// https://syzkaller.appspot.com/bug?id=52e1e4231a1496f29b021de60cfc6a400c8a1a04
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  intptr_t res = 0;
  memcpy((void*)0x20000000, "/dev/fb0\000", 9);
  res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000000ul, 0ul, 0ul);
  if (res != -1)
    r[0] = res;
  syscall(__NR_ioctl, r[0], 0x4611, 3ul);
  memcpy((void*)0x20001180, "/dev/fb0\000", 9);
  res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20001180ul, 1ul, 0ul);
  if (res != -1)
    r[1] = res;
  *(uint32_t*)0x20001280 = 0x578;
  *(uint32_t*)0x20001284 = 0x40;
  *(uint32_t*)0x20001288 = 0xa0;
  *(uint32_t*)0x2000128c = 0xa0;
  *(uint32_t*)0x20001290 = 0x20;
  *(uint32_t*)0x20001294 = 9;
  *(uint32_t*)0x20001298 = 4;
  *(uint32_t*)0x2000129c = 2;
  *(uint32_t*)0x200012a0 = 0x1ff;
  *(uint32_t*)0x200012a4 = 0x75ab;
  *(uint32_t*)0x200012a8 = 0;
  *(uint32_t*)0x200012ac = 6;
  *(uint32_t*)0x200012b0 = 3;
  *(uint32_t*)0x200012b4 = 1;
  *(uint32_t*)0x200012b8 = 0x7c3;
  *(uint32_t*)0x200012bc = 0x100;
  *(uint32_t*)0x200012c0 = 0;
  *(uint32_t*)0x200012c4 = 2;
  *(uint32_t*)0x200012c8 = 2;
  *(uint32_t*)0x200012cc = 1;
  *(uint32_t*)0x200012d0 = 1;
  *(uint32_t*)0x200012d4 = 0;
  *(uint32_t*)0x200012d8 = 2;
  *(uint32_t*)0x200012dc = 2;
  *(uint32_t*)0x200012e0 = 1;
  *(uint32_t*)0x200012e4 = 6;
  *(uint32_t*)0x200012e8 = 5;
  *(uint32_t*)0x200012ec = 0;
  *(uint32_t*)0x200012f0 = 1;
  *(uint32_t*)0x200012f4 = 0xffffffe1;
  *(uint32_t*)0x200012f8 = 4;
  *(uint32_t*)0x200012fc = 8;
  *(uint32_t*)0x20001300 = 0x20;
  *(uint32_t*)0x20001304 = 0x200;
  *(uint32_t*)0x20001308 = 3;
  *(uint32_t*)0x2000130c = 6;
  memset((void*)0x20001310, 0, 16);
  syscall(__NR_ioctl, r[1], 0x4601, 0x20001280ul);
  memcpy((void*)0x20000000, "/dev/fb0\000", 9);
  res = syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000000ul, 0x2000ul, 0ul);
  if (res != -1)
    r[2] = res;
  syscall(__NR_ioctl, r[2], 0x4611, 0ul);
  return 0;
}