_to_parent(0x12) 09:38:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fa"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) pause() ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1208.263594] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x20000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES64=r0], @ANYRES16=0x0, @ANYBLOB="f031227d9f5529723fc8d1f9a30fba96adfcd5f91b50092b6a426c662fba112458a3c1d4cdd2abe89cc8deb4f31fa91b684a9d889edaddbd4cf17151c2b1e3400ceed4fd2c42c57f68b9a5bc3832e94b6da89ea6bce8199c859f562d69432719dedc027432d1135e9a8507885c354b31a002bebcde5a4654ca9c44"]]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffff9c, 0x8008563f, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=r4) 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1208.441877] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c3908530e4f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2def6721639176fad9512ee9b4c5de1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093faee04114663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c466"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00), 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0)}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) [ 1208.606347] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1208.757463] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x0, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1209.020255] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1209.173606] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:24 executing program 4: r0 = socket$inet6(0xa, 0x80803, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sched_rr_get_interval(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x7, 0x7, 0x7}, &(0x7f0000000400)=0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x20000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="809934b108832415243f49a936f7a035e017a99a25d8f2cb497555dba9ed810ec1e3ee92fff7665b9bf759b17318f5a9ba8c125ea8c425abc9a15a3282b5ff86f79aec93bf7c6574a25ff10397c644a05be53371e10c99a1e3913f97dcd4", 0x5e) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x4d4, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="75696435e512d236344f9b26cc36c916e015b1c3abf6f170f99dcb19f89ba777e6218437b234cf00275b57fe1ce096638c295ca437335350cab5c3bac0f55681a9fed35b9fef6e459345d5520c3155984a8fdff6e0919848bd94739287cd89870a0ab5", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000100)="84f28f969803f78f60d52bc6d523405b5073e504b0b15192878c3c7c11f8847b0522a86783e5b17d42b1a59b1173ed3296110bd2b2fce50ac6fc5fcba3b5be529b4baf0d8a2f7c98873fbb432aa4fd38f93c6ef3da2ffebe46241c10322891486bf2e81dfa4e1eddbbb140ee962ef121d77fb41a0e5404ea06ed1cbfd10557dad152a0d03d7c0f1a491f9d8ead661e7121a16fedec28fbb3d4f1837fd3c84b8b0ea2efdf", 0xa4, 0x5}, {&(0x7f00000001c0)="0694476855d671bb995a9442e5c9c607faec67c12866b8d5af18f7b024c701f9a22ddaee20ca5fccea9b62e0f0224ad0e059b0c58bd32aa7b3fb143b8e85169f3f85d5581418d9221a80ce051fd074a7f8812124fe4f599a74221026282e397ece5234e919d3528fc8e7b3df0c72e6ab50bf6994b99bb9085afd3ccc4a203443330cb67637e7b464dc597f2f9dcc15e091f2bcdb9da79ea2e15a2cb70957afde5ec9266c68606a90ac9774de6de87f", 0xaf, 0x3}, {&(0x7f0000000280)="9b0b0959f015cc7cf402d399a005babfbff18a601641a75adb2d608835578947a7efe700070c3ad484f8710ee42dca3008", 0x31, 0x5}, {&(0x7f0000000300)="5aa175fb62ad3a782ea907b47688db0b4a25d58a972b71a30b61551955989f8ac62c8bced47f01f5e4c4079a0468577786044db5568345a9bea179d1774e", 0x3e, 0x7}, {&(0x7f0000000340)="67e59a1dc99b36708843421cd0ea932fa2fc44eab8f26652477b29458e5c7235e647957040d3abd2f8df67c8ae73667811a6f966d9ccfc1a87e5b2a0921abd953bbe688dd101fe201f0fed495ef0d70e88ee61865402218d51fc84", 0x5b, 0x1}], 0x100000, &(0x7f0000000500)={[{@creator={'creator', 0x3d, "578fff86"}}, {@creator={'creator', 0x3d, "c7662bd2"}}, {@file_umask={'file_umask', 0x3d, 0x4776}}, {@part={'part', 0x3d, 0x100}}, {@dir_umask={'dir_umask', 0x3d, 0xb3}}], [{@audit='audit'}, {@obj_type={'obj_type', 0x3d, 'uid'}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, 'hfs\x00'}}]}) 09:38:24 executing program 0: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000000)) 09:38:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x0, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) 09:38:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:25 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x103000, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000140)="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", 0xfb, 0x1}, {&(0x7f0000000300)="57b0f472c3c7b69cea2d78d1b36d1c5bd26f1711c2ad42052cfa92c1b7db06ccee20042f0a7d96a96daccf1eec46701c0aa39ee6087dcb47b06966fbba14708c4e75d23052667e7472c18e110a7ee02929fc53319eb9c3bbd8f5dd9b43468f3f9534709297982cab828f260db022b1d773a97bb064e34099f8535c7f8f02898c14", 0x81, 0xffffffffffffffff}, {&(0x7f0000000240)="9f7ea97d3bb4756573b27aa2d868c19aa272a616b68b82346dcc94265929f022adbc2e739f7b68fd6f8e7aef8d377d88ae2fb04830708cf445b63b4a164b08ac5eb04f5fc1397155aa3de3172484b9be08ccb1aab54b60ac146f99", 0x5b, 0x10000}, {&(0x7f00000003c0)="06ae4830cd88de55aee36da790c55f0928ff910c4c9ee36ac867fbe68d7a6f5d3db15854c27fb3c186432a0ad259026884c9cfeb5be6856219c3798c28f73e7c23273bef12d89e08e6f76f068160931dc2c69b74d2df6a7d3603be89a83d5153737074eecaf5a1d312ef0bee46eab3ef0dcd8da18340c5345a55deadff3ac641f3a184d6e609fb2a4ea802a5c663c5d7e954e5cdcd119a90fa9c012df462d7180217c7a269b15ecf4178ab4d873a9ac3266103", 0xb3, 0x800}, {&(0x7f0000000480)="76279f4d27e1b96b353030c64cec5c59bd91f3743465af7fff53de7e1920fa0f1d9b72949971e9caad8c9c81c71e2f948d8fe3398aacbfd655da4d99ae5a0dca72ee190ff7beae3863751c756ab6ed3c41c698153d1a8caeba9b37b3ec5c70a32fa8c303ac75fe0afe51e2b7f27a5d2dc34f", 0x72, 0x7}, {&(0x7f0000000500)="06bad3eaeb290d550eb9b8b7a02fba1ccbcb78b0c28ef6217695ec7efe73bdf101ee428e144e4d70bc9fecb7ebc3a4f6df4c152d214b5eeba5777e016cf2cc9fbf67649bc88cf51cbfbb675c29285f119a5287e19d5a0aa892fc7d1cf96d72f6eb3905a7e55270519581b21d5971f0706cf7a20dc6e3b1965a5d912c730116173be1b036bfed1d0e164ca542868b2dcf4f4924c91662cd68", 0x98, 0x6}], 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) [ 1209.334388] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1209.453645] hfs: unable to parse mount options 09:38:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x0, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) [ 1209.511067] hfs: can't find a HFS filesystem on dev loop0 [ 1209.577882] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1209.613559] hfs: can't find a HFS filesystem on dev loop0 09:38:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x0, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:25 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="08c2055972d0a80f6d9483a47aa7c462072e95b684188d07589bcf1270611e5d42afbb88f97cb30933a40bfedf6387ad553a921d195fc567af0008000000000000adfb3380f1d20d4a0fdfcfcdf6e16bd7dc672cb154e5274c35bee862fcb4962c9c3f25174f1ba3a4e6e57a02b945748a655e0316d15ebc631833ef974cc04b38b7134d7806f115cc39656e1c20f416b02cb150e7b0b9472b1ad14e7cdfa1250966b72776e9dc7d8343f9969fec86d7d3733ceb54f66125923c"]) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x288942) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x2000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) poll(&(0x7f00000001c0)=[{r0}, {r1, 0x400}, {r2, 0x4000}, {r3, 0x20}], 0x4, 0x368) r4 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000040)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000380), &(0x7f0000000340)=0xfffffffffffffda8) [ 1209.747923] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c3908530e4f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2def6721639176fad9512ee9b4c5de1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093faee04114663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c466"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) 09:38:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1209.880605] hfs: unable to parse mount options 09:38:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) [ 1209.945687] hfs: unable to parse mount options [ 1209.967491] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:25 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61d8e154", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 09:38:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1210.119660] hfs: unable to parse mount options 09:38:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000ffffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000007c0)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c3908530e4f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2def6721639176fad9512ee9b4c5de1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093faee04114663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c466"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) [ 1210.142654] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1210.178256] hfs: unable to parse mount options [ 1210.254067] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:26 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="7cd4470cae647b373f92535e2400"]) kexec_load(0x5, 0x0, &(0x7f0000000140), 0x3a0000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r0, 0x7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), &(0x7f00000002c0)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0)=0xffffffffffffff00, 0x4) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x401, 0x1f, 0x7, 0x8000, 0x8810, 0x4, 0x100000001, 0x3, 0xf22b, 0x4, 0x0, 0x9d47}) [ 1210.427049] hfs: unable to parse mount options [ 1210.484688] hfs: unable to parse mount options 09:38:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x0, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) 09:38:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x880, 0x1b6) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1210.648781] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:26 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80400001, 0x2000000109002) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000000c0)={0x0, 0x100000, 0x20, 0x0, 0x2}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) 09:38:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1210.952618] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1210.990299] hfs: can't find a HFS filesystem on dev loop0 09:38:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1211.050595] hfs: can't find a HFS filesystem on dev loop0 09:38:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x97, 0x12400) syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000, 0x5, &(0x7f0000000540)=[{&(0x7f0000000180)="16ef76d259f176a8ff0f4f81696d64c1c3ccf35af5b35c4010a72571b3fc8132603e9dc54b53457882011787cf250800369ff5cc8ec213", 0x37, 0x2}, {&(0x7f00000001c0)="0e35f5652d58c177b516018ca356e0e4cd821ee0516f9c0c6511e58b25ad60a225c66c48ac332319d03815d0685a8748973548aa96142987849f1aa3c8bce1f3af9ed23c7f78c52de709ca2d055e44004eb09503e7fc7cb4c875c9ca69583cd26348b024a564656b00e34cf929d54b67f801c3599c85b416df90aaa8dffa305fe196b9b87e559e1d9dc8af4a90ab281b48771bd81e50a9e4c8e179dfc802cc54d4c041232a2c3fa3f929bf9cf4e82005", 0xb0, 0x9c}, {&(0x7f0000000280)="4125f6eff4737e96e58ec67c1fcbe6efe5d8136b6b7f4be3c55f6290163f8b5eb500cb12e3b785046dbf6d8447095779ced09c2d0e8cb75810ca80b3ee6d77ba05e3d9b46b8af3771399a8750fb24061a1fbc7f245f0eb8aa0e6a4a22db71a849a2a508faa0c64b32c744a62e62120efd66b627af7cb0f6734a988d4e2135bc720e2a89be1b0d78caba522a7b8b04af5031f72c116f2357da7a6b5d39116176b5f8f185b1d6c3661b923610fb134e2506c8c5ed5b940c9328e5287b58a8cb7500d01e6e5b2729dddfe120a7427ecf237a6", 0xd1, 0x7c6}, {&(0x7f0000000380)="2b4e27a947f2f090b949ed2a4cef27d9d9923e081b91a8e5c2bc2cdc3ab28f5d067f16e5c1dda75fc1962ef7a82637f0c1e1c78cb48fabd14cf23cfc692cb1c5fd564de6b68403b6c3bb6b4ac08cce7e0e5648e94da74b24c138eef6224c3416d342c2239310138896bccf859d158794f03b4fc1d0fc179929ff931a34e3330d9b85001a274a933aef056b0123a1905c76fc1e2dc383aa7ad2f818712677f867", 0xa0, 0x3f}, {&(0x7f0000000440)="2df34d41c872464e203558d34a21fa2f6a07b9d8c24a9bee367bc46325530fbca5c6006a720dd30d9409cc2e6cec326e3c0139b87f9a74d0abbd9af436f7b10b355b658f9ed7febad8a35cef65dd6a406cfa09d225a9a81e9daf7092524983a7a134dd182bf84718f17c0fb31120f5effe4a3cdae1f20fd65547077ee45c113dff8e9025ead634c16beb16c80dd6d0340cfd27f96c80d37676f8a61c5e388acc7c521e9222e52f1b9c73ebae66cf9461ecd6b4c1dc65ecceb83b10cbc68714268e8dc2b663705f4212e6bc4d52ac0770b7c16975", 0xd4, 0x3ff}], 0x8000, &(0x7f00000005c0)={[{@creator={'creator', 0x3d, "c3a9b02c"}}, {@file_umask={'file_umask', 0x3d, 0xff}}, {@part={'part', 0x3d, 0x200}}], [{@smackfsroot={'smackfsroot'}}, {@seclabel='seclabel'}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1eacc632aac147c75765be7a1a569745b8fa8ec0f9e548952302000001", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) [ 1211.133540] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1211.280742] hfs: creator requires a 4 character value [ 1211.311992] hfs: unable to parse mount options [ 1211.321914] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1211.395517] hfs: unable to parse mount options 09:38:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:27 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="8531"]) socketpair(0x9, 0x3, 0x4, &(0x7f0000000080)) [ 1211.525275] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1211.560837] hfs: unable to parse mount options 09:38:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1211.658549] hfs: unable to parse mount options [ 1211.743140] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1211.791940] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) 09:38:27 executing program 0: r0 = geteuid() r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x3, 0x4fc7}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75133d00000000000000000000000000013434297db07c00ceb49592aad3fa81975bf19801d2a1db01fa52f9ccfe94e687288bf10396f88c93c6143f3bfe85d9495ee390b34b7a83e2c9af7dc6e4f6abf23c000000008016b0e9b50903e83a93bb4ce92c093be1a5427a66fa894497170d91c57aee4083cfcab2cb6b9cab430d9e820e28d85b32d9f5e79a52a4815edf7ddeea5222d5560bb0ac", @ANYRESHEX=0x0, @ANYBLOB=',smackfsroot=,fowner=', @ANYRESDEC=r0, @ANYBLOB=',fsmagic=0x0000000000000800,context=sysadm_u,\x00']) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x4000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000300)={0x3, 0x80000001, 0x9, 0x400, 0x800, 0x3, 0x9f7}, 0xc) syz_mount_image$minix(&(0x7f0000000400)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0xfff, 0x1, &(0x7f0000000340)=[{&(0x7f0000000100)="26abe1cd346a7dd20d794cf04486b478485061cfe8a474b1c40b9a99d6b285bee1cbd82f08e76e42297b125c34abf5fe4202c00a3898740b42", 0x39, 0x8001}], 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000000280)="895bb5b8012a70726f63", 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fddbdf2501000000140002000800070003000000080005008762000008000500120a0000840003001400060000000000000000000000ffffe00000021400060000000000000000000000ffff7f000001080007004e220000080001000200000014000600000000000000000000000000000000010800010001000000080007004e200000080007004e24000014000600fe8000000000000000000000000000bb0800030001000000080004000300000020000200140001007f0000000000080006000100000008000400bd02000000000000000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2204208}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_delrule={0x28, 0x21, 0x8, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x8001, 0x6993, 0x0, 0x0, 0x6, 0x8}, [@FRA_SRC={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x884) geteuid() 09:38:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1211.924906] hfs: unable to parse mount options [ 1211.983757] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1212.020194] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. 09:38:27 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40400, 0x40) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000380)=[&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)="76626f786e6574309f656d3100", &(0x7f00000002c0)='\'\x00', &(0x7f0000000300)='hfs\x00'], 0x100) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x40) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0043935bd5def6a56e3fc8eeb2a882827263a24b49ff1ff45aad63e1c576a8d8037fd47e024a33778911fb6e6e20a082c7b2ec5fd4cf8b4e64a805a7f1f9c619106dc7535626b0d8f061"]) 09:38:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1212.220484] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1212.244631] hfs: can't find a HFS filesystem on dev loop0 09:38:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:28 executing program 5: accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x141000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f00000000c0)={0x100000000, 0x6, 0x2014, 0xa457, 0x4, {0x5, 0x800}, 0x1}) dup3(r4, r4, 0x80000) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:38:28 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@uid={'uid'}}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x2800, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) [ 1212.383204] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1212.456309] *** Guest State *** 09:38:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1212.488240] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1212.511440] hfs: can't find a HFS filesystem on dev loop0 [ 1212.527386] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1212.588530] CR3 = 0x0000000000000000 [ 1212.603088] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1212.615719] hfs: can't find a HFS filesystem on dev loop0 [ 1212.624013] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 1212.642089] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1212.667785] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1212.713149] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1212.773727] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1212.795891] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 09:38:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:28 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000400)=[{&(0x7f0000000080)="09d47da54ea56c492b11458cce97574fe69441e40ddafe85456728d90e3b215e1aa9e6dc2e2ad477ed119c4f9f2b4027bb25b6044e3b63ea82def8e5562e9cc15e0b224e7fb8e44094bb3d5dcacc0536f280e4ce3309229c10a204e9ccc54cbbc52bd176a45f5b3be5e2a1a6461a0223c657a6aaf270d01f83f7950962421332f45d0dcd67d24af304a08a82d4c0f59f", 0x90, 0x2}, {&(0x7f0000000140)="d36ef14562c8fb069ad54cd569a5fc55104004c4cba396bfda7d49127594c0e03c32cae6bbc4918a33a3b3583dfcbef6bed3a80f747406fe9715c8df277917c39bb598509245a123a6311a371e990ead6520bce0197df6b67f0462dde9ae73471c72488dbd55380fffc86e7e65d44cdd22ccd1d7f780e142ab93e66087122eed625d8b1b910f4b5da79f7c578eac20213d8b0f01", 0x94, 0x401}, {&(0x7f0000000300)="315f50f3ee9595d5c8260cf3dee2dd8a150c8f089cd4e2a7d06467a68c38ee2c0f86d657031254d0daa774cfd1a86e29fb50239f9c10550c3135f85b4ffed89d6b9e6e818512ad77dbbd28bb282fea4489e4b4637a59d68bafd181db20a6059050da35ec3e4ea0a9772f6e5880f8d7693b54066951703b78d9520d0108446c76eb6cae416f14d44f19089f3f826f42d88ea42ea89089f09793b4f3323100b99a74187084ef8e81b774866959dd4c04d8546e1f8f342de4ba113d1f75e3cd974ec42ecd8cbbe7fb8290385f9a172baef18448b086947aaf508eeb60b84c", 0xdd, 0x1000}, {&(0x7f0000000200)="c4edaf7f3d74be5bd72ccc7e931fa1cfcfb58fde42a6dab982da92e5f850f82ea04424bd9ff7f816bcc3d86eca0bcdb32747187b8f91e90f7190e86b63fabbe0eb6045fcf4717a09de3dd27bd00168499e226832f75a63128d7b04fad56806c4e963475393130535db06c740", 0x6c, 0x7}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="eb6ab07d2cdabb11d546a8932411ba1a691b2b6596281935485ec3b29f259252d9a6e6e78f3fce216cbe0b74257a11567869259db99eaf555fe8418d817a90acb618d8f5c1b8373c4a1a3e0d907fb29e195013dde329a042b26584e3507b3574e2181f046ba560a5bf5dd64dec85e038f3ad17523c9d8357db91f06bc0de2d51438f1a48b8f1611457b28574c111d81be83f4a190dd9471e3bdb3da45ad6006b371f8a3c535b707d5800687445dcc68d", @ANYRESHEX=0x0, @ANYBLOB]) sysfs$2(0x2, 0xc0, &(0x7f0000000280)=""/8) syz_mount_image$minix(&(0x7f00000002c0)='minix\x00', &(0x7f0000000580)='./file1\x00', 0x32, 0x1, &(0x7f0000000680)=[{&(0x7f00000005c0)="694a450ff56b0b24190f9021f21f18d470040c1e8c1dddfc4d8612ea4d3609478ec25b95fc8c2660628b3d36815dd1057726b044c82da5d28896d892d75494816da219fdc23d0b75b141245a81078e95cf1ffca1ab4ac3c5238885e6c2a6959107eba9655193fdbdf369fec319e13a2e2f23a8f85cae2164cfcca7b890954c26012fe7e10d146c4012c928d54a5104253fd5be2fe2c6dc6e3c54bf5d06f59f4075d7bf621e4e769cac73527627694158609d49b6cb0500085bd8569a7554", 0xbe, 0x48d31c7a}], 0x800, 0x0) [ 1212.827838] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1212.845658] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1212.866571] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1212.883709] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1212.892694] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1212.895912] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1212.901202] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1212.930815] hfs: unable to parse mount options [ 1212.938546] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1212.956658] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1212.970340] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 09:38:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1212.998807] hfs: unable to parse mount options [ 1212.999995] Interruptibility = 00000000 ActivityState = 00000000 [ 1213.034307] *** Host State *** 09:38:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1213.045398] RIP = 0xffffffff8120269c RSP = 0xffff880183b2f390 [ 1213.062129] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop0. [ 1213.077233] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1213.077262] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1213.171476] FSBase=00007f01fbb6b700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 1213.200087] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1213.214549] CR0=0000000080050033 CR3=00000001d4ab7000 CR4=00000000001426f0 [ 1213.227848] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 1213.243946] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1213.257316] *** Control State *** [ 1213.264586] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1213.290330] EntryControls=0000d1ff ExitControls=002fefff [ 1213.302798] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1213.317131] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 1213.332220] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1213.346332] reason=80000021 qualification=0000000000000000 [ 1213.360064] IDTVectoring: info=00000000 errcode=00000000 [ 1213.371477] TSC Offset = 0xfffffd7489e9c4f1 [ 1213.380497] EPT pointer = 0x00000001ca9f901e 09:38:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x4}, 0xf) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000480)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ca"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:38:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1213.471958] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1213.631538] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1213.877793] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1213.938945] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1214.221695] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:30 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1214.445523] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000c80400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:38:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) [ 1214.759317] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:30 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1215.013417] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:30 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1215.224795] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x3, {0xa, 0x0, 0x65, @remote, 0x405809c2}}}, 0x32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x117, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x0, &(0x7f0000000140), 0x100000000000014f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="2e8e6d0d66b80500000066b9000000000f01d9f30f7f7b3dba4100ed0f20c06635000000200f22c066b9800000c00f326635000800000f300f3806e8f2afca09180f01ca", 0x44}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:38:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:31 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:31 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1215.457493] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:31 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1215.655797] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"a523fb9656eb871ffcd7ffeb51d84e738a55eba841ae487e33cdd921e8a51ce6c924020f0ac3562dd8cdeb31deac16f46da4ac16ee8165bce439eddce671c5b0a1103ea3f86a43cbb78504f6f9c77c2f09dc27632ec6036ee52a87e321e707c0cfe15576c26d52d0334c8d4693e127b3a046a5ed7796c9c5017cfd58ec871ed76369846fea9ebfa2f7f96496abf4ef57ed1ecd930eb9e13396875f01e932804ffe8a34c8fbedd97cdfb3176ec59fbbfd20a6ff17795431c3908530e4f5f703480a5211cc6a7e2084e4a9b6aedf60b7b8084b00ca2cbed255b4cc4679c967432fea5e95119f9635e94794aab6ef54f290677fa08d0ee2cc8eae468efd02417055d3f3ccc86b629dfb878c4d115c16c75fe352cffa93648cf49577256b5d2faf0634335c97ffff966ae90cbf81250df3613c25d2789c869c9cc95a6e9d364c4c684059c593f9950e66cf81cd9f36d73fade4f0cbb795010364d13ff32c12efd91d0ebb6533700945f2db6113a630bd521eec89a74c46e1733b72d6e4d2ccee3b40f99809a9a4fb5fc2d1c53e1366d455bcbe81893100ab56b2556b55c1a0c5787356b464c3bf7011488e55f587a6d4420d46d69a74ee5bbfbcb0d6cb00aae8c3dfd6dd2e9f76d7a542f20553207b668dce69f1b463ee9166e81bb109f461b8885f15c9e525d72260ccdbd69e3345612158114780b9409ea856cb724faa6ed27ba836b35c10e7c7d43f2fa34f98f16a00f31565e16a213eaf4a7f438c89733ebe6d16328b930fd942bc64d631dd1f2aa1cc2ccdaff2324076c83e1ba4d2a0e40e010c96b42e7a4a76cd7a89ef592b9b3030f62d9fbd565ee5908ab90b42620b61e5d1e08621a31d21003cd12a450461636472fa64a7e1b98778bfb482fb4b4da31b42ee98b10f9c0f4c085d08c37ee2e3a9e4a5aff72a0ab844fcbfa224842c85f6cdfd25829c44760e3859624f891df4824f7d17938ac2def6721639176fad9512ee9b4c5de1412cf3083e1d5ee2d29b63267ccba535409da7bef05d3fa79a3ef037ee609e01ad345ee17f48b5e8510f767de35df4dfb856f7533ad88866c6b01fe345107ba7191a8809e2e014492acf9c4f35cad664198a65c55f884490f4b30b4526324be842c393f336f16bea2bf6c6b917fdb751e12ff689ab4ffa44625a8b2bc1de4e88682abe5ce9d1942792747681ad23c31046d825140987f19a9cf10323c3f50a20f35a6d1dd8ca6758296b4537a0da1a853011b777623c8774b3689897cf9264a7782470847f36a8093faee04114663438ab39d8a777fb3e10cb4a2402a939a98d387087c5ca5fd8fbc4d96ae698b5bb84a0a8484e2b85743e623a033eb5b1889ccfb4b95885bc69d4c1cb819b95e7923e557c9ec9ec10e94d1e1295fc2f256fa095036f6cfc04c414fc57fc72c120614a586089c93741e97a61c466"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) 09:38:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:31 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1215.884585] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:31 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1216.061236] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:31 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:31 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:31 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="e6"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1216.209915] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1216.441868] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:32 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:32 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:32 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1216.667832] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:32 