# https://syzkaller.appspot.com/bug?id=94100cff4d9a032b284ae1f06f9a8baaddf0a419 # See https://goo.gl/kgGztJ for information about syzkaller reproducers. #{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"namespace","fault_call":-1,"tun":true,"tmpdir":true,"cgroups":true,"netdev":true,"resetnet":true,"segv":true} close(0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) shutdown(0xffffffffffffffff, 0x1) fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'btrfs.', 'wlan0\\lo:wlan1\x00'}, 0x0, 0x0, 0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0xffffffffffffff01, 0xf8, 0x0, 0x2d0, 0x1e8, 0x390, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@dccp={0x30, 'dccp\x00', 0x0, {0x4e23, 0x4e22, 0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x81}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x9, @rand_addr=0x53d, 0x4e23}}}, {{@uncond, 0x0, 0x57, 0xf0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x4, 0xd4, 0x400000000000000, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x545, @local, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0xffffffe7, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x0, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1000002c2) prctl$PR_GET_NAME(0x10, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)='nlmon0\x00', 0x0, 0xfffffffffffffffc, 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffffffffffffd}) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)