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", 0x1000, 0x24, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfff, r1, &(0x7f0000000380)="7986a788197f2ea6c536c51d18d1f72df1e056eef0da7f96ea2f8d03c4102b124d10761b48ef9a76e0876f78e33d98ce5397daeaebb9e48cd7958607981381993cbd778bd44464835d41d458da07489158b4b9f55af520a31e011fadd3939b3171e9589c93820a19278336a221d6ca3e8ae6638bc68d0244a7489c861e07694c29f70fdba53603ab4e918fb8d849de206ffac882e9095d5185692669bbe762f19105c5391455bcaee7f5aafdaf44d991330008175382ff3c4bafb740afb70158e376526d9bea7fc2ce0e4e6c0e413b61346b535695dd856193773477", 0xdc, 0xd1ee, 0x0, 0x0, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xe, 0x5, r1, &(0x7f0000000480)="f38f6c7cf6ed978895f9e04729370d1d8349152d838fadd469bf8449cd9cfc4c497823a117e88c663284ba049b3413ac2c8730298c9569df2e9732249184749a9471efe250e7960abbf98542b42b5a1b97afe8b08615a6f1181dedb43b494e413ec6e0860f5a1127bbac1a4f17cef93cf5d62d8b9045deeeedfb7f841890765b7c8e8500a300059c331f9374", 0x8c, 0x6, 0x0, 0x3, r1}]) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:12 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 668.988351] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 669.013263] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.042956] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.064772] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xfdfdffff, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 669.089474] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.112033] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500030780cc08001b0001000000", 0x24) [ 669.222046] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.235304] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.261511] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xffa8, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 669.286838] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 669.324626] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 669.357546] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500060780cc08001b0001000000", 0x24) [ 669.419665] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.485738] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:12 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) link(&(0x7f0000000180)='./bus\x00', &(0x7f0000000380)='./bus\x00') r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x0, &(0x7f00000003c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x8, 0x8000, 0x7f, 0x52a, [], [], [], 0x2, 0x800, 0xfffffffffffffff7, 0x9, "87095999145cd8977eebf05518ab6b09"}) [ 669.531090] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 669.549377] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.559582] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xa8ff000000000000, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:12 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b5007a0780cc08001b0001000000", 0x24) [ 669.611300] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.637822] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:12 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fedbdf2508000000140002000800040003000000080000000a000000280002000800090000000000080008df5907000014000100e00000550000000000000000000000003236126e2e7b86bc3f01d61318d353c16a545cc45cc942f2afd1aa792b530d638d04a5bd4cebff0ff1e402077f"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f00001bf000/0x1000)=nil, 0x3000}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500050780cc08001b0001000000", 0x24) 03:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 669.785564] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.817629] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.854997] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x100000000000000, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 669.939026] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.947953] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 669.967564] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500070780cc08001b0001000000", 0x24) 03:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 670.052241] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 670.206775] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 670.232939] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500740780cc08001b0001000000", 0x24) 03:37:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x8000000000000000, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 670.336429] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 670.367539] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000200)="5a5f9764d327f9183de50beffb4f9594f5eee8018af1a920789c4c763db7d9684808769037df2c7b4e08880ae969f38d5e6e3a1c630c8f6a1571cadbd6f2e72d9e0807e8c5ab84ab4c4728c41239fbd9ec2714f29696419a2287cf8ff2cf0bab3cad0826eac99ec1d733dcf5d71009ae89b41bf51be6d0688210e917f107978811097f6d3abb52c3b8a6eb906bb662396db24bd6657616c30abd7a4e0ac224409acaa79bcd9301877f18a534d9025b412fe67f7819abe8b64cee37e02ffad433f0ebe6a50bea72e3bdfac46eb7409a73ad6dd98c2cb2481dfa9d", 0xda, 0xad, 0x0, 0x3, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000180)="924f19f152763e8fad36d3b74c7f64c84b31cfa45ffb6c233151e8d066a9f8857a7312a9b06c965947e1ef4f689d279df2df01947740f21c6ec8ad474e8400", 0x3f, 0x80, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x7fff, r1, &(0x7f0000000380)="96515f3cb97aae789f70c8d5d588ce8c879ccbbd40c8fb53d3a9f27c388c1704032f58ede5ea5f582fbbabf6fffb9d32584aa8e08b326e0847b21f2b2c7b0642d957485d033215f2570f381c66e7418ec657720d2b69f50c3efa4af3bd2891850f64e600056a3e6f45f31bba423e216d62d217e5e01ed09abd3c4a907979784f280503c887557e89161abc9995fa3422758faca6fc3f27c77ee7da3864bcb49241", 0xa1, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x7ff, r1, &(0x7f0000000480)="2f7ba949a7bbfb037a1e8a4e7a86be568d8db395f6956b5814b02f6227ea96c83cff48d4fea9add2cd0ffdfd31fba85aff4592014b8a05eff577efd69d68d3ea18e14185179a03db775cb60664f3300c93be2c0e75c9ac864caed14d709d61a0faba7ff5006ad8fdda8297a91103ca63e1d1a8b3da1f8d0d18c1e07249cd924b1fb7866a110ffc34209bc8", 0x8b, 0x0, 0x0, 0x3, r0}]) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000680cc08001b0001000000", 0x24) 03:37:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 670.573165] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 670.590959] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 670.608783] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500003480cc08001b0001000000", 0x24) [ 670.621300] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 670.753805] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b5006c0780cc08001b0001000000", 0x24) [ 670.796445] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 670.837984] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 670.911440] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.018455] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000440)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x94, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @local, 0x5}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x5, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0xed}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x8, @local, 0x4d}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r3, @in={{0x2, 0x4e20, @remote}}}, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0x2, 0x4) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'veth1_to_bond\x00'}, 0x18) 03:37:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500480780cc08001b0001000000", 0x24) 03:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xa8ff, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 671.217579] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.239385] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.249819] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500040780cc08001b0001000000", 0x24) [ 671.270341] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 671.414203] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.420492] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.451350] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.470998] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b5004c0780cc08001b0001000000", 0x24) 03:37:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x3, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 671.558684] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000680cc08001b0001000000", 0x24) 03:37:14 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x300, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 671.913819] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 671.922426] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000480cc08001b0001000000", 0x24) [ 671.963918] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 672.009025] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500003480cc08001b0001000000", 0x24) 03:37:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x2, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 672.199503] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500005280cc08001b0001000000", 0x24) [ 672.250407] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 672.261845] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 672.306501] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:15 executing program 3: mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500001180cc08001b0001000000", 0x24) 03:37:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:15 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x2, &(0x7f0000000140)='&\x00', 0xffffffffffffffff}, 0x30) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f00000003c0)=0x18) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x4, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 672.910120] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 672.938204] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 672.950867] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc2f001b0001000000", 0x24) [ 672.990247] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:16 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 673.047186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xfdfdffff00000000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 673.126768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 673.164562] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 673.177939] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc940e1b0001000000", 0x24) [ 673.309116] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.342856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xfdfdffff, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 673.358324] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.363596] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.375912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:16 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="e7cb490fd1c5d7c04918ebb80d7295cb714c301e75b1e45c0908be0b605647b91be6d6fc866109a939f7b8824e109366dc2fa782324211378812031ce4183a0af30523741256323f5060313da675c1d6cedaa1400b87e454fd74efc3c617395c8055eb94fbacb447cf9c5f6b06e0e1ecc5cd4de4c6c6c24461f60d698e27d3ad48f442f007651c6c152b1ac9b0516ce0c795b2397d7218a6aebf34b05744671d47aeb424ee2db550ae349edbb604a2f00db09b760eb7520b4e8285cb658f7b7a5d25e4eb78ac706da5b75ea888a0715895668e40acaa331b16f5dc2ed889cf7bc811110d7cd39329369e6fcdedb6781038", 0xf1) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cca40e1b0001000000", 0x24) 03:37:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 673.531380] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.549298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 673.585332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 673.594138] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.613177] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc11001b0001000000", 0x24) [ 673.673404] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.739060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 673.754713] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.785253] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 673.794786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:17 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xa8ff0000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc03001b0001000000", 0x24) 03:37:17 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 674.105526] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.121881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 674.132088] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.166532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 674.176234] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc840e1b0001000000", 0x24) 03:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 674.293755] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xa8ff, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 674.380545] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc8c0e1b0001000000", 0x24) 03:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 674.442170] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:17 executing program 3: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) [ 674.624434] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc34001b0001000000", 0x24) [ 674.671643] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.677478] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.716961] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcs\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000940)={0xfb8, 0x7824, 0xffff, 0x1, 0xcf0, 0x8, 0x8001, 0x1f, 0xffffffffffffffc1, 0x20, 0x5}) r1 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x802) ioctl(r1, 0x1000, &(0x7f0000000380)="ddf97431eac52925d0368c4fe7417d5c9b9b280a730a9bf3a7d4b584020176a8c82a898561359075b51f6f351d5bfcc8f6b0655eec6c487698858d438df5e771fcfdc972db0c15de226673b9ea6df03bb1118d79d20919cdd2fb99ff8c289eb8efa86c07696987590b46a09b83ba9edd241c77885840acd24ad425c5ff9e872aafdef97b591317e1a435627cce897e83e77d89a905195a491835c76a4bb0b74cd12fde26a9e36feb69648474f3155e3e5ee7b640a190aa5bdf4fcfea696e41fcd28bd89d6bebfb9751a480a0a344eb7cd68356c6b656e8d340875b1f9dac1bf281cf93121fdcc989f9a62a8480c129ed31dafb19") r2 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x8c, &(0x7f0000000140)="9a1c04ca398453222f88304dc68516e8183c5d04d4685dfe834e95723ffc91c9bde3dd930c31be7ae6aae061fea3064f4dba2a21a71fed1a02cc5ec5bd5f65f56c7fd44aefc4075af585f46de88e4437089f7fc4be2cc14190a864f8634110", 0x5f) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0xfffffffffffffffc) io_setup(0x7, &(0x7f00000005c0)=0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r6 = getuid() lchown(&(0x7f0000000200)='./bus\x00', r6, 0x0) syz_mount_image$gfs2(&(0x7f0000000580)='gfs2\x00', &(0x7f0000000600)='./bus\x00', 0xf4a, 0x3, &(0x7f0000000780)=[{&(0x7f0000000640)="ec43284ad63da59b403a446577d6bef1ab07675a1b025504d07e8098c202d709ac11da53dfe060004d03c84f851faacfb22cbb1c236c7d3322675287218ffdd9cd6121028e4d622e9d89148b1561e9ed8ea4fb31a95afc4711ff74ee34af833179dcba243e7617788ffb9f626a48b4c2603c7717400a9a5b420da36ec0df66cb05c9ec46b1f914cdcdc53d76d16422e17c29fce8f8807acbecac1a29dca4b1e952", 0xa1, 0x7}, {&(0x7f0000000700)="43977397c40ef6631971a9dcf4e83295a665ea08782e4ec88f127de32cc727ae46ba3c3d9c6bdbc46073e92f3528", 0x2e, 0x80}, {&(0x7f0000000740)="839eb57c5378ed8446c0ea5158512af0e5638a9e1c40fa", 0x17, 0x4}], 0x0, &(0x7f0000000800)={[{@norecovery='norecovery'}, {@norecovery='norecovery'}, {@barrier='barrier'}, {@ignore_local_fs='ignore_local_fs'}, {@quota_on='quota=on'}, {@quota_on='quota=on'}, {@statfs_percent={'statfs_percent', 0x3d, 0x6}}], [{@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/proc/thread-self/attr/current\x00'}}, {@pcr={'pcr', 0x3d, 0x4}}, {@euid_lt={'euid<', r6}}]}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0xffff, 0x0, 0x3000}, 0x4) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000980)) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) stat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)) ioctl$KDSKBLED(r5, 0x4b65, 0x0) [ 674.789581] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.800556] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:17 executing program 3: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 03:37:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xfffffdfd, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc52001b0001000000", 0x24) [ 674.895845] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 674.913464] binder: 3154:3162 ioctl 1000 20000380 returned -22 03:37:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc9c0e1b0001000000", 0x24) 03:37:18 executing program 3: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 03:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 674.989293] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.054889] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.064886] gfs2: invalid mount option: dont_hash 03:37:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xffa8, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 675.120441] gfs2: can't parse mount arguments 03:37:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 675.208803] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.280246] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.675342] binder: 3154:3162 ioctl 1000 20000380 returned -22 [ 675.692374] gfs2: invalid mount option: dont_hash [ 675.697630] gfs2: can't parse mount arguments 03:37:18 executing program 2: r0 = creat(&(0x7f0000000440)='./bus\x00', 0x801) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000340)={0xffffffffffffffff, 0x4, 0xc124, 0x1800000000000000}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={r3, 0x80000, r0}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r5 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x8000, 0x8, 0x4e5, 0x800, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x4, 0xe0, 0x8001, 0x7, 0x401, 0x7ec, 0x1f, 0x0, 0x3, 0x7d7, 0x7ad1, 0x4, 0x9, 0x103ee0, 0x1, 0x8bc, 0x5055, 0x90, 0x40, 0x401, 0x7f, 0x2, 0xffffffffffff0000, 0x133d159b, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xc423}, 0x1011, 0xfffffffffffff001, 0x5, 0x0, 0x3f, 0x1ff, 0x2}, r5, 0x6, r0, 0x1) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000400)=0x4001) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000300)=0xe8) ioprio_get$uid(0x3, r6) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) 03:37:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800520001000000", 0x24) 03:37:18 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0xa8ff000000000000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800090001000000", 0x24) [ 675.859804] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.867782] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 675.899003] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:18 executing program 3: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc087a1b0001000000", 0x24) [ 676.129385] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 676.143592] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 676.157222] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:19 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x1000000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:19 executing program 3: mknod(&(0x7f00000001c0)='./file0\x00', 0x8080, 0x28fe) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) close(r0) 03:37:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08041b0001000000", 0x24) 03:37:19 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000e2000000200006ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000001301020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000a5c89a480ecfc38b0fd25ad5ccf152192b1ab395e4182b9e"], 0x98}}, 0x0) 03:37:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08681b0001000000", 0x24) [ 676.420820] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 676.440075] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 676.502078] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08e01b0001000000", 0x24) [ 676.571408] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = getpgrp(0xffffffffffffffff) setpriority(0x2, r1, 0x0) [ 676.705220] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 676.754064] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:19 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x400, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x62c5, 0x80, 0x1}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r3, 0x2c, "0be3db551483d3f041e236bf1fd97f9b35310e9be1b044f1e94fd0f148e5d45438ec1f18088dbf4306bb7982"}, &(0x7f0000000240)=0x34) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x100000000000000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08061b0001000000", 0x24) 03:37:19 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) dup3(r0, r2, 0x0) 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 676.996023] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 677.019647] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)='X', 0x1) 03:37:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08601b0001000000", 0x24) 03:37:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 677.175333] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc080f1b0001000000", 0x24) [ 677.330963] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4000000001, 0x0, r0, &(0x7f0000000140)="cc7d0ce5e82f8ba5099c178f405b9aa608536e993074479992fbe7534b0c87ae5089a96bcb8cc4c28d937479d527deb2de89f6301e44c54c195297ec6ca2797f1a3679c81731f00fe82d2fbb3764ef47e162e74854297edd85a50ced65d5eba64f00ca2069558a361fd109017e7b0023ec", 0x17}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x8000000000000000, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000080)='X', 0x1) 03:37:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08031b0001000000", 0x24) 03:37:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800340001000000", 0x24) 03:37:20 executing program 3: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd29}, 0x14}}, 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000004c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) socketpair$inet6(0xa, 0x3, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xd, 0x0, &(0x7f00000003c0)) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000580)=0xc) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)) getitimer(0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 677.601446] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 677.620413] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:20 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x400, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x62c5, 0x80, 0x1}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r3, 0x2c, "0be3db551483d3f041e236bf1fd97f9b35310e9be1b044f1e94fd0f148e5d45438ec1f18088dbf4306bb7982"}, &(0x7f0000000240)=0x34) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:20 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000200)={0x5, 0x5589, [{0x6, 0x0, 0x2}, {0x0, 0x0, 0x8}, {0xc67d, 0x0, 0x1000}, {0x80, 0x0, 0x1}, {0xde20, 0x0, 0x4}]}) eventfd(0x9) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000300)={'nr0\x00', 0x4}) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0x100, 0x0, 0x10003, 0x10000}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000180)={0xffff, r4, 0x10001, 0xfffffffffffffffb}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 677.796247] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001d0001000000", 0x24) [ 677.836745] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000200)={0xfffffffffffffda4, 0x0, &(0x7f00000001c0)=[@release]}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000140)={0x81, 0x5, 0x7, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 677.926595] validate_nla: 30 callbacks suppressed [ 677.926605] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 677.960717] netlink: 'syz-executor0': attribute type 29 has an invalid length. 03:37:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08051b0001000000", 0x24) [ 678.039598] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 678.058175] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 678.167732] nla_parse: 26 callbacks suppressed [ 678.167743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 678.193979] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 678.250451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 678.282794] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc086c1b0001000000", 0x24) 03:37:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663044002000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = socket$inet(0x2, 0xe, 0xffff) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000980)={0x10000}, 0x4) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 678.419574] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 678.464183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 678.478917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:21 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:21 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) setns(r0, 0x68020000) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x1, 0x800) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './bus', [{0x20, '/dev/input/event#\x00'}, {0x20, '\\cgroup+/:mime_type'}, {0x20, '/dev/input/event#\x00'}], 0xa, "15deaf68e7dd51d68b1309d4ac8ea8035d4b3fe05f81d6a98998414f5e4a22eae17e2817"}, 0x67) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08021b0001000000", 0x24) [ 678.594539] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 678.622193] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 678.627546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000100)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20041, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xffffffff00000001) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140), 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)=0x4, 0x4) [ 678.718397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:21 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000200)) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 678.834249] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08481b0001000000", 0x24) 03:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 679.002175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 679.052896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x200000007fc) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x4759, 0x8, 0x4, 0x100, 0xfffffffffffffff7}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000017a123eccf1ee01044c790981e"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) prctl$seccomp(0x16, 0x2, &(0x7f00000002c0)={0x8, &(0x7f0000000240)=[{0x101, 0x8, 0x1, 0x6}, {0x5ba8, 0x9, 0x5, 0x7}, {0x3, 0x5, 0x1, 0xffff}, {0x8000000, 0x1, 0x200, 0x7}, {0x7fff, 0xffffffff, 0x1, 0x40}, {0xfffffffffffffeff, 0x9a0d, 0x3, 0x6}, {0x81, 0x6, 0xeb, 0x80}, {0x5, 0x1000, 0x100000001, 0x9}]}) clone(0x0, &(0x7f0000000280)="d4e488b635d99fa2ebc7d64131557770ba7835e5145c2eedd51656383700", &(0x7f00000003c0), &(0x7f0000000480), &(0x7f0000000440)) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="37bd9f", 0x3}, {&(0x7f0000000140)="660e9f51e1c7bf48e57079ba59508c9ed3e9bb7b76955d401ecb4ed5eeef878f0519ea343fd128dca60ef5992f0c15059387232315fa4715e325a02397b6", 0x3e}], 0x2, 0x0) 03:37:22 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000200)=0xc) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc081c1b0001000000", 0x24) [ 679.409453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 679.478877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:37:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800630001000000", 0x24) 03:37:22 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x80000, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) r6 = getuid() getresgid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)=0x0) open(&(0x7f0000003c40)='./bus\x00', 0x2000, 0x60) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003d00)=0x0) r9 = getuid() r10 = getgid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001600)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000580)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002cc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002d00)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000002e00)=0xe8) lstat(&(0x7f0000002e40)='./bus\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000002f00)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002f40)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@remote}}, &(0x7f0000003040)=0xe8) fstat(r4, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r4, 0x10, &(0x7f0000003100)={0x0, 0x0}) r21 = getuid() stat(&(0x7f0000003140)='./bus\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003a00)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000003b00)=0xe8) r25 = getegid() sendmmsg$unix(r0, &(0x7f0000003b80)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000180)="fc7e6cd449a39ca6d2f84ebdb3f3fd1904d8e34ee29e57104788af527b553d26c4b5c7876de8a9b638edc808db2d2b", 0x2f}], 0x2, &(0x7f0000001700)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x38, 0x1, 0x1, [r4, r1, r1, r0, r0, r0, r1, r4, r4]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x98, 0x1}, {&(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001840)="67e7c7e52222801ee009b368ef6c00d726f97633eab04b02544cda25b4", 0x1d}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="0213433db30c5c6c00064b48bcb727b0fc56c4875bd44174ea1b66227e9715b0945e28ba384733f2c3c2bf793f13f99bc49f37170e8bef92818f2a732eef362b", 0x40}, {&(0x7f00000028c0)="6db3e498f8e7ee264c508794f5c9acbcb1853ed53a2b33fd6cc9911c49e198b4bba9ab7a37939463dd90090f931abbbddae4218483aea3ed4019cb554f1f90c4e9c5a8f1d8de9d16252ffd891a853e8b4b4ff701e90157e8f12955e88873f2939e6547e33fd8cd878858496a17ede738f51af24601599c15ca80bad6706e0d95ba0a51ee22abb0213770748e7bb83d4966f17e2398123775820081d2c77e71f6da54e40ec618924049864a163e43e556f0c75fc9150f8bb9409175f38c5fc6664e33d943c26b49d06594528d8afafa4bbe7bb15ceca705a7", 0xd8}, {&(0x7f00000029c0)="c7c8d0ce9c1d014d0fb86742f98fe4ec5ad3b832d9f1d96d2e4d42dad125198a033c4cd133f4ca76bd5fed03f6bc84fb473ed471f3d76bcb19b7e748eb924d1138e4e510b7e42089949f6297a079e84fa68d7c9aa4de6e7454d21a69e6b8bc25d0b1f06038e96b384ed19f3ba228505a46dc23b5404edd40e2a4dfc7fe88e9db76763086c7644800780d972dd3c7b79ebfd994ded38392013cfcbc7249c56e523ac35c5f1c7fd2d6e236090e640216d9c7efd5be9a42545135a83c", 0xbb}, {&(0x7f0000002a80)="36780795144456f68b786a6344e12099e8ddc90e5782656feb4cfbf5516e7de8f903fbe0f741016411b8ec9bbd16cfa9af9868f208353941c85d0190c290132f85c568b8631d38b9718fdf8a790b4000b17e", 0x52}, {&(0x7f0000002b00)="47d50baa17e93f03449f769a705b8257492d552c70fcbc24ec86f3baa741824dc6c6758e87ae8a63bc0473b9263c4a5217aea6e3c73819be3290a84975c1343baa9813b861fd7ebac8b91f11feff3aeca555dc26a2671794dae326cbb6c19550287746745acacf61caafd1178686078dfb23f3327539c99305134e0f7ed04022ed384ca31d3aa34095999c58d3e7a17249997c2e0c38cf911f50d9ce7d", 0x9d}, {&(0x7f0000002bc0)="1a3a00a0565991d9f74e7ecd6b28e67f9aa75feb452913465267ac4fbf938dd4a08fa6ed8c626cbb2dd34aefd0663d00ea20cbb7ce8cd3c3d9f7d531641ae8c730361b5757b94637d3e150648509d7009ef04393b77fad40e4c784a4134121f5ad842a389427f1c1ee8e418184450d35932129f0b9de02d2448d26c0b1ae9e", 0x7f}], 0x8, &(0x7f0000003200)=[@rights={0x20, 0x1, 0x1, [r0, r4, r1, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r1, r2, r1, r4]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xb0, 0x40000}, {&(0x7f00000032c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003980)=[{&(0x7f0000003340)="aeaafb1bd46eb3ccf3cb49460c9e65286b277748e3af09f23a8dc3549cd5f7292b75df959be04495c860bcefbd36fdfcaca956654ca30fa2a3f86cd3e288771f4b929c909b030d76ebae3070502d8729bc92a6df6a124baca19143231786dcb1d1a03cd781f5de5650610da9e864a65e2eff14537e5747b937ca2dea5f66c458f3d5dadad8e373b14a071da96029f20e66ee2801991ac39f461114967959baa3f2513fd52cf9abc96bbc1d74d8cb405b08a917722727b656f765ea52a227e1d6227c9d61eaed8abad3b67765f4001f80eb394d0a91f24eab589a742d1c9da4c3c1347fff2cfd7800", 0xe8}, {&(0x7f0000003440)="c37c4c36255f1bd546beb31afad9967c0eef93eacf580658b14ce7a8f6e10ada8f322b4d5ed04f1c44b4509cc005c35c6897e66de20ec0a69182e450604ccb66bba31ba2635112f5793dfacb8abedca60e576985bd90397df6f4f2919c050fb399a62d774885889387b167badb03bf710968265eec44a559d615856aa266e7c9160467eb62baa9a1da", 0x89}, {&(0x7f0000003500)="96d6fda1f1716c08ba9f4ff4c1d8a990dce1298c1c78a1e8489d010b6efc02d32c904dda623787eaa4bc0557d63b8eceb9255359f2c491c268d7949af3ea26477d13849152967091870c3fefb549517ff60ad68550657d8bf214b47f7529844e52d439772bbc920c8a52a3a612a1c03da39b028cda2d194f73b5cf9a031c6ebaaababb92e14ab119", 0x88}, {&(0x7f00000035c0)="9456194d726626f9a8fba650f432320e583383a5bde0b37e45bc9db4164bbf358b336cbd411f9f59fdd341a3e60c11e4755d95281d3f884597e1da42f4b6ab9caeb561c29b9973c7b7ebe9a9f04bf3544d18fbcc99f736ffa9428e311626f280a367f56434aea64c067ea8cd4eca13bbee3c851f77a42f293b65ecfb9117d79a3e3cbb0c5a51f692ed5e286f69b464f5b44165e84c33d44efc6ea5efc033db3991a6710979bedbc0be2a8fbfb0a73663e4c1e9863b6f4a687771", 0xba}, {&(0x7f0000003680)="9309146b1ce9c97c97df212e79b63dcfbf8621936e0d900bb7c038c0e4b729d57fc8ef8f57599d35995af1e3d855afa172797aa4402d646084b4b0980533e8bd41c5", 0x42}, {&(0x7f0000003700)="fcc8382567d82f6aad8b0c2140032cbc7ed0a469cc114c4b22872716afd07042200d5f91962ae33abcbd3502850c3f1d26ba689ab913871a71e567a74190e3a25b0e2921fe1208142e116853d181e36d687cbc742ff0d6a67fd47948524c069900a4c27b02118fdc6ddb8fe7760fc558b89124397203b59d6515b05c8aba4d7020d67fc36f96e5de808e5fe229cc137c368796192d9ca144c7ad2cf9ede1eca934f684514387e7a39c1d3745bc6ec1420e2ce57c7e4dca2650edabf54d9039fa465328a257137f", 0xc7}, {&(0x7f0000003800)="04fd3caaef33e1715f53958012a0e5bff76f0f7be26b179e6dede04c5539859f727280d35e8b592cc9c6e634531a5f40545d77d051e0cefc1e85d70ea25d96f55194d55fe88fed44454baaf82bc6db3e1318612fb9750efec7af405162b2c8ae7a3bcb2e", 0x64}, {&(0x7f0000003880)="6e6033ca0e55a0ccc84887a52b1fe0de635e049c46edb433c0581c77dc94001115b8e4dc91f453c547a7540d65d7fdbbdae3e36ed8ec7cf77307ac57ab7f893ebd8476f947cd2d9184274e1c02423115fab1c3936fd6f6414c22c1400017e2993e1508080778bf2174450a7fd782753ed2200ae0e4888aeeb8f9204e3afae876ceeebb51ecc976d4b24329c65fd5b6a742db8cc984cc72f39eb8bfb03bccbf19bef858cc92796b77697cdb977be6aa3f3cc355e582df3a0f4f745b65c4bd475363d1413bddbb", 0xc6}], 0x8, &(0x7f0000003b40)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}], 0x20, 0x4}], 0x3, 0x4000) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 680.012827] audit: type=1804 audit(2000000242.984:137): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/690/bus" dev="sda1" ino=16537 res=1 [ 680.061985] audit: type=1804 audit(2000000243.014:138): pid=3569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/690/bus" dev="sda1" ino=16537 res=1 [ 680.086122] audit: type=1804 audit(2000000243.054:139): pid=3565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/690/bus" dev="sda1" ino=16537 res=1 03:37:23 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:23 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x2, &(0x7f0000000140)='&\x00', 0xffffffffffffffff}, 0x30) get_robust_list(r3, &(0x7f0000000380)=&(0x7f0000000300)={&(0x7f0000000240)={&(0x7f0000000200)}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f00000003c0)=0x18) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2b0040, 0x0) 03:37:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08000a0001000000", 0x24) [ 680.140721] audit: type=1804 