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1216.835251] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x482001, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) setns(r4, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1217.060384] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:33 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1217.417289] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:33 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1217.611356] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:33 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1217.761208] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x482001, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) setns(r4, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1217.926747] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:33 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:33 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1218.188349] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1218.380211] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:34 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) 09:38:34 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1218.633802] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:34 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:34 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$EVIOCGREP(r0, 0x40047451, 0xfffffffffffffffd) [ 1218.910348] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:34 executing program 1: r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)) 09:38:34 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x8000000002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="e4a686e2308d4a838bd00d6db28ec369d3895e8917cf275a1fe484d623d341793141db64d2635f71ab055c8a5b8936c91cbf10db11d7105811d09b69fe32ae7dda0e740833316ae650ff48670ac574d9bd9729a721458bf305459f3022393874d6a82ca3d355967958a4caf94375d319818cb4840bc7ad7446edea590fce51d9b51345cd246b04d87984d97e9110efa64997fd2e49c2e64d42970987b30c6d291e3403fc68e90ca1c3a4efb86f380b181b01f953d8406d3d17aa39eace7608517e1e5ad50704703c3a1034e6747ca9f7d0f8cbea56d08ff9041ed606969f2885cf9e1a811ab19852c54779b0217bb4f6bf637e29c63d5b543bf629bd8675aa8b7333158e5c07be43bc93aa23577a09893b27e5"]], 0x8) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x200000007f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) 09:38:34 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1219.070266] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:34 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:34 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, &(0x7f00000004c0)=""/114, 0x72) 09:38:34 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1219.226458] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:35 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) [ 1219.386161] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:35 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:35 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:35 executing program 1: ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x110000}) prctl$getreaper(0x66, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 09:38:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:35 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1219.869192] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:35 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r1, &(0x7f0000003440)=[{&(0x7f0000000140)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31c958ae5e13a9e058a0f9c773d668fe6afd6ae2470a417760376ff88272052872baf485c50023934860653afae3d24e721316", 0xc0}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xec6b}) ioctl$TCSETSF(r2, 0x5412, &(0x7f00000000c0)) 09:38:35 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1220.043004] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:35 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:35 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1220.219402] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:36 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:36 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x2) 09:38:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000feffff0700", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:36 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1220.730919] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:36 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:36 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, &(0x7f00000005c0)=""/113, 0x46) 09:38:36 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1220.851244] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:36 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:36 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000480)=""/18, 0x12}], 0x7, &(0x7f0000000980)=""/204, 0xcc, 0x100000001}, 0x3dbb}], 0x1, 0x100, &(0x7f0000000b00)={r3, r4+10000000}) [ 1221.008239] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1221.298538] attempt to access beyond end of device [ 1221.303791] loop1: rw=1, want=130, limit=112 [ 1221.340877] buffer_io_error: 10 callbacks suppressed [ 1221.340888] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1221.437146] attempt to access beyond end of device [ 1221.486125] loop1: rw=1, want=131, limit=112 [ 1221.522451] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1221.575818] attempt to access beyond end of device [ 1221.619361] loop1: rw=1, want=132, limit=112 [ 1221.623810] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1221.694658] attempt to access beyond end of device 09:38:37 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:37 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:37 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xff, 0x8400) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1221.771373] loop1: rw=1, want=133, limit=112 [ 1221.782952] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1221.826079] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1221.897712] attempt to access beyond end of device [ 1221.902716] loop1: rw=1, want=142, limit=112 [ 1221.907143] Buffer I/O error on dev loop1, logical block 141, lost async page write 09:38:37 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1222.045596] attempt to access beyond end of device [ 1222.099280] loop1: rw=1, want=143, limit=112 [ 1222.103732] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1222.111702] attempt to access beyond end of device [ 1222.116657] loop1: rw=1, want=144, limit=112 [ 1222.121183] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1222.129059] attempt to access beyond end of device [ 1222.134012] loop1: rw=1, want=145, limit=112 [ 1222.138511] Buffer I/O error on dev loop1, logical block 144, lost async page write 09:38:37 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1222.153439] attempt to access beyond end of device [ 1222.158445] loop1: rw=1, want=4241, limit=112 [ 1222.174358] attempt to access beyond end of device [ 1222.179354] loop1: rw=1, want=8337, limit=112 [ 1222.195208] attempt to access beyond end of device 09:38:37 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:37 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1222.196358] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1222.200202] loop1: rw=1, want=12433, limit=112 [ 1222.242547] attempt to access beyond end of device [ 1222.260718] loop1: rw=1, want=16529, limit=112 09:38:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1222.585209] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1222.597926] attempt to access beyond end of device [ 1222.611071] loop1: rw=1, want=20033, limit=112 09:38:38 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000480)=""/18, 0x12}], 0x7, &(0x7f0000000980)=""/204, 0xcc, 0x100000001}, 0x3dbb}], 0x1, 0x100, &(0x7f0000000b00)={r3, r4+10000000}) 09:38:38 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:38 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:38 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1222.667139] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1222.675214] FAT-fs (loop1): Filesystem has been set read-only [ 1222.781999] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1223.018076] attempt to access beyond end of device [ 1223.023061] loop1: rw=1, want=130, limit=112 [ 1223.027487] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1223.139279] attempt to access beyond end of device [ 1223.178848] loop1: rw=1, want=131, limit=112 [ 1223.208740] Buffer I/O error on dev loop1, logical block 130, lost async page write 09:38:38 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:38 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:39 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1223.258898] attempt to access beyond end of device [ 1223.274437] loop1: rw=1, want=132, limit=112 [ 1223.289352] attempt to access beyond end of device [ 1223.357399] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1223.367620] loop1: rw=1, want=133, limit=112 [ 1223.393886] attempt to access beyond end of device [ 1223.429422] loop1: rw=1, want=142, limit=112 09:38:39 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1223.464373] attempt to access beyond end of device 09:38:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1223.514383] loop1: rw=1, want=143, limit=112 [ 1223.554442] attempt to access beyond end of device [ 1223.600962] loop1: rw=1, want=144, limit=112 [ 1223.644867] attempt to access beyond end of device [ 1223.680558] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1223.700621] loop1: rw=1, want=145, limit=112 09:38:39 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000480)=""/18, 0x12}], 0x7, &(0x7f0000000980)=""/204, 0xcc, 0x100000001}, 0x3dbb}], 0x1, 0x100, &(0x7f0000000b00)={r3, r4+10000000}) 09:38:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1223.793205] attempt to access beyond end of device 09:38:39 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:39 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1223.822618] loop1: rw=1, want=4241, limit=112 [ 1223.831804] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:39 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1223.900619] attempt to access beyond end of device [ 1223.905625] loop1: rw=1, want=8337, limit=112 09:38:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1223.984964] attempt to access beyond end of device 09:38:39 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1224.009536] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1224.028105] loop1: rw=1, want=11033, limit=112 09:38:39 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1224.051361] attempt to access beyond end of device [ 1224.078357] loop1: rw=1, want=11062, limit=112 [ 1224.102439] attempt to access beyond end of device [ 1224.118999] loop1: rw=1, want=11063, limit=112 [ 1224.140101] attempt to access beyond end of device [ 1224.155912] loop1: rw=1, want=11064, limit=112 [ 1224.168433] attempt to access beyond end of device [ 1224.181290] loop1: rw=1, want=11065, limit=112 [ 1224.190443] attempt to access beyond end of device [ 1224.201242] loop1: rw=1, want=11086, limit=112 09:38:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1224.211504] attempt to access beyond end of device [ 1224.222254] loop1: rw=1, want=11087, limit=112 [ 1224.237955] attempt to access beyond end of device [ 1224.242913] loop1: rw=1, want=11088, limit=112 [ 1224.247529] attempt to access beyond end of device [ 1224.253214] loop1: rw=1, want=11089, limit=112 09:38:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:39 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:39 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1224.271113] attempt to access beyond end of device [ 1224.288446] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1224.288691] loop1: rw=1, want=11138, limit=112 [ 1224.316011] attempt to access beyond end of device [ 1224.334043] loop1: rw=1, want=11139, limit=112 [ 1224.340758] attempt to access beyond end of device [ 1224.345718] loop1: rw=1, want=11140, limit=112 [ 1224.345756] attempt to access beyond end of device [ 1224.345771] loop1: rw=1, want=11141, limit=112 [ 1224.368627] attempt to access beyond end of device [ 1224.380434] loop1: rw=1, want=11150, limit=112 [ 1224.385070] attempt to access beyond end of device [ 1224.390122] loop1: rw=1, want=11151, limit=112 [ 1224.394755] attempt to access beyond end of device [ 1224.399828] loop1: rw=1, want=11152, limit=112 [ 1224.404455] attempt to access beyond end of device [ 1224.409822] loop1: rw=1, want=11153, limit=112 [ 1224.424575] attempt to access beyond end of device [ 1224.447655] loop1: rw=1, want=15249, limit=112 [ 1224.465550] attempt to access beyond end of device [ 1224.480852] loop1: rw=1, want=19345, limit=112 [ 1224.502275] attempt to access beyond end of device [ 1224.507232] loop1: rw=1, want=23441, limit=112 [ 1224.522338] attempt to access beyond end of device [ 1224.527354] loop1: rw=1, want=27537, limit=112 [ 1224.539739] attempt to access beyond end of device [ 1224.544793] loop1: rw=1, want=30289, limit=112 09:38:41 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r1, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f0000000400)=""/5, 0x5}, {&(0x7f0000000480)=""/18, 0x12}], 0x7, &(0x7f0000000980)=""/204, 0xcc, 0x100000001}, 0x3dbb}], 0x1, 0x100, &(0x7f0000000b00)={r3, r4+10000000}) 09:38:41 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:41 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:41 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1225.883120] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1225.900394] attempt to access beyond end of device [ 1225.905591] loop1: rw=1, want=130, limit=112 [ 1225.925316] attempt to access beyond end of device [ 1225.947626] loop1: rw=1, want=131, limit=112 [ 1225.978035] attempt to access beyond end of device 09:38:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1226.009358] loop1: rw=1, want=132, limit=112 [ 1226.020930] attempt to access beyond end of device [ 1226.026059] loop1: rw=1, want=133, limit=112 [ 1226.031080] attempt to access beyond end of device [ 1226.036198] loop1: rw=1, want=142, limit=112 [ 1226.041202] attempt to access beyond end of device [ 1226.046299] loop1: rw=1, want=143, limit=112 [ 1226.051256] attempt to access beyond end of device 09:38:41 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1226.056700] loop1: rw=1, want=144, limit=112 [ 1226.061803] attempt to access beyond end of device [ 1226.066890] loop1: rw=1, want=145, limit=112 [ 1226.084537] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:41 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:41 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1226.131197] attempt to access beyond end of device 09:38:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1226.176354] loop1: rw=1, want=3801, limit=112 [ 1226.194509] attempt to access beyond end of device [ 1226.214241] loop1: rw=1, want=3830, limit=112 [ 1226.227143] attempt to access beyond end of device [ 1226.241527] loop1: rw=1, want=3831, limit=112 [ 1226.253030] attempt to access beyond end of device [ 1226.264999] loop1: rw=1, want=3832, limit=112 [ 1226.270530] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1226.283474] attempt to access beyond end of device [ 1226.294474] loop1: rw=1, want=3833, limit=112 [ 1226.313442] attempt to access beyond end of device [ 1226.335243] loop1: rw=1, want=3854, limit=112 [ 1226.349125] buffer_io_error: 34 callbacks suppressed [ 1226.349135] Buffer I/O error on dev loop1, logical block 3853, lost async page write [ 1226.387703] attempt to access beyond end of device [ 1226.392688] loop1: rw=1, want=3855, limit=112 [ 1226.397193] Buffer I/O error on dev loop1, logical block 3854, lost async page write [ 1226.425434] attempt to access beyond end of device [ 1226.436767] loop1: rw=1, want=3856, limit=112 [ 1226.442655] Buffer I/O error on dev loop1, logical block 3855, lost async page write [ 1226.451039] attempt to access beyond end of device [ 1226.456121] loop1: rw=1, want=3857, limit=112 [ 1226.461183] Buffer I/O error on dev loop1, logical block 3856, lost async page write [ 1226.469537] attempt to access beyond end of device [ 1226.474638] loop1: rw=1, want=3906, limit=112 [ 1226.480455] Buffer I/O error on dev loop1, logical block 3905, lost async page write [ 1226.497421] attempt to access beyond end of device [ 1226.518968] loop1: rw=1, want=3907, limit=112 [ 1226.523499] Buffer I/O error on dev loop1, logical block 3906, lost async page write [ 1226.548882] attempt to access beyond end of device [ 1226.553847] loop1: rw=1, want=3908, limit=112 [ 1226.558427] Buffer I/O error on dev loop1, logical block 3907, lost async page write [ 1226.566341] attempt to access beyond end of device [ 1226.571356] loop1: rw=1, want=3909, limit=112 [ 1226.575869] Buffer I/O error on dev loop1, logical block 3908, lost async page write [ 1226.597890] attempt to access beyond end of device [ 1226.602854] loop1: rw=1, want=3918, limit=112 [ 1226.607367] Buffer I/O error on dev loop1, logical block 3917, lost async page write [ 1226.628021] attempt to access beyond end of device [ 1226.632979] loop1: rw=1, want=3919, limit=112 [ 1226.637492] Buffer I/O error on dev loop1, logical block 3918, lost async page write [ 1226.657959] attempt to access beyond end of device [ 1226.662918] loop1: rw=1, want=3920, limit=112 [ 1226.667448] attempt to access beyond end of device [ 1226.687824] loop1: rw=1, want=3921, limit=112 [ 1226.699475] attempt to access beyond end of device [ 1226.704429] loop1: rw=1, want=8017, limit=112 [ 1226.717980] attempt to access beyond end of device [ 1226.722933] loop1: rw=1, want=12113, limit=112 [ 1226.735252] attempt to access beyond end of device [ 1226.740238] loop1: rw=1, want=16209, limit=112 [ 1226.754317] attempt to access beyond end of device [ 1226.759353] loop1: rw=1, want=20305, limit=112 [ 1226.772471] attempt to access beyond end of device [ 1226.777429] loop1: rw=1, want=24401, limit=112 [ 1226.790599] attempt to access beyond end of device [ 1226.795688] loop1: rw=1, want=28225, limit=112 [ 1227.368310] attempt to access beyond end of device [ 1227.373300] loop1: rw=1, want=130, limit=112 [ 1227.399016] attempt to access beyond end of device [ 1227.403979] loop1: rw=1, want=131, limit=112 [ 1227.415569] attempt to access beyond end of device [ 1227.426264] loop1: rw=1, want=132, limit=112 [ 1227.435350] attempt to access beyond end of device [ 1227.487743] loop1: rw=1, want=133, limit=112 [ 1227.492231] attempt to access beyond end of device [ 1227.497185] loop1: rw=1, want=142, limit=112 [ 1227.555332] attempt to access beyond end of device [ 1227.571442] loop1: rw=1, want=143, limit=112 [ 1227.589869] attempt to access beyond end of device [ 1227.607008] loop1: rw=1, want=144, limit=112 [ 1227.622584] attempt to access beyond end of device [ 1227.640168] loop1: rw=1, want=145, limit=112 [ 1227.679144] attempt to access beyond end of device [ 1227.687253] loop1: rw=1, want=4241, limit=112 [ 1227.705502] attempt to access beyond end of device [ 1227.710613] loop1: rw=1, want=8337, limit=112 [ 1227.739921] attempt to access beyond end of device [ 1227.750713] loop1: rw=1, want=12433, limit=112 [ 1227.774594] attempt to access beyond end of device [ 1227.785374] loop1: rw=1, want=13337, limit=112 [ 1227.798151] attempt to access beyond end of device [ 1227.808938] loop1: rw=1, want=13366, limit=112 [ 1227.819381] attempt to access beyond end of device [ 1227.824605] loop1: rw=1, want=13367, limit=112 [ 1227.829723] attempt to access beyond end of device [ 1227.834834] loop1: rw=1, want=13368, limit=112 [ 1227.839971] attempt to access beyond end of device [ 1227.845171] loop1: rw=1, want=13369, limit=112 [ 1227.850279] attempt to access beyond end of device [ 1227.855497] loop1: rw=1, want=13390, limit=112 [ 1227.860610] attempt to access beyond end of device [ 1227.865760] loop1: rw=1, want=13391, limit=112 [ 1227.870913] attempt to access beyond end of device [ 1227.876007] loop1: rw=1, want=13392, limit=112 [ 1227.881291] attempt to access beyond end of device [ 1227.886508] loop1: rw=1, want=13393, limit=112 [ 1227.891631] attempt to access beyond end of device [ 1227.896764] loop1: rw=1, want=13442, limit=112 [ 1227.902006] attempt to access beyond end of device [ 1227.907254] loop1: rw=1, want=13443, limit=112 [ 1227.912357] attempt to access beyond end of device [ 1227.927618] loop1: rw=1, want=13444, limit=112 [ 1227.937992] attempt to access beyond end of device [ 1227.942956] loop1: rw=1, want=13445, limit=112 09:38:43 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)) 09:38:43 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:43 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:43 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1227.959093] attempt to access beyond end of device [ 1227.964052] loop1: rw=1, want=13454, limit=112 [ 1227.977951] attempt to access beyond end of device [ 1227.982912] loop1: rw=1, want=13455, limit=112 [ 1227.989703] attempt to access beyond end of device 09:38:43 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1228.019404] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1228.052360] loop1: rw=1, want=13456, limit=112 [ 1228.057004] attempt to access beyond end of device 09:38:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1228.098141] loop1: rw=1, want=13457, limit=112 [ 1228.134393] attempt to access beyond end of device 09:38:43 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:43 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1228.155954] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1228.158396] loop1: rw=1, want=17553, limit=112 09:38:43 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1228.233007] attempt to access beyond end of device [ 1228.249119] loop1: rw=1, want=21649, limit=112 [ 1228.294138] attempt to access beyond end of device [ 1228.313090] loop1: rw=1, want=25745, limit=112 [ 1228.341649] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1228.372844] attempt to access beyond end of device [ 1228.396126] loop1: rw=1, want=27737, limit=112 [ 1228.928069] attempt to access beyond end of device [ 1228.933102] loop1: rw=1, want=130, limit=112 [ 1228.937550] attempt to access beyond end of device [ 1229.006263] loop1: rw=1, want=131, limit=112 [ 1229.026315] attempt to access beyond end of device [ 1229.034045] loop1: rw=1, want=132, limit=112 [ 1229.044720] attempt to access beyond end of device [ 1229.055764] loop1: rw=1, want=133, limit=112 [ 1229.066115] attempt to access beyond end of device [ 1229.076940] loop1: rw=1, want=142, limit=112 [ 1229.086275] attempt to access beyond end of device [ 1229.097151] loop1: rw=1, want=143, limit=112 [ 1229.107653] attempt to access beyond end of device [ 1229.117934] loop1: rw=1, want=144, limit=112 [ 1229.127076] attempt to access beyond end of device [ 1229.138218] loop1: rw=1, want=145, limit=112 [ 1229.163983] attempt to access beyond end of device [ 1229.174775] loop1: rw=1, want=4241, limit=112 [ 1229.203498] attempt to access beyond end of device [ 1229.214324] loop1: rw=1, want=6361, limit=112 [ 1229.227770] attempt to access beyond end of device [ 1229.238518] loop1: rw=1, want=6390, limit=112 [ 1229.248083] attempt to access beyond end of device [ 1229.258973] loop1: rw=1, want=6391, limit=112 [ 1229.269337] attempt to access beyond end of device [ 1229.280116] loop1: rw=1, want=6392, limit=112 [ 1229.290486] attempt to access beyond end of device [ 1229.301444] loop1: rw=1, want=6393, limit=112 [ 1229.310688] attempt to access beyond end of device [ 1229.322894] loop1: rw=1, want=6414, limit=112 [ 1229.332105] attempt to access beyond end of device [ 1229.342838] loop1: rw=1, want=6415, limit=112 [ 1229.353206] attempt to access beyond end of device [ 1229.364027] loop1: rw=1, want=6416, limit=112 [ 1229.374436] attempt to access beyond end of device [ 1229.385253] loop1: rw=1, want=6417, limit=112 [ 1229.394555] attempt to access beyond end of device [ 1229.406501] loop1: rw=1, want=6466, limit=112 [ 1229.415772] attempt to access beyond end of device [ 1229.426582] loop1: rw=1, want=6467, limit=112 [ 1229.437111] attempt to access beyond end of device [ 1229.448034] loop1: rw=1, want=6468, limit=112 [ 1229.457236] attempt to access beyond end of device [ 1229.468171] loop1: rw=1, want=6469, limit=112 [ 1229.478085] attempt to access beyond end of device [ 1229.489005] loop1: rw=1, want=6478, limit=112 [ 1229.499391] attempt to access beyond end of device [ 1229.510313] loop1: rw=1, want=6479, limit=112 [ 1229.520698] attempt to access beyond end of device [ 1229.531509] loop1: rw=1, want=6480, limit=112 [ 1229.540746] attempt to access beyond end of device [ 1229.552653] loop1: rw=1, want=6481, limit=112 [ 1229.576514] attempt to access beyond end of device [ 1229.588449] loop1: rw=1, want=10577, limit=112 09:38:45 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) clock_gettime(0x0, &(0x7f0000000ac0)) 09:38:45 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:45 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:45 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1229.620389] attempt to access beyond end of device [ 1229.625357] loop1: rw=1, want=14673, limit=112 [ 1229.639947] attempt to access beyond end of device [ 1229.644910] loop1: rw=1, want=18769, limit=112 [ 1229.671758] attempt to access beyond end of device [ 1229.674420] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1229.676737] loop1: rw=1, want=22865, limit=112 [ 1229.700767] attempt to access beyond end of device [ 1229.705870] loop1: rw=1, want=26961, limit=112 [ 1229.716821] attempt to access beyond end of device [ 1229.721970] loop1: rw=1, want=28297, limit=112 09:38:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1229.805504] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:45 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:45 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:45 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:45 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1229.970628] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1230.004546] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1230.445874] attempt to access beyond end of device [ 1230.465990] loop1: rw=1, want=130, limit=112 [ 1230.499312] attempt to access beyond end of device [ 1230.504362] loop1: rw=1, want=131, limit=112 [ 1230.542152] attempt to access beyond end of device [ 1230.547117] loop1: rw=1, want=132, limit=112 [ 1230.577711] attempt to access beyond end of device [ 1230.582787] loop1: rw=1, want=133, limit=112 [ 1230.608781] attempt to access beyond end of device [ 1230.613882] loop1: rw=1, want=142, limit=112 [ 1230.618845] attempt to access beyond end of device [ 1230.627304] loop1: rw=1, want=143, limit=112 [ 1230.636550] attempt to access beyond end of device [ 1230.648458] loop1: rw=1, want=144, limit=112 [ 1230.657546] attempt to access beyond end of device [ 1230.668452] loop1: rw=1, want=145, limit=112 [ 1230.693598] attempt to access beyond end of device [ 1230.705522] loop1: rw=1, want=4241, limit=112 [ 1230.742447] attempt to access beyond end of device [ 1230.753194] loop1: rw=1, want=8337, limit=112 [ 1230.775155] attempt to access beyond end of device [ 1230.785934] loop1: rw=1, want=9113, limit=112 [ 1230.796966] attempt to access beyond end of device [ 1230.808905] loop1: rw=1, want=9142, limit=112 [ 1230.818140] attempt to access beyond end of device [ 1230.830112] loop1: rw=1, want=9143, limit=112 [ 1230.839374] attempt to access beyond end of device [ 