// https://syzkaller.appspot.com/bug?id=7fed6d584f10a3e20118193cefa19346940df6e6
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[1] = {0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 3ul, 0x32ul, -1, 0ul);
  intptr_t res = 0;
  *(uint64_t*)0x20000280 = 0;
  *(uint32_t*)0x20000288 = 0;
  *(uint64_t*)0x20000290 = 0x20000240;
  *(uint64_t*)0x20000240 = 0x200005c0;
  memcpy(
      (void*)0x200005c0,
      "\x70\x00\x00\x00\x00\x01\x19\x05\x03\x01\x00\x00\x3e\xfb\xd7\x7c\x64\xac"
      "\xa5\x87\x24\x00\x01\x00\x14\x00\x01\x00\x08\x00\x01\x00\xff\xff\xff\xff"
      "\x08\x00\x02\x00\xac\x16\x00\x01\x0c\x00\x02\x00\x05\x00\x01\x00\x00\x00"
      "\x00\x00\x24\x00\x02\x00\x0c\x00\x02\x00\x05\x00\x01\x00\x00\x00\x00\x00"
      "\x14\x00\x01\x00\x08\x00\x01\x00\xe0\x00\x00\x02\x08\x00\x02\x00\x00\x00"
      "\x00\x00\x08\x00\x07\x00\x00\x00\x1a\x00\x0c\x00\x06\x00\x08\x00\x60\x9b"
      "\x7f\x00\x00\x01\x52\x41\xd9\x92\x8a\x46\x72\xb0\xc2\x0b\x3a\xca\xeb\xcf"
      "\x3e\x6d\xf1\x0d\xe3\xe4\x1b\x31\x43\xf7\xf1\x76\x36\xdc\x46\xe4\x7f\x0a"
      "\x3f\x1c\xd4\xce\x77\xc7\x6e\x72\xfc\x1d\xdf\x1c\x3f\x00\x00\x00\x00\x00"
      "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbe\x09\x02\x48\xe4\xab\x74\x76"
      "\x4b\x11\x08\xfd\x14\xc1\x3b\x39\xef\x2f\x56\xd5\x76\x0f\x63\x85\x01\x4f"
      "\xfa\x7e\xd2\x00\x10\xb7\x79\xfa\xd3\x7b\x7b\x00\x00\x6b\x78\x3a\x01\xe1"
      "\x48\xd7\x41\x82\x40\x51\xa6\xbe\x4f\x77\x71\xb9\x66\x6d\x5e\x78\x91\xe1"
      "\xc4\x6f\xb9\x17\x64\x38\xae\x53\x0e\x52\x20\x64\x74\x59\x51\x61\x31\x66"
      "\xcf\xcd\x8b\xf4\x36\x6c\x0a\x7f\xdd\x6a\xeb\x00\xf7\x9b\xda\xa2\x8f\xf9"
      "\x9a\x7d\x2d\xcf\x73\x29\x3f\x4b\xa9\xf0\xe5\xf9\x4b\xbf\x67\x65\x99\x54"
      "\xfb\xeb\xdf\x20\x5f\x60\xc5\x97\x1d\x90\x6f\xb0\x03\x4c\x95\x33\xea\xa0"
      "\x76\xe1\x4f\xc5\xb1\x4d\xe6\x2a\xbe\xeb\x39\xbf\x71\x66\x65\x10\x24\x24"
      "\xfd\x4c\x70\x14\x38\x57\x10\x45\xac\x58\xcf\x84\x84\x13\x8d\x17\xba\x7e"
      "\xec\x8d\x06\x3a\x29\x83\xa3\xe2\xcb\x8c\x8f\xa8\xff\x72\x4f\xec\xd2\x46"
      "\x9c\x2e\x3b\xc5\x5b\xf9\xd8\xb0\xac\x1f\xad\x80\xc4\x22\xba\x6b\x0f\x4c"
      "\x48\x00\x7d\xd6\x0e\x39\x96\x89\xcc\x47\x89\xb1\xcb\xc9\x54\x83\x2d\x51"
      "\xb8\x52\x2c\x44\x0a\x58\xdd\x53\xb5\x05\xe3\x3b\x45\x6a\xd8\x7d\x1a\xac"
      "\x2d\x63\x6b\x63\x29\xf4\x24\x60\x7d\x0d\x32\xf2\x95\x40\x26\x34\x8a\xaf"
      "\x8e\xa3\xe0\x58\x41\xb1\x62\xd8\xb5\x59\x4a\x5b\xd1\x00\x48\xd6\x68\x3a"
      "\x8c\x32\x2c\x22\x14\x9f\xb6\x56\x4f\xef\xee\x45\xa0\xc8\x2f\xee\xef\xa6"
      "\x9e\x74\xc1\x39\x45\x4a\x9e\x00\x11\x27\x12\x8b\xe5\x6f\x24\x46\xe6\x33"
      "\xcb\xf4\x0b\xa5\x4c\x8c\x3f\x44\xfd\x80\x65\x58\xab\x1f\x44\xb4\x83\x8a"
      "\x36\x50\xcd\x3f\x76\x80\x82\x8c\x06\xc1\xe1\xc5\x95\x03\x85\x4d\x7f\x3b"
      "\x98\xfd\xf9\xaa\xd6\xae\xea\x5a\x90\x2d\x38\x9b\x74\x92\xad\x16\x3f\xa8"
      "\x64\x79\xeb\x66\xe2\x4e\x0a\xb3\xff",
      549);
  *(uint64_t*)0x20000248 = 0x70;
  *(uint64_t*)0x20000298 = 1;
  *(uint64_t*)0x200002a0 = 0;
  *(uint64_t*)0x200002a8 = 0;
  *(uint32_t*)0x200002b0 = 0;
  syscall(__NR_sendmsg, -1, 0x20000280ul, 0ul);
  res = syscall(__NR_socket, 0x10ul, 3ul, 0xc);
  if (res != -1)
    r[0] = res;
  *(uint64_t*)0x20000580 = 0;
  *(uint32_t*)0x20000588 = 0;
  *(uint64_t*)0x20000590 = 0x20000200;
  *(uint64_t*)0x20000200 = 0;
  *(uint64_t*)0x20000208 = 0;
  *(uint64_t*)0x20000598 = 0xb;
  *(uint64_t*)0x200005a0 = 0x6000000;
  *(uint64_t*)0x200005a8 = 0;
  *(uint32_t*)0x200005b0 = 0;
  syscall(__NR_sendmsg, r[0], 0x20000580ul, 0ul);
  return 0;
}