audit(2000000243.114:140): pid=3565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/690/bus" dev="sda1" ino=16537 res=1 [ 680.167697] audit: type=1804 audit(2000000243.134:141): pid=3567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/690/bus" dev="sda1" ino=16537 res=1 03:37:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08071b0001000000", 0x24) 03:37:23 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08741b0001000000", 0x24) 03:37:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000200)=""/148) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) ioperm(0x2, 0x5, 0x5) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x13) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r3 = dup(r1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) ptrace$getenv(0x4201, r4, 0x8, &(0x7f00000002c0)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 680.527307] IPVS: ftp: loaded support on port[0] = 21 [ 680.561851] device bridge_slave_1 left promiscuous mode [ 680.567511] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.570742] IPVS: ftp: loaded support on port[0] = 21 [ 680.596716] device bridge_slave_0 left promiscuous mode 03:37:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc084c1b0001000000", 0x24) [ 680.619323] bridge0: port 1(bridge_slave_0) entered disabled state 03:37:23 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000440)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x94, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @local, 0x5}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x5, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0xed}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x8, @local, 0x4d}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r3, @in={{0x2, 0x4e20, @remote}}}, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@int=0x2, 0x4) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'veth1_to_bond\x00'}, 0x18) 03:37:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc080a1b0001000000", 0x24) [ 680.751210] team0 (unregistering): Port device team_slave_1 removed [ 680.765209] team0 (unregistering): Port device team_slave_0 removed [ 680.779349] bond0 (unregistering): Releasing backup interface bond_slave_1 03:37:23 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 680.840458] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 680.952540] bond0 (unregistering): Released all slaves [ 682.635582] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.649116] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.656723] device bridge_slave_0 entered promiscuous mode [ 682.736893] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.749730] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.756861] device bridge_slave_0 entered promiscuous mode [ 682.765759] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.772763] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.780802] device bridge_slave_1 entered promiscuous mode [ 682.799050] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.814543] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.840348] device bridge_slave_1 entered promiscuous mode [ 682.857248] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 682.917504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 682.939434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 682.985447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 683.115953] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 683.133761] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 683.166924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 683.178698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 683.383778] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 683.391633] team0: Port device team_slave_0 added [ 683.415181] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 683.423507] team0: Port device team_slave_0 added [ 683.431590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 683.438956] team0: Port device team_slave_1 added [ 683.467271] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 683.475002] team0: Port device team_slave_1 added [ 683.488313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.501041] device bridge_slave_1 left promiscuous mode [ 683.506554] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.515441] device bridge_slave_0 left promiscuous mode [ 683.521592] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.557430] team0 (unregistering): Port device team_slave_1 removed [ 683.568112] team0 (unregistering): Port device team_slave_0 removed [ 683.578433] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 683.589543] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 683.618260] bond0 (unregistering): Released all slaves [ 683.643251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.658522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 683.707921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 683.715266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.728723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.753729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 683.771122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 683.778223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.801502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.829196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 683.837592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.849283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.940279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 683.947370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.957208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.564238] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.570748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.577435] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.583874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.597133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 684.886910] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.893372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.900098] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.906467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.914550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 685.321460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.328691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.599515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.737855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.757109] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 686.902678] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 686.918131] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 686.924949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 686.940144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.062115] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 687.068272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.082640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.093350] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.226283] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.043142] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.053323] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08000a0001000000", 0x24) 03:37:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200000, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x4) 03:37:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xa8ff, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:31 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000140)={0x62, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e20, 0x1, 'ovf\x00', 0x20, 0x0, 0x1b}, 0x2c) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 688.137861] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.146416] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.187568] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.216348] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001d0001000000", 0x24) [ 688.267173] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 688.314835] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 688.375765] netlink: 'syz-executor0': attribute type 29 has an invalid length. [ 688.399013] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x4, &(0x7f0000000600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000200)="5a5f9764d327f9183de50beffb4f9594f5eee8018af1a920789c4c763db7d9684808769037df2c7b4e08880ae969f38d5e6e3a1c630c8f6a1571cadbd6f2e72d9e0807e8c5ab84ab4c4728c41239fbd9ec2714f29696419a2287cf8ff2cf0bab3cad0826eac99ec1d733dcf5d71009ae89b41bf51be6d0688210e917f107978811097f6d3abb52c3b8a6eb906bb662396db24bd6657616c30abd7a4e0ac224409acaa79bcd9301877f18a534d9025b412fe67f7819abe8b64cee37e02ffad433f0ebe6a50bea72e3bdfac46eb7409a73ad6dd98c2cb2481dfa9d", 0xda, 0xad, 0x0, 0x3, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r1, &(0x7f0000000180)="924f19f152763e8fad36d3b74c7f64c84b31cfa45ffb6c233151e8d066a9f8857a7312a9b06c965947e1ef4f689d279df2df01947740f21c6ec8ad474e8400", 0x3f, 0x80, 0x0, 0x3, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x7fff, r1, &(0x7f0000000380)="96515f3cb97aae789f70c8d5d588ce8c879ccbbd40c8fb53d3a9f27c388c1704032f58ede5ea5f582fbbabf6fffb9d32584aa8e08b326e0847b21f2b2c7b0642d957485d033215f2570f381c66e7418ec657720d2b69f50c3efa4af3bd2891850f64e600056a3e6f45f31bba423e216d62d217e5e01ed09abd3c4a907979784f280503c887557e89161abc9995fa3422758faca6fc3f27c77ee7da3864bcb49241", 0xa1, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x7ff, r1, &(0x7f0000000480)="2f7ba949a7bbfb037a1e8a4e7a86be568d8db395f6956b5814b02f6227ea96c83cff48d4fea9add2cd0ffdfd31fba85aff4592014b8a05eff577efd69d68d3ea18e14185179a03db775cb60664f3300c93be2c0e75c9ac864caed14d709d61a0faba7ff5006ad8fdda8297a91103ca63e1d1a8b3da1f8d0d18c1e07249cd924b1fb7866a110ffc34209bc8", 0x8b, 0x0, 0x0, 0x3, r0}]) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 688.426033] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.452349] netlink: 'syz-executor0': attribute type 29 has an invalid length. 03:37:31 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x600000000000, 0x20000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x0, 'veth0_to_bond\x00', 0x4}, 0x18) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800340001000000", 0x24) 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 688.501832] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 688.565583] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 688.637425] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 688.680819] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800520001000000", 0x24) 03:37:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 688.728740] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000001c0)=[@release], 0x1d, 0x0, &(0x7f0000000040)="bc0e7ce1a4efc9b87b5f1757fc234ef1803a0a2a0a14f35c57669589fe"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 688.812088] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800090001000000", 0x24) [ 688.873748] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 688.889119] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 688.987022] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.033511] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.054845] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0xfdfdffff00000000, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc0800630001000000", 0x24) 03:37:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x60d88f8d, 0x7, 0xb94, 0xfffffffffffffffc, 0x7, 0x28, 0x100, 0xa4, 0x7, 0x2}, 0xb) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0xd132d9f, 0x81, 0x6, 0x0, 0x0, [{r0, 0x0, 0x40}, {r0, 0x0, 0x4}, {r0, 0x0, 0x100000001}, {r0, 0x0, 0x8}, {r0, 0x0, 0x7}, {r0, 0x0, 0x5}]}) 03:37:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 689.181575] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.202891] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.236431] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:32 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)={0x0, @aes256, 0x1, "ef79c847eba4ccb3"}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x1, 0x0, [{}]}) fcntl$getownex(r3, 0x10, &(0x7f0000000240)={0x0, 0x0}) rt_sigqueueinfo(r4, 0x40, &(0x7f0000000180)={0x23, 0x400000000000, 0x5, 0xffffffffffffffc1}) 03:37:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0223000000", 0x24) 03:37:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xb8, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x1, 0x4}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x28, 0x30, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000080), 0x1, 0x0, 0x2c}], &(0x7f0000000180)=[0x38, 0x70, 0x0, 0x38, 0x30, 0x38]}}, @reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x48, 0x40, &(0x7f0000000200)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @flat={0x736a2a85, 0x100, r1, 0x3}], &(0x7f0000000280)=[0x40, 0x48, 0x38, 0x40, 0x38, 0x78, 0x38, 0x58]}}, @acquire, @exit_looper, @acquire_done={0x40106309, r2}], 0x86, 0x0, &(0x7f0000000440)="def7f1664cd7dacc4d176840327481d86999b9dc5b741405f0d72504c2379c129193a2e1ddb04536d3706e16ee3433eae030ecfb644b2f09879ee0712843032f875ea62e1ee103df78470787d634a72602b595c9d965c42a5169460aaed0ee1c086579e6b8e0749c761f4c13757ec534943ee330a89864792b8910863c451530f2438a77fd48"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:32 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xfffffffffffffff7, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 689.783969] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.794063] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.807709] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.819048] binder: 4304:4312 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 03:37:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 689.827034] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0201000000", 0x24) [ 689.860096] binder: 4304:4312 got reply transaction with no transaction stack [ 689.890482] binder: 4304:4312 transaction failed 29201/-71, size 40-48 line 2762 [ 689.961090] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.973335] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 689.997697] binder: 4304:4312 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 690.001106] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.023389] binder: 4304:4312 got reply transaction with no transaction stack 03:37:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0a01000000", 0x24) [ 690.056216] binder: 4304:4312 transaction failed 29201/-71, size 40-48 line 2762 03:37:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 690.100379] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.162327] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.178173] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:33 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) epoll_create(0x8001) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x27, 0x0, 0x2, 0x3, 0x8001, 0x4, "35c56b40e724b488a9a73ca50f65e1ee79ded57c636000c5d5ddb628e834827b661359f7eddd12b811af4337990d5abb78b2b6bc7bbecd88fa8f0fbc667662", 0x1a}, 0x60) 03:37:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0501000000", 0x24) 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0002000000000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 690.407208] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.418047] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.427367] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.438560] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.439577] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0011000000", 0x24) 03:37:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 690.556565] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000002"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 690.598441] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 690.622962] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.645107] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 690.681550] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.711506] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.718970] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.763246] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:33 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b7401000000", 0x24) 03:37:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000280)={0x170, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f0000000300)="7c9cf4812702456c051b34d0d07cc42eab005f08095770c0c5bc247c840c1f973381581c7a10741fc5fadf278276296bbfc25a5bf465ad611b4947ad"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x4000000000000, &(0x7f0000000200)="50c66b9f73fd098d50ec22dcc3985c0606777b98a5905c55b905ba73f560ae87e2efd750b1b947ed2606904e16819ba5d0dd617b893351cb45e904f1eba4307bbefffc390b5f11a172888e50d28e401d99c3f1d825c22017d55aaf4b7352c1c1fc9577aa6b86704c21a5ca0496819cd20f584b92b8d917fa76b3987beaa06e35", &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000180)) 03:37:33 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x3ff, 0x20, 0x8, 0x5}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x0, 0xfffffffffffffff9, 0x4, 0xbe}, 0x10) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) fchdir(r0) mmap$xdp(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x1000000, 0x8030, r3, 0x0) [ 690.937772] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.947566] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 690.959424] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0006000000", 0x24) [ 690.988945] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 691.035198] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.096814] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.131496] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.132812] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xfffffffffffffe03, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 691.191313] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.204638] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.292800] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.318711] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.332427] binder: 4479:4483 ioctl 40101283 20000040 returned -22 03:37:34 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'team_slave_0\x00', 0x100000001}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) prctl$setname(0xf, &(0x7f0000000100)='self\x00') ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000140)={&(0x7f00001c1000/0x3000)=nil, &(0x7f00001c1000/0x4000)=nil, 0x3000, 0x1}) 03:37:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b4801000000", 0x24) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 691.432309] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000b000000", 0x24) [ 691.478886] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.536607] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.576046] binder: 4479:4483 ioctl 40101283 20000040 returned -22 [ 691.593494] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.605936] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.625846] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.648954] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.658654] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:34 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x3ff, 0x20, 0x8, 0x5}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x0, 0xfffffffffffffff9, 0x4, 0xbe}, 0x10) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) fchdir(r0) mmap$xdp(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x1000000, 0x8030, r3, 0x0) 03:37:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xbaf) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4, &(0x7f0000000140)={0x2c, 0xb3a, 0x8, 0x3}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0005000000", 0x24) 03:37:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 691.782438] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.801477] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.843145] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.843517] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 691.901916] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 691.979118] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:35 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) io_submit(r2, 0x5, &(0x7f0000000440)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xe6, r0, &(0x7f0000000600)="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", 0x1000, 0x4, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xf47, r1, &(0x7f0000000180)="5cdb97a1", 0x4, 0x9, 0x0, 0x3, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000240)="122c3e0d441d76f8de68fc9f03ede87929d035afd8236422afb858937933968bc2ce85e6df470020324e94e00a7b713dd0ccb8e0ccefc4acdac834bc3f6586383ac2bba72d13f00c8e9864bea897ff8968d95829", 0x54, 0x81, 0x0, 0x1, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf, 0x9, r3, &(0x7f0000000380)="985e49e8ae6da93e3b3d160da6903d3edbf087b1045b644892313efff4559589ca44f27bd22484947cadff5a75cdc57411f7fc9165b59cd64150a13787df4739ce147ddfb7d320afdd67e2014407dd88ac244c90745f6f0d45e6baa41911446950a578ed14fd07ef475068fd425a5bb5c8a2fb3ec1ec064f191c6632", 0x7c, 0x69, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x401, r1, &(0x7f0000001600)="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", 0x1000, 0xfb3, 0x0, 0x1, r4}]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x80, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x0, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xf}, 0x8}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0xd6, @dev={0xfe, 0x80, [], 0x20}, 0x48}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x9}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002600)={r5, 0x51, "fa01d0a69f304fb937793f5dc6898c66da0c1b5afe58e74075144f1fafb529a61f64a406d3e4eabc7e64d9a67827ea516b458c8b97c0cba994ddd605c821612968ee91336ff262c9c91ab761e40c8f8f53"}, &(0x7f0000002680)=0x59) 03:37:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000a000000", 0x24) 03:37:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff5a, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)=[0x30, 0x38, 0x0, 0x40, 0x38]}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200)=[0x0, 0x28, 0x38, 0x38, 0x68]}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x0]}}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@fd={0x66642a85, 0x0, r0}], &(0x7f0000000380)=[0x0, 0x30, 0x38]}}], 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 692.085098] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.103363] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 692.150822] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.233236] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.253695] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:35 executing program 3 (fault-call:3 fault-nth:0): r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001be001000000", 0x24) 03:37:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="066304400000000093f03433e0c202d26329a399be491e997c307a336b646349c529efe5f635d7f6c549a4a69812ea4121dffc2ca6106300002480d0a32109ba914940d1e1c31d4a328f3378469e2c126eb6d04e869e60e1f9b9f81ae0553302e7d241a26c214612441ba459d8582b7b48cbba1eeb4e16d0df6f20e809000000d7f2ec8ebe7d9d342d156cde"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x101000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000140)=0x6) [ 692.387603] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.420792] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0601000000", 0x24) [ 692.434206] FAULT_INJECTION: forcing a failure. [ 692.434206] name failslab, interval 1, probability 0, space 0, times 0 [ 692.454898] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.464910] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 692.475952] CPU: 1 PID: 4594 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #294 [ 692.483236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.483245] Call Trace: [ 692.483273] dump_stack+0x1c4/0x2b6 [ 692.483311] ? dump_stack_print_info.cold.1+0x20/0x20 [ 692.483347] should_fail.cold.4+0xa/0x17 [ 692.508142] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 692.513256] ? __lock_acquire+0x7ec/0x4ec0 [ 692.517497] ? graph_lock+0x170/0x170 [ 692.521312] ? __do_page_fault+0x4a6/0xed0 [ 692.525582] ? graph_lock+0x170/0x170 [ 692.529435] ? mark_held_locks+0x130/0x130 [ 692.533701] ? find_held_lock+0x36/0x1c0 [ 692.537800] ? ___might_sleep+0x1ed/0x300 [ 692.541952] ? arch_local_save_flags+0x40/0x40 [ 692.546535] ? lock_release+0x970/0x970 [ 692.550516] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 692.556082] __should_failslab+0x124/0x180 [ 692.560320] should_failslab+0x9/0x14 [ 692.564122] kmem_cache_alloc+0x2be/0x730 [ 692.568297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 692.573839] ? _copy_from_user+0xdf/0x150 [ 692.578001] io_submit_one+0x1a2/0xf80 [ 692.581903] ? aio_poll+0x1420/0x1420 [ 692.585735] ? __might_fault+0x12b/0x1e0 [ 692.589806] ? lock_downgrade+0x900/0x900 [ 692.593972] ? lock_release+0x970/0x970 [ 692.597953] ? arch_local_save_flags+0x40/0x40 [ 692.602552] ? __lock_is_held+0xb5/0x140 [ 692.606648] __x64_sys_io_submit+0x1b7/0x580 [ 692.611064] ? __ia32_sys_io_destroy+0x580/0x580 [ 692.615831] ? trace_hardirqs_on+0xbd/0x310 [ 692.620161] ? __ia32_sys_read+0xb0/0xb0 [ 692.624232] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 692.629598] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 692.635090] do_syscall_64+0x1b9/0x820 [ 692.639017] ? __ia32_sys_io_destroy+0x580/0x580 [ 692.643773] ? do_syscall_64+0x1b9/0x820 [ 692.647836] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 692.653205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 692.658142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 692.663003] ? trace_hardirqs_on_caller+0x310/0x310 [ 692.668022] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 692.673074] ? prepare_exit_to_usermode+0x291/0x3b0 [ 692.678097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 692.682957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 692.688161] RIP: 0033:0x457569 [ 692.691360] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 692.710260] RSP: 002b:00007f0f5fc6bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 692.718272] RAX: ffffffffffffffda RBX: 00007f0f5fc6bc90 RCX: 0000000000457569 [ 692.725540] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007f0f5fc4b000 [ 692.732815] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 692.740086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f5fc6c6d4 [ 692.747359] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 03:37:35 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=@hopopts={0x2f, 0x25, [], [@ra={0x5, 0x2, 0x200}, @ra={0x5, 0x2, 0x1}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @pad1, @pad1, @pad1, @generic={0x6b, 0x70, "3acc38e48c397ed44da9bd66de50dba6072baeb6f2f691a8af8db19d556b7136d23c8beaf9154bbfa1a8f7221f58d5f355914d545a64e7489e2fa125b0813295aa08aa92318152b01fe766c39208b9c9625874746b818a2f285567d2b89ba049b7572f9ee9414dfd0e2ead199d1b40ef"}, @generic={0x40, 0x9a, "f5d48ad7dc3103c635dc6c7c3b3dba5b37918670006300ac0f0e35f0454c18336f6be76d85a75d3b06f560dbf8164f738883b133d6b3b02770eca3c29f593e2c1c92dccab5b9e24e307e34b3acd159d8edf75a9b586dd49b9165867fb3f4b197f25fb18cfc404b1337d6d94d28b5fa235499c05b37e31a266b1e71709dc9a821a13e56706f40d288870a7a40a86694cd86a68012fe54c5d8a1d5"}]}, 0x130) openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x2400, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) recvfrom$llc(r0, &(0x7f0000000380)=""/151, 0x97, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x3, @ipv4={[], [], @loopback}, 0x469c}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[{0x7, 0x2}, {0x8, 0x7ff}, {0x6, 0x8}, {0x8, 0x2}, {0x3, 0x8}, {0x6, 0x101}, {0x6, 0xd8}, {0x3, 0x7f}], 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000140)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x1, 0x3ff, 0xe98, 0x7fff, 0x1000, 0x2}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0052000000", 0x24) 03:37:35 executing program 3 (fault-call:3 fault-nth:1): r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 693.005606] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.015816] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.021893] FAULT_INJECTION: forcing a failure. [ 693.021893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 693.059822] CPU: 1 PID: 4631 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #294 [ 693.061445] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.067117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.067124] Call Trace: [ 693.067161] dump_stack+0x1c4/0x2b6 [ 693.067189] ? dump_stack_print_info.cold.1+0x20/0x20 [ 693.087171] ? perf_trace_lock+0x14d/0x7a0 [ 693.095983] ? zap_class+0x640/0x640 [ 693.096036] should_fail.cold.4+0xa/0x17 [ 693.096070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 693.113201] ? graph_lock+0x170/0x170 [ 693.117015] ? graph_lock+0x170/0x170 [ 693.120871] ? __lock_is_held+0xb5/0x140 [ 693.124967] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 693.130775] ? ___might_sleep+0x1ed/0x300 [ 693.130790] ? lock_release+0x970/0x970 [ 693.130808] ? arch_local_save_flags+0x40/0x40 [ 693.130834] ? __might_sleep+0x95/0x190 [ 693.147525] __alloc_pages_nodemask+0x34b/0xde0 [ 693.152200] ? __lock_acquire+0x7ec/0x4ec0 [ 693.156468] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 693.161539] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 693.167093] alloc_pages_current+0x10c/0x210 [ 693.171584] __page_cache_alloc+0x38f/0x5b0 [ 693.175964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.181517] ? check_preemption_disabled+0x48/0x280 [ 693.186548] ? __filemap_set_wb_err+0x3b0/0x3b0 [ 693.191231] ? debug_smp_processor_id+0x1c/0x20 [ 693.195910] ? perf_trace_lock+0x14d/0x7a0 [ 693.195936] pagecache_get_page+0x396/0xf00 [ 693.195961] ? find_get_pages_contig+0x15b0/0x15b0 [ 693.195979] ? graph_lock+0x170/0x170 [ 693.204544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.204561] ? check_preemption_disabled+0x48/0x280 [ 693.204583] ? debug_smp_processor_id+0x1c/0x20 [ 693.220636] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.223819] ? perf_trace_lock+0x14d/0x7a0 [ 693.223841] ? zap_class+0x640/0x640 [ 693.223861] ? find_held_lock+0x36/0x1c0 [ 693.248544] ? graph_lock+0x170/0x170 [ 693.252353] ? lock_downgrade+0x900/0x900 [ 693.256513] ? check_preemption_disabled+0x48/0x280 [ 693.261544] ? graph_lock+0x170/0x170 [ 693.265352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.270902] ? check_preemption_disabled+0x48/0x280 [ 693.275934] ? check_preemption_disabled+0x48/0x280 [ 693.277978] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.280969] ? __lock_is_held+0xb5/0x140 [ 693.281000] grab_cache_page_write_begin+0x75/0xa0 [ 693.281033] ext4_da_write_begin+0x39f/0x12c0 [ 693.281054] ? __lock_is_held+0xb5/0x140 [ 693.296107] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.298116] ? ext4_write_begin+0x1830/0x1830 [ 693.298147] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.298169] ? __mark_inode_dirty+0x4b2/0x1510 [ 693.329821] ? __inode_attach_wb+0x13f0/0x13f0 [ 693.334411] ? find_held_lock+0x36/0x1c0 [ 693.338489] ? mark_held_locks+0xc7/0x130 [ 693.342670] ? ktime_get_coarse_real_ts64+0x288/0x3b0 [ 693.347881] ? ktime_get_coarse_real_ts64+0x288/0x3b0 [ 693.353089] ? trace_hardirqs_on+0xbd/0x310 [ 693.357425] ? current_time+0x72/0x1b0 [ 693.361337] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 693.366802] ? ext4_xattr_ibody_get+0x630/0x630 [ 693.371484] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 693.377045] ? iov_iter_fault_in_readable+0x22a/0x450 [ 693.382247] ? copy_page_from_iter+0x8e0/0x8e0 [ 693.386836] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 693.391873] ? ktime_get_coarse_real_ts64+0x243/0x3b0 [ 693.397076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.402653] ? timespec64_trunc+0xea/0x180 [ 693.404236] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.406906] ? inode_init_owner+0x340/0x340 [ 693.406933] generic_perform_write+0x3aa/0x6a0 [ 693.406964] ? page_endio+0xb60/0xb60 [ 693.427735] ? file_update_time+0xe4/0x640 [ 693.431982] ? current_time+0x1b0/0x1b0 [ 693.432938] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 693.435967] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 693.435985] ? generic_write_checks+0x382/0x5d0 [ 693.436005] ? wait_on_page_locked_killable+0x520/0x520 [ 693.436027] ? ext4_file_write_iter+0x2a1/0x1420 [ 693.463884] __generic_file_write_iter+0x26e/0x630 [ 693.468836] ext4_file_write_iter+0x390/0x1420 [ 693.473428] ? __fget+0x4d1/0x740 [ 693.473453] ? ext4_file_mmap+0x410/0x410 [ 693.473470] ? find_held_lock+0x36/0x1c0 [ 693.473492] ? aio_write+0x4ce/0x610 [ 693.481078] ? lock_downgrade+0x900/0x900 [ 693.481092] ? __lock_is_held+0xb5/0x140 [ 693.481121] ? rcu_read_lock_sched_held+0x108/0x120 [ 693.481147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.507637] ? __sb_start_write+0x1b2/0x370 [ 693.511979] aio_write+0x3b1/0x610 [ 693.515535] ? aio_complete_rw+0x640/0x640 [ 693.519791] ? lock_downgrade+0x900/0x900 [ 693.523968] ? kasan_check_read+0x11/0x20 [ 693.528134] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 693.533459] io_submit_one+0xaa1/0xf80 [ 693.537358] ? aio_poll+0x1420/0x1420 [ 693.541177] ? __might_fault+0x12b/0x1e0 [ 693.545262] ? lock_downgrade+0x900/0x900 [ 693.549445] ? arch_local_save_flags+0x40/0x40 [ 693.554062] __x64_sys_io_submit+0x1b7/0x580 [ 693.558491] ? __ia32_sys_io_destroy+0x580/0x580 [ 693.563268] ? trace_hardirqs_on+0xbd/0x310 [ 693.567601] ? __ia32_sys_read+0xb0/0xb0 [ 693.571690] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.577075] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 693.582559] do_syscall_64+0x1b9/0x820 [ 693.586458] ? __ia32_sys_io_destroy+0x580/0x580 [ 693.591240] ? do_syscall_64+0x1b9/0x820 [ 693.595329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 693.600704] ? syscall_return_slowpath+0x5e0/0x5e0 [ 693.605651] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.610506] ? trace_hardirqs_on_caller+0x310/0x310 [ 693.615558] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 693.620588] ? prepare_exit_to_usermode+0x291/0x3b0 [ 693.625649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 693.630531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 693.635739] RIP: 0033:0x457569 [ 693.638950] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:37:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0025000000", 0x24) 03:37:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 693.657853] RSP: 002b:00007f0f5fc6bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 693.665579] RAX: ffffffffffffffda RBX: 00007f0f5fc6bc90 RCX: 0000000000457569 [ 693.672883] RDX: 0000000020000540 RSI: 0000000000000001 RDI: 00007f0f5fc4b000 [ 693.680159] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 693.687436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f5fc6c6d4 [ 693.694722] R13: 00000000004be72d R14: 00000000004ce380 R15: 0000000000000004 [ 693.709105] validate_nla: 4 callbacks suppressed [ 693.709116] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 693.793216] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:37 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x1ba, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x84, &(0x7f0000000380)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x1b}, 