1230.851040] loop1: rw=1, want=9144, limit=112 [ 1230.861490] attempt to access beyond end of device [ 1230.872343] loop1: rw=1, want=9145, limit=112 [ 1230.882650] attempt to access beyond end of device [ 1230.893499] loop1: rw=1, want=9166, limit=112 [ 1230.902759] attempt to access beyond end of device [ 1230.914654] loop1: rw=1, want=9167, limit=112 [ 1230.923958] attempt to access beyond end of device [ 1230.934815] loop1: rw=1, want=9168, limit=112 [ 1230.945206] attempt to access beyond end of device [ 1230.957305] loop1: rw=1, want=9169, limit=112 [ 1230.967817] attempt to access beyond end of device [ 1230.977406] loop1: rw=1, want=9218, limit=112 [ 1230.987893] attempt to access beyond end of device [ 1230.998616] loop1: rw=1, want=9219, limit=112 [ 1231.009139] attempt to access beyond end of device [ 1231.019953] loop1: rw=1, want=9220, limit=112 [ 1231.030362] attempt to access beyond end of device [ 1231.041228] loop1: rw=1, want=9221, limit=112 [ 1231.050427] attempt to access beyond end of device [ 1231.063297] loop1: rw=1, want=9230, limit=112 [ 1231.072563] attempt to access beyond end of device [ 1231.083369] loop1: rw=1, want=9231, limit=112 [ 1231.097734] attempt to access beyond end of device [ 1231.102717] loop1: rw=1, want=9232, limit=112 [ 1231.107253] attempt to access beyond end of device 09:38:46 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 09:38:46 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:46 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:46 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x10000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1231.112748] loop1: rw=1, want=9233, limit=112 09:38:46 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1231.161219] attempt to access beyond end of device [ 1231.173578] loop1: rw=1, want=13329, limit=112 [ 1231.187939] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1231.213008] attempt to access beyond end of device 09:38:46 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:46 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1231.236089] loop1: rw=1, want=17425, limit=112 [ 1231.284600] attempt to access beyond end of device 09:38:47 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1231.317642] loop1: rw=1, want=21521, limit=112 09:38:47 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1231.365894] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1231.379900] attempt to access beyond end of device [ 1231.384865] loop1: rw=1, want=25617, limit=112 [ 1231.442705] attempt to access beyond end of device [ 1231.462442] loop1: rw=1, want=27913, limit=112 [ 1231.978088] attempt to access beyond end of device [ 1231.983074] loop1: rw=1, want=130, limit=112 [ 1231.987503] buffer_io_error: 74 callbacks suppressed [ 1231.987513] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1232.023796] attempt to access beyond end of device [ 1232.034501] loop1: rw=1, want=131, limit=112 [ 1232.044699] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1232.085171] attempt to access beyond end of device [ 1232.099969] loop1: rw=1, want=132, limit=112 [ 1232.124025] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1232.168924] attempt to access beyond end of device [ 1232.173894] loop1: rw=1, want=133, limit=112 [ 1232.199251] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1232.207097] attempt to access beyond end of device [ 1232.228842] loop1: rw=1, want=142, limit=112 [ 1232.239267] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 1232.256338] attempt to access beyond end of device [ 1232.267148] loop1: rw=1, want=143, limit=112 [ 1232.276412] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1232.293496] attempt to access beyond end of device [ 1232.304328] loop1: rw=1, want=144, limit=112 [ 1232.314600] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1232.330593] attempt to access beyond end of device [ 1232.341467] loop1: rw=1, want=145, limit=112 [ 1232.351748] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 1232.383335] attempt to access beyond end of device [ 1232.395237] loop1: rw=1, want=4241, limit=112 [ 1232.430227] attempt to access beyond end of device [ 1232.445087] loop1: rw=1, want=8337, limit=112 [ 1232.472771] attempt to access beyond end of device [ 1232.483572] loop1: rw=1, want=10393, limit=112 [ 1232.498950] attempt to access beyond end of device [ 1232.509729] loop1: rw=1, want=10422, limit=112 [ 1232.520362] Buffer I/O error on dev loop1, logical block 10421, lost async page write [ 1232.537655] attempt to access beyond end of device [ 1232.547924] loop1: rw=1, want=10423, limit=112 [ 1232.557934] Buffer I/O error on dev loop1, logical block 10422, lost async page write [ 1232.575171] attempt to access beyond end of device [ 1232.587090] loop1: rw=1, want=10424, limit=112 [ 1232.596575] attempt to access beyond end of device [ 1232.608604] loop1: rw=1, want=10425, limit=112 [ 1232.618097] attempt to access beyond end of device 09:38:48 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) 09:38:48 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:48 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1232.628970] loop1: rw=1, want=10446, limit=112 [ 1232.647107] attempt to access beyond end of device [ 1232.657556] loop1: rw=1, want=10447, limit=112 [ 1232.665511] attempt to access beyond end of device [ 1232.721749] loop1: rw=1, want=10448, limit=112 [ 1232.726425] attempt to access beyond end of device [ 1232.736763] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:48 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1232.779862] loop1: rw=1, want=10449, limit=112 09:38:48 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1232.817739] attempt to access beyond end of device [ 1232.822732] loop1: rw=1, want=10498, limit=112 [ 1232.828771] attempt to access beyond end of device [ 1232.839863] loop1: rw=1, want=10499, limit=112 [ 1232.850148] attempt to access beyond end of device [ 1232.861920] loop1: rw=1, want=10500, limit=112 09:38:48 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1232.892238] attempt to access beyond end of device [ 1232.910697] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1232.912460] loop1: rw=1, want=10501, limit=112 09:38:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1232.967059] attempt to access beyond end of device [ 1232.989712] loop1: rw=1, want=10510, limit=112 [ 1232.994367] attempt to access beyond end of device [ 1233.019533] loop1: rw=1, want=10511, limit=112 [ 1233.032201] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1233.035183] attempt to access beyond end of device [ 1233.045317] loop1: rw=1, want=10512, limit=112 [ 1233.065207] attempt to access beyond end of device [ 1233.080902] loop1: rw=1, want=10513, limit=112 [ 1233.099213] attempt to access beyond end of device [ 1233.104172] loop1: rw=1, want=14609, limit=112 [ 1233.124028] attempt to access beyond end of device [ 1233.129038] loop1: rw=1, want=18705, limit=112 [ 1233.143777] attempt to access beyond end of device [ 1233.150156] loop1: rw=1, want=22801, limit=112 [ 1233.164761] attempt to access beyond end of device [ 1233.169823] loop1: rw=1, want=26897, limit=112 [ 1233.179143] attempt to access beyond end of device [ 1233.184105] loop1: rw=1, want=27761, limit=112 [ 1233.716950] attempt to access beyond end of device [ 1233.735290] loop1: rw=1, want=130, limit=112 [ 1233.774772] attempt to access beyond end of device [ 1233.811904] loop1: rw=1, want=131, limit=112 [ 1233.816416] attempt to access beyond end of device [ 1233.862880] loop1: rw=1, want=132, limit=112 [ 1233.867366] attempt to access beyond end of device [ 1233.904404] loop1: rw=1, want=133, limit=112 [ 1233.916289] attempt to access beyond end of device [ 1233.931386] loop1: rw=1, want=142, limit=112 [ 1233.941700] attempt to access beyond end of device [ 1233.954230] loop1: rw=1, want=143, limit=112 [ 1233.964585] attempt to access beyond end of device [ 1233.975414] loop1: rw=1, want=144, limit=112 [ 1233.985769] attempt to access beyond end of device [ 1233.996593] loop1: rw=1, want=145, limit=112 [ 1234.021477] attempt to access beyond end of device [ 1234.033411] loop1: rw=1, want=4241, limit=112 [ 1234.069753] attempt to access beyond end of device [ 1234.080528] loop1: rw=1, want=8337, limit=112 [ 1234.107298] attempt to access beyond end of device [ 1234.118086] loop1: rw=1, want=10713, limit=112 [ 1234.132426] attempt to access beyond end of device [ 1234.143211] loop1: rw=1, want=10742, limit=112 [ 1234.153721] attempt to access beyond end of device [ 1234.164553] loop1: rw=1, want=10743, limit=112 [ 1234.175039] attempt to access beyond end of device [ 1234.185819] loop1: rw=1, want=10744, limit=112 [ 1234.196501] attempt to access beyond end of device [ 1234.208467] loop1: rw=1, want=10745, limit=112 [ 1234.218222] attempt to access beyond end of device [ 1234.229165] loop1: rw=1, want=10766, limit=112 [ 1234.239604] attempt to access beyond end of device [ 1234.250356] loop1: rw=1, want=10767, limit=112 [ 1234.260797] attempt to access beyond end of device [ 1234.271548] loop1: rw=1, want=10768, limit=112 [ 1234.280845] attempt to access beyond end of device [ 1234.291577] loop1: rw=1, want=10769, limit=112 [ 1234.302057] attempt to access beyond end of device [ 1234.312813] loop1: rw=1, want=10818, limit=112 [ 1234.324621] attempt to access beyond end of device [ 1234.335457] loop1: rw=1, want=10819, limit=112 [ 1234.344798] attempt to access beyond end of device [ 1234.355595] loop1: rw=1, want=10820, limit=112 [ 1234.374493] attempt to access beyond end of device 09:38:50 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 09:38:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:38:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:50 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:50 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1234.385139] loop1: rw=1, want=10821, limit=112 [ 1234.391715] attempt to access beyond end of device [ 1234.446389] loop1: rw=1, want=10830, limit=112 [ 1234.470780] attempt to access beyond end of device [ 1234.485508] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1234.509539] loop1: rw=1, want=10831, limit=112 [ 1234.514184] attempt to access beyond end of device 09:38:50 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:50 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1234.514203] loop1: rw=1, want=10832, limit=112 [ 1234.537994] attempt to access beyond end of device [ 1234.543063] loop1: rw=1, want=10833, limit=112 [ 1234.554049] attempt to access beyond end of device [ 1234.597786] loop1: rw=1, want=14929, limit=112 09:38:50 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1234.642381] attempt to access beyond end of device [ 1234.647348] loop1: rw=1, want=19025, limit=112 [ 1234.662125] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:50 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1234.698334] attempt to access beyond end of device [ 1234.703297] loop1: rw=1, want=23121, limit=112 [ 1234.717911] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1234.743024] attempt to access beyond end of device [ 1234.767816] loop1: rw=1, want=27217, limit=112 [ 1234.776514] attempt to access beyond end of device [ 1234.807705] loop1: rw=1, want=27681, limit=112 [ 1235.648083] attempt to access beyond end of device [ 1235.653065] loop1: rw=1, want=130, limit=112 [ 1235.668486] attempt to access beyond end of device [ 1235.673440] loop1: rw=1, want=131, limit=112 [ 1235.717762] attempt to access beyond end of device [ 1235.722716] loop1: rw=1, want=132, limit=112 [ 1235.727151] attempt to access beyond end of device [ 1235.748875] loop1: rw=1, want=133, limit=112 [ 1235.759696] attempt to access beyond end of device [ 1235.770447] loop1: rw=1, want=142, limit=112 [ 1235.780713] attempt to access beyond end of device [ 1235.793062] loop1: rw=1, want=143, limit=112 [ 1235.808408] attempt to access beyond end of device [ 1235.819204] loop1: rw=1, want=144, limit=112 [ 1235.829460] attempt to access beyond end of device [ 1235.840312] loop1: rw=1, want=145, limit=112 [ 1235.866498] attempt to access beyond end of device [ 1235.876149] loop1: rw=1, want=4241, limit=112 [ 1235.912349] attempt to access beyond end of device [ 1235.924294] loop1: rw=1, want=8337, limit=112 [ 1235.947836] attempt to access beyond end of device [ 1235.959774] loop1: rw=1, want=9945, limit=112 [ 1235.971552] attempt to access beyond end of device [ 1235.983509] loop1: rw=1, want=9974, limit=112 [ 1235.993944] attempt to access beyond end of device [ 1236.004762] loop1: rw=1, want=9975, limit=112 [ 1236.014000] attempt to access beyond end of device [ 1236.024794] loop1: rw=1, want=9976, limit=112 [ 1236.035154] attempt to access beyond end of device [ 1236.045956] loop1: rw=1, want=9977, limit=112 [ 1236.056326] attempt to access beyond end of device [ 1236.067125] loop1: rw=1, want=9998, limit=112 [ 1236.076463] attempt to access beyond end of device [ 1236.087256] loop1: rw=1, want=9999, limit=112 [ 1236.097740] attempt to access beyond end of device [ 1236.107900] loop1: rw=1, want=10000, limit=112 [ 1236.117916] attempt to access beyond end of device [ 1236.128673] loop1: rw=1, want=10001, limit=112 [ 1236.139240] attempt to access beyond end of device [ 1236.150102] loop1: rw=1, want=10050, limit=112 [ 1236.160525] attempt to access beyond end of device [ 1236.171576] loop1: rw=1, want=10051, limit=112 [ 1236.180859] attempt to access beyond end of device [ 1236.191659] loop1: rw=1, want=10052, limit=112 [ 1236.202097] attempt to access beyond end of device [ 1236.212831] loop1: rw=1, want=10053, limit=112 [ 1236.223245] attempt to access beyond end of device [ 1236.234032] loop1: rw=1, want=10062, limit=112 [ 1236.244407] attempt to access beyond end of device [ 1236.255088] loop1: rw=1, want=10063, limit=112 [ 1236.265883] attempt to access beyond end of device [ 1236.278878] loop1: rw=1, want=10064, limit=112 [ 1236.288870] attempt to access beyond end of device [ 1236.299497] loop1: rw=1, want=10065, limit=112 [ 1236.324893] attempt to access beyond end of device [ 1236.336709] loop1: rw=1, want=14161, limit=112 [ 1236.369154] attempt to access beyond end of device [ 1236.380390] loop1: rw=1, want=18257, limit=112 [ 1236.399072] attempt to access beyond end of device [ 1236.404026] loop1: rw=1, want=22353, limit=112 09:38:52 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) 09:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:52 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:52 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:52 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1236.418426] attempt to access beyond end of device [ 1236.423372] loop1: rw=1, want=26449, limit=112 09:38:52 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1236.459849] attempt to access beyond end of device [ 1236.461917] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1236.464814] loop1: rw=1, want=30545, limit=112 [ 1236.471609] attempt to access beyond end of device [ 1236.482455] loop1: rw=1, want=32953, limit=112 09:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:52 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:52 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1236.576581] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:38:52 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1236.697221] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1237.238172] attempt to access beyond end of device [ 1237.243170] loop1: rw=1, want=130, limit=112 [ 1237.287617] buffer_io_error: 62 callbacks suppressed [ 1237.287628] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1237.349006] attempt to access beyond end of device [ 1237.354105] loop1: rw=1, want=131, limit=112 [ 1237.361020] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1237.378098] attempt to access beyond end of device [ 1237.388972] loop1: rw=1, want=132, limit=112 [ 1237.398205] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1237.415252] attempt to access beyond end of device [ 1237.426056] loop1: rw=1, want=133, limit=112 [ 1237.436502] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1237.453577] attempt to access beyond end of device [ 1237.464363] loop1: rw=1, want=142, limit=112 [ 1237.474729] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 1237.491924] attempt to access beyond end of device [ 1237.502681] loop1: rw=1, want=143, limit=112 [ 1237.511788] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1237.528865] attempt to access beyond end of device [ 1237.539644] loop1: rw=1, want=144, limit=112 [ 1237.549954] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1237.567161] attempt to access beyond end of device [ 1237.578093] loop1: rw=1, want=145, limit=112 [ 1237.587196] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 1237.620487] attempt to access beyond end of device [ 1237.631290] loop1: rw=1, want=4241, limit=112 [ 1237.667259] attempt to access beyond end of device [ 1237.678080] loop1: rw=1, want=8337, limit=112 [ 1237.708155] attempt to access beyond end of device [ 1237.720282] loop1: rw=1, want=11033, limit=112 [ 1237.735391] attempt to access beyond end of device [ 1237.746196] loop1: rw=1, want=11062, limit=112 [ 1237.755505] Buffer I/O error on dev loop1, logical block 11061, lost async page write [ 1237.772771] attempt to access beyond end of device [ 1237.783557] loop1: rw=1, want=11063, limit=112 [ 1237.794231] Buffer I/O error on dev loop1, logical block 11062, lost async page write 09:38:53 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:38:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:53 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031628571") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:53 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:53 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1237.807851] attempt to access beyond end of device [ 1237.812809] loop1: rw=1, want=11064, limit=112 [ 1237.817422] attempt to access beyond end of device [ 1237.822448] loop1: rw=1, want=11065, limit=112 [ 1237.827065] attempt to access beyond end of device [ 1237.832064] loop1: rw=1, want=11086, limit=112 [ 1237.836695] attempt to access beyond end of device [ 1237.841710] loop1: rw=1, want=11087, limit=112 [ 1237.846396] attempt to access beyond end of device [ 1237.851473] loop1: rw=1, want=11088, limit=112 [ 1237.862464] attempt to access beyond end of device [ 1237.867457] loop1: rw=1, want=11089, limit=112 [ 1237.872222] attempt to access beyond end of device [ 1237.877298] loop1: rw=1, want=11138, limit=112 [ 1237.882146] attempt to access beyond end of device [ 1237.887123] loop1: rw=1, want=11139, limit=112 [ 1237.887158] attempt to access beyond end of device [ 1237.896762] loop1: rw=1, want=11140, limit=112 [ 1237.901521] attempt to access beyond end of device [ 1237.903971] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1237.906544] loop1: rw=1, want=11141, limit=112 [ 1237.919310] attempt to access beyond end of device [ 1237.919323] loop1: rw=1, want=11150, limit=112 [ 1237.919353] attempt to access beyond end of device [ 1237.919365] loop1: rw=1, want=11151, limit=112 [ 1237.919395] attempt to access beyond end of device [ 1237.919407] loop1: rw=1, want=11152, limit=112 [ 1237.919437] attempt to access beyond end of device [ 1237.919448] loop1: rw=1, want=11153, limit=112 [ 1237.926583] attempt to access beyond end of device [ 1237.926597] loop1: rw=1, want=15249, limit=112 [ 1237.937102] attempt to access beyond end of device [ 1237.937117] loop1: rw=1, want=19345, limit=112 [ 1237.946810] attempt to access beyond end of device [ 1237.955992] loop1: rw=1, want=23441, limit=112 [ 1238.006919] attempt to access beyond end of device 09:38:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:53 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1238.033377] loop1: rw=1, want=27537, limit=112 09:38:53 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1238.053706] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1238.062920] attempt to access beyond end of device [ 1238.078386] loop1: rw=1, want=28073, limit=112 09:38:53 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:38:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1238.228918] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1238.617129] attempt to access beyond end of device [ 1238.651001] loop1: rw=1, want=130, limit=112 [ 1238.677719] attempt to access beyond end of device [ 1238.684158] loop1: rw=1, want=131, limit=112 [ 1238.694826] attempt to access beyond end of device [ 1238.705541] loop1: rw=1, want=132, limit=112 [ 1238.750687] attempt to access beyond end of device [ 1238.779564] loop1: rw=1, want=133, limit=112 [ 1238.797375] attempt to access beyond end of device [ 1238.823136] loop1: rw=1, want=142, limit=112 [ 1238.853420] attempt to access beyond end of device [ 1238.871480] loop1: rw=1, want=143, limit=112 [ 1238.887718] attempt to access beyond end of device [ 1238.892687] loop1: rw=1, want=144, limit=112 [ 1238.915429] attempt to access beyond end of device [ 1238.927271] loop1: rw=1, want=145, limit=112 [ 1238.951063] attempt to access beyond end of device [ 1238.962939] loop1: rw=1, want=4241, limit=112 [ 1239.000681] attempt to access beyond end of device [ 1239.011457] loop1: rw=1, want=8337, limit=112 [ 1239.040471] attempt to access beyond end of device [ 1239.051229] loop1: rw=1, want=10713, limit=112 [ 1239.066854] attempt to access beyond end of device [ 1239.078841] loop1: rw=1, want=10742, limit=112 [ 1239.089295] attempt to access beyond end of device [ 1239.100111] loop1: rw=1, want=10743, limit=112 [ 1239.111377] attempt to access beyond end of device [ 1239.122094] loop1: rw=1, want=10744, limit=112 [ 1239.132611] attempt to access beyond end of device [ 1239.143399] loop1: rw=1, want=10745, limit=112 [ 1239.153845] attempt to access beyond end of device [ 1239.164627] loop1: rw=1, want=10766, limit=112 [ 1239.173976] attempt to access beyond end of device [ 1239.184810] loop1: rw=1, want=10767, limit=112 [ 1239.195263] attempt to access beyond end of device [ 1239.206056] loop1: rw=1, want=10768, limit=112 [ 1239.216532] attempt to access beyond end of device [ 1239.227322] loop1: rw=1, want=10769, limit=112 [ 1239.238749] attempt to access beyond end of device [ 1239.249492] loop1: rw=1, want=10818, limit=112 [ 1239.260007] attempt to access beyond end of device [ 1239.272596] loop1: rw=1, want=10819, limit=112 [ 1239.283035] attempt to access beyond end of device [ 1239.293812] loop1: rw=1, want=10820, limit=112 [ 1239.303159] attempt to access beyond end of device [ 1239.315086] loop1: rw=1, want=10821, limit=112 [ 1239.324449] attempt to access beyond end of device [ 1239.336381] loop1: rw=1, want=10830, limit=112 [ 1239.348952] attempt to access beyond end of device [ 1239.353917] loop1: rw=1, want=10831, limit=112 [ 1239.358704] attempt to access beyond end of device 09:38:55 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:38:55 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d02403162857170") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000c80400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:55 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r0, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:38:55 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1239.363657] loop1: rw=1, want=10832, limit=112 [ 1239.368337] attempt to access beyond end of device [ 1239.373282] loop1: rw=1, want=10833, limit=112 [ 1239.384746] attempt to access beyond end of device [ 1239.389759] loop1: rw=1, want=14929, limit=112 [ 1239.403772] attempt to access beyond end of device [ 1239.408758] loop1: rw=1, want=19025, limit=112 09:38:55 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r2 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1239.423113] attempt to access beyond end of device [ 1239.428106] loop1: rw=1, want=23121, limit=112 [ 1239.442354] attempt to access beyond end of device [ 1239.442540] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1239.447315] loop1: rw=1, want=27217, limit=112 [ 1239.452121] attempt to access beyond end of device [ 1239.465041] loop1: rw=1, want=28193, limit=112 09:38:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r0, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:38:55 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:55 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:55 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1239.637029] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1240.178103] attempt to access beyond end of device [ 1240.183099] loop1: rw=1, want=130, limit=112 [ 1240.187538] attempt to access beyond end of device [ 1240.245495] loop1: rw=1, want=131, limit=112 [ 1240.264139] attempt to access beyond end of device [ 1240.271913] loop1: rw=1, want=132, limit=112 [ 1240.281092] attempt to access beyond end of device [ 1240.292965] loop1: rw=1, want=133, limit=112 [ 1240.302092] attempt to access beyond end of device [ 1240.312830] loop1: rw=1, want=142, limit=112 [ 1240.323070] attempt to access beyond end of device [ 1240.333911] loop1: rw=1, want=143, limit=112 [ 1240.343115] attempt to access beyond end of device [ 1240.353915] loop1: rw=1, want=144, limit=112 [ 1240.364241] attempt to access beyond end of device [ 1240.375044] loop1: rw=1, want=145, limit=112 [ 1240.401363] attempt to access beyond end of device [ 1240.412157] loop1: rw=1, want=4241, limit=112 [ 1240.443086] attempt to access beyond end of device [ 1240.455053] loop1: rw=1, want=6745, limit=112 [ 1240.470208] attempt to access beyond end of device [ 1240.479821] loop1: rw=1, want=6774, limit=112 [ 1240.490393] attempt to access beyond end of device [ 1240.501266] loop1: rw=1, want=6775, limit=112 [ 1240.511595] attempt to access beyond end of device [ 1240.522427] loop1: rw=1, want=6776, limit=112 [ 1240.531644] attempt to access beyond end of device [ 1240.542562] loop1: rw=1, want=6777, limit=112 [ 1240.552917] attempt to access beyond end of device [ 1240.563712] loop1: rw=1, want=6798, limit=112 [ 1240.574088] attempt to access beyond end of device [ 1240.584892] loop1: rw=1, want=6799, limit=112 [ 1240.594119] attempt to access beyond end of device [ 1240.604919] loop1: rw=1, want=6800, limit=112 [ 1240.615319] attempt to access beyond end of device [ 1240.626106] loop1: rw=1, want=6801, limit=112 [ 1240.636529] attempt to access beyond end of device [ 1240.647306] loop1: rw=1, want=6850, limit=112 [ 1240.656649] attempt to access beyond end of device [ 1240.667563] loop1: rw=1, want=6851, limit=112 [ 1240.678307] attempt to access beyond end of device [ 1240.689223] loop1: rw=1, want=6852, limit=112 [ 1240.699581] attempt to access beyond end of device [ 1240.710327] loop1: rw=1, want=6853, limit=112 [ 1240.719544] attempt to access beyond end of device [ 1240.730324] loop1: rw=1, want=6862, limit=112 [ 1240.740683] attempt to access beyond end of device [ 1240.751467] loop1: rw=1, want=6863, limit=112 [ 1240.761802] attempt to access beyond end of device [ 1240.772559] loop1: rw=1, want=6864, limit=112 [ 1240.781776] attempt to access beyond end of device [ 1240.793740] loop1: rw=1, want=6865, limit=112 [ 1240.819600] attempt to access beyond end of device [ 1240.831519] loop1: rw=1, want=10961, limit=112 09:38:56 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:38:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r0, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:38:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:56 