If I run sudo ebtables -t broute -A BROUTING sudo ebtables -t broute -F BROUTING on a 4.19 kernel (32bit user/64bit kernel) I get an EINVAL from int xt_compat_init_offsets(u8 af, unsigned int number) on account of number being 0. This seems to have been introduced in 4.17 by 7d7d7e02111e9 ["netfilter: compat: reject huge allocation requests"]. Is a fix similar to the one in 3f1e53abff84c ["netfilter: ebtables: don't attempt to allocate 0-sized compat array"] also needed in compat_do_replace() when calling xt_compat_init_offsets()? Thanks, Francesco Ruggeri