0x26}, @in6={0xa, 0x4e23, 0x56, @loopback, 0x1}, @in={0x2, 0x4e24, @rand_addr=0x8}, @in6={0xa, 0x4e20, 0x1, @local, 0x8}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000440)=0x10) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) prctl$intptr(0x23, 0xd) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl(r1, 0x7ff, &(0x7f0000000200)="2929260e72e8eb5a8130968c6573cdb3d71a4a0817f50381656d00711d02c9dcd1ff99db5dbcc7ed822b0e82e5a4258e25a0c31d1e31cb0d9589e514fe11a6758122009e5760e7712655bd5745e888a5a3d0b6958dc3579cd199f0f6ba503f47f5acfaeb7c67ea0ec01c76d4e877935b748140f5ae802006973abcd56c39a6155170520fe60f47da0bb72cf4472c07bc9a8e948280e52237ac7ddbe2df376a8054cfce4eb862eced33cbf57c8ef43360b30a27d3bc585bb5c2d7f37806510010add068638209b8b1a896873f7d4f1f898ad1b310641cc963376d700f") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf18, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) select(0x40, &(0x7f0000000480)={0x80000001, 0x3, 0x40, 0x6, 0xfffffffffffffffe, 0x6, 0x101, 0x9}, &(0x7f00000004c0)={0x2, 0x40, 0x0, 0x4, 0x80000001, 0x0, 0x1, 0x6}, &(0x7f0000000500)={0x6d, 0x4, 0x1, 0xc0000000000000, 0x80000001, 0xb, 0x40b6, 0x2}, &(0x7f0000000580)={0x77359400}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$TIOCEXCL(r4, 0x540c) 03:37:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0f01000000", 0x24) 03:37:37 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b6001000000", 0x24) 03:37:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0400000000", 0x24) 03:37:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000001c0)={0x800, 0x1ab1ad77, 0x100000001, 0x819}) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) fdatasync(r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x294, @tick=0x3, 0x10000, {0xff, 0x8}, 0x4, 0x0, 0x3f}) [ 694.538890] IPVS: ftp: loaded support on port[0] = 21 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0401000000", 0x24) [ 694.645341] device bridge_slave_1 left promiscuous mode [ 694.652646] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.677674] device bridge_slave_0 left promiscuous mode 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0301000000", 0x24) 03:37:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0xc00, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x5, 0xfffffffffffff0d0, 0x9, 0xc5, 0xfffffffffffffff9}) ioperm(0xf4f7, 0x1, 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 694.701726] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.775185] IPVS: ftp: loaded support on port[0] = 21 03:37:37 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r3 = dup2(r1, r1) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpid() fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005600)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000580)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f00000058c0)={0x0, 0x0}) fcntl$getownex(r3, 0x10, &(0x7f0000006f00)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000006f40)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000007040)=0xe8) lstat(&(0x7f0000007080)='./bus/file0\x00', &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() stat(&(0x7f0000007140)='./bus\x00', &(0x7f0000007180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000007280)=0x0) stat(&(0x7f00000072c0)='./bus\x00', &(0x7f0000007300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000007380)={0x0, 0x0, 0x0}, &(0x7f00000073c0)=0xc) r21 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000007400)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000007500)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007540)={0x0, 0x0, 0x0}, &(0x7f0000007580)=0xc) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000075c0)=0x0) stat(&(0x7f0000007600)='./bus\x00', &(0x7f0000007640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000076c0)=[0xee01]) r27 = getpid() r28 = getuid() getgroups(0x5, &(0x7f0000007700)=[0xee01, 0x0, 0x0, 0x0, 0xee01]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000007740)=0x0) fstat(r1, &(0x7f0000007780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000079c0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc, &(0x7f0000006e40)=[{&(0x7f0000000600)={0x102c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x5e, @ipv6}, @typed={0x8, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @generic="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"]}, 0x102c}, {&(0x7f0000001640)={0x1054, 0x35, 0x72c, 0x70bd27, 0x25dfdbfb, "", [@generic="5a8b21f06b7e21b66a18396e0023df6302f303bfd668312b38bcf2ef14aa1368a28ce6ab8584058c133f35baef52b146e6bd0e8b5eee0589fc51", @typed={0x8, 0x55, @fd=r3}, @generic="9a4e9f33c9a017a4ce259a67c2454f980459e7b715f1017629a968326d4f47d2180fac3fe98d9896bbcb6600b16bab1486626df906894177dabd7e11591e5688cc945a0561eb9b8595b11e3948d48a008af08471ef16bb774f1da18104d820968850b522e27528782052116870fe3249f0a299bb4c3ff2979ad12878a0f77b438c05c08d1f8c6ecaa767669d112d0443ad131e17e9a0283c52b9a0de5ccbb9d3f208e477851c04c373c3443fa9e076e83ac2f7ab3a8c21ea252cab998f16e7cfaf28a7a4995473086091c3ee34d41f1f13f8baadfa29c54d9a3d8ddd6cb20136dadb56fb707ccaa07ce57a27188c07818b73d6158f4c4a37b06956b4abb36b7a779b313045b1617715b1685e6b26f6370deecc19f37de9e701c175b7184e9989c4633bbd12c8ce60d107b4d0dcdaf39ef78fd10a7be453bb42b72666851ebd373e3bcffe9fe8f2ab507a1865e8a7b3484b8c4344b8a76b17ec980f92b9c1499adec027bcab4a40bf692541497563c2b0fb799d872261804fad0176f3287b125d7deb8ddc78464a0515b2b1eed3877b78388b75bb4817289cee0cef67d4de64dc26c103819e55943f83a8bed0a59e336267d28a6963647bcf520b597d6103b423455ad2afeb062486f79704e57dcfb0ed0624ece385ad4cebc618a22c9b60057f67659915d26d6f4f5cb4e6e4d7c3de90300bb585251d5fec6771ad0b75a3884c446067c2fa202cf5159adc33115f79b496027392497f0bed98051de77f21900f717befeff95680ddebc098dde94387557cb378e5d17b6a5b477d8c39d569ed32d4b27f24bbc1cb11c9cd16146b0e1b0e77f4c595e0ae7173cac6d85db837084d97ebc00ce5d04b393c87ffd1d809594df3c5783daeacc06a68d157af99bd36dbc0a8b98714bbf83b1b1301275fd49098bfeae59365babe25c294c30b0c2a0f470c9291d7a6e39cbe4d0d45383c5fdeeecdab33f2985acce45d2429c2a9c634bcb21df46cde8bdd9c216474c97b934ca4c5df151fefdd9ebf582010a4ddf9123df2c7b10c6ff478f3532db5b35aa0a4b292867d82b5faaac108fc9242af9096d09915823ba22ae0d3afacb157ebeb8bc20e3c0ca14f1b0a5122c1346b49f82e28dd3ea70ce6bc876b7e5cf452bb9f41a3072b29e918bea41b1a799d0590eb7a6130d3aee8619b1be640c1a4a4c5ddea79a5aac70e7105f97b7a2082c1c8d78993a9a8240b474225862433244383ae6f153b6305b48aceb84dfbb13e182071931eb12f838a057d0c92711da234898c5c2e6a92b2346b68773bf3417986451c0ccfd48fe8847b58650e9fdaf9abb3bf725bd44fd7497e12fb89565d9ffef985f9bcaff568de3dd91935099e6e9f256b7730354fa417ce5fda8a9d97589c458df0c99052bb8e6639e2b371090fe32b58714ac86883f9239890670042948991bf7cca7496081bd74a392d6ac6cc38e0e3f3fea3247ee69f1ef933df0929125a9f0fd01ce1ebf7a774a201e826a6b13bf9e6354dc9212cba32a84e84208990b3c11ea809a040fb57880d00d0005d74c86f7bab6ce658d406c1878358eecc19474d292fda0c6dc22e9dfb0f1657539321418b1f951c3b6e8a522fbe8b421aa46513bde0902b53fe0a0baba40e938f275ca7c610d1291454066fd8540ffe56789d77bf30e0e9b76ef6377941080955e595612a83c39a25c932edcb30d47838b2e3bb0d0a46955cbc1aca4c3710562e780853d3ed822732178bfd438207614d085d5c4638d9efd7b9d2c79bf59d9fbeb771d626b0b475e52149245ea54735151c0d3b9f7edd593f29ddc056de74457bd0e86fad4a76a889a076a32e9652948876ff159fa51c98915d717cba1b9853d2a5a5a644d4b03201dad44533fa21f9cb84ab4d36d9fcfed691203226fc7c3ad4e3305774b12f8622f5f5014916fd63430d055f3f15c0ef21faffe795372f0945b705d310386be6aebcde38ee1ed04ac39c8b4f6a685e3c29222b12beae1b8094d644a7b7c50bba146cbdaf26c61dab982012d609f7e37f1276ef22561915b4a31b5588f065daa8f72873efb3f4618bcb1dbc1ff4d42be8a56c0b5873ef64f9bcbb6153d0496e4b49e68bd21747e94f6e4fe99b71851c05b23894988fb59fa995d794b98ab1ca8b23422149028e36172604d37da5fb3f9dfa6179af33fe8041e1c8dc809674cdb5a3be3cd84aad3b14447556e22c5d3fde87c67a90d93835c034aee17646d5f5c1af5fbc4c0758b3f0f018329670d4276bc16814b7f9a50431dcf7dc1c98fe417ff8f92ab199273f10c466a2ac22e94738a2f9402f2eb4dcca9b23f0f85de3393fd5c118f91b7440591c9f5714a42c1a57de5631803ad74477fcfe957184b7328069e355d46143cfa4104797624fc0654cb56cf4caaff6c77a20608f8e8275de3b54193777a6ae08e2ceea697fb8cb72486a25c56ffec94bb41fec5e473f8af1675630bf3b16ff327e9e22cf1f336074c14a53f2377625da7977cbf6afab42af315ab8a76dec9eb3f521334e54e96b9a81f9197a9b8a0b988cfcbc66fe00699565672d4f44df0876b8f4c583e98bdd092a72bd8988105b036a8c4cc82ad0af8472f512c3be12e09983c9910b28ae1fc4cc7a81275742a4f872a862ee5946254a0d8d0a8d735d41db194dea327c9a765881a9d6ba818f0e6cbae1add550f79892d0d9189d6ec6804865409b39909e7a7bca9c473ed315b3c813fec2469be9545f1c31b39b647a5cd110fba74ccb4a81b5081189167bd0dd7da387409e0c147f468842ab6d3ee1ad5a0a8726bfcfa44265ff365300cdaed5b84d99d3be7ab823b12005495db48dcf140e50aa3cc8b09dc61a8982427de9327fc654e2c986e43f1a892d070218fd93d1739989a2ffa78ec2c1a749dbfd870152561177bc3fb9c41491aa6d092d8feb9664a9b9db5bd32c513bd17285c2344301337455185333f9295211fd90a0cffaaa72b975e83aafecb536aa8aab5373b28a2e5a5e4a95d979abe80f9bcb29e678bc1e777cdf945486c3456f06b9c071dd83bce2296bc9f0682bfb40e6ae042ecb22b12f388f02ad3777199753a976a6fc417c1422118066933b2a2a5993452bc8a4b92b3058b77010c02184466a950a7f8dae07d8c3e5ca8c01ae023b3bb0a20fee41092aedc1f55cb7e88182db9cf2be77f62e771f1db2dd813bc14f4c1c41ee2ed4edf1e862a7d37a8f7636c9988cd247100de61cc180e21d2ffede56a3c0b8d68f0eec4519474a8bd0f522d2b20fc40ef2d42918247585ca17dbdfc181ac8fe421417bf7740a2b0c7eb670dd08f6dba0b55008011ae5c493a86b90ae9cc166c2a05543744cb4a8bb74a6033406c6aa74213db025947d5e1e0fef52f897f227a7ac62a8b2340174fba502893655357e04b9dbde7adffdeaeb2a72be4b99c8e89677826513f7a7f9929eb8c96ebf5f3235affef8625fb231aa6d2c5a11bc56407f0a0e1f4bc09f2b60b5ac51b0d5ea243b4d1b1a8a9fdcba1e4d2c11b9c8d7e599da9939545e5b220eab84bcbccbbe0fc9cfeedf7ae459872d91011ef0a11d3b24b7916708bd982da81e82ff2362d00a012c96348cd1b706efac43129b44f45de243b859b2674235ea2fb9145a26813e5c5ecfadf95a998dd2cd7b6360b45f69ce951993f8bc66db85016bdcac6f5764dd7df400f5af98bc4b12c814246bd80beaf0608dd1b1b7abdf1d2aae0e97ce402d17831fca588bcf32e87ba81b329a981e0dabdfb0cd224020c559ca508099457eb9231ee86bf91505a5130bb7c641cbe2ae72b6394e0c4e26bd9df78080ddca1b0acc9ab846f0d04ba49b486a3eba0aa4ef24e732124c686854f7d7ad856ee06ed96959b5243a4b136f51777b974ea643b3c9faaedf26a0008d54e5d22aa55aa27b03040344c6871d4e9133c0eb96e1c1f9077ee2281bd0a1c4e4ab94979d5fb839d9a3e76e51d358d37816454f2a75c42d5deeebfce2772774f3aea7a5c3810be91b7c3e7cf443e4ed6bf4c4fd366f7f6588bc6eefb65076544f57005272d65ffc0d38b1aa9ae8164750b7f8ee5e8638ca6edd639c82134cc14891adb13d1f1bf7d77d4e5193d5dbddfb8051cf50a5d03b04c83811a2179f280a4e5b2bf6a88bf236c3032552ed57fca51b4cfc0f7d66c0351a93f2970694bc15f013aea1e18133b774d01f12a0f6914e4b9442e79f6b714e41e66defab44f1a7d04f31e92e2ce19f4a7bb0706a7857a7f06fa0ad168dd1821b8eb69835f015f987cdb015535f1e9243daabca11ca724ba07f9a133cd224e017fcaa3e5925d617fff3201dcc90bff16ade945ac53dce1ff667ebd71d69c65924648799b188042528ec307366c2df47e88ec8b700c55385ac767e8a5c5ca42370da9a9f02ef69a928c0830d003e6e4403a1c776e4e2787240f81e8e968ef06416f649d8430798477319c9f960b2cefffbae1aa372bf8fd4e3d6a10e2063d45089e590877e0495f256a7d20dac04a0e9fd23d19f75e41b8b6b02bb94c53ea4862f806a00d8eec2d8528aa460edfb5ac12aca2baee3185cd13a5becb98bd2e2c1892588cbf1bd203f5ce3638314b7ee901899723c2194c09ac302eac9073cd7c14f179ef09130d222f77008e52cd0b0f06a8787cb9edb0321b04e0f7cf802d2d4cb92e7f9f0cf676acb205d652f469ebe995eed7b89fdc11f813ead2bc1bbb5a6247c2bfdc21a35a6cd7bd6cc46f6d2200e499ed2ac21da7ba0bf3ad6b61a8bdaf5c7b468b78d193957d71cd92dd85fa926b5a022bd50809c6a135664cef946ed272bbc9818a8c62307d8967d46cf67934c84481d30167fae8cc2443ebd8d10bdeaf79191cbe6b33d7b889a221a0a7f508f06d9d46b6b7089b653de428d128d5c57ecd92216c934728cbd7592f4c24cdd37d91a53171f3e7ad141e92a99b76a3724c74d3efaa560ed7eeb990bd583aa5f0fdab95ea6cfb9a1912c33085350bbb7c92a3c89dc499f0ff5eef99255f9729bc4756a8b478dd6ed6ff480854bed05cb835c1e8d5f5af0f4355eeff0fd2cb946a5eba487f0821db3fe0e08fdd0a195dfa5064d99bf7ba4926eb227db57a35bff22d4ed95751ac125156d29ed591878eeaec5e2d4c2c21a614951d58e36d4accfb5a191c63229d9b9b9f2ea58ab51b877a5d1f3fa47936780908b3023f48eebb0cbbc8682d6e6c7bc8bf3afb3e70d288cf8d31dfaa6343ba89bbc35ab009cd5f84bb2af91561f6b5fb3fa13f77ebe2def2b2aa6dcc3d515984a3a60de80fc5790fe1f63bd048f3c756baa4c0b20e52762d481b25d5aaf66b2949a3a49dd67b665e63e6abffe897944c31ffab96fa9d43344a06238633bc10f496439e00cf33ab9da9ac9b16ef8d50a11b183bfd1fa7fa11b2f7642790a66297713546d81a6ae2f96ae0b02a5bc2c2b5021177bc3e0ed426c2eb6964511c27a9661911cb4be31ad7917436e2d80156895587c2e172f64aa16c0c47ec6473db9961d5255bd0a08e275359180afc6e4cbaf58cece9009a978619c9b82959a94a5da16571a9f4a1052d5924c7cf709b3e8be3db6f2dea935102df6b9489d0b8c953861bff6aab92d37d596a6ca1b80b0dc68d593ecc68c77cbc0ff1b661f7059c336cfd340cfde6854a4cb4c632c44717faba09e2fd8c7e97ebcbbb87b66cab3434d022792db887873e61c9ee274da5ef375d9d9f8d7ed24a15d77d035a5b1c7f4cd5d4214c3eef963391e75cea4d3c5786327a6c7f2995091a5b3bde07ba26b61c8864377811dd8b77b36828d61b884376a603dee25ebded2f6e3ec06a7"]}, 0x1054}, {&(0x7f00000026c0)={0x304, 0x27, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x4f}, @typed={0x8, 0x80, @uid=r4}, @generic="19299f49ccfb49504e6306238b04b34d93b3e21327bb342ab658222b0cf79c9b219ae6190d9539a957e41a8c2e635f31a102614e180e22a8dbfdb86a698d36e1f92d3e64cac0725b2c6c52c54e90f82912b521277e9287550e2697c693f794c4020adcc393bdc477b53a423d8e622e873e37fdb60ea00314704704164417af82f9afab85da95ace66f540c09275411107aefe054c0d3f1dd248edffa39a3b96b0fb2c40527c3492a4eb10871c16fb717d70c1492635ca980ac38", @generic="3cc76a19d1a5aa1b55dc50c41061a2eb90204a6dca10a29c95d2a1849e7f5eef98270efcb8e0aa77d8a7294f95a2670f198dd7a1bcda4ebccba72ce65795c3c51672c5acc002832444f0f26c394a9668ad07cb0a3a401b0cace88cbc7c199c689dc62de4f544ffc8e6ede2a3ce9c91598c0d04307a1614313df9e4c017a9985276a018c7bf55b70c2316051e118e391a3071019151fb0cf4d369eabdc807d55be8259d04290d3cc7c8a2d92ba17214bd9daa7d833fc1cea23df2d4a4acf48bdb9aeec3c0a0f6f361c8cd3bea07eecf32c4c88bebcf43974b660c78a7", @generic="2897aed4474ac221249f3b4682f0da43277d153916b051f3deeeacc8e70a6984d88c22fb64da34a76debd51c66c9d71008b79bbae0f2ab9d82087a7dad3ce196489c571517cb0c25668a8f36dba3134d02c25ea072235fa79d112939ce035282e3b284eea027ff52d0daa45ea81dda23247d9b", @generic="fef0a91022c3e94f26513e6f57", @typed={0xb0, 0xc, @binary="e209760367501ad4ae5f296d385ce8ba5a6fbd49261b185bbf65e83cbb0722034163b6a5efaa4ec6de63f3f9cef9a245b3d48014baeb8a2a319ac8073e23b84ec3ec92d90e36b850e63d35f7fbf258324ecc7e0c5938cc176959cf64dce64ab9bf3823ef3acb90c621ef0f028471a938a272575c68a6c2b929340d57bdc239e4fa34be0321c1c08a697240b3abf54a6c1ab66e3abb421743f374e4b1a26661032a48f7e60714613262"}, @typed={0x20, 0x60, @binary="28b839956a8b7785332fefead1b94608eb59add204f820cdf85768"}]}, 0x304}, {&(0x7f0000002a00)={0x510, 0x1d, 0x100, 0x70bd29, 0x25dfdbff, "", [@generic="5a5097d6b1b65fece8b47bd5b719468560e7d44af211e15eb9c57cf29604c3ec1b70842940f80f2b764cd3b559d7021461ac7e5cc17fd6d6febcd5350d22b4e4e8ee7a990428cc17b5560ec8628837eac065db90493d2d1c85f6c56b4ca774f0cadf346760552fa03c1aad95e6051ce5dd9626cfdf260b1a5d", @nested={0x1c, 0x89, [@typed={0x14, 0x19, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @typed={0x4, 0x50}]}, @nested={0x120, 0x4, [@generic="568520ebde2e740be5", @generic, @typed={0x14, 0x68, @ipv6=@dev={0xfe, 0x80, [], 0x12}}, @typed={0x4, 0x60}, @typed={0x8, 0x77, @ipv4=@multicast2}, @typed={0x4, 0x3c}, @generic="eaa59ffec5ca06f4441fa429077517af2382545c4ea014952f362f5c274f8595c11a6ee7ba6dfba7c8a726733922c1020d24b5e13bae3873d1908817fd8f5322f613987642bb6ecbe86f325df6e82c4e30afd0dfa5315bc59fe4d588ddfd5843900b54bc28a668c1e5640db90b985aadaab501e188ac84cf67ea2e99652160d773c23dde63bc7fba10c90dbf533d78cd97f0968c284d2732b827ac17ba46", @typed={0x8, 0x8f, @u32=0x733775}, @generic="f04772589569af7d3e660479f643ee7ea99edde10fac27cd9e34fcafb76eb85d3bcd43b1502fb1d425f209ee2fca461aa55d5e6591f6f13858767dbee58ec0a9967b86b2fd4e99"]}, @nested={0x138, 0x58, [@typed={0x4, 0x6a}, @typed={0x8, 0x2, @uid=r5}, @typed={0x4, 0x41}, @generic="1eaca66912acd4c76abecd955c0a77cab1561055f708e7b1b2e568fee9dc1e1e98b9c8dd25a4390725e5d13ffcb7c0539e38375758a9da67bc0b1c158e1d3dbb1b270090f94282f4a813c2e666494b5981325c", @generic="5c9c0236ed8e33cc8dc622e4c1689f244cf3b21562ff4ce308ee35cecb9f2f02fb5eecede515309aede2d43c46bd8b91975f8ccd740dcc681e00b556f22e31e4ae5da343ae49daf88ea4922cea831292d6874ede69552bacf87fad3be083b3b0509222d2b335b0f1b5accfed6a72000c7aac6a4d3164e6bec6b384c19b3b282d7a77611ea65a4e27445205c8112475836ae933d0191ebad3753df9aaab7e20e787aa03edde17208877f1e7ba7eb8463b1a4c660d6a00b6ccf6bf76e197e610a90516f4d95e67c451273ee4f6c344f3e1"]}, @nested={0x4, 0x61}, @nested={0x184, 0x2b, [@typed={0x8, 0x24a, @u32=0xffffffffffffffff}, @typed={0x8, 0x84, @pid=r6}, @generic="7ec1b07534e4f51345f15b591b3bc02318cdeeb6cfd41cd25747bec4ebc8dd7612cc24e2bf0d501a15944ed615fefa9bdfd5a16b354798401479f9dc34534c9a1b785206a4a6eb3c07002e04ebc19b64e66a6251a9836c13772c9088e3d4a4976882f404779815ab204df714c96369bba2", @typed={0x8, 0x40, @uid=r7}, @typed={0xd8, 0x8, @binary="6b20a3fd0dd42df122476f9e5dd00b0327121f9db46c4fb2cec4a94b3c7db17e68294031fc772cc9dbf6fd89f0b3b41b8f7af062455f9b3b94162569bfc17db1b545b2e625c3fee60a94e9fabe8d2b668e4a23490b594096f2d9a6c93a5b9dbdb663545fd889e746bed35ee920a9cfabe310d5be5b6e67ced1f5a3791d06d1018c2a81d4b9b85ce597db7b43db387839d479ebf6f292efd6fa02a4974375853f6715ad6924cdbd26ca5b372a226b13d11a219c6fcee3ee2af0ac03fbdf43288dd47ff66db6236241a921299534fa92b1e380264e"}, @typed={0x1c, 0x38, @str='*eth1}vmnet1vmnet1%\\,\x00'}]}, @generic="db7bddcc23f15984637d13ada4", @generic="ca0367980a270fa0aab44001b0c5c909c88bb162f2a35065bce2d5a078defb2d325e4d5593b23109f2d8332827616faf7a67a051162b8b72da139cb2bd7fb7e706cfb77e57d75ca82ee719daad08b49203696039f6a269f3e1ea99e0b7beeac2d28ea470e20da613a333accc3d5e9fed9f8f21c4a7bcce05737ec3aa"]}, 0x510}, {&(0x7f0000002f40)={0x135c, 0x38, 0x0, 0x70bd25, 0x25dfdbff, "", [@nested={0x1020, 0x21, [@typed={0x14, 0x3b, @ipv6=@loopback}, @generic="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", @typed={0x8, 0x29, @ipv4}]}, @generic="f24cd051603335447ce5286b5407fe97c020764f06a2992e1d58481ab175eae8471704d3a27e2b419b4a7424e46d6f5faf209ba9395ec72c9ae2683f240488dfe9b908337ab09ca6977fc57b3d5c37e12daf916e1fe18f37d00d003635381ffc5ac07ed54fe4baf68a83dca634b32f41e83020d62fd41e991d8f91104c42579cc3b41e930691ad4fdbe2a9d9c3d9892b5cac4d3b275deba9a2f993c9b123ef9b0a2e285d94d87e4cd202d96704a51e8afe7355ea67c3ff152245", @nested={0x40, 0x3e, [@typed={0x8, 0x11, @u32=0x9}, @typed={0xc, 0x66, @u64=0x40}, @typed={0x28, 0x59, @str='\'keyring&,cpusetvboxnet0eth0wlan1\x00'}]}, @generic="59336958c45ce6ff6b758b8dfa56f4fe77958276317f9f522b5bc8ea95f9bb5bee1db11a56db5fc412e3e7778d4ee280436ccb7893c0c54b2efc76905ddfd9dc658860983d79e9a686f7ad517528833102d53062e8debeb9bb325ceeca385beb1076774cacfae2993647ebf35866140af13020a6901ed5c0", @generic="459fa3b24234f14d45e5256923028ad53e06b8f3fd40ea66addcb4a1ba3f66e13bce72570e80547ae779fc9789b99ca57813d3c329418d54f265b82a6b664a572c27d2db6d0753e21083dad2e85284ba1011a001ac75116f4e5f1635388cb3f5784c5886ec03da71a36041b3195f9420ee647635ca1575bcf1f6d6b280b85d84937289e8a99b97aff273720dfab696b52a6724c93d30812dbf4b4f0a7d4b5958360400d433a671aff3c6eabdecf569793bbc", @generic="8892e065cdadb2ec154eeb9ca67444d1b05e58d7614644ab7fde", @typed={0x14, 0x3, @ipv6=@local}, @generic="dbf357480d84ab6d00162b41856ae6757fda3181629164677844599129c196e329b13b1a8e7283a7b05465550513ff7d84e1c0", @generic="67cf4d259d3172496d0553dd0bbd4feea35f8a7c0566a40a1395ce69d0d4011d5daa271b818bb02098f8f2493772f55dcec94dad1e3389a694fa139c86208600456cf9fd99632e52da76969c7117c1a1bef0dc8e1eea3228e94191e4daee1cd5380228e597a423c74fddbd4787f1b4c6e2c207cdefdcc1971460b1f40e48eb56729f0aefe2be9f59c4361e5bdafc696fe9dfd00b2ece9a2ea76a18d92125461f78648d1a"]}, 0x135c}, {&(0x7f00000042c0)={0x1170, 0x14, 0xc00, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1160, 0x3b, [@typed={0x8, 0x7a, @uid=r8}, @generic="72040939a0daa21c175b4dbf5596f674e805205bf60d98b2a8dc5504eb1c20dde8c6d84bac805851c4cc7d4334d586356feb32148b4a8a5c337872d46260ad684e82c9cd5101c5bf9f3a7849bb9e93cd37ab02322f39352aca5b72d8ba7ecdc4c3a77b551fd04eccc02ab388a0ea4ade4954bcfe792072af1e7a94bc30c7f5ccc7e7c9a380f7c616bc8f2c47827d5f7e1e1f5ed9965aed0004878a0b049521e241", @generic="c7fb4b3b6fbd31dfa75dd1f341792bac88a216ea0d09719654e27b7d2eb063dff6cbce9a719ea66467688b3c1101c09ed0b04b42eee04aa6e47cc9f18ad85d235868dc57c3058d6ba8b7bf9aece9165d1d47c21039af1c2e5eb08f5340eebb13f6f9a9b4e94338ab4f56458c685dc2f52e0a53ddd9f3fc6848e8765b4295b80d", @typed={0xc, 0x55, @u64=0x40}, @typed={0x1004, 0x6f, @binary="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"}, @typed={0x18, 0x9, @str='!vboxnet0]vboxnet1$\x00'}, @typed={0x8, 0x58, @binary="35dc98e0"}]}]}, 0x1170}, {&(0x7f0000005440)={0x19c, 0x1e, 0x400, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xe8, 0x87, [@generic="b9125e3409cc96fb64f43ffee92af31e79414302b54c1ed25a16cd99d333fe83a24f1c4b47549cbadd4d636152572d8579ac78e77a978b7b617878a4c9e5a8311eb23eb4483c87", @generic="e315b51d8238e716823e69048b04cca6b1fdbfddb2c4b52036e6742458cb7448b160c8dd49d2f8f1f50a2843a2942a2fe7e78d3557de3ac653517ea995890253468884355039ccf1e7b2fdb77dcee86a3e27714d4bc26b6bb2dd1616dafca22461e9a7465899df26d054c21ee3dc9ee35739ce06092c06f15921b0", @typed={0x8, 0x8c, @pid=r9}, @typed={0x18, 0x21, @str="6b657972696e67243a05282863707573657400"}]}, @nested={0xa4, 0x56, [@generic="6f9183805ac09e0a7f17637836458127e2307c705dec96e95e868281bc559fb91b8e1051ea1b2bd0a26f7698f7dd54b5563a3361358d23134fb964e5e85e10fa10b9b6bb71e5bab300142472f922e1e05863245bd8061273ad97726fc86a266acff251ef0483661426e114745319b2a7a4f8da25760712aaa55869f40a5eacd70faf33bcd13e363108006e8002fec339e6c1e8f9e910594875bc519263f9c16b"]}]}, 0x19c}, {&(0x7f0000007a00)=ANY=[@ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="04005b001e3d81453f85668a5fd1828520c8a4d3c8ea448838aa8a8d1e05f17512d5338eba4f58ac4342740a362df9e82ded9bdac6e2bf30be28d2bebdfb7512b055bea0721059e6f739af1d2536ab68812cf3e6b4e479a03577304b821701ee85f9515bb3ea04113ba7dcf9e4a0e6e1dc9c8113f4106b9e7675f208008100", @ANYRES32=r3], 0x1b4}, {&(0x7f0000005900)={0x1518, 0x3f, 0x0, 0x70bd26, 0x25dfdbfb, "", [@nested={0x111c, 0x5c, [@typed={0x8, 0x87, @ipv4=@loopback}, @generic="a2b9cba2534ea7c86256cb2319b871465fa6d78fb2b48e3cc7efe0081ddbe2eb4ce2f75e942de88327aed04e290186e9", @typed={0x8, 0x60, @pid=r11}, @generic="a787361329567a13d78f6ba06c6008a2b243bc8c09672a26b435822ba8fd25d1f21102aca10a92093574b67e76612dfe16b07912e58dd49ad0ddebe453a1275bd400400df10df5e71b2f0c2e01315a6df2f6b05e852cd1d76ef308b4a2fba0321d9826fc41c1dad26cd30e990059f8e6816f6682e6ad5ae2fc5cc1187961f9de55f2d5c96d43afd4ddfa69d3e3bf4e31a0ffac8c47e7b847cdba14ba10e3c81a68ea9632b9c18bfb6ac530942f5e4f14978b7209ba9bbb37588b8fabc9b09e138b096e1ce6b38787e279", @typed={0xc, 0x19, @u64=0x100}, @generic="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"]}, @generic="2b587ec6de2e18337d9d7a9066099b3e64b6065be424b9194a6998c68215166917c3480cf7352931a581ad0c31f2c0245d0cecf133984bce9b51c63a2c3eba7d3f20b08462b9b8732f8fd11ef35653db954ed0c052af64f81823", @typed={0x8, 0x59, @ipv4=@local}, @generic="d177019fb99e5668f0ae7626843ec70a2b72132f0d3c87f8f2acac9b847ed6d691184e02e02b3a0a74ee233748cafe3b454945f5711796a26dab", @generic="f7c4d2821aeaed291fe1bd15b0874d30cdee1d7c06e9ce2d957a43e3ae286c8da23d3f034e04140a00c489e2348c97d20ee401c309b9d51132278544bd409f752bf4106c4695f444d822f799da40d83c697471e7c978b7bd98d1ee90deb8a5b3", @nested={0xb0, 0x14, [@generic="791e231623bde619c859775d08d60a4f9630f0993a9f673930577756d3f53a246225b80ca0261e2bacba4b8c4463d2129054e582891c3f7f14c216790e9c7d856a75ea22b5e18af8079d317e5a6ea1235e7503b8288c004bfa0340cc917a9d26af6a6bf8e795deb98a007f2cd00c8f6ebcaceb7016ba354398283b7fa72cb8559959bc5dadc3efe0794704b5fd8912cdb56e2b42a3758115a716700b1822f03824565f1b45d65488e9406f"]}, @generic="bde2c9d75b74077c289d338b7f31b797a052a08a5b70d846fdd45af3afc8feb61df5378e45a3a643498dca48828d34df3788a8f6f2fba23799a5b4d6380098d9eb1ad5fed28aa8dbe792a26c03bbd2c9ec664d566bca2bc9abe27e6880866d103682b2c2a22b02cc33a0ddf5c3cdab0e4db03c89f3481206a50c99232b06b4f00bf6ca3d280a78bba48abb70077138338ee246e3ab31c9d72cbcb1902f1e0c4bf7a8dde93bc950cd140796812e9788f6ad06da64d1e7dce1a6", @nested={0x170, 0x7, [@typed={0x4, 0xb}, @generic="ed7aa89e1e086288d0955f6368be62a9f87649dd1e1765361e6f4a66f70c5065a81c862f7ef1086e9938d85f764a61b806", @generic="0e56164d5527a2dfc595876734084d16237e33ef3bcd41c8072aaa434dee250931476a5f4bd63a1ee9d272a4402c7f5943deec8d8e833c60182fa28be75109edb6cd24518492def519bdae89726805cbc1a824e2d060d0017dfeb57815d2dbf9a9092e17aff7896945104f45c21985d1862dc5d6ec75ee28ea53f0cb8d4fb2b4e8587e4c3a01ddfc4efe4eca4cce07a79d7c60851d4178", @generic="c9124788f96279b730013b82c016cfa387f670c701ff5e8636e7dd610ddf366d92454336cbfe0b86441bd6a22ce89db81ccc45dba30417884b3c733f86c55113f1a3c2425f2a273b48e19c92abd971053be7136d606c9200a15d3ebca0c8c166", @typed={0x4, 0x7}, @typed={0x8, 0x7d, @ipv4=@multicast1}, @generic="cfd856a7ceb0d224f523e1f4bd2cddb376886308c06f33e300dda6ab83b6f5364ad893daf01b73e5405aaf57c1fcb8600235a5f3"]}, @typed={0x14, 0x41, @ipv6=@remote}]}, 0x1518}], 0x9, &(0x7f0000007880)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r3]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x38, 0x1, 0x1, [r3, r1, r3, r3, r3, r0, r1, r0, r3, r3]}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @cred={0x20, 0x1, 0x2, r30, r31, r32}], 0x130, 0x4000040}, 0x80) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [{0xfff}, {0x9ec, 0x0, 0x6}, {0xa9d, 0x0, 0xee}]}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00001c3000/0x4000)=nil, 0x4000}, 0x2}) 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b7a01000000", 0x24) [ 694.881579] team0 (unregistering): Port device team_slave_1 removed [ 694.907686] binder: 4718:4725 ioctl 40286608 20000040 returned -22 03:37:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0034000000", 0x24) [ 694.941322] team0 (unregistering): Port device team_slave_0 removed [ 694.953409] bond0 (unregistering): Releasing backup interface bond_slave_1 03:37:38 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xf0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 694.991677] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 695.004960] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 695.014801] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 695.093711] binder: 4718:4725 ioctl 40286608 20000040 returned -22 [ 695.132662] bond0 (unregistering): Released all slaves [ 696.655818] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.668806] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.676831] device bridge_slave_0 entered promiscuous mode [ 696.758157] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.770704] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.778110] device bridge_slave_1 entered promiscuous mode [ 696.859695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 696.937435] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.944015] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.951348] device bridge_slave_0 entered promiscuous mode [ 696.980154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 696.998252] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.020446] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.031126] device bridge_slave_1 entered promiscuous mode [ 697.126958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 697.189095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 697.201996] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.253957] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.312502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 697.319353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.339053] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.371499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 697.378340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.397729] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.450913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 697.458007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.519124] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.526783] team0: Port device team_slave_0 added [ 697.578259] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.585811] team0: Port device team_slave_1 added [ 697.632509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.655129] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.663547] team0: Port device team_slave_0 added [ 697.685396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.712504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.719947] team0: Port device team_slave_1 added [ 697.726534] device bridge_slave_1 left promiscuous mode [ 697.732649] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.741666] device bridge_slave_0 left promiscuous mode [ 697.747166] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.784383] team0 (unregistering): Port device team_slave_1 removed [ 697.795054] team0 (unregistering): Port device team_slave_0 removed [ 697.806373] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 697.818458] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 697.847843] bond0 (unregistering): Released all slaves [ 697.871703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.881417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.889301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.910832] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.941276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.948383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.964210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.985777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.049457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 698.056746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.079140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 698.138560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 698.148913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.165570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.813159] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.819561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.826264] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.832680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.860475] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 698.883053] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.889421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.896154] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.902596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.910862] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 699.260183] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.267416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 700.784664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.851809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.932849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 701.003314] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 701.086410] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 701.092968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 701.107281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.158743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 701.165019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 701.174541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 701.264499] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.312865] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.187555] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380), 0xfffffffffffffff9}) socketpair(0xb, 0x4001000000000001, 0x2, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b6c01000000", 0x24) 03:37:45 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xc9, "8627e7b39ddc04081afa1dc9bda65b68668daaca250e4cccd905b07ca3a3859e28ab3bb9ea932517d404a5941feaa10937728f34fa45d7d19833013088688cd6beccb5b15973438418a1ee82587cbad01ba2db442e58d9b9f385ccd4e2d9315eb35f788b708b441a54f85b832f7a1a8dd181d45ca4c7c3a6f6f88850a895a9ab388046899ac77249775c9f14f3fe3369c90bc52fdb296660267f24152e380db9b10882ae688093b8b7fc9d7dc2e2d33b61c3c23e89d33b0eb2cf6b4160eaa6b7120430d982a6f4729e"}, &(0x7f0000000140)=0xd1) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x11}, 0x800}}}, 0x84) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:45 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x7fffffffffffffff, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 702.239411] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.247913] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b1c01000000", 0x24) [ 702.309823] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.329279] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.346689] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.400450] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0701000000", 0x24) 03:37:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 702.549555] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x2, 0xd}], &(0x7f0000000180)=[0x78]}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 702.612976] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.642268] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b6801000000", 0x24) [ 702.679198] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 702.770915] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.829672] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.875956] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:45 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) fcntl$setstatus(r1, 0x4, 0x4000) [ 702.938347] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 702.949432] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffffffffffff000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b4c01000000", 0x24) 03:37:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000a00)={0x1, 0x1f, 0x9}) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x1f, 0x9, &(0x7f0000000800)=[{&(0x7f0000000200)="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", 0xfe, 0xeeb8}, {&(0x7f0000000380)="d7f8518f20b40866cfd414f3a6090bbccc63550bb49b8e4c65cd0beca4f725e1130093bb981da76ed05014da5753dc0d490777df5fe8be371a1e5144842c687ea062ad08230cf70c4775e59d1ddc571aadf47a22", 0x54, 0x229}, {&(0x7f0000000180)="77d4e7a1676bf297452efe350460e61601b9fb9c2b4eb469ad", 0x19, 0xfffffffffffffffb}, {&(0x7f0000000400)="fde20c03505ef462b34594e1fa29af899cf75bdfd36bd06ea04c8a23208111913aee7cab03f38add7560a89520761a5767932f1133967fe8865b58e97d4acf78b9f7", 0x42, 0x1}, {&(0x7f0000000480)="87f2149f8dce97aec69205eccff476de30bff60360ace3e09cd1109edbc4d8a3f5f5060d39af7c3ae6bbad275cc062e842cf69596af83eb225a5c5ffb23074253ad00e2c951d38be32d7bd3b2fe2e325a306599f89860832ba2a0e6e37c1e1414d03eefaf222d1bfaca5cc81079aa5fb09e3f21a2eec2e46649c80f9c6ed4e93c135dec82d9fd921e027aa2185e4bb463a2db53a45585d0f2f6d1fc62b503986b2288ed909f014e1f80d54f9309c98b4", 0xb0, 0xffff}, {&(0x7f0000000540)="b13445fa8d9a6efb48ce0a46080f8bad35ef82240ef4b918577dec726c6331e8d707526602dc7cb73edcff1dc7bf22d430c05215cb1956a5d422e8ff42974bfb0516175efffac4a4e43a89d3a85a2218622dcd77fde5a590be000a8282f5e51077c9d31961b9a06f63dc80ee237c3ca9797a1ec133bace0434d6d49cb3941f476d1e4c9a97eac51a7d653f3fc6ba875917c4407a871acdee399c315edd92bba45167e19fcffb095546d023be4ef43412c5b9d74cde09052733cd6ea62b147c58a311aba2323f28", 0xc7, 0x40}, {&(0x7f0000000640)="9dd81de4b3aa29dc0b16fb1d05972bb100dcb38854b9cf39e136c1f711bbb31be409ad13901d45735620b3bb1df0a79d912bfb6700edad8eb91075cf12784dd6279af27d14acecb37f743788e76abc94d142e68e6c84d9573634d4071f61de54e7624f6edad93e7ae65754d40569278dc7c7068014011eb68beb24a2fbdec399af6ec4856ce7d62d85ac014715a53c2e1cb28cc1dab12b3972b82ab90c1fed40ef4b35a38701052b92845e92805d6bb8557c6ea99ea81b769a544deff41b274e59a1b5cb831d45", 