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:56 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:56 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1240.871910] attempt to access beyond end of device [ 1240.876874] loop1: rw=1, want=15057, limit=112 [ 1240.899138] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1240.934686] attempt to access beyond end of device 09:38:56 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1240.985720] loop1: rw=1, want=19153, limit=112 09:38:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000ffffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1241.039244] attempt to access beyond end of device [ 1241.059949] loop1: rw=1, want=23249, limit=112 09:38:56 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1241.094945] attempt to access beyond end of device [ 1241.100533] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1241.115578] loop1: rw=1, want=27345, limit=112 09:38:56 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1241.137039] attempt to access beyond end of device 09:38:56 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:56 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1241.165237] loop1: rw=1, want=27961, limit=112 [ 1241.262731] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1241.798197] attempt to access beyond end of device [ 1241.804846] loop1: rw=1, want=130, limit=112 [ 1241.820613] attempt to access beyond end of device [ 1241.825594] loop1: rw=1, want=131, limit=112 [ 1241.843629] attempt to access beyond end of device [ 1241.859911] loop1: rw=1, want=132, limit=112 [ 1241.864366] attempt to access beyond end of device [ 1241.910375] loop1: rw=1, want=133, limit=112 [ 1241.920647] attempt to access beyond end of device [ 1241.931605] loop1: rw=1, want=142, limit=112 [ 1241.941867] attempt to access beyond end of device [ 1242.072080] loop1: rw=1, want=143, limit=112 [ 1242.082593] attempt to access beyond end of device [ 1242.093420] loop1: rw=1, want=144, limit=112 [ 1242.102595] attempt to access beyond end of device [ 1242.113440] loop1: rw=1, want=145, limit=112 [ 1242.140549] attempt to access beyond end of device [ 1242.273117] loop1: rw=1, want=4241, limit=112 [ 1242.312586] attempt to access beyond end of device [ 1242.323439] loop1: rw=1, want=8337, limit=112 [ 1242.352290] attempt to access beyond end of device [ 1242.363072] loop1: rw=1, want=10905, limit=112 [ 1242.377452] attempt to access beyond end of device [ 1242.382481] loop1: rw=1, want=10934, limit=112 [ 1242.387073] buffer_io_error: 70 callbacks suppressed [ 1242.387084] Buffer I/O error on dev loop1, logical block 10933, lost async page write [ 1242.400304] attempt to access beyond end of device [ 1242.405274] loop1: rw=1, want=10935, limit=112 09:38:58 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') 09:38:58 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:58 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:58 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:38:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:58 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1242.409912] Buffer I/O error on dev loop1, logical block 10934, lost async page write [ 1242.417992] attempt to access beyond end of device [ 1242.422936] loop1: rw=1, want=10936, limit=112 [ 1242.427525] Buffer I/O error on dev loop1, logical block 10935, lost async page write [ 1242.444250] attempt to access beyond end of device [ 1242.452037] loop1: rw=1, want=10937, limit=112 [ 1242.461808] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1242.461865] Buffer I/O error on dev loop1, logical block 10936, lost async page write [ 1242.478094] attempt to access beyond end of device [ 1242.483090] loop1: rw=1, want=10958, limit=112 [ 1242.487814] Buffer I/O error on dev loop1, logical block 10957, lost async page write [ 1242.495840] attempt to access beyond end of device [ 1242.500967] loop1: rw=1, want=10959, limit=112 [ 1242.505599] Buffer I/O error on dev loop1, logical block 10958, lost async page write 09:38:58 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1242.513912] attempt to access beyond end of device [ 1242.519142] loop1: rw=1, want=10960, limit=112 [ 1242.523854] Buffer I/O error on dev loop1, logical block 10959, lost async page write [ 1242.532238] attempt to access beyond end of device [ 1242.537261] loop1: rw=1, want=10961, limit=112 [ 1242.542508] Buffer I/O error on dev loop1, logical block 10960, lost async page write [ 1242.550793] attempt to access beyond end of device [ 1242.555739] loop1: rw=1, want=11010, limit=112 [ 1242.562879] Buffer I/O error on dev loop1, logical block 11009, lost async page write [ 1242.571004] attempt to access beyond end of device [ 1242.576020] loop1: rw=1, want=11011, limit=112 [ 1242.580755] Buffer I/O error on dev loop1, logical block 11010, lost async page write [ 1242.588854] attempt to access beyond end of device [ 1242.593866] loop1: rw=1, want=11012, limit=112 [ 1242.598611] attempt to access beyond end of device [ 1242.603631] loop1: rw=1, want=11013, limit=112 [ 1242.608386] attempt to access beyond end of device 09:38:58 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:58 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1242.613397] loop1: rw=1, want=11022, limit=112 [ 1242.628255] attempt to access beyond end of device [ 1242.635653] loop1: rw=1, want=11023, limit=112 [ 1242.658024] attempt to access beyond end of device 09:38:58 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:58 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1242.662995] loop1: rw=1, want=11024, limit=112 [ 1242.675836] attempt to access beyond end of device [ 1242.684832] loop1: rw=1, want=11025, limit=112 09:38:58 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1242.705643] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1242.732871] attempt to access beyond end of device [ 1242.750428] loop1: rw=1, want=15121, limit=112 [ 1242.794865] attempt to access beyond end of device [ 1242.823980] loop1: rw=1, want=19217, limit=112 [ 1242.860922] attempt to access beyond end of device [ 1242.884561] loop1: rw=1, want=23313, limit=112 [ 1242.906884] attempt to access beyond end of device [ 1242.911895] loop1: rw=1, want=26889, limit=112 [ 1243.386343] attempt to access beyond end of device [ 1243.397075] loop1: rw=1, want=130, limit=112 [ 1243.424302] attempt to access beyond end of device [ 1243.481125] loop1: rw=1, want=131, limit=112 [ 1243.491599] attempt to access beyond end of device [ 1243.502383] loop1: rw=1, want=132, limit=112 [ 1243.512652] attempt to access beyond end of device [ 1243.523637] loop1: rw=1, want=133, limit=112 [ 1243.532863] attempt to access beyond end of device [ 1243.544824] loop1: rw=1, want=142, limit=112 [ 1243.554034] attempt to access beyond end of device [ 1243.564813] loop1: rw=1, want=143, limit=112 [ 1243.575101] attempt to access beyond end of device [ 1243.587214] loop1: rw=1, want=144, limit=112 [ 1243.596559] attempt to access beyond end of device [ 1243.607334] loop1: rw=1, want=145, limit=112 [ 1243.633784] attempt to access beyond end of device [ 1243.643408] loop1: rw=1, want=4241, limit=112 [ 1243.679711] attempt to access beyond end of device [ 1243.691737] loop1: rw=1, want=8337, limit=112 [ 1243.709780] attempt to access beyond end of device [ 1243.721714] loop1: rw=1, want=8409, limit=112 [ 1243.732124] attempt to access beyond end of device [ 1243.742915] loop1: rw=1, want=8438, limit=112 [ 1243.753280] attempt to access beyond end of device [ 1243.764108] loop1: rw=1, want=8439, limit=112 [ 1243.773396] attempt to access beyond end of device [ 1243.785382] loop1: rw=1, want=8440, limit=112 [ 1243.795832] attempt to access beyond end of device [ 1243.806629] loop1: rw=1, want=8441, limit=112 [ 1243.816016] attempt to access beyond end of device [ 1243.826802] loop1: rw=1, want=8462, limit=112 [ 1243.837285] attempt to access beyond end of device [ 1243.849439] loop1: rw=1, want=8463, limit=112 [ 1243.859794] attempt to access beyond end of device [ 1243.870583] loop1: rw=1, want=8464, limit=112 [ 1243.879820] attempt to access beyond end of device [ 1243.890562] loop1: rw=1, want=8465, limit=112 [ 1243.900953] attempt to access beyond end of device [ 1243.911723] loop1: rw=1, want=8514, limit=112 [ 1243.922016] attempt to access beyond end of device [ 1243.932783] loop1: rw=1, want=8515, limit=112 [ 1243.941985] attempt to access beyond end of device [ 1243.953927] loop1: rw=1, want=8516, limit=112 [ 1243.963302] attempt to access beyond end of device [ 1243.975382] loop1: rw=1, want=8517, limit=112 [ 1243.985777] attempt to access beyond end of device [ 1243.996584] loop1: rw=1, want=8526, limit=112 [ 1244.005922] attempt to access beyond end of device [ 1244.019948] loop1: rw=1, want=8527, limit=112 [ 1244.024498] attempt to access beyond end of device [ 1244.029516] loop1: rw=1, want=8528, limit=112 [ 1244.034046] attempt to access beyond end of device [ 1244.039054] loop1: rw=1, want=8529, limit=112 09:38:59 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') 09:38:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:38:59 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:38:59 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:59 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:38:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1244.050463] attempt to access beyond end of device [ 1244.055408] loop1: rw=1, want=12625, limit=112 [ 1244.069457] attempt to access beyond end of device [ 1244.074411] loop1: rw=1, want=16721, limit=112 [ 1244.091724] attempt to access beyond end of device [ 1244.097113] loop1: rw=1, want=20817, limit=112 [ 1244.122039] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1244.134963] attempt to access beyond end of device [ 1244.145834] loop1: rw=1, want=24913, limit=112 09:38:59 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) 09:38:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1244.169457] attempt to access beyond end of device [ 1244.175541] loop1: rw=1, want=27841, limit=112 09:38:59 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:00 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1244.261032] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000feffff0700", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:00 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1244.368012] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1244.948110] attempt to access beyond end of device [ 1244.957906] loop1: rw=1, want=130, limit=112 [ 1244.990462] attempt to access beyond end of device [ 1244.995421] loop1: rw=1, want=131, limit=112 [ 1245.032073] attempt to access beyond end of device [ 1245.058550] loop1: rw=1, want=132, limit=112 [ 1245.063017] attempt to access beyond end of device [ 1245.076337] loop1: rw=1, want=133, limit=112 [ 1245.086717] attempt to access beyond end of device [ 1245.098538] loop1: rw=1, want=142, limit=112 [ 1245.108017] attempt to access beyond end of device [ 1245.118817] loop1: rw=1, want=143, limit=112 [ 1245.129215] attempt to access beyond end of device [ 1245.138983] loop1: rw=1, want=144, limit=112 [ 1245.150152] attempt to access beyond end of device [ 1245.160910] loop1: rw=1, want=145, limit=112 [ 1245.185561] attempt to access beyond end of device [ 1245.197469] loop1: rw=1, want=4241, limit=112 [ 1245.233239] attempt to access beyond end of device [ 1245.245160] loop1: rw=1, want=8337, limit=112 [ 1245.283003] attempt to access beyond end of device [ 1245.293789] loop1: rw=1, want=11353, limit=112 [ 1245.309226] attempt to access beyond end of device [ 1245.320001] loop1: rw=1, want=11382, limit=112 [ 1245.330584] attempt to access beyond end of device [ 1245.341505] loop1: rw=1, want=11383, limit=112 [ 1245.351973] attempt to access beyond end of device [ 1245.363497] loop1: rw=1, want=11384, limit=112 [ 1245.373993] attempt to access beyond end of device [ 1245.384808] loop1: rw=1, want=11385, limit=112 [ 1245.395327] attempt to access beyond end of device [ 1245.406147] loop1: rw=1, want=11406, limit=112 [ 1245.416615] attempt to access beyond end of device [ 1245.427639] loop1: rw=1, want=11407, limit=112 [ 1245.436961] attempt to access beyond end of device [ 1245.448739] loop1: rw=1, want=11408, limit=112 [ 1245.459246] attempt to access beyond end of device [ 1245.470098] loop1: rw=1, want=11409, limit=112 [ 1245.481226] attempt to access beyond end of device [ 1245.491980] loop1: rw=1, want=11458, limit=112 [ 1245.502417] attempt to access beyond end of device [ 1245.513179] loop1: rw=1, want=11459, limit=112 [ 1245.523547] attempt to access beyond end of device [ 1245.534272] loop1: rw=1, want=11460, limit=112 [ 1245.544659] attempt to access beyond end of device [ 1245.556696] loop1: rw=1, want=11461, limit=112 [ 1245.567151] attempt to access beyond end of device [ 1245.578385] loop1: rw=1, want=11470, limit=112 [ 1245.587920] attempt to access beyond end of device [ 1245.599686] loop1: rw=1, want=11471, limit=112 [ 1245.608977] attempt to access beyond end of device [ 1245.619073] loop1: rw=1, want=11472, limit=112 [ 1245.623715] attempt to access beyond end of device [ 1245.628753] loop1: rw=1, want=11473, limit=112 [ 1245.640194] attempt to access beyond end of device [ 1245.645136] loop1: rw=1, want=15569, limit=112 09:39:01 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') 09:39:01 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:01 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)) 09:39:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:01 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:01 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1245.659777] attempt to access beyond end of device [ 1245.664721] loop1: rw=1, want=19665, limit=112 [ 1245.679124] attempt to access beyond end of device [ 1245.684092] loop1: rw=1, want=23761, limit=112 [ 1245.698501] attempt to access beyond end of device [ 1245.703461] loop1: rw=1, want=27857, limit=112 [ 1245.717750] attempt to access beyond end of device [ 1245.719980] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1245.722709] loop1: rw=1, want=31649, limit=112 09:39:01 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)) 09:39:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:01 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:01 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1245.895944] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1246.049482] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1246.488092] attempt to access beyond end of device [ 1246.493088] loop1: rw=1, want=130, limit=112 [ 1246.497538] attempt to access beyond end of device [ 1246.505264] loop1: rw=1, want=131, limit=112 [ 1246.538733] attempt to access beyond end of device [ 1246.559370] loop1: rw=1, want=132, limit=112 [ 1246.563836] attempt to access beyond end of device [ 1246.597626] loop1: rw=1, want=133, limit=112 [ 1246.602128] attempt to access beyond end of device [ 1246.607069] loop1: rw=1, want=142, limit=112 [ 1246.628455] attempt to access beyond end of device [ 1246.633562] loop1: rw=1, want=143, limit=112 [ 1246.642746] attempt to access beyond end of device [ 1246.653541] loop1: rw=1, want=144, limit=112 [ 1246.662731] attempt to access beyond end of device [ 1246.673524] loop1: rw=1, want=145, limit=112 [ 1246.686478] attempt to access beyond end of device [ 1246.692953] loop1: rw=1, want=4241, limit=112 [ 1246.724280] attempt to access beyond end of device [ 1246.735084] loop1: rw=1, want=8337, limit=112 [ 1246.759608] attempt to access beyond end of device [ 1246.770402] loop1: rw=1, want=9945, limit=112 [ 1246.783298] attempt to access beyond end of device [ 1246.794136] loop1: rw=1, want=9974, limit=112 [ 1246.804539] attempt to access beyond end of device [ 1246.815333] loop1: rw=1, want=9975, limit=112 [ 1246.825878] attempt to access beyond end of device [ 1246.836660] loop1: rw=1, want=9976, limit=112 [ 1246.847165] attempt to access beyond end of device [ 1246.858056] loop1: rw=1, want=9977, limit=112 [ 1246.867261] attempt to access beyond end of device [ 1246.878204] loop1: rw=1, want=9998, limit=112 [ 1246.888550] attempt to access beyond end of device [ 1246.899316] loop1: rw=1, want=9999, limit=112 [ 1246.909690] attempt to access beyond end of device [ 1246.920472] loop1: rw=1, want=10000, limit=112 [ 1246.930919] attempt to access beyond end of device [ 1246.941700] loop1: rw=1, want=10001, limit=112 [ 1246.953638] attempt to access beyond end of device [ 1246.964513] loop1: rw=1, want=10050, limit=112 [ 1246.973868] attempt to access beyond end of device [ 1246.985811] loop1: rw=1, want=10051, limit=112 [ 1246.995196] attempt to access beyond end of device [ 1247.006029] loop1: rw=1, want=10052, limit=112 [ 1247.016531] attempt to access beyond end of device [ 1247.027336] loop1: rw=1, want=10053, limit=112 [ 1247.037935] attempt to access beyond end of device [ 1247.048687] loop1: rw=1, want=10062, limit=112 [ 1247.059253] attempt to access beyond end of device [ 1247.070117] loop1: rw=1, want=10063, limit=112 [ 1247.081379] attempt to access beyond end of device [ 1247.092052] loop1: rw=1, want=10064, limit=112 [ 1247.102464] attempt to access beyond end of device [ 1247.113120] loop1: rw=1, want=10065, limit=112 [ 1247.140698] attempt to access beyond end of device [ 1247.151377] loop1: rw=1, want=14161, limit=112 09:39:02 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:02 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)) 09:39:02 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:02 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1247.189324] attempt to access beyond end of device [ 1247.194326] loop1: rw=1, want=18257, limit=112 [ 1247.267472] attempt to access beyond end of device 09:39:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) ftruncate(0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 1247.289516] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1247.312622] loop1: rw=1, want=22353, limit=112 09:39:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1247.401071] attempt to access beyond end of device [ 1247.419981] loop1: rw=1, want=26449, limit=112 09:39:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1247.442204] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1247.457284] attempt to access beyond end of device [ 1247.479994] loop1: rw=1, want=30545, limit=112 09:39:03 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1247.506482] attempt to access beyond end of device [ 1247.512772] loop1: rw=1, want=31073, limit=112 [ 1247.589113] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000700)={{}, 0x0, 0x200, 0x2, {0xffff}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0xaaaac41, 0x0, &(0x7f0000000400), 0x10000000000001ee) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000d40)=ANY=[], 0x0, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x3, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x404000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 09:39:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:04 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000700)={{}, 0x0, 0x200, 0x2, {0xffff}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0xaaaac41, 0x0, &(0x7f0000000400), 0x10000000000001ee) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000d40)=ANY=[], 0x0, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x3, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x404000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 09:39:04 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:04 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1249.231056] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1249.250235] attempt to access beyond end of device [ 1249.255190] loop1: rw=1, want=130, limit=112 [ 1249.266491] buffer_io_error: 78 callbacks suppressed [ 1249.266501] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1249.296441] attempt to access beyond end of device [ 1249.308587] loop1: rw=1, want=131, limit=112 [ 1249.319270] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1249.336554] attempt to access beyond end of device 09:39:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1249.349827] loop1: rw=1, want=132, limit=112 [ 1249.361926] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1249.379546] attempt to access beyond end of device [ 1249.391777] loop1: rw=1, want=133, limit=112 [ 1249.401811] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1249.420259] attempt to access beyond end of device [ 1249.431093] loop1: rw=1, want=142, limit=112 [ 1249.442045] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 1249.459740] attempt to access beyond end of device [ 1249.540426] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1249.558060] loop1: rw=1, want=143, limit=112 [ 1249.562502] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1249.629899] attempt to access beyond end of device 09:39:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1249.664078] loop1: rw=1, want=144, limit=112 [ 1249.708933] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1249.729941] attempt to access beyond end of device [ 1249.751976] loop1: rw=1, want=145, limit=112 [ 1249.765935] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1249.775569] Buffer I/O error on dev loop1, logical block 144, lost async page write 09:39:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1249.812225] attempt to access beyond end of device 09:39:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1249.847861] loop1: rw=1, want=2841, limit=112 [ 1249.881288] attempt to access beyond end of device [ 1249.931631] loop1: rw=1, want=2870, limit=112 [ 1249.963336] Buffer I/O error on dev loop1, logical block 2869, lost async page write [ 1249.974732] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1249.995160] attempt to access beyond end of device [ 1250.023031] loop1: rw=1, want=2871, limit=112 [ 1250.037227] Buffer I/O error on dev loop1, logical block 2870, lost async page write [ 1250.062377] attempt to access beyond end of device 09:39:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:05 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1250.078865] loop1: rw=1, want=2872, limit=112 [ 1250.095363] attempt to access beyond end of device [ 1250.107726] loop1: rw=1, want=2873, limit=112 [ 1250.133614] attempt to access beyond end of device [ 1250.156808] loop1: rw=1, want=2894, limit=112 [ 1250.167532] attempt to access beyond end of device [ 1250.180453] loop1: rw=1, want=2895, limit=112 [ 1250.188247] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1250.198953] attempt to access beyond end of device [ 1250.208846] loop1: rw=1, want=2896, limit=112 [ 1250.226954] attempt to access beyond end of device [ 1250.244608] loop1: rw=1, want=2897, limit=112 [ 1250.263380] attempt to access beyond end of device [ 1250.280218] loop1: rw=1, want=2946, limit=112 [ 1250.309993] attempt to access beyond end of device [ 1250.331081] loop1: rw=1, want=2947, limit=112 [ 1250.341538] attempt to access beyond end of device [ 1250.352170] loop1: rw=1, want=2948, limit=112 [ 1250.378852] attempt to access beyond end of device [ 1250.391755] loop1: rw=1, want=2949, limit=112 [ 1250.400819] attempt to access beyond end of device [ 1250.411406] loop1: rw=1, want=2958, limit=112 [ 1250.420498] attempt to access beyond end of device [ 1250.433022] loop1: rw=1, want=2959, limit=112 [ 1250.441637] attempt to access beyond end of device [ 1250.446597] loop1: rw=1, want=2960, limit=112 [ 1250.460642] attempt to access beyond end of device [ 1250.465604] loop1: rw=1, want=2961, limit=112 [ 1250.485369] attempt to access beyond end of device [ 1250.504296] loop1: rw=1, want=7057, limit=112 [ 1250.527062] attempt to access beyond end of device [ 1250.543524] loop1: rw=1, want=11153, limit=112 [ 1250.567517] attempt to access beyond end of device [ 1250.582763] loop1: rw=1, want=15249, limit=112 [ 1250.603411] attempt to access beyond end of device [ 1250.621892] loop1: rw=1, want=19345, limit=112 [ 1250.648278] attempt to access beyond end of device [ 1250.653238] loop1: rw=1, want=23441, limit=112 [ 1250.686185] attempt to access beyond end of device [ 1250.701430] loop1: rw=1, want=26569, limit=112 [ 1251.116604] attempt to access beyond end of device [ 1251.129927] loop1: rw=1, want=130, limit=112 [ 1251.142799] attempt to access beyond end of device [ 1251.160920] loop1: rw=1, want=131, limit=112 [ 1251.169876] attempt to access beyond end of device [ 1251.181644] loop1: rw=1, want=132, limit=112 [ 1251.191902] attempt to access beyond end of device [ 1251.202716] loop1: rw=1, want=133, limit=112 [ 1251.212984] attempt to access beyond end of device [ 1251.223864] loop1: rw=1, want=142, limit=112 [ 1251.234197] attempt to access beyond end of device [ 1251.244999] loop1: rw=1, want=143, limit=112 [ 1251.255468] attempt to access beyond end of device [ 1251.268321] loop1: rw=1, want=144, limit=112 [ 1251.309882] attempt to access beyond end of device [ 1251.315795] loop1: rw=1, want=145, limit=112 [ 1251.338401] attempt to access beyond end of device [ 1251.349203] loop1: rw=1, want=4241, limit=112 [ 1251.385440] attempt to access beyond end of device [ 1251.397413] loop1: rw=1, want=8337, limit=112 [ 1251.414715] attempt to access beyond end of device [ 1251.426693] loop1: rw=1, want=8473, limit=112 [ 1251.436239] attempt to access beyond end of device [ 1251.448226] loop1: rw=1, want=8502, limit=112 [ 1251.457443] attempt to access beyond end of device [ 1251.468339] loop1: rw=1, want=8503, limit=112 [ 1251.478036] attempt to access beyond end of device [ 1251.488832] loop1: rw=1, want=8504, limit=112 [ 1251.499319] attempt to access beyond end of device [ 1251.510095] loop1: rw=1, want=8505, limit=112 [ 1251.519362] attempt to access beyond end of device [ 1251.530287] loop1: rw=1, want=8526, limit=112 [ 1251.540615] attempt to access beyond end of device [ 1251.551486] loop1: rw=1, want=8527, limit=112 [ 1251.561829] attempt to access beyond end of device [ 1251.572574] loop1: rw=1, want=8528, limit=112 [ 1251.581825] attempt to access beyond end of device [ 1251.592581] loop1: rw=1, want=8529, limit=112 [ 1251.602949] attempt to access beyond end of device [ 1251.613798] loop1: rw=1, want=8578, limit=112 [ 1251.624197] attempt to access beyond end of device [ 1251.635023] loop1: rw=1, want=8579, limit=112 [ 1251.644276] attempt to access beyond end of device [ 1251.655067] loop1: rw=1, want=8580, limit=112 [ 1251.665480] attempt to access beyond end of device [ 1251.676344] loop1: rw=1, want=8581, limit=112 [ 1251.686765] attempt to access beyond end of device [ 1251.697714] loop1: rw=1, want=8590, limit=112 [ 1251.706889] attempt to access beyond end of device [ 1251.717794] loop1: rw=1, want=8591, limit=112 [ 1251.727015] attempt to access beyond end of device [ 1251.737923] loop1: rw=1, want=8592, limit=112 [ 1251.747989] attempt to access beyond end of device [ 1251.758758] loop1: rw=1, want=8593, limit=112 [ 1251.784721] attempt to access beyond end of device [ 1251.795585] loop1: rw=1, want=12689, limit=112 [ 1251.830294] attempt to access beyond end of device [ 1251.841068] loop1: rw=1, want=16785, limit=112 [ 1251.863812] attempt to access beyond end of device [ 1251.868813] loop1: rw=1, want=20881, limit=112 09:39:07 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:07 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000700)={{}, 0x0, 0x200, 0x2, {0xffff}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0xaaaac41, 0x0, &(0x7f0000000400), 