# https://syzkaller.appspot.com/bug?id=94100cff4d9a032b284ae1f06f9a8baaddf0a419
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"collide":true,"repeat":true,"procs":6,"sandbox":"none","fault_call":-1,"tun":true,"tmpdir":true,"cgroups":true,"netdev":true,"resetnet":true,"segv":true}
close(0xffffffffffffffff)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
shutdown(0xffffffffffffffff, 0x1)
fsetxattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'btrfs.', 'wlan0\\lo:wlan1\x00'}, 0x0, 0x0, 0x3)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000100))
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0xffffffffffffff01, 0xf8, 0x0, 0x2d0, 0x1e8, 0x390, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000340), {[{{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@inet=@dccp={0x30, 'dccp\x00', 0x0, {0x4e23, 0x4e22, 0x4e24, 0x4e21, 0x4, 0x1, 0x0, 0x81}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x9, @rand_addr=0x53d, 0x4e23}}}, {{@uncond, 0x0, 0x57, 0xf0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x4, 0xd4, 0x400000000000000, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x545, @local, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}, {{@uncond, 0x0, 0xffffffe7, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x0, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1000002c2)
prctl$PR_GET_NAME(0x10, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @multicast2}, 0x100, 0x0, 0x0, 0x0, 0x9, &(0x7f00000003c0)='nlmon0\x00', 0x0, 0xfffffffffffffffc, 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001})
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x1, 0xfffffffffffffffd})
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)