0xc7, 0x96a}, {&(0x7f0000000740)="3a524cd538a2bf03d82900f58b584daa3e36d515ad2cc94b4a31d0a22f90062264949c2481fffb2e40071e2266fb3806ca6e6b041a81f8d120a61289c21bef8d9d8a4d59d9e5faeb37ab1955c4ca026e3c0b956c7a5cd69280bf47ff4475de2952406ef5d16b48615112d58ddc9c4d6a1232960cfcf69081", 0x78, 0x100000000}, {&(0x7f00000007c0)="61e0cba86e219148a2d662094ae43ff2c7ca49b2be060c70792c652f904c73ae", 0x20, 0x20}], 0x80800, &(0x7f0000000900)={[{@tails_on='tails=on'}, {@resize={'resize', 0x3d, 0x9}}, {@nouser_xattr='nouser_xattr'}, {@expose_privroot='expose_privroot'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}], [{@appraise_type='appraise_type=imasig'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@hash='hash'}]}) 03:37:46 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 703.327631] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 703.352710] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 703.366563] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0009000000", 0x24) [ 703.412026] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 703.479711] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 703.521413] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 703.557172] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 703.571939] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 703.646027] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0008000000", 0x24) 03:37:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lookup_dcookie(0x2, &(0x7f0000000380)=""/4096, 0x1000) r1 = mmap$binder(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x2, 0x7e65facd4fd97d7e, r0, 0x25) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000140)={0x31c, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYBLOB="040000000000000003630840", @ANYRES64=r1, @ANYBLOB="0663044000000000"], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={{}, {r2, r3/1000+30000}}) read(r0, &(0x7f0000000180)=""/112, 0x70) 03:37:46 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) fallocate(r3, 0xa, 0x7, 0x9) open(&(0x7f0000000140)='./bus\x00', 0x1, 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x82, @mcast1, 0x20}, 0x1c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 703.724198] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 703.791803] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 703.840782] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 703.881352] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 703.921517] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000a000000", 0x24) 03:37:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 703.959374] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 703.968249] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 704.047140] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.085833] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 704.087551] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304400000005df774e4968fb7f0001eed71a03d266c2d1aaa360a7be4bef774177bce75f5dd96f77031b8cb718848049eb53859ec9d268660fea14f8df2ae12ba5c24416e9dbc"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)) [ 704.136797] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.145291] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00d9481675", 0x24) 03:37:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x1a, 0x80b, 0x7ec8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001640)={0x53, 0xffffffffffffffff, 0x1000, 0xdd, @scatter={0x4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000480)=""/198, 0xc6}]}, &(0x7f00000005c0)="6388f085938bda21564b67126aa6d9536d1366b0d47691b038b5a8a64de5e8252cd3c116d6bbbac6f4f4b526abca2bbbd9a05c524f998d6fd3d884b4578a463fe07ab92ca8ec7a2f5e2984b68f868d476c52cbd554fa7863a7195d67839734600a529c26998f7666b507b3eac74d042cd87c1390113d05bbf649695a462473107a80633e646f92f2862c32abe665ac10de78099f09b8679297528fe07dd3c5d8bca0e4c4fd9e2560d4f647c080ad42dc7cd6e012e50ef0e255b507c5baa9c044545d620ae3d0662d827922d3e04da5f1a6d73ebb74cb297ee09a4d0ccb96f7008e78e037c4d0fa7d59956061f27548a85cba298bdcb891fdbf628e64963cc0c82c1fc3eab4a2206f755d80a42d9d9a9aae612ef8395a6be2ae58a81c4d8391a1bb39f6813cefc2b390d14a8a5561e947dedd8b58445caaa48a64651f4734ea1d8db07aed5a59a6ab57f7756ded51966656cdf9efc017f3941ba8336b828646aad381562ae8ae9a9e5530d69c847070bb42481ed79f39bc1429567eaa12a66bf2467d6256cb1c0b877676a1978f259820b98bf49bec7cbb5451749d211b984853ca4bb19ac89184ef7a2f337f5f9ed0db408cfedb39c434b418c5207df5b448d3e6d8a8bf01eca064174b3d5f9eaad5e86073471129d142076aa8e64ff38b83b06c8b9536308b47f8f4d578e4043cc8b0cb0800283c628532d6463286e85273e9f8eaacd89d9614b53e2d004b5fbdca11666e3584906fa79b85bcdc3a160568fdc534b1451e8cf7e6a0d0238888e7c81285610d9fe308bc465573242376971714f739c1e06a1975d2514322c622ea119b979f9e82e4d362688f86dd3caeb21bfaee47528c7a9b394adf83bb9e125bd9b3bd39322aa07a5fd353fdd723816d969c8e035ef49259ffb008df7d2a753e624493a3d0b1f0598bde60fb2af821d665799a72b89d8867ab197dd62b2ca7a8e0b4a69620059441f52c08d796b61694ffdb2ddcb2986baf2aeabbccafe7cbfae02150f968b9fc06a797ad81a5838411bb4f68c4b2ab81bbc4c8339c53cdb5a09b6229762a9fee971edf4b83b6f6b8c9158450b0ccfdc662c35a281d06b2342a2ff0bfd8fd92e68d796a6a46f3baf520021f6fc9781954f69d2914a790bc88bcf70ed504f02611480ad881eedcef1f80e7578a6699d16fdd8616dcb6d41699be4074ce21c59e98fb173435e0a7b902e2b33eba5a8952240442d8c50f2b0ada484cc95b1d3f8ce6e67ee7a2889f0922a3fc95edb3ba6e1a632eefa49e882c856bb4757a1a5ca2513dfd8a156dfec45f5f5ceff50e902a0a9604e2d6d568174ab83cbb46946279b57cfbc7c2b141adb3ee52b336fcc009b42fdf4a5ddf731b27874f41234cb451d127c453413a77c28d36ed279fb25034d6088e1d0d4f1835a91d3274db5d5f9e273d10153dd1be6e66fdf366adda10f3317387980e7e03169588a556114f8b06c2fb16dc1f489bfc677dfe15c86797fe7e87f290b6a8a69265ca086392b6daa1eb96fd07d1fbf783480c6c63996b3a20b25940ffaef9d2e02ce730b25f8b8fd634f50f5c5c0e3dbd690da7385e7bf96235adb15562352c0777cdf31aacf0de19c1cc9fc795a1494210424612fd0d635d18decd1eb8c61027f0eab582f7fa539e77d7aa8462c9c1fec49c7facaf3cfac6bcc60f4fcd383420af70faf38e939075fd6dff9469b31116ca66b32b029920dd14eec6db4a7e5053088ca20fed68276184130233483402f588be23dd45814046abd1d7cd32be64ec00ef7a80cb6f64408e61e7ee183847390b0e96cde693fbe805d2578eeb68fd661746b29afdcde0a434269f8f70a53519aa9463d332c3e7f6b6ede6d2a8cf3066f6489f4e0f31219405261ea0115c2b2aa4201a712744615c5daf5f30a425c8ac23e46f95dac40a29b8d0388b8365f08baa426c81622c895538f74f387a63c172e798fd66115b0de0f0ae181c9c56ef212779ed63e3240a330f5ef5b46f255ed2fe07511c16ed3374a523b64e0d94b630a7d74240e890ccc27bfded863b37e05bbd05104dcd74da92c2d3fb443074f1370262afb54e18e5b5793f46c4a394bdeb5f172f0e48422506c392d66963e98772f605228fc3a8d641c5b302a7d1d06188603c339ef7a2249183a95ced3a3182c44c5cdf708f5c996fd79344bdc3815092f147c9dd61480cb0640199193f2c15b15469fae896bdd794d41371fd6ee4c05ca1f9d6871fe615b91d7a40270c1f91be9ce46f3e015f66f79d93442cef2992d447d694f5ce86e388996dc59d0262942faa174b1c70eab73c9d3f69460a867b85134f987dd0ee324c514fd46f81156028efe5aec6cea95a8c67e23ecfc442e854eb30dc7f19bec6f5ca0c66c7af67a9a7df6b6beb87510ee5cde6226548e074e217d88aa1cc776700b78b594a9578f44968643d6fc9c7d70f4073295d7a5c7c6804f67c5ba62d31a7811807db65edd7ce2ea5292d1caba03ee490b18e2f7411775dac87198a17464e186f37657093cf2624e0e9e3daf269e15893f929256f513135464f6e031fd196dcd627ad70d5971bf8a472cc778125219e2adce49890801e3df779e750be1f5ba7d747b93171d9481bc4d71c09602dc08bf54773e5710b92ae17643aad659ff45984825d6537629de3dea47a89c96fe95bf0fbb00500c8ab755cb148ea508feb633ccfd9ec3fa025197723cb41b7e5e83938217c3eb27c57708e34bdf8ef3e60b286824f2bef6d8c7506a103c47b1a23a52a3d0aec7814cc8b4e0146b0927ac7b60672a5ca386b1e248359edcd55cda0f806c4d3ae56ebdce266cb4fcad6a7c7bd5890c6b36a7ea3e2f1595f80b060400677cc7701c4bfd5d680c13f1b4f2045619bdfbe22e6a4b94f9fed70aa56d9c24b05f6739c51ee8c2b352db657b4842cb553d8299e17a65494e4fc9d86e8d44ad6239aca422ec1f63228b3bb0e9d88e8b3749440ce1f02772360873d8f27ffe40eaa7f198a93f93a854e63cfbe2ef2b16ae7e382a4683558ee8d87f39746d477879d4146deb6c954e5adbb05c39679d3eaf50a3bdd1bb11d156f444806c1e564ffd43a3ebeac9b411ff0fe42b256710363795f2d9cd070183be0cd351d5ee7dbf4f6b37278bec4b56309fb708aa704b4916ac73f6d80a7bee4d66b713067ce17071f4d7c2c45be7e6ebd0029dc00a11fefcc7645e90e7edbc2902d99f825630faafc2854099cbf6ad4bf71731e47a62b4d6c3e7cdfaa6b9f41426b48912a35ee2c8400279e97c8bb91da41b9e71257904ea5508bec919a57f169a4f77e2ec4c5a0dfb053861a7fab4a1040a3cab7905662defe00b719fdf09c5b55cf67aedb6d796503c3b4df976023ab791154d6761753460fefad5ab91e1a6e313dc1280f4a45631109f2f6996a9f3efc8b1368ddb14daf4ab21b75d1c1f958793387e8b718fec7d9a2cb5e3aef158f579506251d8c3b478e6caf97f5b606f70c08a3df17fcf9abec459fa8621f309f1b7a9abc534060765319a9db5ba8930784853af9905fa48c1bcd3f362c1d1b961f55c1c0533254d6f939bbcc6bd8f6918841e1c1e9da571049b5f86565ef69f64e2589368615962d4b54447628347076c335ef386b4b558a772af5f377f7ed42881bdb0bf1ebf49e2acb6009b6ed3feac80f0eb5b250971278fee2d76d7cbdbcb86fce26f6811e30a564bd04be629da470c1532bf896cd2f55ffc577efd3705e9b711f87f43c09582325a95899e700101b24682e99c11d4ab9ac409ce7e553482589f24654c49e1d8caf20994a2d4f9bdb8274e8b2b4d4e8798ce0dd6c03e9ad1388d00fd16b8d9207a7c2ced55e4f9ccde7bd060a2c37ba6019ffa9d27b0569c6cb36959181e3dc2d91add40051adb893b2c16e34dbdda2bc32cf723041554f0c471bb4cd7b54afc8f9e8f054418c5fdf2517a62453078f14b7e6570e8ac8f5d43a9852c54c54b73ee585687ea0cf362b6b8471127a0c49a0c412092b8c3e6ce74eddf3ecfcb61dcae4ab9db25bcd58b3b983a923f80b421a56101e8825aa4014a40fb0d5a11d0d58620d60b22f0deb56b0943135a17e4684ae007c6f93210f188e08fa5745020cac35aa30163016dba62c9b547521c10a80c2bd72142ac241c90336c0bee7666ed5a53ddbf3d84ef73fa3b8b60cf5a34e7013ca9f44953e8f3ea63a043e1592d3e931a6ddcd085f3f7d7a37ab7d4bd09056bb875a2ef909c9ae22bd331d5e7246aa0e74b9c7ecea37a788f345e0d6e5f4e52087473f9f8fa943a71a9e20828a2854d8a7a1342a99cf829430d3cccb422d52935723df69d1e3f4e54b35335f9a95fbc44fdc0d1481d4fd771ab04ebef741fcdd8de887ae40eab1c628d8b272f0606349a06db1bf93c3f121486d529189d1ea091ad7bacdf2edae7579d6db78cf047bd6237bf67eb73382f566f88b2cb266c250c7734f1c265b11e0e71a46cbcfca9ac92529b1df09e54507c77345add07936a129212704739ef782388d3f6abfebd5e1cc746054158a50d8b9e81056f9df6db87cab58b19506670dc9af382a2549b32e188902e23aaf5092d2339a0c45e8d2aea895b13d66fab19c022ce886a4f4b6001420422f0925ed165056f43ba82bf2ebaa5b9e1b3510c099cf480a7ef472a405b9d1758e3a6b2cb88fcd52f46a03b535b513a51ed8ad5852a4023f595d49d514622c812e069ecab2ec55616a1afbaffb6d2257137d489f330cab32319b25d2aab28d393467d49c72355cb39014ad9233bcd1af060ea00a0dd515e8a74051cbd3fa6f19462dd112c51c9d2ae307e4bc622d3106bf748b6d1a472b45dfe4f14b48b946131f5351c69552fa9553156f8facd251b5ef4cf13322fbb470fcca9a5ee23edb7cf55c26577a2b5c864aacda41e60054990b94292e5f898e8a2d6452427a182fdb669cecb7fc3fff50b770aaf8b4aa871c24f1523d598c2a799d18f11d7cdfbfc6c7190d264cf1784da99024b77372294a0470d32823d70f3e5baa7ed130c69d34ec1274b37950db3daecd65856ea5fe67b31d791166bccee2e5c754355b12821c045e55278ffe214d10eab4055c6f91258bf8b4c088e50ab3d3b1c40923b4350e424b24d19279ec82172681465af2f12cc8deab7bb71155de3db869863ad4f1fc48d691343be1a2e12ad592e522f6d9d8ea2a22b75dfa50fdc47803a80c3e3b458893710287ca96ea3d21e1ced93140f454090418ee6e046c86b378b92f1a831148b23e127b904e45f9cdb5a479baf8a96fe20b9cd05107d4564f28b16462f6d3503e161e945815ba3d9427a209ee684b01c1adcc9e1786cb1f810a731ddd5b672609375a05cdd2d749174f92469e06c33965108f5fda30e20d94650683e7d37d608ec0ace20ce765373b17364edb1f4fc9f37a827d28890562f780939ef7a7e0a1626e0be49957da28cd9a02ddf0c4c082ff0ff22abce6a7f104a0b41a7db2c02fb0e5cb11dfda455bffa4b0b47e535043520bbea0db836a7789ca86ff2c678067330a630a84644949416d9e3c4d790fd4f52ee4d83d20fb3f74aaa7474f7808de89f5d4a3b35cbb17c028fe162e964fc3d132a50f33fdc88563f48b81666a755c28a5764d4b2194813445ac7501c98a20e9bd4be79178f5864b99889ee8d33fd740f5d0b86e7beadc3a0c8ade9668b548dbac3166c09df59f2ee06f5b4f02889e5388431e98acd9e18f10b7466f934bb3173d5955b93dcea2e47531d1221afc2060bd8bbbbb607b8fe8d64b06d881de1189bd2036709715c9897d924f7db785ecb5aa76c1", &(0x7f00000015c0)=""/64, 0x451a, 0x10, 0x0, &(0x7f0000001600)}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:47 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x3, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:47 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x7a, "601fd658de08f8341fed775104be428852d1f19a97e59b8ba4044ec7341016bec03e09a477a9b8b4a6279ac86c21039a78ca996cebc9999bc81fecc12c867934af5fe29bd3f80fb373a9a90fa75b9958746bf014a8df4a44eaf9b142bfd1ef6ec91e381e71a4494aee98109dc419c4946d05e4def14a93e81f7f"}, &(0x7f0000000140)=0x82) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x678342ae}, &(0x7f00000002c0)=0x8) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000500)=0x10000) io_setup(0x7, &(0x7f00000005c0)=0x0) sendmsg$xdp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="ef2e3596f3ea319a349dbe442a7b42f3fd327f170211fb554fa39034499a8b22add99fce0612e57834331e51b1bd57fd04943fc26e858460e24737360e65502f3208e4e52b02114b1652468668dd0f535b3f80c847a081bda57fa1a53035dc3ba6e153fc7c4e0f252a120423a3fb1cbabd5c877327e9515a75a6f6a8f0110929bc887a4d10d073f4e2c61476b339d31ee320bf1ee2d6eb5aec1818c398fc768d977f59f87ccc998e0b040eb4c0e4241dcb", 0xb1}, {&(0x7f0000000440)="92ae5bd5d877228891cc80605b0852554727a123f23bde3a8b047f5e37e82c1b0ccb961e49f2849844f1c95e7827a6ca4fcd9c72fded989c96eee811ab0252860c73709f3f6d244d2a4ad26da90a5fa845915c1ec20563f3f09cd525b23ea6147b61142d2d6f110ba35a42df763aa111fb629bfc458a30c04e1c", 0x7a}], 0x2}, 0x20000000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 704.561120] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.582444] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 704.591446] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000b000000", 0x24) [ 704.605503] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.613936] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 704.622547] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 704.753126] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.762537] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 704.810171] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 704.822820] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 704.831856] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 704.845025] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304400000f7ff"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0002000000", 0x24) [ 704.956569] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b001fffffff", 0x24) 03:37:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 705.032149] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.038281] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.065908] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 705.162145] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.191563] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.205424] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.249461] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @loopback, 0x6}, r1}}, 0x30) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0005000000", 0x24) 03:37:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x400002) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x1ad, 0x0, &(0x7f0000000040)}) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt(r1, 0x1, 0x100000001, &(0x7f0000000140)=""/192, &(0x7f0000000080)=0xfffffd04) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r2 = memfd_create(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x5) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r3, 0x5}, 0x8) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1fa1e18a, 0x0) syncfs(r0) 03:37:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:48 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 705.619034] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.647114] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 705.671663] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0034000000", 0x24) 03:37:48 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0), 0xc6}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), 0xff6b, 0x0, &(0x7f0000000040)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = memfd_create(&(0x7f0000000000)='keyring![cpuset(vmnet1ppp1(vboxnet0vmnet1vmnet1ppp1keyring\x00', 0x7) ioctl$TIOCCBRK(r1, 0x5428) [ 705.772888] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.794365] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 705.860546] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00df481675", 0x24) [ 705.916455] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.959264] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 705.971544] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:49 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={"76a300000000000000f2ff0100", 0x3105}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r3, &(0x7f0000000480), 0x100000000000021c, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000140)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 706.096438] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.121301] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.157950] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:49 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xffffffffffffffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0009000000", 0x24) 03:37:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0663044000000000f3fa675e6aafe1ecec73a1ba89f6cdf976d2078f95f6374e86b21775c0770bf7819f475ecd9b0627c383018cdff9465e699fc27c5fee68f9c5313e0a0c7e200b12a07f3719b8c2d3b78766d206be419a55a0c5bb3d114a6299858235df27d7c009a3cad3fcb4fc59ae6df1d74278d116"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x3, 0x80000000}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:49 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5, 0x6c2, 0x5d, 0x2ba00000000000, 0x3, 0x0, 0x6, 0x377, 0x40, 0x37b, 0x0, 0x100000000, 0x38, 0x1, 0x3c6, 0x5, 0x401}, [{0x70000000, 0x16, 0x7, 0x8b, 0xd5, 0x3, 0x81, 0x7}, {0x60000007, 0x28c8, 0x6322800000000000, 0x0, 0x1000, 0xffff, 0x1, 0x2}], "8ff4c6a05fd2b63d72e4ed13273e8bd38293b17b23c0b33c1792d4c6f8f20c21c6066c22420fa4b67597bcdb0d4f964dadd25e8cb6afb6bc9ebd585988f35f3b7de67dd5779132acc30d49727692fcdd526ba07ccc92a594aef3514adc0c362b703b770046a13ff28ba75a9a8c129e62eb57c0129bb3bd28c8216a27877f92bb095b89aff345744422a49238177d766f", [[], [], [], [], [], []]}, 0x740) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 706.622518] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.657660] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 706.659940] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 706.703027] binder: 5683:5701 ioctl 4008af13 20000040 returned -22 03:37:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0011000000", 0x24) 03:37:49 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffff000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 706.813677] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.814681] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0025000000", 0x24) [ 706.858980] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.868872] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 706.879058] binder: 5683:5685 ioctl 4008af13 20000040 returned -22 03:37:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0702004000000000969014fffbe822177dd9d2b10212e62baca04fdeee995f9c671c8d31de53fd0126d9f6881aedafd344a0b0281dd584381e6ba5a902c381f17001587ca3d900ea8359d893f19b"]}) r1 = add_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="a33e9943f0748b35332ed593d3580266ada8373ceb936a83809014780de8956771cea4d761ad77a547da0d6efd59a023d0b66cb8988adf640f97104efe5727a8c37bb0971e8fccb0f0e1c88f995d7868822a0d3887660a6217add01a7b0a0f00b29a89e0cb79d1aa25c58c0a1df8a52d6d3414cfc3c5fee462", 0x79, 0xfffffffffffffffb) add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) fanotify_init(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x297ef) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r5 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xff, 0x80002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r5, 0x50, &(0x7f0000000140)}, 0x10) ioctl$BLKIOOPT(r5, 0x1279, &(0x7f00000002c0)) 03:37:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0010000000", 0x24) 03:37:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 707.066358] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.092840] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.230916] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.248502] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:50 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) 03:37:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0052000000", 0x24) 03:37:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 707.284776] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.310722] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 707.433426] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.510971] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.540265] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:50 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xffffffe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06dbaccf8a884935fd1018833bb53878e463044000000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0023020000", 0x24) 03:37:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:50 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 707.882374] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.898002] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 707.921284] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0004000000", 0x24) 03:37:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 708.011689] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0006000000", 0x24) [ 708.088963] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 708.122518] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 708.141650] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:51 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffffff5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00017a0000", 0x24) 03:37:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:51 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x2) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x80000, 0xe) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0673044080000000d792458437048764427eea1e0db338e7598af166a82494a25bec320372215286243fadb652e2b56a9bbd05639eb3f05f9f987e729cc226c7bd689a114dd4ef0a92ad07fcae8cfd550bbef2574a004401241bd8d10a78478fc4e76cae84701109"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000240)={0x2, r2}) [ 708.889507] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 708.898410] binder: 5864:5866 ioctl c0306201 20000000 returned -11 [ 708.906172] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 708.917639] validate_nla: 26 callbacks suppressed [ 708.917650] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 708.947162] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 708.966556] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 709.056875] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.103545] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.141547] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 709.164288] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 709.203412] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:52 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x200, 0x8000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000007c0)=r1) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x301002, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x3, {0xa, 0x4e24, 0x100000000, @empty, 0x18000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x100da) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000800)={{0xed}, {0x6, 0xf8}, 0x400000000000, 0x2, 0x800}) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x14010, r2, 0x19) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x329, 0x0, &(0x7f00000005c0)=[@dead_binder_done={0x40086310, 0x4}, @reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@fda={0x66646185, 0x2, 0x3, 0x27}, @fd={0x66642a85, 0x0, r3, 0x0, 0x1}], &(0x7f0000000580)=[0x20, 0x0, 0x0, 0x30, 0x58]}}], 0x1, 0x0, &(0x7f00000000c0)="de"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e20, 0x100000000, @mcast2, 0x4}, {0xa, 0x4e23, 0x36e}, 0x8, [0x1, 0x1, 0x7, 0x7f, 0x10001, 0x57, 0xb24, 0x81]}, 0x5c) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001bc0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000001cc0)=0xe8) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000001d00)={r5, 0x1, 0x6, @dev={[], 0x1d}}, 0x10) [ 709.214437] audit: type=1804 audit(2000000272.184:142): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/713/bus" dev="sda1" ino=16867 res=1 [ 709.291682] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.316963] audit: type=1804 audit(2000000272.234:143): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/713/bus" dev="sda1" ino=16867 res=1 [ 709.320181] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.348422] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.373196] binder: 5908:5911 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 709.388374] binder: 5908:5911 got reply transaction with no transaction stack [ 709.403393] binder: 5908:5911 transaction failed 29201/-71, size 0-0 line 2762 [ 709.460196] binder: 5908:5921 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 709.467585] binder: 5908:5921 got reply transaction with no transaction stack [ 709.478537] binder: 5908:5921 transaction failed 29201/-71, size 0-0 line 2762 03:37:52 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffffffffffffff0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000104e900", 0x24) 03:37:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:52 executing program 2: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x8000000000a0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="3d28a575c0ec80f3a6dbc7f447e200b31967b554f7c9250c53039d42622f46c0f6e483da60713a7a07edf6af28fe356a21fc3728ffbe2fed7af251f7699945204dabfcbd3e99e3df370d119f73ef4c0b0b52ae772105cfac33d84cd63b58b90c4cc58e6710f98a527fa97e39d11b9d0093271526b55f21c8bec66350bca22a12dc3182b6db20f4863b872834d6d8828eb14e13e7436b7054001c6d8d011215ba1f43ebe5c32e32405b8299c4f95957d9b23cb211c25b0ef5bbd66a87b67cef99905b918aa463074556eb7fe0", 0xcc, 0xfffffffffffffff9) keyctl$clear(0x7, r2) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0xfffffffffffffffe) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0xa) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304407c8c1502"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x60, 0x4000) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x100000000, @empty, 0x8}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) clone(0x40000000, &(0x7f00000002c0), &(0x7f0000000280), &(0x7f0000000340), &(0x7f00000003c0)="54aea8c4f3c8bf4f7cb43272fdad16f78912bd05038373640264605eb446dfc5b3d1ff02bf2998c366e4d899b246324a299d1365f6c993d4cd40c149e9ed2aac7fd95db0223a03dc036c1e865551d37c75cde5d971e566dc69dd6059496875678c58a444683464656edf8193ccbfac121e180a0ef7d5b4574e9997b1e0301add0d98f10319d17e9593acdfa56e68b3436c2b06e8affcfedaca7951de29d0da26deb65abc55cff04913cd5f7dff2acbce4d73e512fd89d0ecd2274bd981a0ab207c60bc2b8374f5c95feded009ae61738d3f6531d595e29c80ab6c5089a4db14e829cabca81f6dbb6a6ddc397f615f5ff4ce6b6bb28aef98573d1dd9cebc660a4bc55d61d40e584ef797cdcc0cb4db6e4db0ec8f7837f743ec9807349ddee8aaa6739") [ 709.973988] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 709.982592] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 709.986906] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.009240] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 710.018888] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:53 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffffff0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 710.081459] IPVS: ftp: loaded support on port[0] = 21 03:37:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:37:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 710.129661] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.156930] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.214541] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 710.273816] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 710.297390] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 710.332741] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.348274] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 710.462362] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 710.489477] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.497613] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 710.516528] IPVS: ftp: loaded support on port[0] = 21 [ 710.551731] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 710.585833] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:53 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91b, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100f0ff", 0x24) 03:37:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 711.036896] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.056108] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.088251] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:54 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfffffffe, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:37:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) fcntl$getown(r0, 0x9) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:54 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0xd3bfd2cc046de143) write$P9_RAUTH(r0, &(0x7f0000000400)={0x14, 0x67, 0x2, {0x40, 0x3, 0x7}}, 0x14) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000380)={0x4, 0x8, 0x8, 0xff}, 0x10) io_setup(0xe15a, &(0x7f0000000480)=0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r4, 0x2}, &(0x7f0000000280)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x40000030) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000002c0)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001740000", 0x24) [ 711.411341] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.435265] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 711.507002] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.630196] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:37:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 711.672302] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 711.741067] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.844073] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.894634] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 711.934929] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:55 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8000fd0200000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000a00", 0x24) 03:37:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:55 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140), 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f00000000c0)={0x8, @local}) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) epoll_create1(0x80000) io_setup(0x7, &(0x7f0000000240)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 712.615836] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 712.631681] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010a0000", 0x24) 03:37:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:55 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200000c}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x94, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x52fe}]}, 0x94}}, 0x8000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) 03:37:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:37:55 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000004c0)={{0x1, 0x2, 0x7, 0x0, 0x63}, 0x2, 0x1ff, 0x1}) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x202400, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000280)={0x8, 0x8e06, 0x485, 0x9, 0x6, 0x3, 0x4, 0xcaac, 0x3, 0x1f, 0xfff, 0x8}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x404400, 0x0) dup(r3) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000003c0)={r4, 0x9, 0x7, 0x1}, &(0x7f0000000400)=0x10) r5 = accept$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) creat(&(0x7f0000000440)='./file0\x00', 0x80) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0xf}, 0x29, r6}) tee(r1, r5, 0x5, 0x1) [ 712.842086] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 712.862123] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:56 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x13c1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:37:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80081, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000380)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:56 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000600)={0x0, 0x0, 0x2080, {0x0, 0x100000, 0x1}, [], "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", "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"}) [ 713.688508] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 713.699309] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001004c00", 0x24) 03:37:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0ab3e35c11000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8000, 0xc02) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x27, 0x4) 03:37:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001004003", 0x24) [ 713.889338] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 713.916677] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 714.032782] validate_nla: 18 callbacks suppressed [ 714.032794] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 714.057312] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 714.124420] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:58 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000300", 0x24) 03:37:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:58 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0xb4, 0x0, &(0x7f0000000380)="18f576627357a04dc789265c5882fcce310c762f899dc10c1a8d1c32829773f1d2b17b716aa5993020b2270ed7382fb1020b93457125fe80467462172c24b630b87edc6d670260969a689c3a4d3ab691b926eedae702b3cb1830aff1e11ad15de5e52c1121854269b37e4d3c929e85106860e4f983b1d0cfe85bb1763934755ad427a88eaff1e5c1508a1df3f5e693796f218a5055f66685e180d0200843eb0d0193c7d985177aba553043b434e8f69c0787ea21"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 715.138995] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 715.171400] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 715.201857] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 715.217654] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:37:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 715.317309] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 715.345281] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release], 0xfe58}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 715.403223] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 715.478961] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 715.546537] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:37:59 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00019effff", 0x24) 03:37:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:37:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000440)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000540)={r2, 