0x10000000000001ee) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000d40)=ANY=[], 0x0, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x3, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x404000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 09:39:07 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1251.883320] attempt to access beyond end of device [ 1251.888340] loop1: rw=1, want=24977, limit=112 [ 1251.917324] attempt to access beyond end of device [ 1251.922494] loop1: rw=1, want=27425, limit=112 [ 1251.936983] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:07 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:07 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1252.113293] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:07 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000feffff0700", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1252.291255] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000480)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0x815a, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000700)={{}, 0x0, 0x200, 0x2, {0xffff}}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0xaaaac41, 0x0, &(0x7f0000000400), 0x10000000000001ee) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000340)=""/209) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000d40)=ANY=[], 0x0, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x7, 0x3, 0x0, 0x0, 0x3bf}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000c40)={0x16, 0x98, 0xfa00, {&(0x7f0000000c00)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x29c, 0x0, {"50b2468b209f7b53a90c30e8fc97f564"}, 0x0, 0x3, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x10, 0xfa00, {&(0x7f0000000bc0), r3}}, 0x18) open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x404000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) [ 1253.151332] attempt to access beyond end of device [ 1253.156320] loop1: rw=1, want=130, limit=112 [ 1253.200407] attempt to access beyond end of device [ 1253.205382] loop1: rw=1, want=131, limit=112 [ 1253.274896] attempt to access beyond end of device [ 1253.296431] loop1: rw=1, want=132, limit=112 [ 1253.309808] attempt to access beyond end of device [ 1253.330198] loop1: rw=1, want=133, limit=112 [ 1253.346312] attempt to access beyond end of device [ 1253.367917] loop1: rw=1, want=142, limit=112 [ 1253.383492] attempt to access beyond end of device [ 1253.401518] loop1: rw=1, want=143, limit=112 [ 1253.418231] attempt to access beyond end of device [ 1253.435574] loop1: rw=1, want=144, limit=112 [ 1253.450571] attempt to access beyond end of device [ 1253.467273] loop1: rw=1, want=145, limit=112 [ 1253.504835] attempt to access beyond end of device [ 1253.521411] loop1: rw=1, want=4241, limit=112 [ 1253.573261] attempt to access beyond end of device [ 1253.584096] loop1: rw=1, want=8337, limit=112 [ 1253.608304] attempt to access beyond end of device [ 1253.619053] loop1: rw=1, want=9817, limit=112 [ 1253.631792] attempt to access beyond end of device [ 1253.642681] loop1: rw=1, want=9846, limit=112 [ 1253.651900] attempt to access beyond end of device [ 1253.663883] loop1: rw=1, want=9847, limit=112 [ 1253.673119] attempt to access beyond end of device [ 1253.683931] loop1: rw=1, want=9848, limit=112 [ 1253.694323] attempt to access beyond end of device [ 1253.705140] loop1: rw=1, want=9849, limit=112 [ 1253.715554] attempt to access beyond end of device [ 1253.726357] loop1: rw=1, want=9870, limit=112 [ 1253.735593] attempt to access beyond end of device [ 1253.747528] loop1: rw=1, want=9871, limit=112 [ 1253.756866] attempt to access beyond end of device [ 1253.767772] loop1: rw=1, want=9872, limit=112 [ 1253.776957] attempt to access beyond end of device 09:39:09 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:09 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:09 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:09 executing program 2: r0 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) [ 1253.796994] loop1: rw=1, want=9873, limit=112 [ 1253.807768] attempt to access beyond end of device [ 1253.812718] loop1: rw=1, want=9922, limit=112 [ 1253.817240] attempt to access beyond end of device [ 1253.823522] loop1: rw=1, want=9923, limit=112 [ 1253.857691] attempt to access beyond end of device [ 1253.865426] loop1: rw=1, want=9924, limit=112 [ 1253.870039] attempt to access beyond end of device [ 1253.879194] loop1: rw=1, want=9925, limit=112 [ 1253.883811] attempt to access beyond end of device 09:39:09 executing program 2: r0 = memfd_create(&(0x7f00000006c0)="2e001b2121894de067a1504545d99e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x802) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "e753893f16965459e33174bc0cef751e2f0324e7a92c080646b43de5dddf76fa4e2a8fc055c11573e39ff364c10ca48ead08ff1b459496f758a61f9a0e4529f33508427eae640ad05007193493fc53f14a2398588ed4f668e44dff255f7aef8ce72ba5f13dc625f2ed184a80ad3d6aa614adf118005903c7977157f6826c73814302e3d3342be30ede775d10766a3069be3136aba111bf0b548a41361060bf6415d8120177c9c360d72582c172c70197332f30edd280d9fbdfe1521038fa14d7aa15f5bf90f9695f84a98d62c6069109eb21ae5803e3582e8d87ed8f9832f880f0bb49db795e586b1d7f671c7e91ecbe98fec3d51db32e587c8cfde478ae6e3a"}}}, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x31f}) [ 1253.883827] loop1: rw=1, want=9934, limit=112 [ 1253.883855] attempt to access beyond end of device [ 1253.883866] loop1: rw=1, want=9935, limit=112 [ 1253.883895] attempt to access beyond end of device [ 1253.883912] loop1: rw=1, want=9936, limit=112 [ 1253.883941] attempt to access beyond end of device [ 1253.883956] loop1: rw=1, want=9937, limit=112 [ 1253.894023] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1253.900608] attempt to access beyond end of device 09:39:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1253.900623] loop1: rw=1, want=14033, limit=112 [ 1253.911253] attempt to access beyond end of device [ 1253.927605] loop1: rw=1, want=18129, limit=112 [ 1253.981735] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1254.003514] attempt to access beyond end of device 09:39:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:09 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1254.021259] loop1: rw=1, want=22225, limit=112 09:39:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00), 0x8000000000000c8, 0x0) [ 1254.071576] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1254.105629] attempt to access beyond end of device 09:39:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1254.139606] loop1: rw=1, want=26321, limit=112 [ 1254.183876] attempt to access beyond end of device [ 1254.193209] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1254.217123] loop1: rw=1, want=27713, limit=112 [ 1254.877046] attempt to access beyond end of device [ 1254.898483] loop1: rw=1, want=130, limit=112 [ 1254.927016] buffer_io_error: 62 callbacks suppressed [ 1254.927028] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1254.990720] attempt to access beyond end of device [ 1254.997361] loop1: rw=1, want=131, limit=112 [ 1255.005502] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1255.022577] attempt to access beyond end of device [ 1255.033411] loop1: rw=1, want=132, limit=112 [ 1255.043672] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1255.060767] attempt to access beyond end of device [ 1255.071490] loop1: rw=1, want=133, limit=112 [ 1255.080580] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1255.098609] attempt to access beyond end of device [ 1255.109344] loop1: rw=1, want=142, limit=112 [ 1255.119568] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 1255.135472] attempt to access beyond end of device [ 1255.146262] loop1: rw=1, want=143, limit=112 [ 1255.156559] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1255.173647] attempt to access beyond end of device [ 1255.184447] loop1: rw=1, want=144, limit=112 [ 1255.193566] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1255.210625] attempt to access beyond end of device [ 1255.221504] loop1: rw=1, want=145, limit=112 [ 1255.232400] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 1255.264123] attempt to access beyond end of device [ 1255.274913] loop1: rw=1, want=4241, limit=112 [ 1255.310701] attempt to access beyond end of device [ 1255.321459] loop1: rw=1, want=8337, limit=112 [ 1255.350134] attempt to access beyond end of device [ 1255.362042] loop1: rw=1, want=10905, limit=112 [ 1255.376081] attempt to access beyond end of device [ 1255.387996] loop1: rw=1, want=10934, limit=112 [ 1255.397263] Buffer I/O error on dev loop1, logical block 10933, lost async page write [ 1255.414607] attempt to access beyond end of device [ 1255.425401] loop1: rw=1, want=10935, limit=112 [ 1255.435899] Buffer I/O error on dev loop1, logical block 10934, lost async page write [ 1255.453142] attempt to access beyond end of device 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:11 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0x16, 0x4) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x20, 0x0, 0x5}}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0xfffffffffffffffe, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x2a0, 0x0, 0xff, 0x0, 0x0, &(0x7f00000001c0)}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={{r2, r3/1000+30000}, {r4, r5/1000+30000}}) 09:39:11 executing program 1: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:11 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:11 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1255.472022] loop1: rw=1, want=10936, limit=112 [ 1255.476655] attempt to access beyond end of device [ 1255.490210] loop1: rw=1, want=10937, limit=112 [ 1255.528313] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1255.536539] attempt to access beyond end of device [ 1255.555093] loop1: rw=1, want=10958, limit=112 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1255.579035] attempt to access beyond end of device 09:39:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600b300000000000000000000000000000000000000000000380000000000000000000000000020"], 0x2b) [ 1255.601845] loop1: rw=1, want=10959, limit=112 [ 1255.601880] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1255.632371] attempt to access beyond end of device [ 1255.658157] loop1: rw=1, want=10960, limit=112 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1255.701293] sg_write: data in/out 45788/1 bytes for SCSI command 0x0-- guessing data in; [ 1255.701293] program syz-executor2 not setting count and/or reply_len properly [ 1255.713417] attempt to access beyond end of device 09:39:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600b300000000000000000000000000000000000000000000380000000000000000000000000020"], 0x2b) [ 1255.790803] loop1: rw=1, want=10961, limit=112 [ 1255.803844] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1255.813661] attempt to access beyond end of device [ 1255.830896] loop1: rw=1, want=11010, limit=112 [ 1255.852041] attempt to access beyond end of device [ 1255.882890] loop1: rw=1, want=11011, limit=112 [ 1255.911485] attempt to access beyond end of device 09:39:11 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1255.954302] loop1: rw=1, want=11012, limit=112 [ 1255.966513] sg_write: data in/out 45788/1 bytes for SCSI command 0x0-- guessing data in; [ 1255.966513] program syz-executor2 not setting count and/or reply_len properly [ 1255.982282] attempt to access beyond end of device [ 1255.993943] loop1: rw=1, want=11013, limit=112 09:39:11 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1256.001094] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1256.015546] attempt to access beyond end of device [ 1256.026464] loop1: rw=1, want=11022, limit=112 09:39:11 executing program 2: [ 1256.058040] attempt to access beyond end of device [ 1256.063007] loop1: rw=1, want=11023, limit=112 09:39:11 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1256.104420] attempt to access beyond end of device [ 1256.121956] loop1: rw=1, want=11024, limit=112 [ 1256.149684] attempt to access beyond end of device [ 1256.154704] loop1: rw=1, want=11025, limit=112 [ 1256.174682] attempt to access beyond end of device [ 1256.192601] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1256.228100] loop1: rw=1, want=15121, limit=112 [ 1256.273183] attempt to access beyond end of device [ 1256.297717] loop1: rw=1, want=19217, limit=112 [ 1256.317308] attempt to access beyond end of device [ 1256.330006] loop1: rw=1, want=23313, limit=112 [ 1256.362475] attempt to access beyond end of device [ 1256.373189] loop1: rw=1, want=27409, limit=112 [ 1256.391587] attempt to access beyond end of device [ 1256.414140] loop1: rw=1, want=27937, limit=112 [ 1256.938116] attempt to access beyond end of device [ 1256.943105] loop1: rw=1, want=130, limit=112 [ 1256.947546] attempt to access beyond end of device [ 1256.994228] loop1: rw=1, want=131, limit=112 [ 1257.020810] attempt to access beyond end of device [ 1257.051283] loop1: rw=1, want=132, limit=112 [ 1257.067725] attempt to access beyond end of device [ 1257.072821] loop1: rw=1, want=133, limit=112 [ 1257.080808] attempt to access beyond end of device [ 1257.091541] loop1: rw=1, want=142, limit=112 [ 1257.101819] attempt to access beyond end of device [ 1257.112637] loop1: rw=1, want=143, limit=112 [ 1257.122889] attempt to access beyond end of device [ 1257.133679] loop1: rw=1, want=144, limit=112 [ 1257.142896] attempt to access beyond end of device [ 1257.153750] loop1: rw=1, want=145, limit=112 [ 1257.180051] attempt to access beyond end of device [ 1257.190810] loop1: rw=1, want=4241, limit=112 [ 1257.225999] attempt to access beyond end of device [ 1257.237937] loop1: rw=1, want=8337, limit=112 [ 1257.264403] attempt to access beyond end of device [ 1257.278356] loop1: rw=1, want=10009, limit=112 [ 1257.291463] attempt to access beyond end of device [ 1257.302309] loop1: rw=1, want=10038, limit=112 [ 1257.312736] attempt to access beyond end of device [ 1257.323539] loop1: rw=1, want=10039, limit=112 [ 1257.334035] attempt to access beyond end of device [ 1257.344837] loop1: rw=1, want=10040, limit=112 [ 1257.355306] attempt to access beyond end of device [ 1257.366085] loop1: rw=1, want=10041, limit=112 [ 1257.375423] attempt to access beyond end of device [ 1257.387329] loop1: rw=1, want=10062, limit=112 [ 1257.396816] attempt to access beyond end of device [ 1257.407725] loop1: rw=1, want=10063, limit=112 [ 1257.417963] attempt to access beyond end of device [ 1257.428732] loop1: rw=1, want=10064, limit=112 [ 1257.439233] attempt to access beyond end of device [ 1257.450118] loop1: rw=1, want=10065, limit=112 [ 1257.459433] attempt to access beyond end of device [ 1257.470311] loop1: rw=1, want=10114, limit=112 [ 1257.480757] attempt to access beyond end of device [ 1257.491499] loop1: rw=1, want=10115, limit=112 [ 1257.501920] attempt to access beyond end of device [ 1257.512678] loop1: rw=1, want=10116, limit=112 [ 1257.523086] attempt to access beyond end of device [ 1257.533869] loop1: rw=1, want=10117, limit=112 09:39:13 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:13 executing program 2: 09:39:13 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:13 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1257.546965] attempt to access beyond end of device [ 1257.551999] loop1: rw=1, want=10126, limit=112 [ 1257.556615] attempt to access beyond end of device [ 1257.561683] loop1: rw=1, want=10127, limit=112 [ 1257.566299] attempt to access beyond end of device [ 1257.571316] loop1: rw=1, want=10128, limit=112 [ 1257.575942] attempt to access beyond end of device [ 1257.580950] loop1: rw=1, want=10129, limit=112 [ 1257.609510] attempt to access beyond end of device [ 1257.614640] loop1: rw=1, want=14225, limit=112 [ 1257.616044] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1257.630572] attempt to access beyond end of device [ 1257.635708] loop1: rw=1, want=18321, limit=112 [ 1257.651847] attempt to access beyond end of device 09:39:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:13 executing program 2: [ 1257.656965] loop1: rw=1, want=22417, limit=112 [ 1257.674740] attempt to access beyond end of device [ 1257.686178] loop1: rw=1, want=26513, limit=112 [ 1257.717076] attempt to access beyond end of device [ 1257.727031] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1257.735335] loop1: rw=1, want=27649, limit=112 09:39:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:13 executing program 2: 09:39:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1257.950562] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:13 executing program 2: 09:39:15 executing program 2: 09:39:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:15 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:15 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:15 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1259.381037] attempt to access beyond end of device [ 1259.386020] loop1: rw=1, want=130, limit=112 [ 1259.395148] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1259.413706] attempt to access beyond end of device [ 1259.430580] loop1: rw=1, want=131, limit=112 09:39:15 executing program 2: [ 1259.460315] attempt to access beyond end of device [ 1259.465268] loop1: rw=1, want=132, limit=112 09:39:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1259.505898] attempt to access beyond end of device [ 1259.522933] loop1: rw=1, want=133, limit=112 [ 1259.528229] attempt to access beyond end of device [ 1259.533177] loop1: rw=1, want=142, limit=112 09:39:15 executing program 2: 09:39:15 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1259.578792] attempt to access beyond end of device [ 1259.579704] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1259.589756] loop1: rw=1, want=143, limit=112 [ 1259.613042] attempt to access beyond end of device [ 1259.648233] loop1: rw=1, want=144, limit=112 [ 1259.656499] attempt to access beyond end of device 09:39:15 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1259.688902] loop1: rw=1, want=145, limit=112 09:39:15 executing program 2: [ 1259.716346] attempt to access beyond end of device [ 1259.738378] loop1: rw=1, want=2457, limit=112 [ 1259.777017] attempt to access beyond end of device [ 1259.797560] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1259.820707] loop1: rw=1, want=2486, limit=112 [ 1259.845744] attempt to access beyond end of device 09:39:15 executing program 2: [ 1259.890393] loop1: rw=1, want=2487, limit=112 [ 1259.914581] attempt to access beyond end of device [ 1259.942142] loop1: rw=1, want=2488, limit=112 09:39:15 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1259.962409] buffer_io_error: 48 callbacks suppressed [ 1259.962420] Buffer I/O error on dev loop1, logical block 2487, lost async page write [ 1259.976062] attempt to access beyond end of device [ 1259.981151] loop1: rw=1, want=2489, limit=112 [ 1259.985699] Buffer I/O error on dev loop1, logical block 2488, lost async page write [ 1259.993712] attempt to access beyond end of device [ 1259.993726] loop1: rw=1, want=2510, limit=112 [ 1259.993740] Buffer I/O error on dev loop1, logical block 2509, lost async page write [ 1259.993765] attempt to access beyond end of device [ 1259.993776] loop1: rw=1, want=2511, limit=112 [ 1259.993787] Buffer I/O error on dev loop1, logical block 2510, lost async page write [ 1259.993811] attempt to access beyond end of device [ 1260.051510] loop1: rw=1, want=2512, limit=112 [ 1260.070066] Buffer I/O error on dev loop1, logical block 2511, lost async page write [ 1260.085799] attempt to access beyond end of device [ 1260.091031] loop1: rw=1, want=2513, limit=112 [ 1260.095539] Buffer I/O error on dev loop1, logical block 2512, lost async page write [ 1260.103605] attempt to access beyond end of device [ 1260.108649] loop1: rw=1, want=2562, limit=112 [ 1260.113171] Buffer I/O error on dev loop1, logical block 2561, lost async page write [ 1260.121256] attempt to access beyond end of device [ 1260.126251] loop1: rw=1, want=2563, limit=112 [ 1260.130918] Buffer I/O error on dev loop1, logical block 2562, lost async page write [ 1260.138929] attempt to access beyond end of device [ 1260.143861] loop1: rw=1, want=2564, limit=112 [ 1260.148439] Buffer I/O error on dev loop1, logical block 2563, lost async page write [ 1260.156355] attempt to access beyond end of device [ 1260.156369] loop1: rw=1, want=2565, limit=112 [ 1260.165916] Buffer I/O error on dev loop1, logical block 2564, lost async page write [ 1260.173916] attempt to access beyond end of device [ 1260.178998] loop1: rw=1, want=2574, limit=112 [ 1260.183522] attempt to access beyond end of device [ 1260.188551] loop1: rw=1, want=2575, limit=112 [ 1260.193077] attempt to access beyond end of device [ 1260.211524] loop1: rw=1, want=2576, limit=112 [ 1260.216102] attempt to access beyond end of device [ 1260.230969] loop1: rw=1, want=2577, limit=112 [ 1260.252719] attempt to access beyond end of device [ 1260.275168] loop1: rw=1, want=6673, limit=112 [ 1260.289494] attempt to access beyond end of device [ 1260.294455] loop1: rw=1, want=10769, limit=112 [ 1260.308904] attempt to access beyond end of device [ 1260.313878] loop1: rw=1, want=14865, limit=112 [ 1260.328259] attempt to access beyond end of device [ 1260.333225] loop1: rw=1, want=18961, limit=112 [ 1260.347624] attempt to access beyond end of device [ 1260.352603] loop1: rw=1, want=23057, limit=112 [ 1260.366991] attempt to access beyond end of device [ 1260.372005] loop1: rw=1, want=27153, limit=112 [ 1260.380405] attempt to access beyond end of device [ 1260.385354] loop1: rw=1, want=27545, limit=112 [ 1260.826802] attempt to access beyond end of device [ 1260.845132] loop1: rw=1, want=130, limit=112 [ 1260.870971] attempt to access beyond end of device [ 1260.895416] loop1: rw=1, want=131, limit=112 [ 1260.917732] attempt to access beyond end of device [ 1260.923218] loop1: rw=1, want=132, limit=112 [ 1260.940936] attempt to access beyond end of device [ 1260.952618] loop1: rw=1, want=133, limit=112 [ 1260.962971] attempt to access beyond end of device [ 1260.973794] loop1: rw=1, want=142, limit=112 [ 1260.984125] attempt to access beyond end of device [ 1260.994959] loop1: rw=1, want=143, limit=112 [ 1261.005273] attempt to access beyond end of device [ 1261.016076] loop1: rw=1, want=144, limit=112 [ 1261.025372] attempt to access beyond end of device [ 1261.036187] loop1: rw=1, want=145, limit=112 [ 1261.062878] attempt to access beyond end of device [ 1261.073752] loop1: rw=1, want=4241, limit=112 [ 1261.109613] attempt to access beyond end of device [ 1261.120461] loop1: rw=1, want=7705, limit=112 [ 1261.137845] attempt to access beyond end of device [ 1261.148589] loop1: rw=1, want=7734, limit=112 [ 1261.158167] attempt to access beyond end of device [ 1261.169023] loop1: rw=1, want=7735, limit=112 [ 1261.179362] attempt to access beyond end of device [ 1261.190328] loop1: rw=1, want=7736, limit=112 [ 1261.200738] attempt to access beyond end of device [ 1261.211565] loop1: rw=1, want=7737, limit=112 [ 1261.220878] attempt to access beyond end of device [ 1261.231751] loop1: rw=1, want=7758, limit=112 [ 1261.242184] attempt to access beyond end of device [ 1261.252976] loop1: rw=1, want=7759, limit=112 [ 1261.263400] attempt to access beyond end of device [ 1261.274225] loop1: rw=1, want=7760, limit=112 [ 1261.284634] attempt to access beyond end of device [ 1261.295470] loop1: rw=1, want=7761, limit=112 [ 1261.305940] attempt to access beyond end of device [ 1261.316762] loop1: rw=1, want=7810, limit=112 [ 1261.326112] attempt to access beyond end of device [ 1261.336938] loop1: rw=1, want=7811, limit=112 [ 1261.347460] attempt to access beyond end of device [ 1261.358405] loop1: rw=1, want=7812, limit=112 [ 1261.368158] attempt to access beyond end of device [ 1261.380194] loop1: rw=1, want=7813, limit=112 [ 1261.389436] attempt to access beyond end of device [ 1261.400535] loop1: rw=1, want=7822, limit=112 [ 1261.410938] attempt to access beyond end of device [ 1261.421723] loop1: rw=1, want=7823, limit=112 [ 1261.432105] attempt to access beyond end of device [ 1261.442955] loop1: rw=1, want=7824, limit=112 [ 1261.453403] attempt to access beyond end of device [ 1261.464318] loop1: rw=1, want=7825, limit=112 09:39:17 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:17 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:17 executing program 2: 09:39:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1261.492864] attempt to access beyond end of device [ 1261.497934] loop1: rw=1, want=11921, limit=112 [ 1261.548218] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1261.549742] attempt to access beyond end of device [ 1261.576868] loop1: rw=1, want=16017, limit=112 09:39:17 executing program 2: [ 1261.616127] attempt to access beyond end of device [ 1261.627233] loop1: rw=1, want=20113, limit=112 09:39:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1261.669264] attempt to access beyond end of device 09:39:17 executing program 2: [ 1261.707300] loop1: rw=1, want=24209, limit=112 09:39:17 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1261.766897] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1261.768122] attempt to access beyond end of device [ 1261.800270] loop1: rw=1, want=27569, limit=112 09:39:17 executing program 2: 09:39:17 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1261.947828] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:18 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:18 executing program 2: 09:39:18 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:18 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:18 executing program 2: [ 1263.179436] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1263.222188] attempt to access beyond end of device [ 1263.227173] loop1: rw=1, want=130, limit=112 [ 1263.252657] attempt to access beyond end of device [ 1263.262624] loop1: rw=1, want=131, limit=112 09:39:18 executing program 2: 09:39:18 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1263.268130] attempt to access beyond end of device [ 1263.291162] loop1: rw=1, want=132, limit=112 [ 1263.319111] attempt to access beyond end of device [ 1263.340813] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1263.348158] loop1: rw=1, want=133, limit=112 [ 1263.365358] attempt to access beyond end of device [ 1263.375103] loop1: rw=1, want=142, limit=112 [ 1263.384614] attempt to access beyond end of device 09:39:19 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:19 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:19 executing program 2: [ 1263.394820] loop1: rw=1, want=143, limit=112 [ 1263.403203] attempt to access beyond end of device [ 1263.413696] loop1: rw=1, want=144, limit=112 [ 1263.418310] attempt to access beyond end of device [ 1263.423379] loop1: rw=1, want=145, limit=112 [ 1263.443361] attempt to access beyond end of device [ 1263.471616] loop1: rw=1, want=3161, limit=112 [ 1263.483700] attempt to access beyond end of device [ 1263.509562] loop1: rw=1, want=3190, limit=112 [ 1263.535046] attempt to access beyond end of device [ 1263.566923] loop1: rw=1, want=3191, limit=112 [ 1263.571574] attempt to access beyond end of device [ 1263.576553] loop1: rw=1, want=3192, limit=112 [ 1263.581911] attempt to access beyond end of device [ 1263.587273] loop1: rw=1, want=3193, limit=112 [ 1263.592208] attempt to access beyond end of device [ 1263.597281] loop1: rw=1, want=3214, limit=112 [ 1263.602299] attempt