# https://syzkaller.appspot.com/bug?id=ddfaf1d75a1db3b0ed9dfa5bb615a2d50dd8f1da
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"threaded":true,"repeat":true,"procs":1,"sandbox":"","fault_call":-1,"close_fds":false}
r0 = socket$inet6(0xa, 0x3, 0xc8)
r1 = dup(r0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x4f0, 0x1d0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x420, 0x420, 0x420, 0x420, 0x420, 0x4, 0x0, {[{{@ipv6={@empty, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'bond_slave_1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:logrotate_var_lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr="1111294f90cb43313d8cd4eb238b27cb", 'hsr0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bridge_slave_1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4cf)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c65000000000000000000000000000000000000473c02ef00030000000000000000080002"], 0x1}}, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$netlink(0x10, 0x3, 0x0)
splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0)