0x8}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304400000000082c9165f0d05be"]}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000380)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000003c0)=0x49, 0x8) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000001c0)=0xa00, 0x4) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000180)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000200)={{0x6, 0x7}, 'port1\x00', 0x80, 0x140001, 0x80000000, 0xd6, 0x301900, 0x1ff, 0x4, 0x0, 0x2, 0x4}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f00000002c0)=0x8, 0x4) fsetxattr$security_ima(r1, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000580)=@v1={0x2, "dc1cc0f2e18bc7934e"}, 0xa, 0x3) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:59 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)="512cd9f288c32fa58f17b8755d075187b413869b1e1a66357ac867d5dc94218f0226598b1befe1ef6e4796cbee220432471744f0d6521e6f7ed2fca7fcb86a9f813ea81247fbd76f1856ba5fdad741b96895ab45410980175c4e922b5fd1760fa1fc9692b3a3d3746837c8be803afe40") ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x1, 0x1, 0x8, 0x6}, 0x14) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @broadcast, 'vlan0\x00'}}) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:37:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 716.198792] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 716.217403] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 716.262198] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006000", 0x24) [ 716.378218] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 716.411514] device bridge_slave_1 left promiscuous mode [ 716.418509] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.442684] device bridge_slave_0 left promiscuous mode [ 716.456453] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 716.466533] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.512701] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:37:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x850, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xcc, 0x0, &(0x7f0000000580)=[@exit_looper, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x50, 0x30, &(0x7f0000000200)=[@ptr={0x70742a85, 0x0, &(0x7f0000000040), 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x3, 0x24}], &(0x7f0000000180)=[0x38, 0x0, 0x28, 0x28, 0x38, 0x38]}, 0x8}}, @increfs_done={0x40106308, r1, 0x2}, @request_death={0x400c630e, 0x4, 0x2}, @register_looper, @clear_death={0x400c630f, 0x3, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000280)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000002c0)=[0x30, 0x40]}}], 0x1, 0x0, &(0x7f0000000680)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:37:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 716.563237] IPVS: ftp: loaded support on port[0] = 21 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00017f0000", 0x24) [ 716.621182] team0 (unregistering): Port device team_slave_1 removed [ 716.673017] team0 (unregistering): Port device team_slave_0 removed [ 716.689198] binder: 6320:6324 got transaction to invalid handle [ 716.705012] binder: 6320:6324 transaction failed 29201/-22, size 80-48 line 2855 03:37:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 716.739510] binder: 6320:6324 got transaction to invalid handle [ 716.756812] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 716.765715] binder: 6320:6324 transaction failed 29201/-22, size 80-48 line 2855 [ 716.797458] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 716.903384] bond0 (unregistering): Released all slaves 03:38:00 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xfff0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:00 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) renameat2(r0, &(0x7f0000000140)='./bus\x00', r0, &(0x7f0000000180)='./bus\x00', 0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:38:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x800, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000180)=0x8) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 717.389418] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 718.299259] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.313806] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.326049] device bridge_slave_0 entered promiscuous mode [ 718.418038] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.433643] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.449825] device bridge_slave_1 entered promiscuous mode [ 718.495964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 718.539479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 718.711687] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 718.757948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 718.966151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 718.973633] team0: Port device team_slave_0 added [ 719.010386] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 719.017543] team0: Port device team_slave_1 added [ 719.042574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 719.049367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 719.057253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 719.082773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 719.089591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 719.098555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 719.124383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 719.131716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 719.139572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 719.165812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 719.173694] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 719.182117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 719.419519] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.425899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.432583] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.438934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.446213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 720.040495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 720.308307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.390893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 720.473163] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 720.479265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 720.487449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 720.569410] 8021q: adding VLAN 0 to HW filter on device team0 03:38:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:38:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xfffffffffffffffa}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x589d, 0x3f, 0x0, 0x3, 0x9, 0x1000, 0x9, 0x8, r2}, 0x20) 03:38:04 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:38:04 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xf000, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 721.065481] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.074319] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.112602] validate_nla: 6 callbacks suppressed [ 721.112611] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 721.130803] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.135987] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001070000", 0x24) 03:38:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 721.179159] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 721.237126] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.270614] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 721.274176] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:04 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x9, &(0x7f0000000e40)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000700)="430e76e1dc428a244124effa0c6860e1c46b2b2c8595a8914ff8b58330a871d811c7986b6ac81c04e7b5053672a3a1ef3a18e5e5578d8acc2953abef94cdca9c1da332ca4f3b30165e3f21c5dbc9c95bb112c589c732ff76581cc5c3638585682044b8223fab4f2af97c801a83a169506bc365b727152f0566b16a2bbd292deee3c90dd0eeaac1235a1234ce393acf7f8ce7f583871dcf9626a9c896c7983cad950423cfdcc173fe29979bbd4f546ddafc8e1585ddf34ca638ff406f81b6ce8b489ef8837d540316a0826b6f6c3352b8ef923760ad0fc553b35caa49ed0792ad0b5445ab2c183a866924", 0xea, 0x3, 0x0, 0x3, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x23, r1, &(0x7f0000000800)="4aa354e6ea69c9d8eb50b78e13e554d0aab90dc318d30013a2ac5d4056eb63a995a33210f6bd3d65d40bffc8bc79e1894ecacd31ac16cdac1602817eac9b003b8bc17480d54ff2", 0x47, 0x2, 0x0, 0x1, r0}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0xb, 0x1, r1, &(0x7f0000000880)="53eff18a65d7c8add0070bb366d6500ddee96871fca1c80831581a", 0x1b, 0x67e0, 0x0, 0x1, r0}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f0000000900)="537986755424ff7a1be1ff7d3bdb6be85cb739c8083353cd5962ad3f72398b9e3285262e36bfbab65c4dc4734e599fde8f5477481598de59c8f1813a0864e16da2ad6d754fd1e532a998d53edf0724b39cfd02a5b68a16f0f3219d8495c4f6b73f5066371e0e2d2e86467aad1ac895e417e308765a722359e9fdd9c50d0a6304425c43f42a3d37ae957eb47333385c1d445a81b2f0e4b361d17b23b9f7d0de7c5a6dd2522371a53c075a1f11f1d79f0cc4bc3a368c3c58e512526389ac617ee42da954c09a8fcb0ddb19a3b3dfa0aa4bfc61c99c2c6f34", 0xd7, 0x4, 0x0, 0x2, r0}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x3, 0xe1, r0, &(0x7f0000000a40)="71ce5f0a3cffdcfa674dcc203163d8049c78c9d7f49157b0895cd9e2a7ba0c473f266a0cf8fabbf6ef8ac607a58c6eea7be3886713f1dd6449c8607309f84390a9601d701e868227d8185fd3032f0a1c66779888a7e4d0fba805de5a027a73a1c2f31c97fed57bc5740709d8fe33cb0ff3e440c7d684d634786e0edcafd61691aa828a5c1b2f863801186a9cf70991d3d168ae518d22b754500cd40a4f486fe963c7cf051d9819741c2fbfe1e260058164352e8a67bd006984528e1638917ed93d473fa269b446be8a768e94268744ca6cca66230d43b92596b72dbdf76df7d021f93fc2385712b1a00939c79ea7", 0xee, 0xfff}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000000b80)="70b68042f88c72b6b016e77cc0d7a044da48fa85d0ec1e75afdcb0c31aacab9f7ae73eb96f67dd4f4ad9d0e248079ae057fbc2a96d959f4395593948b17dd49c292b41e32d1ad6bf9d3ede2c5311062a9e98afe67f0450e5c7120d1a9409a74f228c54", 0x63, 0x3, 0x0, 0x2, r0}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000c40), 0x0, 0xfffffffffffffffd, 0x0, 0x2, r0}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0xf, 0x4000000000000, r0, &(0x7f0000000cc0)="4a59202ea292fc9c0de425bccc101a3264986d77f57585d3b3202cb4b8a8d4b9c53546beac6083c1ecbd32492ad56e7e04ef99aa9db369a42c3018a6be67f2fa21e735a4a665a0adb2f671b430f6fb8becb7825a8d096cb432a52e436667a068a25adf54d30db51cd110490085d01fabec0c7e51718409149f", 0x79, 0x5, 0x0, 0x2, r0}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000d80)="5974edbdce881c6bafa7d8301bf65f267bf93dd33f9e989fa5acc4851c8ca41ea87bdd084e7953f7beca13bf83a1c8ae9f069f714492042804330fbb6eb91426afeb948ed130eee833e65f4e1c027cf1bea5711774593cc8719e3456003a2d0c6965842d9ca87e272993e2bcac4f62344b90cd", 0x73, 0x10001, 0x0, 0x3, r0}]) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4}]) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r2, 0x5, &(0x7f00000013c0)=[&(0x7f0000000c40)={0x0, 0x0, 0x0, 0x5, 0x7, r3, &(0x7f0000000ec0)="e0dc1c446a4b43400b750e816c7c0662bb324fe86df7ca3bfc4a6a571e086e34a5ca4b10e5d05fb5dd6e4dbc04bec338f71cf0a597c7b8f5b7a133d9b9911a4c58868657078bfb5eb4d1735149bd3ceb2c21e24d03d473fbab27768ce5bdf339528be8a2156502e1c8e22a97619411ef21b8dad6ca011e6ca21e556e3676f31f45ed5ab5dfa30f4f1fe7a550f7d33dba05243bb5a992539cf1449affddf950a55f62214c1de40ceb67bea37699bd03edf792339c28b188e9aadc53f4ee5f97d52b0657efeb1082680954cc4f2cbfd76cea95b99534c74616d71012e60c911674426525d6d13dceb62b07a3", 0xeb, 0x8, 0x0, 0x3, r0}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0xf, 0x1e11, r3, &(0x7f0000000fc0)="32a1d2f2bd05f76c083fef4c1424520c64f44486566a98f9b0040b4289f008dcf6ea921a75dbc5b2794496eb1849a45d409c72bbede7f1851a14dc3915b8d082ddf97963a36a1eeefd27e1185d3a890b6ac76e1c935c1b334a5da0ec49fc9cd20b618dce7f6585246b01c622c6e61d3c32a2870efdfda942432b0ff155375a3aafc3ba3c2c66f6c27cdc515999037970778083a6865935f9d789a336efc6e644c5e5506ed3e847f60f", 0xa9, 0xb9b, 0x0, 0x2, r0}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x3, 0x9, r0, &(0x7f00000010c0)="e8dbd0dd7fe7c89e070f88be04e0eacf9688d540b67be1d76969d565d3ea3ac311f8cfa44473ddf44755b3f490fb4b2180227ad77f10a69e2da0a8919c592718d86747d3cadc6eb9ed942759cb66d479b146ce3c8b80193e12ff373b4cc04a232c888f5f98a626eadb39b010dcc3b2d957308c2f9141220faad184f84cdb5739c05ab505f4b95559231bc51d05ef7224d79bf460e2136745a880d6a6c3b887ea7a23a17f026b3759e26c32c03efb1c3c6943e8a3f8e3126c7ee5f5275a2842d6b63b5d8f849678ad3ee6350d778cb07dafb3fe6709733ce606", 0xd9, 0x5, 0x0, 0x2, r0}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0xf, 0x0, r1, &(0x7f0000001200)="0442b2bf56e7f143e6de6dcb01281db83a9cd3cf0fba1ed1bb19", 0x1a, 0x505b, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000001280)="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", 0xfc, 0x5, 0x0, 0x2}]) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x9) r5 = gettid() process_vm_readv(r5, &(0x7f0000003640)=[{&(0x7f0000001400)=""/74, 0x4a}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/21, 0x15}, {&(0x7f00000024c0)=""/156, 0x9c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/114, 0x72}, {&(0x7f0000003600)=""/26, 0x1a}], 0x7, &(0x7f0000004a40)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/89, 0x59}, {&(0x7f00000047c0)}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/174, 0xae}, {&(0x7f0000004900)=""/140, 0x8c}, {&(0x7f00000049c0)=""/100, 0x64}], 0x8, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) sendmmsg$inet_sctp(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="f196edce289085c5f942b8ec5ff5da310ea926a85c64daa35f40fd6242899e64b1d9f135e09713ae2ad86d9abe01373197fb4b195a6b34da53efe6409d048c46786f002f1e5b4c8777a48d3435cc93d474c5dd4a9206213e0e15c0461c1140", 0x5f}, {&(0x7f0000000180)="454a0ce729c302af3738df9e59dfe245d20b6a85948812c1e8d9", 0x1a}, {&(0x7f0000000380)="b7b93fbe7be3f0b18af6b6d210294089ea627994cf6b903299d9e1ba9bdb76cafce775c8b6320a109344530325bb724368af55cae98768377f635d5b80acbf9d2a31cb6bea746a6259d3ece753eaa2fc161cc7af9647f198db3bfb6752b43413e542d5e3ed302080094bd475916d92421e4f870d9b0b64e65d7518f6356ed8baef8f0627e1b89b83db8f82e568300c99f17aa321bf50e5b4d9da6d6a69bfea6ee9431013699c602e0fa1c7e55ea0145b99062746229e388a8e097154509b2c991791270be7a9bae40df44eaf9ac5929e", 0xd0}, {&(0x7f0000000600)="84f1000da818310812468578e8d41dc697b2c0e7f1142a66cd000354395b728d94f3fcf93730510e196c4ae2172c76a32a0a26c86898c74373b1bf9720d4e5bb25b22959659dfdef0b575b2597a28397326509ed7680e84a32e775cdff8d2c8d05e06ea76818e4cb0817ab56905dcee4cf92505c45cba1f26081da38da8d0c213ab2813f58855e0534ff98db794f348b458193efed5145da7da5fbc67b0fbcb2ee39a78ffb574b053d0a3cb2d44c9f67e45b2e37c4b7d384b9f2cc008b5dc2036f5faa771bbdd9cf6f6f37b81c7220e8", 0xd0}, {&(0x7f0000000280)="a84c2268437174b4b184c258c065e3a2c591ecfe6cbc04599effcd5f3ef02a2f2868db5670c9268680f2afa6aa900375a8eed21eae7075d27ef28f31f99ead8286d2a15beaf4713c60a9f77e446ff3179b8b515527c8108aa2b9eb34", 0x5c}], 0x5, 0x0, 0x0, 0x4000000}], 0x1, 0x4) [ 721.294722] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0xb, 0x0, &(0x7f0000000140)="6712cb77e9e4696b628242"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 721.386246] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.409479] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 721.497944] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 721.530564] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x20000680, 0x0, 0x0, 0x20000b48, 0x20000b78], 0x0, &(0x7f0000000000), &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x108) [ 721.563701] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001010000", 0x24) [ 721.698957] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 721.719494] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.768509] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 721.794131] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 721.852761] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:05 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x300, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:05 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xf}) 03:38:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05630440000095b5"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) 03:38:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000700", 0x24) [ 722.190931] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 722.192747] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 722.207751] audit: type=1804 audit(2000000285.174:144): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/726/bus" dev="sda1" ino=16565 res=1 [ 722.216970] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 722.240408] EXT4-fs warning (device sda1): verify_group_input:105: Cannot add at group 15 (only 16 groups) [ 722.262205] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)) [ 722.278791] audit: type=1804 audit(2000000285.244:145): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/726/bus" dev="sda1" ino=16565 res=1 [ 722.307185] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 722.344455] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 722.370994] audit: type=1804 audit(2000000285.244:146): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir743944551/syzkaller.lyXWem/726/bus" dev="sda1" ino=16565 res=1 03:38:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:38:05 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/121, 0x79}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2) [ 722.477282] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 722.533951] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 722.713615] IPVS: ftp: loaded support on port[0] = 21 [ 722.773511] device bridge_slave_1 left promiscuous mode [ 722.779151] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.793355] device bridge_slave_0 left promiscuous mode [ 722.799251] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.832615] team0 (unregistering): Port device team_slave_1 removed [ 722.845697] team0 (unregistering): Port device team_slave_0 removed [ 722.865916] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 722.883039] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 722.921788] bond0 (unregistering): Released all slaves 03:38:06 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) close(0xffffffffffffffff) 03:38:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00016c0000", 0x24) 03:38:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000005c4e6300cb4d63350d004cdba6beebc0ebe4f8acf1b41f25019bb51c4186b013dbcacf3c853ae4ff774c019b8d143bcff176cd24146d7ff9340a3b16e2b10d462c9996b48a208d6fa50aac0a1067d09718f2a2c915ab816d31be80a90d1a352aa20b545ab6bcb3cea1d1312b04d36d4acf6896fe8648a897cda0846ff6"]}) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x9, 0x101000) epoll_create(0x8000) bind$rds(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000300)={0x0, 0x0, 0x2080, {0xf000, 0x10000, 0x2}, [], "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", "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"}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="100000000000000000000000acf56530"], 0x10) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) [ 723.249443] binder: 6780:6785 ioctl 6 0 returned -22 [ 723.256299] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001feffff", 0x24) [ 723.305529] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) close(0xffffffffffffffff) 03:38:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 723.554535] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 724.048881] binder: 6780:6824 ioctl 6 0 returned -22 [ 724.304057] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.311733] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.319077] device bridge_slave_0 entered promiscuous mode [ 724.414119] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.421016] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.428386] device bridge_slave_1 entered promiscuous mode [ 724.470580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 724.512496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 724.642669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 724.687232] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 724.883305] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 724.890570] team0: Port device team_slave_0 added [ 724.913781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 724.921126] team0: Port device team_slave_1 added [ 724.945211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.971469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.997683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 725.004988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.013434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.035466] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 725.042560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.051194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.279539] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.285987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.292746] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.299140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.163620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.246484] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 726.330789] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 726.336919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 726.344283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 726.431699] 8021q: adding VLAN 0 to HW filter on device team0 03:38:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001030000", 0x24) 03:38:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) close(0xffffffffffffffff) 03:38:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x8000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:09 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 726.914846] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 726.971572] validate_nla: 8 callbacks suppressed [ 726.971581] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 726.989795] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.019313] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) close(0xffffffffffffffff) [ 727.045487] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.060105] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001f0ffff", 0x24) [ 727.108301] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 727.228598] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:10 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 727.271223] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.279932] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 727.291704] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 727.334800] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.351119] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 727.457815] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 727.499398] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.515857] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.524010] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 727.660792] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.688637] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x4db6ef01, 0x7f}) socket$nl_xfrm(0x10, 0x3, 0x6) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:10 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 727.901996] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 727.916930] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 727.925382] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 727.955839] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 727.959542] QAT: Invalid ioctl [ 727.991823] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010f0000", 0x24) 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 728.000267] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.003558] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.016729] QAT: Invalid ioctl 03:38:11 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="070a00000000000085e3deca38daaedff3026dea176feb7e9c13deb6bbf1106dcbd3dba9e07b9a02a8eeda1570fe662fc840d27617527d2c1ebead747e4aabe25e70d0b6acf45ae74103ee13e3908210b575ee62c65af5052c211928d98b86f4a530d5d96333fc3ac5c75b188a9b6036a21ea7a82aa319d58424a7460fdecffa66a86373629ffe248fabdc6833a51166be645c8a2816713d86157fb9b6e7f736c0f5a629"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000240)="bee735f806d8d32b65f4abb677da302b34033238ef6b52bf") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="2a03000000f889c5", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="1736bc27b89d0b101c44a846f6eec1"], @ANYBLOB="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"]) [ 728.092510] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.129147] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 728.141589] binder: 7193:7196 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 728.168471] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 728.181330] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.227237] binder: 7193:7204 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 728.234402] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:11 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001060000", 0x24) 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x9023e25fa61eb8b8, 0x180) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xffffffffffffffff, @local, 0xffffffffffff0000}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r2, 0xffffffff, 0x1ff}, &(0x7f0000000380)=0xc) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) syz_open_dev$binder(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440), 0x5d807430ae3889, 0x0, &(0x7f00000004c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 728.646757] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.663855] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.679180] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 728.689362] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:38:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 728.745609] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 728.818358] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.855036] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.865612] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 728.889677] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001e0ffff", 0x24) 03:38:12 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x11000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 729.321999] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.340329] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.342974] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.364037] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 729.477537] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:12 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x401, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) [ 729.535972] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.564847] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 729.742390] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.766969] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 729.777559] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3f000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06630e4020bb5130"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0xffffffffffffff9c, 0x0, &(0x7f0000000140)="e1"}) clone(0xfffffffffffffffe, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000040), &(0x7f0000000200)="b4872c6618436c3fe6d29278e81eadba13ef349359730ef812e1d07d307a543e82a938654d42f02af6503026f39e1bbcb8fa9ec368a74e4e2f808876da566a9ccdeac337be9f59bd55ac085ea8de8f5674768a09ac6ae290229d17543b158ed78fbb4114476a24a207befc219e917e47cfec82d5eb5036e83c6d536e1d26ba830bd1714f0b89c97f915ce383071ab5536c256f9d5911c766f62066a05ea8161b393780c51d3adb3612a74d68c66ed5abf8b9fa4d4bbad6e339a05e0d89d022951191489d6918b47e653e63d7dce7d1c89529e9bd29a7dcb3") [ 730.270294] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 730.283288] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 730.306459] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:38:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa000000000000000000009595000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 730.312330] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 730.477533] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 730.521808] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 730.536613] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006c00", 0x24) 03:38:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 730.681067] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 730.734402] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:14 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001480000", 0x24) 03:38:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x4d, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000009b72a64ef734f86521186d37a4bedf80233d0b67410f3922cf63d46d6e266fdc336c1fcc828f232cc231a4492438d944a83477ce1270c414240c7fb781824e78f2ec8429a3"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 731.211874] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 731.230407] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 731.250374] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 731.334479] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:14 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 731.413812] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 731.488109] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 731.504333] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 731.546436] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:15 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xb, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000480)=""/194, 0xc2}, {&(0x7f0000000240)=""/139, 0x8b}, {&(0x7f0000000580)=""/63, 0x3f}, {&(0x7f00000005c0)=""/160, 0xa0}], 0x6) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06630440002a6d00000032c08dbc032ec9015a643a7ece03b5e209befb96b5df317435e1d8fd577d58a1fb3dab5bc462bd84b5652180b2b41be1984df549a728c36516d28269426b0c9522685486379d3383c4a07230a4246bb6e8dfdb4bb99873306df6ada1f04fd6c4263a1b92cf39f57086803ff0323c005c65fcdb0f4639e12940cb63bc79f625eb80f429a1272d7b5e4c3cd160ff40c91ca7fd2edd51fa9bd46923dd7bb19b3deb57ea3071eec905e7dd891ced28f5794bdc9304f5913e47f8e01d41f04c8bfe63ea544f6d11"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x10200) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000140)) 03:38:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006800", 0x24) 03:38:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 732.102736] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 732.123480] validate_nla: 26 callbacks suppressed [ 732.123488] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 732.139085] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 732.150886] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 732.165460] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 732.260309] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 732.313386] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 732.365249] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 732.382289] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 732.393674] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 732.492267] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 732.515320] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:15 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 03:38:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xdb, 0x0, &(0x7f0000000180), 0x51, 0x0, &(0x7f00000001c0)="d2159cd7ffd4e5e21f4d224989e398122d03b9a01ba8a60ad641a25a0fa82dd40b458ae20069a20ea5cf735b423764eae7573c30037e7ed80fdc812ca8565a4362cf98e8964ba8db68c9e0536416429e6a"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x103000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)=')[\x00') clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 732.972079] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 732.991714] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 732.999391] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.013955] binder: 7535:7543 ioctl 6609 0 returned -22 [ 733.021396] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.022234] binder: 7535:7543 unknown command 0 [ 733.042215] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:16 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 733.068687] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.075745] binder: 7535:7543 ioctl c0306201 20000000 returned -22 03:38:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 733.120852] Unknown ioctl 1074275334 [ 733.132087] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 733.193453] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 733.258741] binder: 7535:7551 ioctl 6609 0 returned -22 [ 733.266231] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.289016] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 733.311064] binder: 7535:7570 unknown command 0 [ 733.312315] Unknown ioctl 1074275334 [ 733.321219] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.335310] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 733.387068] binder: 7535:7570 ioctl c0306201 20000000 returned -22 [ 733.434172] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 733.463480] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 733.484176] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:17 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3c00000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06760440000000000a5bf398cf43f154a3fbc8867d746986f647bc3fc6fcc5406670e7fb80cd3029dcc822d79f91aa1487d9d27a35cddce0b787af4573e1d5813f1771e320592ec2309bbcb34714988c8d22412228c4adda54887eaf57092741e723b54fe463cd50f7c31bfe3e94153f90dfd344883701946cc52f6426e055eae7be40e54ec29a09bac1fe684a05926488342ee22080c58cc28abe0498bb296ae35641bb327b2437cd45741df5b90763e16290c4a703c13a684c38e368f4f73f64686f87c66988d04b75ec2fdf3b28"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x100, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000200)=0xb9) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x2, 0xffff, 0x2, 0x0, 0x0, [{r0}, {r0, 0x0, 0x1}]}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001002000", 0x24) 03:38:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:17 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 734.126830] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 734.135160] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 734.160973] Unknown ioctl -2147204396 03:38:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100f0ff", 0x24) 03:38:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 734.265342] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 734.271985] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 734.296656] Unknown ioctl -2147204396 03:38:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 734.326125] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 734.455957] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 734.504768] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:18 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x31000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80800) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000380)=""/4096, &(0x7f0000000180)=0x1000) clone(0x0, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000000340), &(0x7f0000000280)="b6a7bd3bba53c67e264d98e9207876ee91665afccf85abb0f560d31c54d11f95f885f20eabfdcd0cd5add8c8caec3de84b6c1f862c6ea9") syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) 