to access beyond end of device [ 1263.607392] loop1: rw=1, want=3215, limit=112 [ 1263.612128] attempt to access beyond end of device [ 1263.617217] loop1: rw=1, want=3216, limit=112 [ 1263.621943] attempt to access beyond end of device [ 1263.627031] loop1: rw=1, want=3217, limit=112 [ 1263.631792] attempt to access beyond end of device [ 1263.636860] loop1: rw=1, want=3266, limit=112 [ 1263.641561] attempt to access beyond end of device [ 1263.653999] loop1: rw=1, want=3267, limit=112 [ 1263.661081] attempt to access beyond end of device [ 1263.669881] loop1: rw=1, want=3268, limit=112 [ 1263.677002] attempt to access beyond end of device [ 1263.683655] loop1: rw=1, want=3269, limit=112 [ 1263.696848] attempt to access beyond end of device [ 1263.702008] loop1: rw=1, want=3278, limit=112 [ 1263.706551] attempt to access beyond end of device [ 1263.711750] loop1: rw=1, want=3279, limit=112 [ 1263.716291] attempt to access beyond end of device [ 1263.721364] loop1: rw=1, want=3280, limit=112 [ 1263.725912] attempt to access beyond end of device [ 1263.734363] loop1: rw=1, want=3281, limit=112 [ 1263.745508] attempt to access beyond end of device [ 1263.750592] loop1: rw=1, want=7377, limit=112 [ 1263.764882] attempt to access beyond end of device [ 1263.769917] loop1: rw=1, want=11473, limit=112 [ 1263.784152] attempt to access beyond end of device [ 1263.789195] loop1: rw=1, want=15569, limit=112 [ 1263.803766] attempt to access beyond end of device [ 1263.809370] loop1: rw=1, want=19665, limit=112 [ 1263.823840] attempt to access beyond end of device [ 1263.828880] loop1: rw=1, want=23761, limit=112 [ 1263.841470] attempt to access beyond end of device [ 1263.846433] loop1: rw=1, want=26697, limit=112 [ 1264.259094] attempt to access beyond end of device [ 1264.264080] loop1: rw=1, want=130, limit=112 [ 1264.273306] attempt to access beyond end of device [ 1264.285147] loop1: rw=1, want=131, limit=112 [ 1264.295356] attempt to access beyond end of device [ 1264.306090] loop1: rw=1, want=132, limit=112 [ 1264.315176] attempt to access beyond end of device [ 1264.325890] loop1: rw=1, want=133, limit=112 [ 1264.345499] attempt to access beyond end of device [ 1264.362158] loop1: rw=1, want=142, limit=112 [ 1264.371540] attempt to access beyond end of device [ 1264.382447] loop1: rw=1, want=143, limit=112 [ 1264.393619] attempt to access beyond end of device [ 1264.407883] loop1: rw=1, want=144, limit=112 [ 1264.418240] attempt to access beyond end of device [ 1264.429265] loop1: rw=1, want=145, limit=112 [ 1264.454085] attempt to access beyond end of device [ 1264.466047] loop1: rw=1, want=4241, limit=112 [ 1264.499024] attempt to access beyond end of device [ 1264.510939] loop1: rw=1, want=8337, limit=112 [ 1264.531794] attempt to access beyond end of device [ 1264.542575] loop1: rw=1, want=8601, limit=112 [ 1264.553153] attempt to access beyond end of device [ 1264.564001] loop1: rw=1, want=8630, limit=112 [ 1264.574397] attempt to access beyond end of device [ 1264.585211] loop1: rw=1, want=8631, limit=112 [ 1264.595576] attempt to access beyond end of device [ 1264.606519] loop1: rw=1, want=8632, limit=112 [ 1264.616938] attempt to access beyond end of device [ 1264.627859] loop1: rw=1, want=8633, limit=112 [ 1264.637076] attempt to access beyond end of device [ 1264.648710] loop1: rw=1, want=8654, limit=112 [ 1264.659321] attempt to access beyond end of device [ 1264.670154] loop1: rw=1, want=8655, limit=112 [ 1264.680699] attempt to access beyond end of device [ 1264.691485] loop1: rw=1, want=8656, limit=112 [ 1264.701842] attempt to access beyond end of device [ 1264.712582] loop1: rw=1, want=8657, limit=112 [ 1264.721837] attempt to access beyond end of device [ 1264.733914] loop1: rw=1, want=8706, limit=112 [ 1264.743208] attempt to access beyond end of device [ 1264.754047] loop1: rw=1, want=8707, limit=112 [ 1264.764492] attempt to access beyond end of device [ 1264.775374] loop1: rw=1, want=8708, limit=112 [ 1264.785984] attempt to access beyond end of device [ 1264.798420] loop1: rw=1, want=8709, limit=112 [ 1264.808016] attempt to access beyond end of device [ 1264.818845] loop1: rw=1, want=8718, limit=112 [ 1264.829312] attempt to access beyond end of device [ 1264.840206] loop1: rw=1, want=8719, limit=112 [ 1264.850616] attempt to access beyond end of device [ 1264.861567] loop1: rw=1, want=8720, limit=112 [ 1264.871957] attempt to access beyond end of device [ 1264.882746] loop1: rw=1, want=8721, limit=112 [ 1264.909994] attempt to access beyond end of device [ 1264.920763] loop1: rw=1, want=12817, limit=112 09:39:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000007fffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:20 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:20 executing program 2: 09:39:20 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:20 executing program 5: [ 1264.952552] attempt to access beyond end of device [ 1264.957503] loop1: rw=1, want=16913, limit=112 [ 1264.972731] attempt to access beyond end of device [ 1264.977742] loop1: rw=1, want=21009, limit=112 09:39:20 executing program 5: 09:39:20 executing program 2: [ 1265.026190] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1265.049833] attempt to access beyond end of device [ 1265.056193] loop1: rw=1, want=25105, limit=112 [ 1265.084784] attempt to access beyond end of device 09:39:20 executing program 5: 09:39:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1265.138128] loop1: rw=1, want=27913, limit=112 09:39:20 executing program 5: 09:39:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x8000176, &(0x7f0000000080)}) 09:39:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:20 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000003c0)={0x0, @rand_addr=0x3ff, 0x4e23, 0x3, 'wlc\x00', 0x0, 0x9f1a}, 0x2c) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1265.242543] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1265.838158] attempt to access beyond end of device [ 1265.856628] loop1: rw=1, want=130, limit=112 [ 1265.876266] buffer_io_error: 76 callbacks suppressed [ 1265.876292] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1265.922254] attempt to access beyond end of device [ 1265.935399] loop1: rw=1, want=131, limit=112 [ 1265.945749] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1265.963007] attempt to access beyond end of device [ 1265.974047] loop1: rw=1, want=132, limit=112 [ 1265.984386] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 1266.001564] attempt to access beyond end of device [ 1266.012420] loop1: rw=1, want=133, limit=112 [ 1266.021575] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 1266.038988] attempt to access beyond end of device [ 1266.049789] loop1: rw=1, want=142, limit=112 [ 1266.058982] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 1266.075999] attempt to access beyond end of device [ 1266.086830] loop1: rw=1, want=143, limit=112 [ 1266.097218] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 1266.113247] attempt to access beyond end of device [ 1266.125214] loop1: rw=1, want=144, limit=112 [ 1266.134401] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 1266.151505] attempt to access beyond end of device [ 1266.162387] loop1: rw=1, want=145, limit=112 [ 1266.171462] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 1266.204755] attempt to access beyond end of device [ 1266.215580] loop1: rw=1, want=4241, limit=112 [ 1266.239117] attempt to access beyond end of device [ 1266.249855] loop1: rw=1, want=5081, limit=112 [ 1266.261278] attempt to access beyond end of device [ 1266.273214] loop1: rw=1, want=5110, limit=112 [ 1266.283637] Buffer I/O error on dev loop1, logical block 5109, lost async page write [ 1266.300851] attempt to access beyond end of device [ 1266.311588] loop1: rw=1, want=5111, limit=112 [ 1266.320822] Buffer I/O error on dev loop1, logical block 5110, lost async page write [ 1266.338039] attempt to access beyond end of device [ 1266.348858] loop1: rw=1, want=5112, limit=112 [ 1266.359615] attempt to access beyond end of device [ 1266.370405] loop1: rw=1, want=5113, limit=112 [ 1266.379597] attempt to access beyond end of device [ 1266.391621] loop1: rw=1, want=5134, limit=112 [ 1266.400853] attempt to access beyond end of device [ 1266.411650] loop1: rw=1, want=5135, limit=112 [ 1266.421983] attempt to access beyond end of device [ 1266.432746] loop1: rw=1, want=5136, limit=112 [ 1266.443085] attempt to access beyond end of device [ 1266.453890] loop1: rw=1, want=5137, limit=112 09:39:22 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:22 executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x17, 0x8000000006, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080)="cc", &(0x7f0000001140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000000c0)}, 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000300), 0x10) 09:39:22 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="0fae"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="660f2d6600450f094b0fc7683ac7442400b9760000c7442402f9ffffffc7442406000000000f011c24d27af667410f01a300000100c42115c6d338c4a18b5d79050f71d7bb470f01bc600cb40000", 0x4e}], 0x1, 0x0, &(0x7f0000000100)=[@cr0={0x0, 0x4}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1266.467347] attempt to access beyond end of device [ 1266.472414] loop1: rw=1, want=5186, limit=112 [ 1266.476943] attempt to access beyond end of device [ 1266.481942] loop1: rw=1, want=5187, limit=112 [ 1266.486477] attempt to access beyond end of device [ 1266.491474] loop1: rw=1, want=5188, limit=112 [ 1266.496001] attempt to access beyond end of device [ 1266.501009] loop1: rw=1, want=5189, limit=112 [ 1266.505540] attempt to access beyond end of device [ 1266.511173] loop1: rw=1, want=5198, limit=112 [ 1266.527124] attempt to access beyond end of device [ 1266.532249] loop1: rw=1, want=5199, limit=112 [ 1266.534262] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1266.536904] attempt to access beyond end of device [ 1266.550012] loop1: rw=1, want=5200, limit=112 [ 1266.554713] attempt to access beyond end of device [ 1266.559876] loop1: rw=1, want=5201, limit=112 [ 1266.572341] attempt to access beyond end of device [ 1266.577417] loop1: rw=1, want=9297, limit=112 [ 1266.594860] attempt to access beyond end of device [ 1266.600106] loop1: rw=1, want=13393, limit=112 09:39:22 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') [ 1266.631832] attempt to access beyond end of device [ 1266.643765] loop1: rw=1, want=17489, limit=112 09:39:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1266.678244] attempt to access beyond end of device [ 1266.694499] loop1: rw=1, want=21585, limit=112 09:39:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1266.738049] attempt to access beyond end of device [ 1266.747955] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1266.749959] loop1: rw=1, want=25681, limit=112 09:39:22 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:22 executing program 5: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1266.791443] attempt to access beyond end of device [ 1266.805594] loop1: rw=1, want=27161, limit=112 09:39:22 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1267.860813] attempt to access beyond end of device [ 1267.865800] loop5: rw=1, want=130, limit=112 [ 1267.877758] attempt to access beyond end of device [ 1267.882715] loop5: rw=1, want=131, limit=112 [ 1267.887173] attempt to access beyond end of device 09:39:23 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:23 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:23 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:23 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1267.908505] loop5: rw=1, want=132, limit=112 [ 1267.912971] attempt to access beyond end of device [ 1267.945006] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1267.948107] loop5: rw=1, want=133, limit=112 09:39:23 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1267.974436] attempt to access beyond end of device [ 1267.993322] loop5: rw=1, want=142, limit=112 [ 1268.021522] attempt to access beyond end of device [ 1268.057342] loop5: rw=1, want=143, limit=112 09:39:23 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1268.096057] attempt to access beyond end of device [ 1268.112060] *** Guest State *** [ 1268.115379] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1268.138301] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1268.147641] loop5: rw=1, want=144, limit=112 [ 1268.152126] attempt to access beyond end of device [ 1268.157063] loop5: rw=1, want=145, limit=112 [ 1268.160735] CR3 = 0x0000000000000000 [ 1268.175113] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 1268.191833] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1268.208101] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1268.226263] attempt to access beyond end of device [ 1268.237052] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1268.250652] loop5: rw=1, want=3737, limit=112 09:39:24 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000c80400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1268.303335] attempt to access beyond end of device [ 1268.321201] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 1268.348735] loop5: rw=1, want=3766, limit=112 [ 1268.353320] attempt to access beyond end of device 09:39:24 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1268.374900] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1268.387982] loop5: rw=1, want=3767, limit=112 [ 1268.392543] attempt to access beyond end of device [ 1268.397479] loop5: rw=1, want=3768, limit=112 [ 1268.397518] attempt to access beyond end of device [ 1268.419189] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 1268.420962] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1268.427288] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1268.440854] loop5: rw=1, want=3769, limit=112 [ 1268.448489] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1268.480680] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1268.498170] attempt to access beyond end of device [ 1268.511347] loop5: rw=1, want=3790, limit=112 [ 1268.512394] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1268.521365] attempt to access beyond end of device 09:39:24 executing program 2: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1268.531521] loop5: rw=1, want=3791, limit=112 [ 1268.544015] attempt to access beyond end of device [ 1268.554747] loop5: rw=1, want=3792, limit=112 [ 1268.563571] attempt to access beyond end of device [ 1268.587439] loop5: rw=1, want=3793, limit=112 [ 1268.607150] attempt to access beyond end of device [ 1268.621795] loop5: rw=1, want=3842, limit=112 [ 1268.629575] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 09:39:24 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:24 executing program 2: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1268.632540] attempt to access beyond end of device [ 1268.652869] loop5: rw=1, want=3843, limit=112 [ 1268.657427] attempt to access beyond end of device [ 1268.662884] IDTR: limit=0x0000ffff, base=0x0000000000000000 09:39:24 executing program 0: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1268.687995] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1268.692659] loop5: rw=1, want=3844, limit=112 [ 1268.717817] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1268.736227] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1268.737149] attempt to access beyond end of device [ 1268.750337] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1268.768040] Interruptibility = 00000000 ActivityState = 00000000 [ 1268.814102] loop5: rw=1, want=3845, limit=112 [ 1268.827958] attempt to access beyond end of device [ 1268.828088] *** Host State *** [ 1268.844437] loop5: rw=1, want=3854, limit=112 [ 1268.853033] RIP = 0xffffffff8120269c RSP = 0xffff8801bda07390 [ 1268.889719] attempt to access beyond end of device [ 1268.896834] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1268.906792] loop5: rw=1, want=3855, limit=112 [ 1268.914943] FSBase=00007fd3cab2e700 GSBase=ffff8801daf00000 TRBase=fffffe0000033000 [ 1268.924905] attempt to access beyond end of device [ 1268.925105] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1268.930070] loop5: rw=1, want=3856, limit=112 [ 1268.941453] CR0=0000000080050033 CR3=00000001d5a7a000 CR4=00000000001426e0 [ 1268.948937] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 1268.951594] attempt to access beyond end of device [ 1268.955853] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1268.966899] *** Control State *** [ 1268.972990] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 1268.978486] loop5: rw=1, want=3857, limit=112 [ 1268.980236] EntryControls=0000d1ff ExitControls=002fefff [ 1268.996159] attempt to access beyond end of device [ 1268.997733] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1269.001633] loop5: rw=1, want=7953, limit=112 [ 1269.020928] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 1269.024956] attempt to access beyond end of device [ 1269.032643] loop5: rw=1, want=12049, limit=112 [ 1269.038111] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1269.044808] reason=80000021 qualification=0000000000000000 [ 1269.046450] attempt to access beyond end of device [ 1269.056101] loop5: rw=1, want=16145, limit=112 [ 1269.057750] IDTVectoring: info=00000000 errcode=00000000 [ 1269.066759] TSC Offset = 0xfffffd56bc7c1548 [ 1269.071458] EPT pointer = 0x00000001bb58201e [ 1269.080841] attempt to access beyond end of device [ 1269.085808] loop5: rw=1, want=20241, limit=112 [ 1269.121404] attempt to access beyond end of device [ 1269.126380] loop5: rw=1, want=24337, limit=112 [ 1269.140821] attempt to access beyond end of device [ 1269.145780] loop5: rw=1, want=28433, limit=112 [ 1269.153721] attempt to access beyond end of device [ 1269.158788] loop5: rw=1, want=28545, limit=112 09:39:25 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:25 executing program 0: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:25 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1269.618551] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:25 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:25 executing program 0: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1269.945334] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:25 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1270.179990] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:26 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:26 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:26 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1270.465382] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:26 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1270.550638] attempt to access beyond end of device [ 1270.555625] loop5: rw=1, want=130, limit=112 [ 1270.579221] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1270.588386] attempt to access beyond end of device [ 1270.593336] loop5: rw=1, want=131, limit=112 09:39:26 executing program 1: socket$xdp(0x2c, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1270.616278] attempt to access beyond end of device 09:39:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000000000ffffffff00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1270.637771] loop5: rw=1, want=132, limit=112 [ 1270.642289] attempt to access beyond end of device [ 1270.647388] loop5: rw=1, want=133, limit=112 [ 1270.664954] attempt to access beyond end of device [ 1270.688660] loop5: rw=1, want=142, limit=112 [ 1270.694536] attempt to access beyond end of device [ 1270.721489] loop5: rw=1, want=143, limit=112 [ 1270.725963] attempt to access beyond end of device [ 1270.775600] loop5: rw=1, want=144, limit=112 [ 1270.793020] attempt to access beyond end of device [ 1270.833421] loop5: rw=1, want=145, limit=112 [ 1270.850516] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1270.865443] attempt to access beyond end of device [ 1270.918103] loop5: rw=1, want=4241, limit=112 09:39:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1271.037659] attempt to access beyond end of device [ 1271.042646] loop5: rw=1, want=8337, limit=112 09:39:26 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1271.111770] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1271.134685] attempt to access beyond end of device [ 1271.165780] loop5: rw=1, want=8601, limit=112 [ 1271.200852] attempt to access beyond end of device 09:39:26 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1271.237393] loop5: rw=1, want=8630, limit=112 [ 1271.269065] buffer_io_error: 46 callbacks suppressed [ 1271.269077] Buffer I/O error on dev loop5, logical block 8629, lost async page write [ 1271.358087] attempt to access beyond end of device [ 1271.389208] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1271.398649] loop5: rw=1, want=8631, limit=112 [ 1271.427707] Buffer I/O error on dev loop5, logical block 8630, lost async page write [ 1271.508889] attempt to access beyond end of device [ 1271.513876] loop5: rw=1, want=8632, limit=112 09:39:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1271.581983] Buffer I/O error on dev loop5, logical block 8631, lost async page write [ 1271.631742] attempt to access beyond end of device [ 1271.661762] attempt to access beyond end of device [ 1271.663384] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1271.666734] loop1: rw=1, want=130, limit=112 [ 1271.666751] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 1271.666786] attempt to access beyond end of device [ 1271.692977] loop5: rw=1, want=8633, limit=112 [ 1271.693651] attempt to access beyond end of device [ 1271.707040] Buffer I/O error on dev loop5, logical block 8632, lost async page write [ 1271.718994] attempt to access beyond end of device [ 1271.724120] loop2: rw=1, want=130, limit=112 [ 1271.725711] loop5: rw=1, want=8654, limit=112 [ 1271.733996] Buffer I/O error on dev loop5, logical block 8653, lost async page write [ 1271.734298] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 1271.746481] attempt to access beyond end of device [ 1271.756006] loop5: rw=1, want=8655, limit=112 [ 1271.760900] Buffer I/O error on dev loop5, logical block 8654, lost async page write [ 1271.768937] attempt to access beyond end of device [ 1271.777637] loop1: rw=1, want=131, limit=112 [ 1271.782095] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 1271.791461] attempt to access beyond end of device [ 1271.796412] loop5: rw=1, want=8656, limit=112 [ 1271.801004] loop2: rw=1, want=131, limit=112 [ 1271.805427] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 1271.813599] attempt to access beyond end of device [ 1271.818729] attempt to access beyond end of device [ 1271.823684] loop1: rw=1, want=132, limit=112 [ 1271.828217] loop5: rw=1, want=8657, limit=112 [ 1271.832791] attempt to access beyond end of device [ 1271.838758] attempt to access beyond end of device [ 1271.843708] loop2: rw=1, want=132, limit=112 [ 1271.848245] attempt to access beyond end of device [ 1271.853189] loop1: rw=1, want=133, limit=112 [ 1271.857721] attempt to access beyond end of device [ 1271.858005] loop5: rw=1, want=8706, limit=112 [ 1271.862734] loop2: rw=1, want=133, limit=112 [ 1271.867247] attempt to access beyond end of device [ 1271.871739] attempt to access beyond end of device [ 1271.881725] attempt to access beyond end of device [ 1271.886672] loop2: rw=1, want=142, limit=112 [ 1271.891199] loop1: rw=1, want=142, limit=112 [ 1271.895658] attempt to access beyond end of device [ 1271.900728] attempt to access beyond end of device [ 1271.900924] loop5: rw=1, want=8707, limit=112 [ 1271.905681] loop2: rw=1, want=143, limit=112 [ 1271.914652] loop1: rw=1, want=143, limit=112 [ 1271.917653] attempt to access beyond end of device [ 1271.919181] attempt to access beyond end of device [ 1271.925276] loop5: rw=1, want=8708, limit=112 [ 1271.929533] attempt to access beyond end of device [ 1271.934397] attempt to access beyond end of device [ 1271.938985] loop1: rw=1, want=144, limit=112 [ 1271.939040] attempt to access beyond end of device [ 1271.953321] loop2: rw=1, want=144, limit=112 [ 1271.957931] loop5: rw=1, want=8709, limit=112 [ 1271.962477] attempt to access beyond end of device [ 1271.967413] loop5: rw=1, want=8718, limit=112 [ 1271.972884] attempt to access beyond end of device [ 1271.977907] loop1: rw=1, want=145, limit=112 [ 1271.983149] attempt to access beyond end of device [ 1271.988175] loop2: rw=1, want=145, limit=112 [ 1271.997657] loop1: rw=1, want=601, limit=112 [ 1272.002656] attempt to access beyond end of device [ 1272.007755] attempt to access beyond end of device [ 1272.012713] loop5: rw=1, want=8719, limit=112 [ 1272.017247] attempt to access beyond end of device [ 1272.024186] attempt to access beyond end of device [ 1272.029211] loop2: rw=1, want=4241, limit=112 [ 1272.037710] loop1: rw=1, want=630, limit=112 [ 1272.042181] attempt to access beyond end of device [ 1272.047117] loop1: rw=1, want=631, limit=112 [ 1272.051615] loop5: rw=1, want=8720, limit=112 [ 1272.056158] attempt to access beyond end of device [ 1272.061207] attempt to access beyond end of device [ 1272.066148] loop1: rw=1, want=632, limit=112 [ 1272.067353] attempt to access beyond end of device [ 1272.070631] loop5: rw=1, want=8721, limit=112 [ 1272.080145] attempt to access beyond end of device [ 1272.085084] loop1: rw=1, want=633, limit=112 [ 1272.087641] loop2: rw=1, want=8337, limit=112 [ 1272.095884] attempt to access beyond end of device [ 1272.099848] attempt to access beyond end of device [ 1272.101757] attempt to access beyond end of device [ 1272.105755] loop2: rw=1, want=9369, limit=112 [ 1272.110755] loop5: rw=1, want=12817, limit=112 [ 1272.119948] loop1: rw=1, want=654, limit=112 [ 1272.124463] attempt to access beyond end of device [ 1272.137617] loop1: rw=1, want=655, limit=112 [ 1272.142116] attempt to access beyond end of device [ 1272.147052] loop1: rw=1, want=656, limit=112 [ 1272.148454] attempt to access beyond end of device [ 1272.153130] attempt to access beyond end of device [ 1272.157367] loop2: rw=1, want=9398, limit=112 [ 1272.161388] loop5: rw=1, want=16913, limit=112 [ 1272.170551] attempt to access beyond end of device [ 1272.175491] loop1: rw=1, want=657, limit=112 [ 1272.178601] attempt to access beyond end of device [ 1272.184828] loop2: rw=1, want=9399, limit=112 [ 1272.187738] attempt to access beyond end of device [ 1272.194252] loop1: rw=1, want=706, limit=112 [ 1272.197697] attempt to access beyond end of device [ 1272.200265] attempt to access beyond end of device [ 1272.204514] loop2: rw=1, want=9400, limit=112 [ 1272.208600] attempt to access beyond end of device [ 1272.213599] attempt to access beyond end of device [ 1272.218050] loop5: rw=1, want=21009, limit=112 [ 1272.227639] loop2: rw=1, want=9401, limit=112 [ 1272.228545] loop1: rw=1, want=707, limit=112 [ 1272.232189] attempt to access beyond end of device [ 1272.236574] attempt to access beyond end of device [ 1272.256265] attempt to access beyond end of device [ 1272.257703] loop2: rw=1, want=9422, limit=112 [ 1272.261300] loop1: rw=1, want=708, limit=112 [ 1272.270317] loop5: rw=1, want=25105, limit=112 [ 1272.270562] attempt to access beyond end of device [ 1272.279930] attempt to access beyond end of device [ 1272.279944] loop1: rw=1, want=709, limit=112 [ 1272.279972] attempt to access beyond end of device [ 1272.298643] attempt to access beyond end of device [ 1272.303603] loop5: rw=1, want=28921, limit=112 [ 