unshare(0x28020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)