03:38:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:18 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 735.129298] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 735.145479] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 735.154285] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001003f00", 0x24) [ 735.326819] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0x6, @empty, 0x4e23, 0x2, 'fo\x00', 0x10, 0x5, 0x2a}, {@multicast2, 0x4e21, 0x4, 0x8, 0x200, 0x32}}, 0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x42, "8a239df700db5ffc06bd3b7525eccdaaae22741016853d3c8c024775aff2cb9852c877f1c32633e2f511690af3eabf90a11d95b7ed23b70e99ea6d1d0c26f957c3d2"}, &(0x7f0000000040)=0x66) 03:38:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 735.383386] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 735.390428] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 735.529931] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 735.590257] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:19 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001004800", 0x24) 03:38:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xfffffffffffffd63, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001050000", 0x24) 03:38:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 736.201001] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 736.210801] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 736.225726] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00014c0000", 0x24) 03:38:19 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 736.379936] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 736.391972] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:20 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3b00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000180)) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)) 03:38:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:20 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 737.249563] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 737.276433] validate_nla: 20 callbacks suppressed [ 737.276441] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 737.297552] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 737.315323] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 737.344531] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000340", 0x24) [ 737.392534] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 737.523778] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 737.535762] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x98, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x40, &(0x7f0000000140)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @flat={0x7485d76b3e0f50ca, 0xa, r1, 0x2}], &(0x7f0000000200)=[0x20, 0x78, 0x0, 0x40, 0x0, 0x38, 0x68, 0x0]}, 0x9}}, @acquire, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000380)=[@ptr={0x70742a85, 0x1, &(0x7f0000000240), 0x1, 0x3, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000280), 0x1, 0x4, 0x2e}], &(0x7f00000002c0)=[0x58, 0x40]}}], 0x32, 0x0, &(0x7f00000004c0)="234e5f0832a83e42783cb169b88b5f4369d37f1a3e11ad8ce383b80bd95ca098db0b166de7ce9690d82099f02e12bc3e69d7"}) [ 737.592586] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 737.603056] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 737.760978] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 737.790568] binder: 7817:7820 got reply transaction with no transaction stack [ 737.807896] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 737.842554] binder: 7817:7820 transaction failed 29201/-71, size 72-64 line 2762 [ 737.990574] binder: undelivered TRANSACTION_ERROR: 29201 03:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00017fffff", 0x24) 03:38:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000280)=0x1) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x51, 0x7f, "072b4ce20d05b2060533df919f4afeb5d2b507444e96fc41165bb94ca4cf892f69680033a7a66cf341fcc070e59c039a7d29f206714043f50b16b487ab72ca30fbb384bee9c8665abd"}, &(0x7f0000000180), 0x1400) 03:38:21 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:21 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x37, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 738.287974] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 738.320875] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 738.348663] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 738.382095] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001e00000", 0x24) [ 738.535663] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:21 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001fcffff", 0x24) [ 738.580407] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 738.595985] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 738.617347] IPVS: ftp: loaded support on port[0] = 21 03:38:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sync_file_range(r0, 0xc485, 0xfffffffffffffffc, 0x4) clone(0x0, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100f000", 0x24) [ 738.732800] device bridge_slave_1 left promiscuous mode [ 738.738437] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.758837] device bridge_slave_0 left promiscuous mode [ 738.765816] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.818338] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 738.878620] binder: BINDER_SET_CONTEXT_MGR already set [ 738.902175] binder: 7872:7873 ioctl 40046207 0 returned -16 03:38:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:21 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ad66f941287d3e72"]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000000280)=[@dead_binder_done={0x40086310, 0x4}, @increfs={0x40046304, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000140), &(0x7f0000000200)=[0x78, 0x30, 0x60, 0x28, 0x38, 0x0, 0x30, 0x38, 0x30, 0x20]}, 0x1f}}], 0xfffffffffffffef5, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) dup3(r0, r1, 0x80000) [ 738.924351] team0 (unregistering): Port device team_slave_1 removed [ 738.970744] team0 (unregistering): Port device team_slave_0 removed [ 739.003590] binder: 7885:7886 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 739.016995] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 739.030448] binder: 7885:7886 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 739.048309] binder: 7885:7886 got reply transaction with no transaction stack [ 739.058706] bond0 (unregistering): Releasing backup interface bond_slave_0 03:38:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 739.068892] binder: 7885:7886 transaction failed 29201/-71, size 0-80 line 2762 [ 739.172857] bond0 (unregistering): Released all slaves [ 739.204116] binder: 7885:7886 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 739.267211] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 739.278535] binder: 7885:7886 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 739.316256] binder: 7885:7886 got reply transaction with no transaction stack 03:38:22 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:22 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3900000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 739.363025] binder: 7885:7886 transaction failed 29201/-71, size 0-80 line 2762 [ 740.509055] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.525558] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.536536] device bridge_slave_0 entered promiscuous mode [ 740.580730] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.587140] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.594798] device bridge_slave_1 entered promiscuous mode [ 740.635527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 740.675707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 740.799732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 740.846376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 741.001293] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 741.008368] team0: Port device team_slave_0 added [ 741.033915] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 741.041134] team0: Port device team_slave_1 added [ 741.065390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 741.091846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 741.118584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 741.146947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 741.386300] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.392722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.399310] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.405706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.413180] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 742.258729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.340913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 742.361084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 742.427722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 742.433947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 742.441747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 742.520907] 8021q: adding VLAN 0 to HW filter on device team0 03:38:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x160, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000140)=[0x60, 0x78, 0x38]}, 0xd17}}, @increfs_done={0x40106308, r1, 0x2}, @request_death, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50, &(0x7f0000000180), &(0x7f0000000200)=[0x38, 0x0, 0x18, 0x78, 0x70, 0x40, 0x78, 0x18, 0x20, 0x40]}, 0xfffffffffffffffa}}, @free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x38, 0x28, &(0x7f00000002c0)=[@fda={0x66646185, 0xa, 0x3, 0x7}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000300)=[0x38, 0x78, 0x30, 0x38, 0x78]}, 0x7ff}}, @reply={0x40406301, {0x2, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x48, 0x28, &(0x7f0000000380)=[@fda={0x66646185, 0x2, 0x0, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000340), 0x1, 0x4, 0x21}], &(0x7f0000000400)=[0x78, 0x40, 0x48, 0x20, 0x0]}}, @decrefs={0x40046307, 0x3}], 0x8f, 0x0, &(0x7f00000005c0)="bed74c3a87b9f3b3136fd22096b53e43dd12d0f4bfa1d0ce239290b10ed20cf30deef82dd44b091f54c7fb3d6deb6a012abf1d2cf098ea11524cbe8d8cabab62ac4892daa1ec33d902d8fc8fa06a6cee48eaa5d8a93eb899c1c235d6fa535d7026d39756b753586c37ff4d5834931815c1f0b592be07f9f19465ab59dc37660b5a48d43398bd4dfc4084cc50255788"}) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r3 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) 03:38:26 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:26 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x40010000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 742.999470] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.009564] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 743.053730] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.057344] binder: 8180:8188 got reply transaction with no transaction stack [ 743.075597] validate_nla: 8 callbacks suppressed [ 743.075605] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 743.084490] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.096319] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 743.113839] binder: 8180:8188 transaction failed 29201/-71, size 0-24 line 2762 03:38:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001e0ffff", 0x24) [ 743.195898] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 743.239795] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.248413] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.262964] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 743.274648] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 743.289047] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001e0ff00", 0x24) [ 743.336546] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.388605] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.413628] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 743.435491] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 743.482315] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.493428] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 743.539923] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.595371] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.648791] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.693160] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 743.741436] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) recvfrom$llc(r1, &(0x7f0000000200)=""/101, 0x65, 0x2, &(0x7f0000000180)={0x1a, 0x10e, 0x119, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x3f, @dev={[], 0x14}}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x6b78, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffd47}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) [ 743.845362] binder: 8180:8188 got reply transaction with no transaction stack [ 743.858173] binder: 8180:8188 transaction failed 29201/-71, size 0-24 line 2762 03:38:26 executing program 2: mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:27 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc00000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001040000", 0x24) 03:38:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:27 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 744.129037] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.142291] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.181165] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.197900] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 744.229926] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 744.251800] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 744.304655] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.324526] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000a48f9b3b4cb4e185327e07ffda98237e092f5bc51763e087867e039441cdf466d7e014d61030709093929a93da1d35fef4a608024f5cf6689b043c85ff9ddbdf2dc399246d213e7af56fa10a13dd29728910e096d003b5789e1ee3fadbd1fc46999afe1c195d28dec92b231daa5c01b5c604046d4553aa43c554874332637a8367038d2e8e5755de9815a5adcffd7a1ac598a8feaef0ea9cfcfba4394880ed"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 744.435850] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 744.515795] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 744.535494] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.542030] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 744.561026] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:28 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x21000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x4000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@sco={0x1f, {0x4, 0x2, 0x5, 0x6, 0x6, 0x6}}, {&(0x7f0000000380)=""/4096, 0x1000}, &(0x7f0000000180), 0x30}, 0xa0) 03:38:28 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 745.209612] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.231266] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.243542] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:28 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)) io_submit(0x0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 745.309170] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 745.371955] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 745.429779] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.502276] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.546337] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.566448] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 745.576718] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:28 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x29000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00011c0000", 0x24) 03:38:28 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 03:38:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10041, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001680000", 0x24) 03:38:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 745.992741] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 746.021447] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 746.060764] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:29 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 03:38:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x54ef04cf10b5390c) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000180)=0x4) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 746.331664] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001600000", 0x24) 03:38:29 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000540)) 03:38:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:29 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3800, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) syz_read_part_table(0x2, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="79555c1b0aae0fef5193d5d5d319286ef2cc8b04e88dc26adf2e90863f5c414ccc88da72217ffa43262ed9bf1e472decf825db9bf1dff117c1b802d28ad445a4c109910ceade442705698e674830668f04a94235c8f9d43e8e6587e8e6f4127067ca47e567722bda48cfbe94da6990ad84d9af645401000bbac7ab04a7aca7f4fcbb6f881c940c0c6efe69d82a19e4eda647", 0x92, 0x3}, {&(0x7f0000000c80)="1f5234e26ceda9f3bd1dec0f14979029947364b1698d13c7f2bc2286066213c13ef8719c60c030bb9c06f87a5f29e407461ff81f23315354898b903cc1adfe11729e9994805eadb4ddf6673bf1e98386305f8173638c6240e45dea799953addf970d1e55a17325ab05c2185cb628a0a79983a88c535c3810710d58866a11e3442b9d9fa1eb123646bfb6c365fbe34310d629618c566fa7e0e7539a8864c91c262a83e2d4dbda9e594a6c82db473ef1872a68ef50f807f45687f4280b87581d13d488624ce66a4c2443f38cecec2c466cfa96cb2309f6875fde9e981134", 0xdd, 0x4}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000000, 0xa, &(0x7f0000000a40)=[{&(0x7f0000000180)="453eec4b9fea6f465eca3d1bfac0a77947b2356dc56f", 0x16, 0xedd2}, {&(0x7f0000000200)="37ba102168ea7689fc6a594ba7fa34f5bed691598b3fa4b48dcdfaacc73bc5d5cf6e237bae1724e7b0bd9bc704d54971978ebc83c91626b4d1fbc7e9149a778839da6899b11b6a98ebdefb85bbe7bb6751e56322706a9f88ca386cd7f76caf2b4401dae657f5f644d0d8d106ceeaac8a2d3ed57911b89db434a55eeb784e9fb11b922c18b13537", 0x87, 0x80000001}, {&(0x7f0000000380)="ed8e5eb630f4a251a2d7cd1568ed9e81f671343c58bfcdcee22115b818899cdebdba9c9c9edafddcefe2d14561e52716de9778c110ed46db668aeb6cc7f61abd5429cc8135e35c9d8673269288855211e08c004b4a3aee966e5f8cc57dcd19014671292e388b8202bb6c870d7c3539f2cc5062800db1cfda31b88c7fc9b9cd5aac5f9111bdbb28d755b004a4", 0x8c, 0xfffffffffffffffb}, {&(0x7f0000000440)="dfbdbdacb468661d2bd16b219be6d103033596287bf28a8f2edcb65e48a7bf2c135da9c147ab19fde809417f8b88375e014c1fa61deb7cd765e9aa548cbf07a19c65d94092dd159549807c90c21504905ef614d93eaba9ce4c6785aba6469bfe58dbe3c1d2df0260a13e52a41e61e5d65b7689", 0x73, 0x3}, {&(0x7f00000004c0)="0775ba7be6b495c80a47fe72d5472f2e86467fa5621ed855ba72082aa202251eea8b8fdf4380f759b917019734fceb03a16f60e9024411b722045bbf95fa37b9a451b0a3801bafc49e73f6ee996140426c4096cabb4373cd93f060a632b4d10d4a3fc3ccb0dcd63d05398226ea409d4aaec5af5dc3b194750712dce76e6e5b672c9cbe795c9d467cddca31163cc2b29c2570a238adce6413321a7bcc8ff6bf4216aa0de685bc72499461", 0xaa, 0x100000000}, {&(0x7f0000000580)="b66d2ee080030c509a2706010a90783a9caaa04977d61c10773623d199de692b1d1992e14119670e8d8addd10f564bfee591b3a883dec597da73aea496d91c3a62ca65157e8fb4bd9ac917fa18c78b7e86fa96f1c50f759e7c83dc0e7511585b1e9e561e3451d47f6b49cdb3de5aca485a8bba14cf9a8b4ada3070edd2a817c965595538950eedbd6083ad4a8bb4bc018c01b4", 0x93, 0x4}, {&(0x7f0000000640)="d7fd1f4591df0f59b0105115414bc303014fdfc463b2ca071403419b7612755f4a3e6dec08fa5f684eb6d319f51b536c4b26c5618d5c271fd49fdb506d9cc8543664762481c68bfb9180a31a633d58a9c44705ad05fca283f80953aaa07908920cc4d9435d1b3615be48f54c4fcdeda56881709af0b9f6367ae0af5b34c4dd1af1c0cf653dd8ccad685b724f2bcd141b9a72cda1d9997291f8509feececf75abb5ae3c30f232d0e995e93eab5ab72269a18a5af422c3f98fddc3be40d760d697b1203c985214b6e5fce3116c2c601a53e8c5b9c99d1762bf3bbbf875e4b29401934e306e1ce04debeab028a8d936f4a87dd8737e4f", 0xf5, 0x1000}, {&(0x7f0000000740)="bfc024eb9c2fd31ee7635d2b020874eae32eb0820595000dc5c3ee791a9814b3210b3230d526430815e9e069beb3a4a0b478846928f87be73edf60a870eb1b8c5050584ec734c2765f6b308bc1dfac2d31c28bef08c8d52447a6aa551f171052d7baea07b44643d0b8e6f6c59d430b46acbc631a0e18062acb13ebfb4d2ece76b82e42b32f35494e7ca7cbefe8c1371c324b7658ec6c23b6346af4e4383c814209d7ce36983d43114741f60c83b9699b5f6c6af7c5e63ed9b88c5bde7da012f1a36da149aec287d831286f5ec6", 0xcd, 0xe55}, {&(0x7f0000000840)="eebf562f74ba2e7da4963d2581a423f5bb31f4a07cd55f84713c72d2a3a57c6d027100936d8fed3fb3a9a24c14b28fb8b128cb7830c1d1147b96d6bb3cb328ae5a187e54233a77a6f06ec03d25935df01eac1be223caef187ffdeebf118aa06e9e94cffeaf0449fe7ed12566561240c2e0419318f6b65ea87c0ffd9ae30384364e7713e5797faea2b32309c0ab349aa7e57ef8b7fc6b6062d455d90ac9cb17f80ed7cce93861135680a5f6fad106171265931acabf15424a22e303550815bd92716d5146a640565e007068afec7d6e32aeb1", 0xd2, 0x8c95}, {&(0x7f0000000940)="e49e3ae5953f4a49b72333722d6c30433a220175ee76d4512bcd6eff960cee12e39e7b7e0fab081eb9fb8e6d8c7a9d6822ee8d9f9c27b1a1c3e5fb92c031b0f2227dbc684c29453f6aa32ff91cf1210ed397ae3deb06ead219e9a5611d4b2ca608d553b140068e36709932ea1247f6f7d4053c64401461668f67d8c0445686f6ef317552dee7d7da99aea1ad80913cef80a781bc897e802658dd7ff2264ffed9d4619e2744f2c5344d972b683c34e93712d6a21db1d53fe782f39985e2d38bc54135a86da96c71d2957f1383df8809dfef0f20", 0xd3, 0x1}], 0x100040, &(0x7f0000000b40)={[{@notail='notail'}, {@notail='notail'}, {@notail='notail'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@replayonly='replayonly'}, {@barrier_none='barrier=none'}, {@noattrs='noattrs'}, {@nouser_xattr='nouser_xattr'}, {@grpquota='grpquota'}, {@barrier_none='barrier=none'}]}) 03:38:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 746.968848] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001e90400", 0x24) 03:38:30 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 747.119767] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 747.189660] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:30 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r0, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 747.252587] IPVS: ftp: loaded support on port[0] = 21 03:38:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0xf3, 0x0, &(0x7f0000000040)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 747.320478] device bridge_slave_1 left promiscuous mode [ 747.326874] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.359959] device bridge_slave_0 left promiscuous mode [ 747.372716] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 747.389236] bridge0: port 1(bridge_slave_0) entered disabled state 03:38:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007a00", 0x24) 03:38:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 747.407998] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 747.513125] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 747.556696] team0 (unregistering): Port device team_slave_1 removed [ 747.558402] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 747.595588] team0 (unregistering): Port device team_slave_0 removed [ 747.635850] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 747.659944] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 747.721031] bond0 (unregistering): Released all slaves 03:38:31 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2b00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 748.964419] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.971058] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.978405] device bridge_slave_0 entered promiscuous mode [ 749.037315] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.044115] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.051897] device bridge_slave_1 entered promiscuous mode [ 749.115601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 749.168410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 749.296364] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 749.344019] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 749.501482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 749.508604] team0: Port device team_slave_0 added [ 749.534361] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 749.541590] team0: Port device team_slave_1 added [ 749.567187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.593830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 749.619435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 749.647439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 749.878352] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.884733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.891414] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.897755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.905558] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 750.727383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.808301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 750.850204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 750.899097] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 750.905260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.912719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 750.991095] 8021q: adding VLAN 0 to HW filter on device team0 03:38:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001fffff0", 0x24) 03:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:34 executing program 1: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663044090000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) 03:38:34 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2900, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 751.473408] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 751.482142] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 751.524517] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 751.535571] validate_nla: 18 callbacks suppressed [ 751.535580] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 751.543937] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:34 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r1, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 751.585411] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 751.648492] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 751.672573] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) [ 751.703291] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 751.767063] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 751.798843] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 751.813264] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0678044000000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000180)={r2, r3/1000+30000}, 0x10) r4 = getpid() ioprio_get$pid(0x3, r4) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fa00000000000000000000959500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x4, &(0x7f00000000c0)="5ee982fb"}, 0xf) [ 751.839233] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 751.848526] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000004", 0x24) 03:38:35 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 752.013212] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 752.023123] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 752.042046] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 752.052542] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 752.093342] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:35 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffe000", 0x24) 03:38:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x490080, 0x9) mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x8) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 752.571343] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 752.591170] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 752.610258] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 752.624746] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 752.649289] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000002c0)) r3 = dup2(r2, r2) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000200)={@generic={0x9, "648f627ca01fab0fcb7bf8277408c7cbceb4848221a4a38b814ab2a3fed71b76aab1e8a95c7c74545c18b048dc1aaf560c75fc81d5276556c3103a50c0180b7807594b14dc18a565dd3499cbd3ae106751279b07efe96c3afb50222f57ee902995085b07f68c6237daf67c0555b7a38ff87cc4b827561ae982f5dddf0e62"}, {&(0x7f0000000040)=""/2, 0x2}, &(0x7f0000000140), 0x26}, 0xa0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663c41905f50000"]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 752.805328] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 752.809079] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 752.844454] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 752.871986] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 752.993615] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 753.061737] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="286304400000dd79"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:36 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x39, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:36 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x7, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 753.562731] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 753.587103] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 753.637656] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:36 executing program 1: r0 = socket(0x3, 0x0, 0x1) accept(0xffffffffffffffff, &(0x7f0000000200)=@can={0x1d, 0x0}, &(0x7f0000000280)=0x80) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@local, 0x63, r1}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="33b94697fb339e06197810586ffbd20663e8020000"]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)='\x00'}) r3 = dup(r0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0x1, 0x16f, 0x200, 0x1, 0x2, 0x3, 0x4, 0x3, 0x2, 0x5, 0x81, 0xb747}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000500", 0x24) [ 753.842840] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 753.897584] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 754.072531] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 754.111733] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 754.250326] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001f00000", 0x24) 03:38:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="066304400000000098f060f874e7b7418610b283b1538efcbb4ab7906b6456267946408a3dce80608dd5295f2f69cfa0aed1844aeca5df3546283b154e8e7c95d5e10ff416ae2711ed03da0cc9e28af9f4992857cf8ea65839ee1bc419cbbaa49aa03a40c9fd4a7c"], 0x0, 0x0, &(0x7f0000000140)}) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x10001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x1) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000200)={0x81, 0x4f, 0x1, 0x0, 0x2, 0x2}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000180)={0x5, 0xfffffffffffffe00, 0x8, 0xfffffffffffffffc, 0x100000000, 0x4}) 03:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:37 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3100000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 754.618289] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001020000", 0x24) 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 754.765331] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) 03:38:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000f00", 0x24) 03:38:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0661044000000000154570570848ec88e9f6e0e913c8757df35be4b7472e78f5667d127a1f80758f58734d34aa9a89a559865386b4d5f26e07d2d48d60d2ec30e7bf1f2d26f6d89335768525eed4cb045913ad00ff437bbc07bf0ccb5dc39e418d16fc43c77719b0f96a4255827fbfe0668290fec8d23f55d75923eea00c2630d90f66034e50ac0b5511c7afad5e34c873cd6f9680159d2194ffd3005682134e4dbcba15578a7870245a7b95bd551d496a396ee0a6e4ea6c617d51b9ea8851c0013f54c996278426e48392ccd2a26b734431fff9fe08ef0cfce9f6ec9ca512d69b3df9bccdc0d1e9b57d46a2029bdf22"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f0000000040)="e1"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240000, 0x49925502f224fc68) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x4, 0x4) clone(0x1046000, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 754.917675] IPVS: ftp: loaded support on port[0] = 21 [ 754.975064] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 754.984666] device bridge_slave_1 left promiscuous mode [ 754.990410] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.001110] device bridge_slave_0 left promiscuous mode [ 755.029255] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 755.040256] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.148386] team0 (unregistering): Port device team_slave_1 removed [ 755.180690] team0 (unregistering): Port device team_slave_0 removed [ 755.198435] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 755.223715] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 755.288976] bond0 (unregistering): Released all slaves 03:38:38 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 756.511969] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.518414] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.525848] device bridge_slave_0 entered promiscuous mode [ 756.568075] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.574857] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.582221] device bridge_slave_1 entered promiscuous mode [ 756.623505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 756.666767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 756.795191] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 756.844292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 757.020857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 757.028077] team0: Port device team_slave_0 added [ 757.052258] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 757.060521] team0: Port device team_slave_1 added [ 757.084478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 757.110816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 757.136298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 757.143757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 757.152095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 757.176190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 757.410411] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.416818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.423547] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.429882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.261300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.343476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 758.424844] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 758.431152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 758.438058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 758.519391] 8021q: adding VLAN 0 to HW filter on device team0 03:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0673044080000000d792458437048764427eea1e0db338e7598af166a82494a25bec320372215286243fadb652e2b56a9bbd05639eb3f05f9f987e729cc226c7bd689a114dd4ef0a92ad07fcae8cfd550bbef2574a004401241bd8d10a78478fc4e76cae84701109"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000240)={0x2, r2}) 03:38:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 03:38:41 