From 381b94d4d197b9114d5709834354adcd4c957a34 Mon Sep 17 00:00:00 2001
From: David Anderson <danderson@tailscale.com>
Date: Sun, 10 May 2020 23:49:01 +0000
Subject: [PATCH] wgengine/router: include command output if `ip rule list`
 fails.

Signed-off-by: David Anderson <danderson@tailscale.com>
---
 wgengine/router/router_linux.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wgengine/router/router_linux.go b/wgengine/router/router_linux.go
index 52fa4ce2c..0b67784a0 100644
--- a/wgengine/router/router_linux.go
+++ b/wgengine/router/router_linux.go
@@ -391,7 +391,7 @@ func (r *linuxRouter) addBypassRule() error {
 func (r *linuxRouter) delBypassRule() error {
 	out, err := exec.Command("ip", "rule", "list", "priority", "10000").CombinedOutput()
 	if err != nil {
-		return err
+		return fmt.Errorf("listing ip rules: %v\n%s", err, out)
 	}
 	if len(out) == 0 {
 		// No rule exists.