1272.307650] loop2: rw=1, want=9423, limit=112 [ 1272.308395] loop1: rw=1, want=718, limit=112 [ 1272.313007] attempt to access beyond end of device [ 1272.317143] attempt to access beyond end of device [ 1272.322101] loop2: rw=1, want=9424, limit=112 [ 1272.347631] loop1: rw=1, want=719, limit=112 [ 1272.347659] attempt to access beyond end of device [ 1272.352114] attempt to access beyond end of device [ 1272.357022] loop2: rw=1, want=9425, limit=112 [ 1272.377651] loop1: rw=1, want=720, limit=112 [ 1272.377773] attempt to access beyond end of device [ 1272.382128] attempt to access beyond end of device [ 1272.387034] loop2: rw=1, want=9474, limit=112 [ 1272.407706] loop1: rw=1, want=721, limit=112 [ 1272.416258] attempt to access beyond end of device [ 1272.417780] attempt to access beyond end of device [ 1272.426229] loop2: rw=1, want=9475, limit=112 [ 1272.430867] attempt to access beyond end of device [ 1272.431178] loop1: rw=1, want=3129, limit=112 [ 1272.435828] loop2: rw=1, want=9476, limit=112 [ 1272.457739] attempt to access beyond end of device [ 1272.487657] loop2: rw=1, want=9477, limit=112 [ 1272.492250] attempt to access beyond end of device [ 1272.497193] loop2: rw=1, want=9486, limit=112 [ 1272.521150] attempt to access beyond end of device [ 1272.526148] loop2: rw=1, want=9487, limit=112 [ 1272.547684] attempt to access beyond end of device [ 1272.552646] loop2: rw=1, want=9488, limit=112 [ 1272.557182] attempt to access beyond end of device [ 1272.578125] loop2: rw=1, want=9489, limit=112 [ 1272.589878] attempt to access beyond end of device [ 1272.594833] loop2: rw=1, want=13585, limit=112 [ 1272.638623] attempt to access beyond end of device [ 1272.643622] loop2: rw=1, want=17681, limit=112 [ 1272.659583] attempt to access beyond end of device [ 1272.664548] loop2: rw=1, want=21777, limit=112 [ 1272.679766] attempt to access beyond end of device [ 1272.684730] loop2: rw=1, want=25873, limit=112 [ 1272.699812] attempt to access beyond end of device [ 1272.704783] loop2: rw=1, want=29969, limit=112 [ 1272.714413] attempt to access beyond end of device [ 1272.719801] loop2: rw=1, want=30793, limit=112 09:39:29 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:29 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)="8f66c41ec20d4cab1c696d036a30d71ea8c37d2ca3cd35f30bce143b187cd584087d43cb849381d33b8258c24bafba84c6e62992f9854ae69b48353e1045ab8904da05b9a412e7410f9a55367bbebddb165830040b01df8eee168f58b91e782dc080fad3d38c2c0c7b3907f5ddb99fe44024ffbad61bb01a", 0x78, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:29 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:29 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1273.639291] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1273.660155] attempt to access beyond end of device [ 1273.665128] loop5: rw=1, want=130, limit=112 [ 1273.677869] attempt to access beyond end of device [ 1273.688896] loop5: rw=1, want=131, limit=112 [ 1273.704991] attempt to access beyond end of device [ 1273.715977] loop5: rw=1, want=132, limit=112 [ 1273.740747] attempt to access beyond end of device [ 1273.758477] loop5: rw=1, want=133, limit=112 [ 1273.769910] attempt to access beyond end of device [ 1273.779531] loop5: rw=1, want=142, limit=112 09:39:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1273.825219] attempt to access beyond end of device [ 1273.877027] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1273.905892] loop5: rw=1, want=143, limit=112 [ 1273.938842] attempt to access beyond end of device [ 1273.943856] loop2: rw=1, want=130, limit=112 [ 1273.951139] attempt to access beyond end of device [ 1273.956096] loop5: rw=1, want=144, limit=112 [ 1273.985968] attempt to access beyond end of device [ 1274.047042] loop2: rw=1, want=131, limit=112 [ 1274.060239] attempt to access beyond end of device 09:39:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1274.095237] attempt to access beyond end of device [ 1274.109953] loop5: rw=1, want=145, limit=112 [ 1274.150120] loop2: rw=1, want=132, limit=112 [ 1274.195857] attempt to access beyond end of device [ 1274.204216] attempt to access beyond end of device [ 1274.244502] loop2: rw=1, want=133, limit=112 [ 1274.262391] loop5: rw=1, want=3673, limit=112 [ 1274.277177] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1274.295095] attempt to access beyond end of device [ 1274.319592] attempt to access beyond end of device [ 1274.345939] loop2: rw=1, want=142, limit=112 [ 1274.382782] attempt to access beyond end of device [ 1274.390570] loop5: rw=1, want=3702, limit=112 [ 1274.429235] attempt to access beyond end of device [ 1274.438030] loop2: rw=1, want=143, limit=112 09:39:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1274.483206] attempt to access beyond end of device [ 1274.501654] loop5: rw=1, want=3703, limit=112 [ 1274.520330] attempt to access beyond end of device [ 1274.525287] loop5: rw=1, want=3704, limit=112 [ 1274.544834] loop2: rw=1, want=144, limit=112 [ 1274.577263] attempt to access beyond end of device 09:39:30 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1274.606349] attempt to access beyond end of device [ 1274.616814] loop2: rw=1, want=145, limit=112 09:39:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:30 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1274.651818] loop5: rw=1, want=3705, limit=112 [ 1274.656437] attempt to access beyond end of device [ 1274.662076] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1274.693235] attempt to access beyond end of device [ 1274.706196] loop2: rw=1, want=4241, limit=112 [ 1274.717674] loop5: rw=1, want=3726, limit=112 [ 1274.722230] attempt to access beyond end of device [ 1274.727186] loop5: rw=1, want=3727, limit=112 [ 1274.727222] attempt to access beyond end of device [ 1274.727232] loop5: rw=1, want=3728, limit=112 [ 1274.727260] attempt to access beyond end of device [ 1274.761440] attempt to access beyond end of device [ 1274.787641] loop5: rw=1, want=3729, limit=112 [ 1274.790872] loop2: rw=1, want=6873, limit=112 [ 1274.792254] attempt to access beyond end of device [ 1274.811627] attempt to access beyond end of device [ 1274.817717] loop5: rw=1, want=3778, limit=112 [ 1274.822263] attempt to access beyond end of device [ 1274.822312] loop2: rw=1, want=6902, limit=112 [ 1274.827199] loop5: rw=1, want=3779, limit=112 [ 1274.827235] attempt to access beyond end of device [ 1274.827247] loop5: rw=1, want=3780, limit=112 [ 1274.827274] attempt to access beyond end of device [ 1274.857155] attempt to access beyond end of device [ 1274.857628] loop5: rw=1, want=3781, limit=112 [ 1274.866636] attempt to access beyond end of device [ 1274.874938] loop2: rw=1, want=6903, limit=112 [ 1274.884543] attempt to access beyond end of device [ 1274.894719] loop2: rw=1, want=6904, limit=112 [ 1274.897691] loop5: rw=1, want=3790, limit=112 [ 1274.903759] attempt to access beyond end of device [ 1274.905040] attempt to access beyond end of device [ 1274.917715] loop5: rw=1, want=3791, limit=112 [ 1274.919571] loop2: rw=1, want=6905, limit=112 [ 1274.922785] attempt to access beyond end of device [ 1274.922799] loop5: rw=1, want=3792, limit=112 [ 1274.922827] attempt to access beyond end of device [ 1274.942341] attempt to access beyond end of device [ 1274.961052] loop2: rw=1, want=6926, limit=112 [ 1274.975369] attempt to access beyond end of device [ 1274.977631] loop5: rw=1, want=3793, limit=112 [ 1274.987397] loop2: rw=1, want=6927, limit=112 [ 1274.997970] attempt to access beyond end of device [ 1275.009023] loop2: rw=1, want=6928, limit=112 [ 1275.011330] attempt to access beyond end of device [ 1275.019591] attempt to access beyond end of device [ 1275.027628] loop5: rw=1, want=7889, limit=112 [ 1275.030729] loop2: rw=1, want=6929, limit=112 [ 1275.039095] attempt to access beyond end of device [ 1275.050344] loop2: rw=1, want=6978, limit=112 [ 1275.060900] attempt to access beyond end of device [ 1275.061632] attempt to access beyond end of device [ 1275.071826] loop2: rw=1, want=6979, limit=112 [ 1275.081110] attempt to access beyond end of device [ 1275.093348] loop2: rw=1, want=6980, limit=112 [ 1275.097651] loop5: rw=1, want=11985, limit=112 [ 1275.102549] attempt to access beyond end of device [ 1275.114474] loop2: rw=1, want=6981, limit=112 [ 1275.128458] attempt to access beyond end of device [ 1275.134990] attempt to access beyond end of device [ 1275.145819] loop2: rw=1, want=6990, limit=112 [ 1275.150841] loop5: rw=1, want=16081, limit=112 [ 1275.160497] attempt to access beyond end of device [ 1275.178156] loop2: rw=1, want=6991, limit=112 [ 1275.193254] attempt to access beyond end of device [ 1275.199941] attempt to access beyond end of device [ 1275.209726] loop2: rw=1, want=6992, limit=112 [ 1275.215533] loop5: rw=1, want=20177, limit=112 [ 1275.224852] attempt to access beyond end of device [ 1275.235817] loop2: rw=1, want=6993, limit=112 [ 1275.249958] attempt to access beyond end of device [ 1275.260895] loop5: rw=1, want=24273, limit=112 [ 1275.266572] attempt to access beyond end of device [ 1275.274155] loop2: rw=1, want=11089, limit=112 [ 1275.290206] attempt to access beyond end of device [ 1275.302127] loop5: rw=1, want=27073, limit=112 [ 1275.310833] attempt to access beyond end of device [ 1275.327947] loop2: rw=1, want=15185, limit=112 [ 1275.364117] attempt to access beyond end of device [ 1275.375211] loop2: rw=1, want=19281, limit=112 [ 1275.410780] attempt to access beyond end of device [ 1275.422621] loop2: rw=1, want=23377, limit=112 [ 1275.459892] attempt to access beyond end of device [ 1275.478123] loop2: rw=1, want=27473, limit=112 [ 1275.525961] attempt to access beyond end of device [ 1275.548351] loop2: rw=1, want=30769, limit=112 [ 1275.758965] attempt to access beyond end of device [ 1275.763957] loop1: rw=1, want=130, limit=112 [ 1275.777709] attempt to access beyond end of device [ 1275.782688] loop1: rw=1, want=131, limit=112 [ 1275.787124] attempt to access beyond end of device [ 1275.817700] loop1: rw=1, want=132, limit=112 [ 1275.822580] attempt to access beyond end of device [ 1275.827528] loop1: rw=1, want=133, limit=112 [ 1275.847748] attempt to access beyond end of device [ 1275.852725] loop1: rw=1, want=142, limit=112 [ 1275.857162] attempt to access beyond end of device [ 1275.867996] loop1: rw=1, want=143, limit=112 [ 1275.872467] attempt to access beyond end of device [ 1275.877425] loop1: rw=1, want=144, limit=112 [ 1275.898020] attempt to access beyond end of device [ 1275.902985] loop1: rw=1, want=145, limit=112 [ 1275.919396] attempt to access beyond end of device [ 1275.924744] loop1: rw=1, want=985, limit=112 [ 1275.948330] attempt to access beyond end of device [ 1275.953895] loop1: rw=1, want=1014, limit=112 [ 1275.967728] attempt to access beyond end of device [ 1275.972697] loop1: rw=1, want=1015, limit=112 [ 1275.977232] attempt to access beyond end of device [ 1275.995236] loop1: rw=1, want=1016, limit=112 [ 1276.000774] attempt to access beyond end of device [ 1276.005721] loop1: rw=1, want=1017, limit=112 [ 1276.010694] attempt to access beyond end of device [ 1276.015639] loop1: rw=1, want=1038, limit=112 [ 1276.020784] attempt to access beyond end of device [ 1276.025728] loop1: rw=1, want=1039, limit=112 [ 1276.030721] attempt to access beyond end of device [ 1276.035672] loop1: rw=1, want=1040, limit=112 [ 1276.048163] attempt to access beyond end of device [ 1276.053115] loop1: rw=1, want=1041, limit=112 [ 1276.067208] attempt to access beyond end of device [ 1276.091892] loop1: rw=1, want=1090, limit=112 [ 1276.167777] attempt to access beyond end of device [ 1276.196794] loop1: rw=1, want=1091, limit=112 [ 1276.247690] attempt to access beyond end of device [ 1276.252692] loop1: rw=1, want=1092, limit=112 [ 1276.257230] attempt to access beyond end of device [ 1276.285238] loop1: rw=1, want=1093, limit=112 [ 1276.300508] buffer_io_error: 121 callbacks suppressed [ 1276.300519] Buffer I/O error on dev loop1, logical block 1092, lost async page write [ 1276.344736] attempt to access beyond end of device [ 1276.362216] loop1: rw=1, want=1102, limit=112 [ 1276.372578] Buffer I/O error on dev loop1, logical block 1101, lost async page write [ 1276.389769] attempt to access beyond end of device 09:39:32 executing program 5: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:32 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000008800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1276.400507] loop1: rw=1, want=1103, limit=112 [ 1276.410813] Buffer I/O error on dev loop1, logical block 1102, lost async page write [ 1276.426867] attempt to access beyond end of device [ 1276.485327] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1276.498012] loop1: rw=1, want=1104, limit=112 [ 1276.522547] Buffer I/O error on dev loop1, logical block 1103, lost async page write [ 1276.574267] attempt to access beyond end of device 09:39:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1276.626128] loop1: rw=1, want=1105, limit=112 [ 1276.660599] Buffer I/O error on dev loop1, logical block 1104, lost async page write 09:39:32 executing program 5: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1276.781020] attempt to access beyond end of device [ 1276.788857] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1276.823279] loop1: rw=1, want=5201, limit=112 [ 1276.928938] attempt to access beyond end of device [ 1276.933919] loop1: rw=1, want=9297, limit=112 09:39:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:32 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') [ 1276.979054] attempt to access beyond end of device [ 1276.984210] loop1: rw=1, want=10153, limit=112 09:39:32 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1277.080772] attempt to access beyond end of device [ 1277.085751] loop2: rw=1, want=130, limit=112 [ 1277.094257] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.107759] Buffer I/O error on dev loop2, logical block 129, lost async page write 09:39:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1277.137415] attempt to access beyond end of device [ 1277.150209] loop2: rw=1, want=131, limit=112 [ 1277.159260] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 1277.187980] attempt to access beyond end of device [ 1277.202545] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.202908] loop2: rw=1, want=132, limit=112 [ 1277.227146] Buffer I/O error on dev loop2, logical block 131, lost async page write 09:39:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000300", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1277.261177] attempt to access beyond end of device [ 1277.278943] loop2: rw=1, want=133, limit=112 [ 1277.292393] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 1277.335979] attempt to access beyond end of device [ 1277.350739] loop2: rw=1, want=142, limit=112 [ 1277.368567] Buffer I/O error on dev loop2, logical block 141, lost async page write 09:39:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x2, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1277.379280] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.397905] attempt to access beyond end of device [ 1277.418684] loop2: rw=1, want=143, limit=112 09:39:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000200", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1277.434105] attempt to access beyond end of device [ 1277.452630] loop2: rw=1, want=144, limit=112 [ 1277.468002] attempt to access beyond end of device [ 1277.492164] loop2: rw=1, want=145, limit=112 [ 1277.538131] attempt to access beyond end of device [ 1277.554013] loop2: rw=1, want=4241, limit=112 [ 1277.575461] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.596055] attempt to access beyond end of device [ 1277.612789] loop2: rw=1, want=4441, limit=112 [ 1277.625765] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.628097] attempt to access beyond end of device [ 1277.664256] loop2: rw=1, want=4470, limit=112 [ 1277.679771] attempt to access beyond end of device [ 1277.695521] loop2: rw=1, want=4471, limit=112 09:39:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1277.710925] attempt to access beyond end of device [ 1277.727873] loop2: rw=1, want=4472, limit=112 [ 1277.742038] attempt to access beyond end of device [ 1277.766205] loop2: rw=1, want=4473, limit=112 [ 1277.783620] attempt to access beyond end of device [ 1277.801614] loop2: rw=1, want=4494, limit=112 [ 1277.817999] attempt to access beyond end of device [ 1277.829148] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1277.843226] loop2: rw=1, want=4495, limit=112 [ 1277.857340] attempt to access beyond end of device [ 1277.875289] loop2: rw=1, want=4496, limit=112 [ 1277.895302] attempt to access beyond end of device 09:39:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1277.917212] loop2: rw=1, want=4497, limit=112 [ 1277.938734] attempt to access beyond end of device [ 1277.968146] loop2: rw=1, want=4546, limit=112 [ 1277.985489] attempt to access beyond end of device 09:39:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:33 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') [ 1278.019144] loop2: rw=1, want=4547, limit=112 [ 1278.023896] attempt to access beyond end of device [ 1278.031229] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1278.043996] loop2: rw=1, want=4548, limit=112 [ 1278.054387] attempt to access beyond end of device [ 1278.059727] loop2: rw=1, want=4549, limit=112 [ 1278.064263] attempt to access beyond end of device 09:39:33 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1278.079365] loop2: rw=1, want=4558, limit=112 [ 1278.091365] attempt to access beyond end of device [ 1278.114958] loop2: rw=1, want=4559, limit=112 09:39:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1278.132096] attempt to access beyond end of device [ 1278.168188] loop2: rw=1, want=4560, limit=112 [ 1278.189195] attempt to access beyond end of device [ 1278.210839] loop2: rw=1, want=4561, limit=112 [ 1278.229019] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1278.273602] attempt to access beyond end of device [ 1278.304499] loop2: rw=1, want=8657, limit=112 [ 1278.362631] attempt to access beyond end of device [ 1278.384909] loop2: rw=1, want=12753, limit=112 [ 1278.425492] attempt to access beyond end of device [ 1278.454793] loop2: rw=1, want=16849, limit=112 [ 1278.522824] attempt to access beyond end of device [ 1278.546076] attempt to access beyond end of device [ 1278.554000] loop5: rw=1, want=130, limit=112 [ 1278.571681] attempt to access beyond end of device [ 1278.590364] loop2: rw=1, want=20945, limit=112 [ 1278.606806] loop5: rw=1, want=131, limit=112 [ 1278.634905] attempt to access beyond end of device [ 1278.659785] loop5: rw=1, want=132, limit=112 [ 1278.667193] attempt to access beyond end of device [ 1278.680594] attempt to access beyond end of device [ 1278.690467] loop2: rw=1, want=25041, limit=112 [ 1278.704102] loop5: rw=1, want=133, limit=112 [ 1278.722520] attempt to access beyond end of device [ 1278.744784] loop5: rw=1, want=142, limit=112 [ 1278.756783] attempt to access beyond end of device [ 1278.766599] attempt to access beyond end of device [ 1278.778839] loop2: rw=1, want=29137, limit=112 [ 1278.787956] loop5: rw=1, want=143, limit=112 [ 1278.805324] attempt to access beyond end of device [ 1278.825630] attempt to access beyond end of device [ 1278.833066] loop5: rw=1, want=144, limit=112 [ 1278.852352] attempt to access beyond end of device [ 1278.857522] loop2: rw=1, want=31057, limit=112 [ 1278.869472] loop5: rw=1, want=145, limit=112 [ 1278.939682] attempt to access beyond end of device [ 1278.960848] loop5: rw=1, want=4241, limit=112 [ 1279.010423] attempt to access beyond end of device [ 1279.035088] loop5: rw=1, want=6233, limit=112 [ 1279.064114] attempt to access beyond end of device [ 1279.088882] loop5: rw=1, want=6262, limit=112 [ 1279.123642] attempt to access beyond end of device [ 1279.147317] loop5: rw=1, want=6263, limit=112 [ 1279.164675] attempt to access beyond end of device [ 1279.181492] loop5: rw=1, want=6264, limit=112 [ 1279.186035] attempt to access beyond end of device [ 1279.221761] loop5: rw=1, want=6265, limit=112 [ 1279.226321] attempt to access beyond end of device [ 1279.247713] loop5: rw=1, want=6286, limit=112 [ 1279.252269] attempt to access beyond end of device [ 1279.257209] loop5: rw=1, want=6287, limit=112 [ 1279.262150] attempt to access beyond end of device [ 1279.267105] loop5: rw=1, want=6288, limit=112 [ 1279.287657] attempt to access beyond end of device [ 1279.292633] loop5: rw=1, want=6289, limit=112 [ 1279.297203] attempt to access beyond end of device [ 1279.317908] loop5: rw=1, want=6338, limit=112 [ 1279.322448] attempt to access beyond end of device [ 1279.327388] loop5: rw=1, want=6339, limit=112 [ 1279.347661] attempt to access beyond end of device [ 1279.352634] loop5: rw=1, want=6340, limit=112 [ 1279.357173] attempt to access beyond end of device [ 1279.377616] loop5: rw=1, want=6341, limit=112 [ 1279.382172] attempt to access beyond end of device [ 1279.387106] loop5: rw=1, want=6350, limit=112 [ 1279.408547] attempt to access beyond end of device [ 1279.413496] loop5: rw=1, want=6351, limit=112 [ 1279.418082] attempt to access beyond end of device [ 1279.423019] loop5: rw=1, want=6352, limit=112 [ 1279.427540] attempt to access beyond end of device [ 1279.445373] loop5: rw=1, want=6353, limit=112 [ 1279.457116] attempt to access beyond end of device [ 1279.462471] loop5: rw=1, want=10449, limit=112 [ 1279.477402] attempt to access beyond end of device [ 1279.493775] loop5: rw=1, want=14545, limit=112 [ 1279.509788] attempt to access beyond end of device [ 1279.526339] loop5: rw=1, want=18641, limit=112 [ 1279.706563] attempt to access beyond end of device [ 1279.717390] loop5: rw=1, want=22737, limit=112 [ 1279.748194] attempt to access beyond end of device [ 1279.760220] loop5: rw=1, want=26833, limit=112 [ 1279.784493] attempt to access beyond end of device [ 1279.795281] loop5: rw=1, want=28625, limit=112 09:39:36 executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') 09:39:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300), 0x0, 0x1}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:36 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) 09:39:36 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') [ 1280.392061] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1280.410170] attempt to access beyond end of device [ 1280.415136] loop2: rw=1, want=130, limit=112 [ 1280.438033] attempt to access beyond end of device [ 1280.494092] loop2: rw=1, want=131, limit=112 [ 1280.508271] attempt to access beyond end of device [ 1280.513229] loop2: rw=1, want=132, limit=112 [ 1280.569611] attempt to access beyond end of device [ 1280.574618] loop2: rw=1, want=133, limit=112 [ 1280.617648] attempt to access beyond end of device [ 1280.622617] loop2: rw=1, want=142, limit=112 [ 1280.627054] attempt to access beyond end of device [ 1280.666618] attempt to access beyond end of device [ 1280.691526] loop5: rw=1, want=130, limit=112 [ 1280.733857] loop2: rw=1, want=143, limit=112 [ 1280.738800] attempt to access beyond end of device 09:39:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000007fffffe00", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1280.822955] attempt to access beyond end of device [ 1280.832280] loop5: rw=1, want=131, limit=112 [ 1280.836741] attempt to access beyond end of device [ 1280.843747] kernel msg: ebtables bug: please report to author: Total nentries is wrong 09:39:36 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) [ 1280.887199] loop2: rw=1, want=144, limit=112 [ 1280.918415] attempt to access beyond end of device [ 1280.929697] loop5: rw=1, want=132, limit=112 [ 1280.950316] loop2: rw=1, want=145, limit=112 [ 1280.979884] attempt to access beyond end of device [ 1281.032360] loop5: rw=1, want=133, limit=112 [ 1281.057464] attempt to access beyond end of device 09:39:36 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c74657200000000000000000004c800", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1281.077995] attempt to access beyond end of device [ 1281.110942] loop2: rw=1, want=2137, limit=112 [ 1281.129400] loop5: rw=1, want=142, limit=112 [ 1281.160731] attempt to access beyond end of device [ 1281.179175] attempt to access beyond end of device [ 1281.215657] loop2: rw=1, want=2166, limit=112 [ 1281.222229] loop5: rw=1, want=143, limit=112 [ 1281.228648] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1281.295949] attempt to access beyond end of device [ 1281.301387] attempt to access beyond end of device [ 1281.324953] loop5: rw=1, want=144, limit=112 [ 1281.338275] loop2: rw=1, want=2167, limit=112 09:39:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:37 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1281.367979] buffer_io_error: 58 callbacks suppressed [ 1281.367990] Buffer I/O error on dev loop2, logical block 2166, lost async page write [ 1281.386793] Buffer I/O error on dev loop5, logical block 143, lost async page write 09:39:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000001100", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1281.440508] attempt to access beyond end of device [ 1281.461821] loop5: rw=1, want=145, limit=112 [ 1281.466254] Buffer I/O error on dev loop5, logical block 144, lost async page write [ 1281.474741] attempt to access beyond end of device [ 1281.482141] loop2: rw=1, want=2168, limit=112 [ 1281.492769] Buffer I/O error on dev loop2, logical block 2167, lost async page write [ 1281.502359] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1281.509952] attempt to access beyond end of device [ 1281.528274] loop2: rw=1, want=2169, limit=112 [ 1281.532797] Buffer I/O error on dev loop2, logical block 2168, lost async page write [ 1281.535269] attempt to access beyond end of device [ 1281.549820] attempt to access beyond end of device [ 1281.554767] loop2: rw=1, want=2190, limit=112 [ 1281.568226] loop5: rw=1, want=4241, limit=112 [ 1281.573612] Buffer I/O error on dev loop2, logical block 2189, lost async page write [ 1281.590727] FAT-fs (loop1): bogus number of reserved sectors [ 1281.597300] attempt to access beyond end of device [ 1281.610746] attempt to access beyond end of device [ 1281.614342] loop2: rw=1, want=2191, limit=112 [ 1281.619265] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1281.626280] loop5: rw=1, want=8337, limit=112 [ 1281.638012] Buffer I/O error on dev loop2, logical block 2190, lost async page write [ 1281.644622] attempt to access beyond end of device [ 1281.645934] attempt to access beyond end of device [ 1281.645947] loop2: rw=1, want=2192, limit=112 [ 1281.645962] Buffer I/O error on dev loop2, logical block 2191, lost async page write [ 1281.663287] loop5: rw=1, want=10649, limit=112 [ 1281.680952] attempt to access beyond end of device [ 1281.696474] loop5: rw=1, want=10678, limit=112 [ 1281.707113] Buffer I/O error on dev loop5, logical block 10677, lost async page write [ 1281.715401] attempt to access beyond end of device [ 1281.726274] attempt to access beyond end of device [ 1281.728027] loop2: rw=1, want=2193, limit=112 [ 1281.736021] Buffer I/O error on dev loop2, logical block 2192, lost async page write [ 1281.757679] attempt to access beyond end of device [ 1281.762627] loop2: rw=1, want=2242, limit=112 [ 1281.767197] attempt to access beyond end of device [ 1281.767636] loop5: rw=1, want=10679, limit=112 [ 1281.787673] loop2: rw=1, want=2243, limit=112 [ 1281.792492] attempt to