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x19000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 758.997967] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.036691] binder: 9334:9335 ioctl c0306201 20000000 returned -11 [ 759.042839] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.056025] validate_nla: 21 callbacks suppressed [ 759.056035] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 759.075969] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 759.080467] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 759.144225] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:38:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001ffffff", 0x24) [ 759.239573] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.258688] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="066304401c65889445ba00000000"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 759.288462] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.308711] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.332398] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 759.370632] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007400", 0x24) [ 759.428491] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 759.488447] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.508244] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 759.517184] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.570936] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 759.583553] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.597373] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2600000000000000a1cc5aa06f4151ada4e04b20bdab06034a90"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) [ 759.618188] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.713399] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 759.748225] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:42 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000600", 0x24) 03:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe0, [@devgroup={'devgroup\x00', 0x18, {{0x4}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x1e8) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000003c0)={r3, &(0x7f0000000280)=""/78}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) utimes(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={{}, {r4, r5/1000+30000}}) 03:38:42 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 760.042380] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.053085] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.062395] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 760.103650] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 760.115022] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.131532] Unknown ioctl -1072667619 [ 760.141990] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 760.175875] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.271022] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 760.286073] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.304402] Unknown ioctl -1072667619 [ 760.312002] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 760.321617] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 760.340842] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.349664] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9e6, 0x881) ioctl$KDDISABIO(r1, 0x4b37) [ 760.488013] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.522265] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:43 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663041f00000000"]}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100011, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x40000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0xd000}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff84, 0x0, &(0x7f0000000380), 0x1, 0x0, &(0x7f00000000c0)="e1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 03:38:43 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) 03:38:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 760.956209] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 760.966185] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.014182] binder: 9503:9516 ioctl 41009432 20000200 returned -22 [ 761.061855] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.075870] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.101664] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001001c00", 0x24) 03:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 761.123044] binder: 9503:9516 ioctl 41009432 20000200 returned -22 03:38:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f00000001c0)=[@release]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180), 0xa, 0x0, &(0x7f0000000140)="c522f3e747182a4abae1"}) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 761.229219] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000f00", 0x24) [ 761.318431] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.349858] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 761.373294] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.425607] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.441592] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.488683] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:44 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:44 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="16630440e0ffffff33d4d96a8a6f0b8eaa3011c692ead78bf9c7d3041ca8cb9b944dccec75caf77123b5c97c68dc9836b27b1ea198e25c3dd9e5676b5eda8709ef966ecc89334f22532eede634632159ffdd64364ecea39e9475d62caf698ae9c2432a85f21e148a408549125f8265cd55ee41d8c57abcff4d30d413a730c5fe47d39aac8ff08abb419834a17405122cecfae449260600000de2795d3b167fd12e007d62bd4b09fcf47a8fa1218adf67b312f1b1204402575a030c59b9e51ffea45ba16780138010ff68110f727c397ea5c2e1686f90276c"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) ioctl$TCXONC(r1, 0x540a, 0x3) 03:38:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 761.878403] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 761.889391] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) [ 761.921094] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 762.016714] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 762.077762] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 762.113846] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 762.138607] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000100)={0xffa8, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x1, 0x0, &(0x7f00000000c0)="e1"}) fstat(r0, &(0x7f0000000140)) clone(0x0, &(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 03:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 762.254628] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 762.331798] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 762.408514] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 762.503586] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100000f", 0x24) 03:38:45 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:45 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x12000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:45 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 762.854036] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 762.876042] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 762.892907] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000003", 0x24) 03:38:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 762.917620] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000003", 0x24) [ 763.057175] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 763.107936] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 763.116741] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000300", 0x24) [ 763.262315] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 763.276503] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 763.315910] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 763.359865] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 763.449339] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:46 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:46 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x37000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:46 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000068", 0x24) [ 763.910112] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 763.931093] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 763.983463] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 764.104269] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 764.137386] validate_nla: 26 callbacks suppressed [ 764.137396] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 764.187664] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 764.236675] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 764.371984] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:47 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:47 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x16000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) 03:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:47 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:47 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:47 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 765.013012] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.046486] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 765.063543] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.077536] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007fff", 0x24) 03:38:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 765.194196] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.270566] device bridge_slave_1 left promiscuous mode [ 765.276121] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.312415] IPVS: ftp: loaded support on port[0] = 21 [ 765.319608] device bridge_slave_0 left promiscuous mode [ 765.344451] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.366999] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000500", 0x24) [ 765.459785] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.468957] team0 (unregistering): Port device team_slave_1 removed [ 765.472354] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:48 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100000a", 0x24) [ 765.504791] team0 (unregistering): Port device team_slave_0 removed 03:38:48 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) [ 765.564869] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 765.614994] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.626480] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 765.658173] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 765.698342] bond0 (unregistering): Released all slaves 03:38:49 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8008, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001001c00", 0x24) 03:38:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:49 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:49 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 766.091233] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 766.111075] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 766.144588] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 767.122114] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.128757] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.136146] device bridge_slave_0 entered promiscuous mode [ 767.176763] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.183262] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.190905] device bridge_slave_1 entered promiscuous mode [ 767.248987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 767.288958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 767.413847] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 767.456790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 767.650502] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 767.658099] team0: Port device team_slave_0 added [ 767.690838] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 767.697944] team0: Port device team_slave_1 added [ 767.722210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 767.748110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 767.773768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 767.800849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.030298] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.036663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.043365] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.049706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.057133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 768.850126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.897462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.981055] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 769.067021] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 769.073307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 769.081421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 769.164385] 8021q: adding VLAN 0 to HW filter on device team0 03:38:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000040", 0x24) 03:38:52 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:52 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:52 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xe00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 769.644601] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 769.690673] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 769.709362] validate_nla: 1 callbacks suppressed [ 769.709371] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 769.721744] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 769.741991] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 769.755525] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:52 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) [ 769.861002] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 769.905545] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 769.920436] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:52 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 769.952118] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000048", 0x24) 03:38:53 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 769.998513] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.036487] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 770.101768] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 770.155169] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 770.163745] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.181160] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.258923] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.296353] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.334247] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006c00", 0x24) 03:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:53 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x16000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:53 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:53 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 770.666923] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.675840] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.685942] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 770.696803] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.712712] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.722745] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:53 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 770.873382] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.888563] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 770.915928] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 770.921555] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.926944] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 770.946335] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:38:53 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007f00", 0x24) [ 771.024547] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.055732] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.117392] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:54 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:54 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x14000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000006", 0x24) 03:38:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:54 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 771.569167] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.597285] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.603134] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:54 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 771.715582] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.754945] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 771.908478] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.950550] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 771.959567] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:55 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:55 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:55 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:55 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 772.526676] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 772.539363] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 772.562615] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:38:55 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 772.664083] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100004c", 0x24) [ 772.800223] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:55 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 772.868981] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000700", 0x24) [ 773.007462] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 773.055786] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:56 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x408, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:56 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:56 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001004c00", 0x24) 03:38:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:38:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100fcff", 0x24) [ 773.578761] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 773.607890] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:56 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:38:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:56 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000060", 0x24) [ 773.752447] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 773.772843] IPVS: ftp: loaded support on port[0] = 21 [ 773.793581] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:38:56 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 773.886688] device bridge_slave_1 left promiscuous mode [ 773.895977] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.929340] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 773.938433] device bridge_slave_0 left promiscuous mode [ 773.947061] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.980760] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 774.054332] team0 (unregistering): Port device team_slave_1 removed [ 774.077263] team0 (unregistering): Port device team_slave_0 removed [ 774.108220] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 774.128418] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 774.170763] bond0 (unregistering): Released all slaves 03:38:57 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xd00000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:38:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007400", 0x24) 03:38:57 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:38:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:38:57 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 774.711949] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 774.727549] validate_nla: 22 callbacks suppressed [ 774.727559] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 774.746549] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 774.779460] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 775.471571] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.485902] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.501550] device bridge_slave_0 entered promiscuous mode [ 775.564494] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.571087] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.578489] device bridge_slave_1 entered promiscuous mode [ 775.618944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 775.679765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 775.806272] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 775.849024] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 776.042218] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 776.049620] team0: Port device team_slave_0 added [ 776.091766] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 776.099186] team0: Port device team_slave_1 added [ 776.125353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 776.151341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 776.178054] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 776.185172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 776.193453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 776.216260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 776.448771] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.455138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.461837] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.468189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.476137] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 777.400153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 777.604549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.685130] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 777.765423] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 777.771742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 777.778620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 777.863380] 8021q: adding VLAN 0 to HW filter on device team0 03:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:01 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010000f0", 0x24) 03:39:01 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:01 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x13000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 778.337682] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.346279] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.397812] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 778.409335] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.428303] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 778.434527] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 778.456506] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.457981] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:01 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) [ 778.615028] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.625854] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 778.662444] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 778.690888] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:01 executing program 1: creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) io_setup(0x7, &(0x7f00000005c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 778.747051] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.773049] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:01 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 778.808184] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 778.839963] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 778.874465] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010000f0", 0x24) [ 778.976979] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.004027] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 779.024963] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.051580] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:02 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0ffffff, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:02 executing program 1: creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:02 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 779.400419] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.421143] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) [ 779.466997] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:02 executing program 1: creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 779.555113] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.581040] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 779.616843] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.674777] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 779.745891] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:03 executing program 1: creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:03 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) 03:39:03 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 780.198527] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.208275] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.219620] validate_nla: 6 callbacks suppressed [ 780.219630] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 780.231951] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 780.311529] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.336373] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 780.397407] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:03 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 780.444577] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.480296] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 780.501502] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.545788] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 780.558840] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 780.561760] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:03 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 780.699144] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:04 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3f00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:04 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100feff", 0x24) 03:39:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:04 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 781.147278] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 781.157983] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 781.168443] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 781.179916] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 781.190953] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 781.427784] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 781.457291] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 781.479336] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 781.615707] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:05 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x9c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:05 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:05 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 782.079114] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 782.097479] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 782.133260] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006000", 0x24) [ 782.282926] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 782.335301] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 782.376020] device bridge_slave_1 left promiscuous mode [ 782.383520] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.428327] device bridge_slave_0 left promiscuous mode [ 782.452552] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.525798] IPVS: ftp: loaded support on port[0] = 21 [ 782.554826] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 782.617244] team0 (unregistering): Port device team_slave_1 removed [ 782.645810] team0 (unregistering): Port device team_slave_0 removed [ 782.667240] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 782.678486] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 782.711527] bond0 (unregistering): Released all slaves 03:39:06 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2100000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:06 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 783.242182] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 783.296151] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 783.975344] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.986637] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.995031] device bridge_slave_0 entered promiscuous mode [ 784.037639] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.044487] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.052362] device bridge_slave_1 entered promiscuous mode [ 784.121963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 784.161479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 784.292563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 784.337689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 784.531569] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 784.539709] team0: Port device team_slave_0 added [ 784.578207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 784.585574] team0: Port device team_slave_1 added [ 784.611143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 784.638232] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 784.664123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 784.690428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 784.921367] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.927730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.934394] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.940764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.948114] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 785.773717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.853348] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 785.880308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 785.938093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 785.944478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.951847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 786.028944] 8021q: adding VLAN 0 to HW filter on device team0 03:39:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:09 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:09 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3800000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 786.506506] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.514922] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.580529] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.592480] validate_nla: 4 callbacks suppressed [ 786.592488] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:09 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 786.635725] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.652487] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 786.670953] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.714182] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100e0ff", 0x24) 03:39:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 786.792594] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:09 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 786.851779] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.861863] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 786.898228] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 786.941805] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 787.003187] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:10 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3b000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 787.587906] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 787.606195] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 787.617470] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 787.621123] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:10 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 787.645175] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 787.674176] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 787.844385] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 787.860771] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 787.886213] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 787.911516] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:11 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1e000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 788.556192] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 788.558227] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 788.564973] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 788.582614] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 788.602829] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:11 executing program 2: io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000020", 0x24) 03:39:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000005", 0x24) [ 788.751065] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 788.770494] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 788.787380] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 788.859412] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:12 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x35, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:12 executing program 2: io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001006800", 0x24) 03:39:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 789.385821] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 789.385837] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 789.424660] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001007a00", 0x24) [ 789.433330] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:12 executing program 2: io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 789.522391] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 789.601920] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 789.633681] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 789.639763] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 1: 03:39:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:13 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 790.140634] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 790.158546] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 790.182571] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 1: syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x7, 0x8, 0x5, 0x0, 0x0, [{}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, &(0x7f0000000000)) 03:39:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 790.198196] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={"6c6f000000000000361200", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddr={0x2c, 0x16, 0x21, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14}]}, 0x2c}}, 0x0) [ 790.326223] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 790.340600] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:13 