access beyond end of device [ 1281.797434] loop2: rw=1, want=2244, limit=112 [ 1281.798246] attempt to access beyond end of device [ 1281.817639] attempt to access beyond end of device [ 1281.822632] loop2: rw=1, want=2245, limit=112 [ 1281.827167] attempt to access beyond end of device [ 1281.837887] loop5: rw=1, want=10680, limit=112 [ 1281.847928] loop2: rw=1, want=2254, limit=112 [ 1281.852479] attempt to access beyond end of device [ 1281.857416] loop2: rw=1, want=2255, limit=112 [ 1281.867654] attempt to access beyond end of device [ 1281.872618] loop5: rw=1, want=10681, limit=112 [ 1281.877243] attempt to access beyond end of device [ 1281.882728] attempt to access beyond end of device [ 1281.897626] loop2: rw=1, want=2256, limit=112 [ 1281.902215] attempt to access beyond end of device [ 1281.907156] loop2: rw=1, want=2257, limit=112 [ 1281.912113] loop5: rw=1, want=10702, limit=112 [ 1281.916749] attempt to access beyond end of device [ 1281.941425] attempt to access beyond end of device [ 1281.946613] loop2: rw=1, want=6353, limit=112 [ 1281.947625] loop5: rw=1, want=10703, limit=112 [ 1281.956546] attempt to access beyond end of device [ 1281.964270] attempt to access beyond end of device [ 1281.967644] loop5: rw=1, want=10704, limit=112 [ 1281.973838] attempt to access beyond end of device [ 1281.976319] loop2: rw=1, want=10449, limit=112 [ 1281.999351] attempt to access beyond end of device [ 1282.004498] loop2: rw=1, want=14545, limit=112 [ 1282.006852] loop5: rw=1, want=10705, limit=112 [ 1282.019773] attempt to access beyond end of device [ 1282.024860] loop2: rw=1, want=18641, limit=112 [ 1282.027719] attempt to access beyond end of device [ 1282.037694] loop5: rw=1, want=10754, limit=112 [ 1282.040154] attempt to access beyond end of device [ 1282.047362] loop2: rw=1, want=22737, limit=112 [ 1282.053718] attempt to access beyond end of device [ 1282.059523] loop5: rw=1, want=10755, limit=112 [ 1282.071015] attempt to access beyond end of device [ 1282.076356] loop2: rw=1, want=26833, limit=112 [ 1282.081490] attempt to access beyond end of device [ 1282.089121] loop5: rw=1, want=10756, limit=112 [ 1282.099502] attempt to access beyond end of device [ 1282.110307] loop5: rw=1, want=10757, limit=112 [ 1282.116802] attempt to access beyond end of device [ 1282.120695] attempt to access beyond end of device [ 1282.127644] loop5: rw=1, want=10766, limit=112 [ 1282.138204] attempt to access beyond end of device [ 1282.146645] loop2: rw=1, want=28113, limit=112 [ 1282.148128] loop5: rw=1, want=10767, limit=112 [ 1282.167761] attempt to access beyond end of device [ 1282.172860] loop5: rw=1, want=10768, limit=112 [ 1282.180978] attempt to access beyond end of device [ 1282.203441] loop5: rw=1, want=10769, limit=112 [ 1282.239581] attempt to access beyond end of device [ 1282.258233] loop5: rw=1, want=14865, limit=112 [ 1282.295601] attempt to access beyond end of device [ 1282.307633] loop5: rw=1, want=18961, limit=112 [ 1282.350821] attempt to access beyond end of device [ 1282.365603] loop5: rw=1, want=23057, limit=112 [ 1282.396254] attempt to access beyond end of device [ 1282.427658] loop5: rw=1, want=27153, limit=112 [ 1282.450884] attempt to access beyond end of device [ 1282.455879] loop5: rw=1, want=30313, limit=112 09:39:39 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000001000000bfa30000000000000703000000feffff7a0af0fff8f722ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000048007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000d00, 0xe, 0x29, &(0x7f0000000440)="b90703e6680d698cb89e40f088a8", &(0x7f00000000c0)=""/41, 0x109}, 0x28) fcntl$getown(0xffffffffffffffff, 0x9) 09:39:39 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:39 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') 09:39:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ea"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000000c0)={0x79, ""/121}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffff8, 0x3, &(0x7f0000000380)=[{&(0x7f0000000200)="3c3d890bb3542468cf9a376893e5b08fbea34e788033a0f80b402e9e4fb121a3022a5beb7eac4a7ac304b7bff7d715bb916299c855dd48ab0c68107a1a139633f81fbd7e5a786c2ef4b839867084ec624479a0987d4af55848ea79df06f2a5bb19d3e146fb33f88cf98f120e27b73657f2236a46e6", 0x75, 0x9}, {&(0x7f0000000280)="d0ad31", 0x3, 0x800}, {&(0x7f0000000300)}], 0x208000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:39:39 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) 09:39:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000000000500", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1283.600303] attempt to access beyond end of device [ 1283.605287] loop2: rw=1, want=130, limit=112 [ 1283.618754] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1283.634581] attempt to access beyond end of device [ 1283.650336] loop2: rw=1, want=131, limit=112 [ 1283.661980] attempt to access beyond end of device [ 1283.673084] loop2: rw=1, want=132, limit=112 [ 1283.682549] attempt to access beyond end of device [ 1283.695007] loop2: rw=1, want=133, limit=112 [ 1283.704488] attempt to access beyond end of device [ 1283.715626] loop2: rw=1, want=142, limit=112 [ 1283.737940] attempt to access beyond end of device [ 1283.753574] loop2: rw=1, want=143, limit=112 [ 1283.766577] attempt to access beyond end of device [ 1283.783202] loop2: rw=1, want=144, limit=112 [ 1283.796540] attempt to access beyond end of device [ 1283.813410] loop2: rw=1, want=145, limit=112 [ 1283.896738] attempt to access beyond end of device [ 1283.933978] FAT-fs (loop1): bogus number of reserved sectors [ 1283.943816] loop2: rw=1, want=3737, limit=112 [ 1283.956003] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1283.991317] attempt to access beyond end of device [ 1284.032096] loop2: rw=1, want=3766, limit=112 09:39:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c7465720000000000000000000600", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1284.059278] attempt to access beyond end of device [ 1284.077772] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1284.095630] loop2: rw=1, want=3767, limit=112 [ 1284.119068] attempt to access beyond end of device [ 1284.149387] loop2: rw=1, want=3768, limit=112 [ 1284.179017] attempt to access beyond end of device 09:39:39 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1284.208847] loop2: rw=1, want=3769, limit=112 [ 1284.238466] attempt to access beyond end of device [ 1284.272573] loop2: rw=1, want=3790, limit=112 [ 1284.299200] attempt to access beyond end of device [ 1284.330037] loop2: rw=1, want=3791, limit=112 [ 1284.335550] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1284.361187] attempt to access beyond end of device [ 1284.385114] loop2: rw=1, want=3792, limit=112 [ 1284.428027] attempt to access beyond end of device 09:39:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={"66696c746572000000000000000000c80400", 0xe, 0x4, 0x4c8, [0x0, 0x20000300, 0x200006a8, 0x200006d8], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x10, 0xf7, 'vlan0\x00', 'bridge0\x00', 'ip6gretap0\x00', 'veth1_to_bond\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x118, 0x160, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0xb25baad, 0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xfffffffffffffffd}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"45dfd874a00c7a4e942b3e0ec5ff87ad3cca3ed2e7c6f6047d3aafe64f8a"}}}, {{{0xd, 0x8, 0x17, 'ip6gre0\x00', 'bridge0\x00', '\x00', 'bcsf0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x4, 0x2, 0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0xd, 0xc, 0x0, 'bridge_slave_0\x00', 'vcan0\x00', 'veth0_to_bridge\x00', 'vlan0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0xff], 0x70, 0x70, 0xc0}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}]}, 0x540) [ 1284.466902] loop2: rw=1, want=3793, limit=112 09:39:40 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x4}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x680}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 09:39:40 executing program 5: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x49, @ipv4={[], [], @multicast1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x7fff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x20}}}}, {{0xa, 0x0, 0x6, @loopback, 0x8001}}]}, 0x190) getpeername(r0, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b40)=0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) 09:39:40 executing program 1: socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000bc0)='./file0/file0\x00') ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000700)) [ 1284.519433] attempt to access beyond end of device [ 1284.533720] loop2: rw=1, want=3842, limit=112 [ 1284.560705] attempt to access beyond end of device [ 1284.565655] loop5: rw=1, want=130, limit=112 [ 1284.575104] attempt to access beyond end of device [ 1284.602955] attempt to access beyond end of device [ 1284.608366] loop2: rw=1, want=3843, limit=112 [ 1284.622945] kernel msg: ebtables bug: please report to author: Total nentries is wrong [ 1284.639235] attempt to access beyond end of device [ 1284.646512] loop5: rw=1, want=131, limit=112 [ 1284.665919] attempt to access beyond end of device [ 1284.671516] loop2: rw=1, want=3844, limit=112 [ 1284.697446] attempt to access beyond end of device [ 1284.706823] loop5: rw=1, want=132, limit=112 [ 1284.718376] FAT-fs (loop1): bogus number of reserved sectors [ 1284.735802] attempt to access beyond end of device [ 1284.741564] loop2: rw=1, want=3845, limit=112 [ 1284.757507] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1284.768801] attempt to access beyond end of device [ 1284.775675] loop5: rw=1, want=133, limit=112 [ 1284.796634] attempt to access beyond end of device [ 1284.803643] loop2: rw=1, want=3854, limit=112 [ 1284.830727] attempt to access beyond end of device [ 1284.835851] loop5: rw=1, want=142, limit=112 [ 1284.848473] attempt to access beyond end of device [ 1284.853594] loop2: rw=1, want=3855, limit=112 [ 1284.861776] attempt to access beyond end of device [ 1284.866943] loop5: rw=1, want=143, limit=112 [ 1284.879361] attempt to access beyond end of device [ 1284.884473] loop2: rw=1, want=3856, limit=112 [ 1284.892604] loop5: rw=1, want=144, limit=112 [ 1284.897056] attempt to access beyond end of device [ 1284.903144] loop5: rw=1, want=145, limit=112 [ 1284.908113] attempt to access beyond end of device [ 1284.918118] loop2: rw=1, want=3857, limit=112 [ 1284.924137] attempt to access beyond end of device [ 1284.929184] loop5: rw=1, want=4241, limit=112 [ 1284.940928] attempt to access beyond end of device [ 1284.945878] loop5: rw=1, want=6873, limit=112 [ 1284.952371] attempt to access beyond end of device [ 1284.953258] attempt to access beyond end of device [ 1284.957315] loop5: rw=1, want=6902, limit=112 [ 1284.966806] attempt to access beyond end of device [ 1284.971829] loop5: rw=1, want=6903, limit=112 [ 1284.976361] attempt to access beyond end of device [ 1284.977993] loop2: rw=1, want=7953, limit=112 [ 1284.981354] loop5: rw=1, want=6904, limit=112 [ 1284.990341] attempt to access beyond end of device [ 1284.995282] loop5: rw=1, want=6905, limit=112 [ 1284.996710] attempt to access beyond end of device [ 1284.999876] attempt to access beyond end of device [ 1285.009769] loop5: rw=1, want=6926, limit=112 [ 1285.014296] attempt to access beyond end of device [ 1285.017674] loop2: rw=1, want=12049, limit=112 [ 1285.019285] loop5: rw=1, want=6927, limit=112 [ 1285.029376] attempt to access beyond end of device [ 1285.034318] loop5: rw=1, want=6928, limit=112 [ 1285.036893] attempt to access beyond end of device [ 1285.044803] loop2: rw=1, want=16145, limit=112 [ 1285.057688] attempt to access beyond end of device [ 1285.059465] attempt to access beyond end of device [ 1285.062640] loop5: rw=1, want=6929, limit=112 [ 1285.068351] loop2: rw=1, want=20241, limit=112 [ 1285.086986] attempt to access beyond end of device [ 1285.087792] attempt to access beyond end of device [ 1285.092008] loop2: rw=1, want=24337, limit=112 [ 1285.096876] loop5: rw=1, want=6978, limit=112 [ 1285.111471] attempt to access beyond end of device [ 1285.116417] loop2: rw=1, want=28433, limit=112 [ 1285.117645] attempt to access beyond end of device [ 1285.125172] attempt to access beyond end of device [ 1285.125931] loop5: rw=1, want=6979, limit=112 [ 1285.131236] loop2: rw=1, want=28913, limit=112 [ 1285.157691] attempt to access beyond end of device [ 1285.162700] loop5: rw=1, want=6980, limit=112 [ 1285.167226] attempt to access beyond end of device [ 1285.187686] loop5: rw=1, want=6981, limit=112 [ 1285.192246] attempt to access beyond end of device [ 1285.197185] loop5: rw=1, want=6990, limit=112 [ 1285.217695] attempt to access beyond end of device [ 1285.222644] loop5: rw=1, want=6991, limit=112 [ 1285.227181] attempt to access beyond end of device [ 1285.247701] loop5: rw=1, want=6992, limit=112 [ 1285.252271] attempt to access beyond end of device [ 1285.257209] loop5: rw=1, want=6993, limit=112 [ 1285.284257] attempt to access beyond end of device [ 1285.317629] loop5: rw=1, want=11089, limit=112 [ 1285.341852] attempt to access beyond end of device [ 1285.346822] loop5: rw=1, want=15185, limit=112 [ 1285.367038] attempt to access beyond end of device [ 1285.387652] loop5: rw=1, want=19281, limit=112 [ 1285.411925] attempt to access beyond end of device [ 1285.416880] loop5: rw=1, want=23377, limit=112 [ 1285.432150] attempt to access beyond end of device [ 1285.437097] loop5: rw=1, want=27473, limit=112 [ 1285.445941] attempt to access beyond end of device [ 1285.450938] loop5: rw=1, want=28009, limit=112 [ 1285.781891] ODEBUG: object 000000000c2378ff is on stack 00000000647102f9, but NOT annotated. [ 1285.794383] WARNING: CPU: 1 PID: 9045 at lib/debugobjects.c:369 __debug_object_init.cold.14+0x51/0xdf [ 1285.803770] Kernel panic - not syncing: panic_on_warn set ... [ 1285.809659] CPU: 1 PID: 9045 Comm: syz-executor2 Not tainted 4.19.0-rc8-next-20181019+ #99 [ 1285.818065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.827412] Call Trace: [ 1285.830016] dump_stack+0x244/0x39d [ 1285.833655] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1285.838870] panic+0x2ad/0x55c [ 1285.842066] ? add_taint.cold.5+0x16/0x16 [ 1285.846252] ? __warn.cold.8+0x5/0x45 [ 1285.850060] ? __debug_object_init.cold.14+0x51/0xdf [ 1285.855168] __warn.cold.8+0x20/0x45 [ 1285.858895] ? __debug_object_init.cold.14+0x51/0xdf [ 1285.864006] report_bug+0x254/0x2d0 [ 1285.867641] do_error_trap+0x11b/0x200 [ 1285.871556] do_invalid_op+0x36/0x40 [ 1285.875277] ? __debug_object_init.cold.14+0x51/0xdf [ 1285.880382] invalid_op+0x14/0x20 [ 1285.883842] RIP: 0010:__debug_object_init.cold.14+0x51/0xdf [ 1285.889560] Code: ea 03 80 3c 02 00 75 7c 49 8b 54 24 18 48 89 de 48 c7 c7 80 fb 60 88 4c 89 85 d0 fd ff ff e8 39 f7 d0 fd 4c 8b 85 d0 fd ff ff <0f> 0b e9 09 d6 ff ff 41 83 c4 01 b8 ff ff 37 00 44 89 25 07 c6 87 [ 1285.908470] RSP: 0018:ffff880188baf308 EFLAGS: 00010086 [ 1285.913834] RAX: 0000000000000050 RBX: ffff880188bafaf8 RCX: ffffc90006782000 [ 1285.921108] RDX: 0000000000000000 RSI: ffffffff8165ba85 RDI: 0000000000000005 [ 1285.928837] RBP: ffff880188baf560 R08: ffff8801cc33a0f0 R09: ffffed003b5e5020 [ 1285.936111] R10: ffffed003b5e5020 R11: ffff8801daf28107 R12: ffff8801c2668640 [ 1285.943381] R13: 00000000000c8f40 R14: ffff8801c2668640 R15: ffff8801cc33a0e0 [ 1285.950682] ? vprintk_func+0x85/0x181 [ 1285.954585] ? __debug_object_init.cold.14+0x4a/0xdf [ 1285.959701] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1285.964291] ? debug_object_free+0x690/0x690 [ 1285.968707] ? unwind_get_return_address+0x61/0xa0 [ 1285.973660] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1285.978776] ? depot_save_stack+0x292/0x470 [ 1285.983104] ? save_stack+0xa9/0xd0 [ 1285.986731] ? save_stack+0x43/0xd0 [ 1285.990360] ? kasan_kmalloc+0xc7/0xe0 [ 1285.994258] ? bpf_test_init.isra.10+0x98/0x100 [ 1285.998934] ? zap_class+0x640/0x640 [ 1286.002650] ? do_syscall_64+0x1b9/0x820 [ 1286.006730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.012116] ? find_held_lock+0x36/0x1c0 [ 1286.016197] debug_object_init+0x16/0x20 [ 1286.020265] init_timer_key+0xa9/0x480 [ 1286.024157] ? init_timer_on_stack_key+0xe0/0xe0 [ 1286.028932] ? __might_fault+0x12b/0x1e0 [ 1286.032998] ? __lockdep_init_map+0x105/0x590 [ 1286.037498] ? __lockdep_init_map+0x105/0x590 [ 1286.042002] ? lockdep_init_map+0x9/0x10 [ 1286.046068] sock_init_data+0xe1/0xdc0 [ 1286.049961] ? sk_stop_timer+0x50/0x50 [ 1286.053860] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.059405] ? _copy_from_user+0xdf/0x150 [ 1286.063559] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.069104] ? bpf_test_init.isra.10+0x70/0x100 [ 1286.073783] bpf_prog_test_run_skb+0x255/0xc40 [ 1286.078372] ? __lock_acquire+0x62f/0x4c20 [ 1286.082612] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 1286.087459] ? __lock_acquire+0x62f/0x4c20 [ 1286.091783] ? fput+0x130/0x1a0 [ 1286.095068] ? __bpf_prog_get+0x9b/0x290 [ 1286.099140] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 1286.103987] bpf_prog_test_run+0x130/0x1a0 [ 1286.108228] __x64_sys_bpf+0x3d8/0x510 [ 1286.112117] ? bpf_prog_get+0x20/0x20 [ 1286.115932] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.121481] do_syscall_64+0x1b9/0x820 [ 1286.125372] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1286.130761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1286.135706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1286.140555] ? trace_hardirqs_on_caller+0x310/0x310 [ 1286.145605] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1286.150626] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1286.155649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1286.160511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.165706] RIP: 0033:0x457569 [ 1286.168916] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1286.187825] RSP: 002b:00007f01fbb6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1286.195539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 1286.202809] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 000000000000000a [ 1286.210080] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.217352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01fbb6b6d4 [ 1286.224650] R13: 00000000004bd892 R14: 00000000004cc468 R15: 00000000ffffffff [ 1286.231944] [ 1286.231951] ====================================================== [ 1286.231958] WARNING: possible circular locking dependency detected [ 1286.231963] 4.19.0-rc8-next-20181019+ #99 Not tainted [ 1286.231970] ------------------------------------------------------ [ 1286.231976] syz-executor2/9045 is trying to acquire lock: [ 1286.231980] 00000000deeb94a6 ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 1286.231997] [ 1286.232002] but task is already holding lock: [ 1286.232006] 00000000c507ac84 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 1286.232023] [ 1286.232029] which lock already depends on the new lock. [ 1286.232032] [ 1286.232035] [ 1286.232041] the existing dependency chain (in reverse order) is: [ 1286.232044] [ 1286.232046] -> #3 (&obj_hash[i].lock){-.-.}: [ 1286.232064] _raw_spin_lock_irqsave+0x99/0xd0 [ 1286.232069] __debug_object_init+0x127/0x1290 [ 1286.232074] debug_object_init+0x16/0x20 [ 1286.232078] hrtimer_init+0x97/0x490 [ 1286.232083] init_dl_task_timer+0x1b/0x50 [ 1286.232088] __sched_fork+0x2ae/0x590 [ 1286.232093] init_idle+0x75/0x740 [ 1286.232097] sched_init+0xb33/0xc07 [ 1286.232102] start_kernel+0x4be/0xa2b [ 1286.232108] x86_64_start_reservations+0x2e/0x30 [ 1286.232113] x86_64_start_kernel+0x76/0x79 [ 1286.232118] secondary_startup_64+0xa4/0xb0 [ 1286.232121] [ 1286.232123] -> #2 (&rq->lock){-.-.}: [ 1286.232140] _raw_spin_lock+0x2d/0x40 [ 1286.232144] task_fork_fair+0xb0/0x6d0 [ 1286.232149] sched_fork+0x443/0xba0 [ 1286.232154] copy_process+0x25b8/0x8790 [ 1286.232159] _do_fork+0x1cb/0x11c0 [ 1286.232163] kernel_thread+0x34/0x40 [ 1286.232168] rest_init+0x28/0x372 [ 1286.232173] arch_call_rest_init+0xe/0x1b [ 1286.232183] start_kernel+0x9f0/0xa2b [ 1286.232188] x86_64_start_reservations+0x2e/0x30 [ 1286.232193] x86_64_start_kernel+0x76/0x79 [ 1286.232198] secondary_startup_64+0xa4/0xb0 [ 1286.232201] [ 1286.232204] -> #1 (&p->pi_lock){-.-.}: [ 1286.232221] _raw_spin_lock_irqsave+0x99/0xd0 [ 1286.232226] try_to_wake_up+0xdc/0x1490 [ 1286.232246] wake_up_process+0x10/0x20 [ 1286.232251] __up.isra.1+0x1c0/0x2a0 [ 1286.232255] up+0x13c/0x1c0 [ 1286.232260] __up_console_sem+0xbe/0x1b0 [ 1286.232264] console_unlock+0x80c/0x1190 [ 1286.232269] vprintk_emit+0x391/0x990 [ 1286.232289] vprintk_default+0x28/0x30 [ 1286.232294] vprintk_func+0x7e/0x181 [ 1286.232298] printk+0xa7/0xcf [ 1286.232303] do_exit.cold.18+0x57/0x16f [ 1286.232308] do_group_exit+0x177/0x440 [ 1286.232313] __x64_sys_exit_group+0x3e/0x50 [ 1286.232318] do_syscall_64+0x1b9/0x820 [ 1286.232323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.232326] [ 1286.232329] -> #0 ((console_sem).lock){-.-.}: [ 1286.232346] lock_acquire+0x1ed/0x520 [ 1286.232351] _raw_spin_lock_irqsave+0x99/0xd0 [ 1286.232356] down_trylock+0x13/0x70 [ 1286.232362] __down_trylock_console_sem+0xae/0x1f0 [ 1286.232367] console_trylock+0x15/0xa0 [ 1286.232372] vprintk_emit+0x372/0x990 [ 1286.232377] vprintk_default+0x28/0x30 [ 1286.232382] vprintk_func+0x7e/0x181 [ 1286.232386] printk+0xa7/0xcf [ 1286.232392] __debug_object_init.cold.14+0x4a/0xdf [ 1286.232397] debug_object_init+0x16/0x20 [ 1286.232402] init_timer_key+0xa9/0x480 [ 1286.232407] sock_init_data+0xe1/0xdc0 [ 1286.232412] bpf_prog_test_run_skb+0x255/0xc40 [ 1286.232417] bpf_prog_test_run+0x130/0x1a0 [ 1286.232422] __x64_sys_bpf+0x3d8/0x510 [ 1286.232427] do_syscall_64+0x1b9/0x820 [ 1286.232433] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.232436] [ 1286.232441] other info that might help us debug this: [ 1286.232444] [ 1286.232447] Chain exists of: [ 1286.232450] (console_sem).lock --> &rq->lock --> &obj_hash[i].lock [ 1286.232471] [ 1286.232476] Possible unsafe locking scenario: [ 1286.232479] [ 1286.232484] CPU0 CPU1 [ 1286.232489] ---- ---- [ 1286.232492] lock(&obj_hash[i].lock); [ 1286.232503] lock(&rq->lock); [ 1286.232514] lock(&obj_hash[i].lock); [ 1286.232524] lock((console_sem).lock); [ 1286.232533] [ 1286.232537] *** DEADLOCK *** [ 1286.232540] [ 1286.232545] 1 lock held by syz-executor2/9045: [ 1286.232548] #0: 00000000c507ac84 (&obj_hash[i].lock){-.-.}, at: __debug_object_init+0x127/0x1290 [ 1286.232568] [ 1286.232572] stack backtrace: [ 1286.232580] CPU: 1 PID: 9045 Comm: syz-executor2 Not tainted 4.19.0-rc8-next-20181019+ #99 [ 1286.232589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.232593] Call Trace: [ 1286.232597] dump_stack+0x244/0x39d [ 1286.232603] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1286.232608] ? vprintk_func+0x85/0x181 [ 1286.232614] print_circular_bug.isra.35.cold.54+0x1bd/0x27d [ 1286.232619] ? save_trace+0xe0/0x290 [ 1286.232624] __lock_acquire+0x3399/0x4c20 [ 1286.232629] ? mark_held_locks+0x130/0x130 [ 1286.232633] ? put_dec+0xf0/0xf0 [ 1286.232638] ? mark_held_locks+0x130/0x130 [ 1286.232643] ? pointer_string+0x14e/0x1b0 [ 1286.232647] ? number+0xca0/0xca0 [ 1286.232652] ? print_usage_bug+0xc0/0xc0 [ 1286.232657] ? ptr_to_id+0xd0/0x1d0 [ 1286.232661] ? dentry_name+0x8f0/0x8f0 [ 1286.232676] ? kasan_check_read+0x11/0x20 [ 1286.232680] ? zap_class+0x640/0x640 [ 1286.232686] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1286.232691] lock_acquire+0x1ed/0x520 [ 1286.232696] ? down_trylock+0x13/0x70 [ 1286.232701] ? lock_release+0xa10/0xa10 [ 1286.232706] ? trace_hardirqs_off+0xb8/0x310 [ 1286.232711] ? vprintk_emit+0x1de/0x990 [ 1286.232716] ? trace_hardirqs_on+0x310/0x310 [ 1286.232721] ? trace_hardirqs_off+0xb8/0x310 [ 1286.232725] ? log_store+0x344/0x4c0 [ 1286.232730] ? vprintk_emit+0x372/0x990 [ 1286.232735] _raw_spin_lock_irqsave+0x99/0xd0 [ 1286.232740] ? down_trylock+0x13/0x70 [ 1286.232745] down_trylock+0x13/0x70 [ 1286.232750] __down_trylock_console_sem+0xae/0x1f0 [ 1286.232755] console_trylock+0x15/0xa0 [ 1286.232760] vprintk_emit+0x372/0x990 [ 1286.232765] ? wake_up_klogd+0x180/0x180 [ 1286.232769] ? zap_class+0x640/0x640 [ 1286.232774] ? __switch_to_asm+0x34/0x70 [ 1286.232779] ? __switch_to_asm+0x40/0x70 [ 1286.232784] ? print_usage_bug+0xc0/0xc0 [ 1286.232789] ? __switch_to_asm+0x40/0x70 [ 1286.232793] ? find_held_lock+0x36/0x1c0 [ 1286.232798] vprintk_default+0x28/0x30 [ 1286.232803] vprintk_func+0x7e/0x181 [ 1286.232807] printk+0xa7/0xcf [ 1286.232812] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1286.232818] __debug_object_init.cold.14+0x4a/0xdf [ 1286.232823] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1286.232828] ? debug_object_free+0x690/0x690 [ 1286.232834] ? unwind_get_return_address+0x61/0xa0 [ 1286.232839] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1286.232844] ? depot_save_stack+0x292/0x470 [ 1286.232849] ? save_stack+0xa9/0xd0 [ 1286.232854] ? save_stack+0x43/0xd0 [ 1286.232859] ? kasan_kmalloc+0xc7/0xe0 [ 1286.232864] ? bpf_test_init.isra.10+0x98/0x100 [ 1286.232868] ? zap_class+0x640/0x640 [ 1286.232873] ? do_syscall_64+0x1b9/0x820 [ 1286.232879] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.232884] ? find_held_lock+0x36/0x1c0 [ 1286.232889] debug_object_init+0x16/0x20 [ 1286.232894] init_timer_key+0xa9/0x480 [ 1286.232899] ? init_timer_on_stack_key+0xe0/0xe0 [ 1286.232904] ? __might_fault+0x12b/0x1e0 [ 1286.232909] ? __lockdep_init_map+0x105/0x590 [ 1286.232914] ? __lockdep_init_map+0x105/0x590 [ 1286.232919] ? lockdep_init_map+0x9/0x10 [ 1286.232924] sock_init_data+0xe1/0xdc0 [ 1286.232929] ? sk_stop_timer+0x50/0x50 [ 1286.232935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.232940] ? _copy_from_user+0xdf/0x150 [ 1286.232946] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.232951] ? bpf_test_init.isra.10+0x70/0x100 [ 1286.232956] bpf_prog_test_run_skb+0x255/0xc40 [ 1286.232961] ? __lock_acquire+0x62f/0x4c20 [ 1286.232967] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 1286.232972] ? __lock_acquire+0x62f/0x4c20 [ 1286.232976] ? fput+0x130/0x1a0 [ 1286.232981] ? __bpf_prog_get+0x9b/0x290 [ 1286.232986] ? bpf_test_finish.isra.9+0x1f0/0x1f0 [ 1286.232992] bpf_prog_test_run+0x130/0x1a0 [ 1286.233012] __x64_sys_bpf+0x3d8/0x510 [ 1286.233016] ? bpf_prog_get+0x20/0x20 [ 1286.233022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1286.233027] do_syscall_64+0x1b9/0x820 [ 1286.233047] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1286.233052] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1286.233057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1286.233063] ? trace_hardirqs_on_caller+0x310/0x310 [ 1286.233068] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1286.233073] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1286.233078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1286.233084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1286.233088] RIP: 0033:0x457569 [ 1286.233102] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1286.233107] RSP: 002b:00007f01fbb6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1286.233119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 1286.233140] RDX: 0000000000000028 RSI: 0000000020000140 RDI: 000000000000000a [ 1286.233147] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.233153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f01fbb6b6d4 [ 1286.233160] R13: 00000000004bd892 R14: 00000000004cc468 R15: 00000000ffffffff [ 1286.234078] Kernel Offset: disabled [ 1287.140078] Rebooting in 86400 seconds..