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x0, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 790.397507] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 790.452913] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a40), 0x0, &(0x7f000001ef80)=[{0x10, 0x0, 0x7}], 0x10}, 0x20000850) [ 790.629306] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 790.663037] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:13 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf0000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:14 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000300)="a69d93ea069a2ceaa2e33e45b2e7d8d509a2a9c242d1e12c56b3a782f46cff70e60fbbe02cd6ecbd0c65320b8dedb04dbd425e765813ff5ef753f3409dc99f30a86935233fdc81500433db28d9bc0b985aaa63edf9a656de") ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 791.062365] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 791.075406] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 791.140879] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 791.177547] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:14 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000180)="400000000200000019000000dc0100002c000000010000000000000000000000002000000020000040000000000000003d5cbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)={[{@resuid={'resuid'}}]}) [ 791.365744] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 791.381620] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 791.463548] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 791.479780] EXT4-fs (loop1): can't read group descriptor 0 [ 791.558069] EXT4-fs (loop1): can't read group descriptor 0 03:39:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:15 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xa0000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:15 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:15 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 792.062394] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.074533] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.088901] validate_nla: 20 callbacks suppressed [ 792.088909] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 792.111500] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.126508] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 792.219800] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.230864] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 792.265473] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.274554] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.284083] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 792.316342] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100e0ff", 0x24) [ 792.436116] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 792.486634] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.504869] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 792.545068] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 792.562529] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 792.599600] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:16 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3d, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:16 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:16 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 793.185407] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 793.198124] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.217528] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 793.230957] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 793.241962] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.251637] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 793.368568] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.377513] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 793.410766] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.415118] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.420253] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 793.516969] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.580626] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 793.588992] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:17 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:17 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:17 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 794.232688] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 794.236521] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 794.279950] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010004e9", 0x24) [ 794.407050] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 794.458869] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 794.472439] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001004800", 0x24) 03:39:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 794.642925] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:18 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100e0ff", 0x24) 03:39:18 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488d") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:18 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 795.320632] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 795.352182] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 795.410790] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 795.551092] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 795.583270] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 795.719326] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 795.743579] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 795.754186] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:19 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10750b00, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:19 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:19 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 796.430633] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 796.433183] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 796.467472] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100003f", 0x24) 03:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000200", 0x24) [ 796.620479] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 796.658259] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 796.709759] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 796.847074] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 796.892861] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:20 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x30000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:20 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 797.544150] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 797.554194] validate_nla: 22 callbacks suppressed [ 797.554203] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:20 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 797.592011] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 797.604034] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 797.736977] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 797.760842] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 797.799599] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 797.842800] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100001c", 0x24) 03:39:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 797.902569] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 797.976565] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 798.001837] device bridge_slave_1 left promiscuous mode [ 798.007474] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.017081] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 798.047730] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 798.055544] device bridge_slave_0 left promiscuous mode [ 798.079306] bridge0: port 1(bridge_slave_0) entered disabled state 03:39:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 798.152744] IPVS: ftp: loaded support on port[0] = 21 [ 798.206959] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 798.244096] team0 (unregistering): Port device team_slave_1 removed [ 798.279372] team0 (unregistering): Port device team_slave_0 removed [ 798.294724] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 798.329604] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 798.432997] bond0 (unregistering): Released all slaves 03:39:21 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100e904", 0x24) 03:39:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:21 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 798.709483] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 798.734546] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:21 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 798.775956] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:21 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 798.927001] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 799.837701] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.844289] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.852350] device bridge_slave_0 entered promiscuous mode [ 799.897148] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.903810] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.911614] device bridge_slave_1 entered promiscuous mode [ 799.980102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 800.024256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 800.145218] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 800.189322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 800.369205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 800.376476] team0: Port device team_slave_0 added [ 800.400787] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 800.407870] team0: Port device team_slave_1 added [ 800.432256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 800.458111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 800.483616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 800.509729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 800.740492] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.746848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.753500] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.759838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.767304] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 801.586464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.650493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 801.671194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 801.749721] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 801.755925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 801.763601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 801.846657] 8021q: adding VLAN 0 to HW filter on device team0 03:39:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000400", 0x24) 03:39:25 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:25 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:25 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 802.305673] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.314245] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.334348] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 802.364236] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.388162] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 802.416636] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:25 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x0, &(0x7f0000000540)) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 802.465496] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.531410] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:25 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x0, &(0x7f0000000540)) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 802.638926] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.653548] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.668056] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 802.692694] validate_nla: 2 callbacks suppressed [ 802.692702] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 802.751901] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:25 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) [ 802.810706] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.845118] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 802.900610] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 802.954341] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:26 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:26 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x0, &(0x7f0000000540)) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100007a", 0x24) 03:39:26 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 803.356417] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 803.364963] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 803.372377] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 803.396963] netlink: 'syz-executor0': attribute type 27 has an invalid length. 03:39:26 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100f0ff", 0x24) [ 803.492961] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 803.633059] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 803.661624] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 803.674269] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:26 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 803.686767] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 803.795833] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 803.843490] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b00010000f0", 0x24) 03:39:27 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:27 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x5000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:27 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000240)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_NMI(r0, 0xae9a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0xb189, &(0x7f0000000400)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e20, 0x6, @mcast2, 0x10001}, {0xa, 0x4e24, 0x4, @loopback}, 0x6323, [0x8000, 0x782b, 0x3, 0x1, 0xfb2, 0x0, 0x5, 0x2]}, 0x5c) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(r0, &(0x7f0000001440)=""/4096, 0x1000) creat(&(0x7f0000000140)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 804.332226] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 804.363573] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 804.370503] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:27 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:27 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 804.395372] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100f000", 0x24) [ 804.470752] device bridge_slave_1 left promiscuous mode [ 804.476345] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.527496] device bridge_slave_0 left promiscuous mode [ 804.542018] bridge0: port 1(bridge_slave_0) entered disabled state 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 804.568054] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 804.608138] IPVS: ftp: loaded support on port[0] = 21 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) [ 804.679057] team0 (unregistering): Port device team_slave_1 removed [ 804.715777] team0 (unregistering): Port device team_slave_0 removed 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffff", 0x24) 03:39:27 executing program 1: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x7a, "601fd658de08f8341fed775104be428852d1f19a97e59b8ba4044ec7341016bec03e09a477a9b8b4a6279ac86c21039a78ca996cebc9999bc81fecc12c867934af5fe29bd3f80fb373a9a90fa75b9958746bf014a8df4a44eaf9b142bfd1ef6ec91e381e71a4494aee98109dc419c4946d05e4def14a93e81f7f"}, &(0x7f0000000140)=0x82) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x678342ae}, &(0x7f00000002c0)=0x8) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000500)=0x10000) io_setup(0x7, &(0x7f00000005c0)=0x0) sendmsg$xdp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="ef2e3596f3ea319a349dbe442a7b42f3fd327f170211fb554fa39034499a8b22add99fce0612e57834331e51b1bd57fd04943fc26e858460e24737360e65502f3208e4e52b02114b1652468668dd0f535b3f80c847a081bda57fa1a53035dc3ba6e153fc7c4e0f252a120423a3fb1cbabd5c877327e9515a75a6f6a8f0110929bc887a4d10d073f4e2c61476b339d31ee320bf1ee2d6eb5aec1818c398fc768d977f59f87ccc998e0b040eb4c0e4241dcb", 0xb1}, {&(0x7f0000000440)="92ae5bd5d877228891cc80605b0852554727a123f23bde3a8b047f5e37e82c1b0ccb961e49f2849844f1c95e7827a6ca4fcd9c72fded989c96eee811ab0252860c73709f3f6d244d2a4ad26da90a5fa845915c1ec20563f3f09cd525b23ea6147b61142d2d6f110ba35a42df763aa111fb629bfc458a30c04e1c", 0x7a}], 0x2}, 0x20000000) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x9) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f00001c1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) [ 804.743621] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 804.781908] bond0 (unregistering): Releasing backup interface bond_slave_0 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b000100ffe0", 0x24) [ 804.902935] bond0 (unregistering): Released all slaves 03:39:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000074", 0x24) [ 804.991094] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:28 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:28 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 805.503436] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 805.530503] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 806.206969] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.213559] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.221045] device bridge_slave_0 entered promiscuous mode [ 806.261682] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.268094] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.275412] device bridge_slave_1 entered promiscuous mode [ 806.339911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 806.398376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 806.541105] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 806.585256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 806.782797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 806.790479] team0: Port device team_slave_0 added [ 806.831958] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 806.839433] team0: Port device team_slave_1 added [ 806.881057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 806.925820] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 806.953955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 806.980477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.209922] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.216348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.223025] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.229384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.236818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 808.040143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 808.057786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.138247] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 808.216398] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 808.222679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 808.230709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 808.308073] 8021q: adding VLAN 0 to HW filter on device team0 03:39:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000a00", 0x24) 03:39:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:31 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0701000000", 0x24) 03:39:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:31 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x300, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 808.776609] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000600", 0x24) [ 808.818784] validate_nla: 12 callbacks suppressed [ 808.818792] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 808.836640] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 808.854450] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:31 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:31 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:31 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) [ 808.899917] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 808.918779] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 808.983013] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 808.991761] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 809.013142] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.026164] FAULT_INJECTION: forcing a failure. [ 809.026164] name failslab, interval 1, probability 0, space 0, times 0 [ 809.064031] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.078177] CPU: 1 PID: 12825 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #294 [ 809.085562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.094949] Call Trace: [ 809.097558] dump_stack+0x1c4/0x2b6 [ 809.101228] ? dump_stack_print_info.cold.1+0x20/0x20 [ 809.106471] should_fail.cold.4+0xa/0x17 [ 809.110548] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 809.115673] ? check_preemption_disabled+0x48/0x280 [ 809.120704] ? graph_lock+0x170/0x170 [ 809.124532] ? graph_lock+0x170/0x170 [ 809.128342] ? mark_held_locks+0x130/0x130 [ 809.132596] ? find_held_lock+0x36/0x1c0 [ 809.136676] ? __lock_is_held+0xb5/0x140 [ 809.140765] ? ___might_sleep+0x1ed/0x300 [ 809.144918] ? arch_local_save_flags+0x40/0x40 [ 809.149529] __should_failslab+0x124/0x180 [ 809.153775] should_failslab+0x9/0x14 [ 809.157577] __kmalloc_track_caller+0x2d0/0x750 03:39:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000200", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 809.162266] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 809.167546] ? rcu_bh_qs+0xc0/0xc0 [ 809.167594] ? find_vpid+0xf0/0xf0 [ 809.167611] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 809.167637] ? proc_pid_attr_write+0x198/0x540 [ 809.167671] memdup_user+0x2c/0xa0 [ 809.174768] proc_pid_attr_write+0x198/0x540 [ 809.174789] __vfs_write+0x119/0x9f0 [ 809.174807] ? check_preemption_disabled+0x48/0x280 [ 809.174819] ? proc_loginuid_write+0x4f0/0x4f0 [ 809.174848] ? kernel_read+0x120/0x120 03:39:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 809.191934] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.192886] ? __lock_is_held+0xb5/0x140 [ 809.192912] ? rcu_read_lock_sched_held+0x108/0x120 [ 809.192928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 809.192940] ? __sb_start_write+0x1b2/0x370 [ 809.192957] vfs_write+0x1fc/0x560 [ 809.198794] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.201736] ksys_write+0x101/0x260 [ 809.201756] ? __ia32_sys_read+0xb0/0xb0 [ 809.201775] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 809.201809] __x64_sys_write+0x73/0xb0 [ 809.201829] do_syscall_64+0x1b9/0x820 [ 809.201850] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 809.242432] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.248833] ? syscall_return_slowpath+0x5e0/0x5e0 [ 809.248848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 809.248865] ? trace_hardirqs_on_caller+0x310/0x310 [ 809.248880] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 809.248898] ? prepare_exit_to_usermode+0x291/0x3b0 03:39:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001009eff", 0x24) 03:39:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 809.255928] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.256581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 809.256605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.256617] RIP: 0033:0x457569 [ 809.256632] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.256644] RSP: 002b:00007f29e159ec78 EFLAGS: 00000246 [ 809.296724] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:32 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) [ 809.298021] ORIG_RAX: 0000000000000001 [ 809.298030] RAX: ffffffffffffffda RBX: 00007f29e159ec90 RCX: 0000000000457569 [ 809.298039] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 809.298047] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 809.298056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e159f6d4 [ 809.298065] R13: 00000000004c54ee R14: 00000000004d8e08 R15: 0000000000000005 [ 809.354627] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 809.386425] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 809.456108] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 809.510944] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.564035] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) 03:39:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000008800", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) 03:39:32 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x9) 03:39:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:32 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xff0f, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 03:39:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000000000400", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 809.783373] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.800397] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 809.814039] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.822428] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000001100", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 03:39:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', "26ffff"}, 0x8) [ 809.836165] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 809.864006] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:32 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) [ 809.916835] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 809.928734] audit: type=1400 audit(2000000372.904:147): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=26FFFF pid=12896 comm="syz-executor1" 03:39:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000080)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0001000000", 0x24) 03:39:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', '&&\x00'}, 0x8) 03:39:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000600", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 809.982163] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e617400000000000000000000000300", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 810.058225] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 810.098912] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.111585] kasan: CONFIG_KASAN_INLINE enabled [ 810.129614] netlink: 'syz-executor0': attribute type 27 has an invalid length. [ 810.139761] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e6174000000000000000000000000000000007fffffff00", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 810.147968] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 810.155108] kernel msg: ebtables bug: please report to author: Entries_size never zero 03:39:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) [ 810.199919] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 810.206194] CPU: 0 PID: 12919 Comm: syz-executor1 Not tainted 4.19.0-rc8+ #294 [ 810.213556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.222929] RIP: 0010:memcmp+0x28/0x160 [ 810.226934] Code: 00 00 48 85 d2 0f 84 0a 01 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 f9 48 89 e5 48 c1 e9 03 41 54 53 48 89 fb 48 83 ec 18 <0f> b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 98 00 00 00 03:39:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@nat={"6e61740000000000000000000000000000000500", 0x19, 0x0, 0x0, [0x20000680, 0x0, 0x0, 0x20000680, 0x20000680], 0x0, &(0x7f0000000000), &(0x7f0000000680)}, 0x78) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x5, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) [ 810.245905] RSP: 0018:ffff880187c66f98 EFLAGS: 00010292 [ 810.251287] RAX: dffffc0000000000 RBX: 1ffff10030f8ce4f RCX: 03fffe20061f19c9 [ 810.251508] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.258570] RDX: 0000000000000002 RSI: ffffffff883ba280 RDI: 1ffff10030f8ce4f [ 810.258578] RBP: ffff880187c66fc0 R08: ffff88018bac2100 R09: ffffed003b5c4732 [ 810.258585] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: 0000000000000002 [ 810.258593] R13: ffffffff883ba280 R14: 1fff7901b8bf419f R15: dffffc0000000000 [ 810.258604] FS: 00007f29e159f700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 810.258611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.258623] CR2: 0000000000625208 CR3: 00000001cc335000 CR4: 00000000001406f0 [ 810.269307] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.273939] Call Trace: [ 810.273958] ? _raw_spin_unlock_irq+0x27/0x80 [ 810.273988] strnstr+0x4b/0x70 [ 810.274005] __aa_lookupn_ns+0xc1/0x570 [ 810.274021] ? compat_start_thread+0x80/0x80 [ 810.283543] kobject: 'loop5' (000000004b44c552): kobject_uevent_env [ 810.288554] ? aa_find_ns+0x30/0x30 [ 810.288569] ? lock_acquire+0x1ed/0x520 [ 810.288581] ? __aa_lookupn_ns+0x570/0x570 [ 810.288600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.305067] kobject: 'loop5' (000000004b44c552): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 810.310402] ? check_preemption_disabled+0x48/0x280 [ 810.310421] ? kasan_check_read+0x11/0x20 [ 810.310436] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 810.310452] ? __switch_to_asm+0x34/0x70 [ 810.323408] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.325770] ? rcu_bh_qs+0xc0/0xc0 [ 810.325785] ? print_usage_bug+0xc0/0xc0 [ 810.325796] ? __switch_to_asm+0x34/0x70 [ 810.325812] ? __switch_to_asm+0x40/0x70 [ 810.332513] kobject: 'loop4' (0000000055032c28): kobject_uevent_env [ 810.332895] aa_lookupn_ns+0x88/0x1e0 [ 810.338215] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.340047] aa_fqlookupn_profile+0x1b9/0x1010 [ 810.340065] ? aa_lookup_profile+0x30/0x30 [ 810.340088] ? __lock_acquire+0x7ec/0x4ec0 [ 810.340105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.340122] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 810.344866] kobject: 'loop4' (0000000055032c28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 810.350912] ? refcount_add_not_zero_checked+0x330/0x330 [ 810.350927] ? mark_held_locks+0x130/0x130 [ 810.350941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.350954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 810.350971] fqlookupn_profile+0x80/0xc0 [ 810.361430] kobject: 'loop4' (0000000055032c28): kobject_uevent_env [ 810.362772] aa_label_strn_parse+0xa3a/0x1230 [ 810.362792] ? aa_label_printk+0x850/0x850 [ 810.362810] ? zap_class+0x640/0x640 [ 810.369789] kobject: 'loop4' (0000000055032c28): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 810.378125] ? __might_sleep+0x95/0x190 [ 810.378140] ? graph_lock+0x170/0x170 [ 810.378151] ? __lock_acquire+0x7ec/0x4ec0 [ 810.378165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.378178] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 810.378194] ? refcount_add_not_zero_checked+0x330/0x330 [ 810.397523] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.404713] ? graph_lock+0x170/0x170 [ 810.404726] ? find_held_lock+0x36/0x1c0 [ 810.404743] aa_label_parse+0x42/0x50 [ 810.404759] aa_change_profile+0x513/0x3260 [ 810.411750] kernel msg: ebtables bug: please report to author: Entries_size never zero [ 810.412379] ? lock_acquire+0x1ed/0x520 [ 810.412399] ? aa_change_hat+0x1890/0x1890 [ 810.593564] ? is_bpf_text_address+0xd3/0x170 [ 810.598042] ? __mutex_lock+0x85e/0x1700 [ 810.602105] ? debug_smp_processor_id+0x1c/0x20 [ 810.606774] ? perf_trace_lock+0x14d/0x7a0 [ 810.611009] ? proc_pid_attr_write+0x28a/0x540 [ 810.615590] ? mutex_trylock+0x2b0/0x2b0 [ 810.619643] ? save_stack+0xa9/0xd0 [ 810.623300] ? save_stack+0x43/0xd0 [ 810.626953] ? kasan_kmalloc+0xc7/0xe0 [ 810.630823] ? __kmalloc_track_caller+0x14a/0x750 [ 810.635669] ? memdup_user+0x2c/0xa0 [ 810.639376] ? proc_pid_attr_write+0x198/0x540 [ 810.643966] ? graph_lock+0x170/0x170 [ 810.647797] ? __x64_sys_write+0x73/0xb0 [ 810.651842] ? graph_lock+0x170/0x170 [ 810.655660] ? mark_held_locks+0x130/0x130 [ 810.659904] apparmor_setprocattr+0xa8b/0x1150 [ 810.664483] ? apparmor_task_kill+0xcb0/0xcb0 [ 810.668960] ? lock_downgrade+0x900/0x900 [ 810.673087] ? arch_local_save_flags+0x40/0x40 [ 810.677663] security_setprocattr+0x66/0xc0 [ 810.681979] proc_pid_attr_write+0x301/0x540 [ 810.686374] __vfs_write+0x119/0x9f0 [ 810.690118] ? check_preemption_disabled+0x48/0x280 [ 810.695201] ? proc_loginuid_write+0x4f0/0x4f0 [ 810.699778] ? kernel_read+0x120/0x120 [ 810.703643] ? __lock_is_held+0xb5/0x140 [ 810.707716] ? rcu_read_lock_sched_held+0x108/0x120 [ 810.712713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 810.718235] ? __sb_start_write+0x1b2/0x370 [ 810.722534] vfs_write+0x1fc/0x560 [ 810.726066] ksys_write+0x101/0x260 [ 810.729680] ? __ia32_sys_read+0xb0/0xb0 [ 810.733761] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 810.739190] __x64_sys_write+0x73/0xb0 [ 810.743092] do_syscall_64+0x1b9/0x820 [ 810.746980] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 810.752339] ? syscall_return_slowpath+0x5e0/0x5e0 [ 810.757259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 810.762082] ? trace_hardirqs_on_caller+0x310/0x310 [ 810.767091] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 810.772111] ? prepare_exit_to_usermode+0x291/0x3b0 [ 810.777146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 810.782012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.787195] RIP: 0033:0x457569 [ 810.790416] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.809345] RSP: 002b:00007f29e159ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.817037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 810.824298] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 810.831547] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 810.838800] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29e159f6d4 [ 810.846065] R13: 00000000004c54ee R14: 00000000004d8e08 R15: 00000000ffffffff [ 810.853312] Modules linked in: [ 810.861669] kobject: 'loop0' (00000000893cb219): kobject_uevent_env [ 810.864980] ---[ end trace 5d1a2a680da103e5 ]--- [ 810.868115] kobject: 'loop0' (00000000893cb219): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 810.882421] RIP: 0010:memcmp+0x28/0x160 [ 810.886387] Code: 00 00 48 85 d2 0f 84 0a 01 00 00 48 b8 00 00 00 00 00 fc ff df 55 48 89 f9 48 89 e5 48 c1 e9 03 41 54 53 48 89 fb 48 83 ec 18 <0f> b6 04 01 48 89 f9 83 e1 07 38 c8 7f 08 84 c0 0f 85 98 00 00 00 [ 810.905392] RSP: 0018:ffff880187c66f98 EFLAGS: 00010292 [ 810.910825] RAX: dffffc0000000000 RBX: 1ffff10030f8ce4f RCX: 03fffe20061f19c9 [ 810.918100] RDX: 0000000000000002 RSI: ffffffff883ba280 RDI: 1ffff10030f8ce4f [ 810.925641] RBP: ffff880187c66fc0 R08: ffff88018bac2100 R09: ffffed003b5c4732 [ 810.932984] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: 0000000000000002 [ 810.940291] R13: ffffffff883ba280 R14: 1fff7901b8bf419f R15: dffffc0000000000 [ 810.947564] FS: 00007f29e159f700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 810.955824] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.961735] CR2: 0000000000706158 CR3: 00000001cc335000 CR4: 00000000001406f0 [ 810.969011] Kernel panic - not syncing: Fatal exception [ 810.975293] Kernel Offset: disabled [ 810.978913] Rebooting in 86400 seconds..