// https://syzkaller.appspot.com/bug?id=779a64ccaefd969d5d9bc72a7c4fe39598d53884
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

#define BITMASK(bf_off, bf_len) (((1ull << (bf_len)) - 1) << (bf_off))
#define STORE_BY_BITMASK(type, htobe, addr, val, bf_off, bf_len)               \
  *(type*)(addr) =                                                             \
      htobe((htobe(*(type*)(addr)) & ~BITMASK((bf_off), (bf_len))) |           \
            (((type)(val) << (bf_off)) & BITMASK((bf_off), (bf_len))))

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  int i;
  for (i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter;
  for (iter = 0;; iter++) {
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5 * 1000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff};

void execute_one(void)
{
  intptr_t res = 0;
  res = syscall(__NR_socket, 0xaul, 1ul, 0);
  if (res != -1)
    r[0] = res;
  memcpy((void*)0x20000500, "filter\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000",
         32);
  *(uint32_t*)0x20000520 = 0xe;
  *(uint32_t*)0x20000524 = 4;
  *(uint32_t*)0x20000528 = 0x3f8;
  *(uint32_t*)0x2000052c = 0x108;
  *(uint32_t*)0x20000530 = 0x230;
  *(uint32_t*)0x20000534 = 0x108;
  *(uint32_t*)0x20000538 = 0;
  *(uint32_t*)0x2000053c = 0x1d8;
  *(uint32_t*)0x20000540 = 0x2e0;
  *(uint32_t*)0x20000544 = 0x328;
  *(uint32_t*)0x20000548 = 0x328;
  *(uint32_t*)0x2000054c = 0x328;
  *(uint32_t*)0x20000550 = 0x2e0;
  *(uint32_t*)0x20000554 = 4;
  *(uint64_t*)0x20000558 = 0;
  *(uint8_t*)0x20000560 = 0;
  *(uint8_t*)0x20000561 = 0;
  *(uint8_t*)0x20000562 = 0;
  *(uint8_t*)0x20000563 = 0;
  *(uint8_t*)0x20000564 = 0;
  *(uint8_t*)0x20000565 = 0;
  *(uint8_t*)0x20000566 = 0;
  *(uint8_t*)0x20000567 = 0;
  *(uint8_t*)0x20000568 = 0;
  *(uint8_t*)0x20000569 = 0;
  *(uint8_t*)0x2000056a = 0;
  *(uint8_t*)0x2000056b = 0;
  *(uint8_t*)0x2000056c = 0;
  *(uint8_t*)0x2000056d = 0;
  *(uint8_t*)0x2000056e = 0;
  *(uint8_t*)0x2000056f = 0;
  *(uint8_t*)0x20000570 = 0;
  *(uint8_t*)0x20000571 = 0;
  *(uint8_t*)0x20000572 = 0;
  *(uint8_t*)0x20000573 = 0;
  *(uint8_t*)0x20000574 = 0;
  *(uint8_t*)0x20000575 = 0;
  *(uint8_t*)0x20000576 = 0;
  *(uint8_t*)0x20000577 = 0;
  *(uint8_t*)0x20000578 = 0;
  *(uint8_t*)0x20000579 = 0;
  *(uint8_t*)0x2000057a = 0;
  *(uint8_t*)0x2000057b = 0;
  *(uint8_t*)0x2000057c = 0;
  *(uint8_t*)0x2000057d = 0;
  *(uint8_t*)0x2000057e = 0;
  *(uint8_t*)0x2000057f = 0;
  *(uint8_t*)0x20000580 = 0;
  *(uint8_t*)0x20000581 = 0;
  *(uint8_t*)0x20000582 = 0;
  *(uint8_t*)0x20000583 = 0;
  *(uint8_t*)0x20000584 = 0;
  *(uint8_t*)0x20000585 = 0;
  *(uint8_t*)0x20000586 = 0;
  *(uint8_t*)0x20000587 = 0;
  *(uint8_t*)0x20000588 = 0;
  *(uint8_t*)0x20000589 = 0;
  *(uint8_t*)0x2000058a = 0;
  *(uint8_t*)0x2000058b = 0;
  *(uint8_t*)0x2000058c = 0;
  *(uint8_t*)0x2000058d = 0;
  *(uint8_t*)0x2000058e = 0;
  *(uint8_t*)0x2000058f = 0;
  *(uint8_t*)0x20000590 = 0;
  *(uint8_t*)0x20000591 = 0;
  *(uint8_t*)0x20000592 = 0;
  *(uint8_t*)0x20000593 = 0;
  *(uint8_t*)0x20000594 = 0;
  *(uint8_t*)0x20000595 = 0;
  *(uint8_t*)0x20000596 = 0;
  *(uint8_t*)0x20000597 = 0;
  *(uint8_t*)0x20000598 = 0;
  *(uint8_t*)0x20000599 = 0;
  *(uint8_t*)0x2000059a = 0;
  *(uint8_t*)0x2000059b = 0;
  *(uint8_t*)0x2000059c = 0;
  *(uint8_t*)0x2000059d = 0;
  *(uint8_t*)0x2000059e = 0;
  *(uint8_t*)0x2000059f = 0;
  *(uint8_t*)0x200005a0 = 0;
  *(uint8_t*)0x200005a1 = 0;
  *(uint8_t*)0x200005a2 = 0;
  *(uint8_t*)0x200005a3 = 0;
  *(uint8_t*)0x200005a4 = 0;
  *(uint8_t*)0x200005a5 = 0;
  *(uint8_t*)0x200005a6 = 0;
  *(uint8_t*)0x200005a7 = 0;
  *(uint8_t*)0x200005a8 = 0;
  *(uint8_t*)0x200005a9 = 0;
  *(uint8_t*)0x200005aa = 0;
  *(uint8_t*)0x200005ab = 0;
  *(uint8_t*)0x200005ac = 0;
  *(uint8_t*)0x200005ad = 0;
  *(uint8_t*)0x200005ae = 0;
  *(uint8_t*)0x200005af = 0;
  *(uint8_t*)0x200005b0 = 0;
  *(uint8_t*)0x200005b1 = 0;
  *(uint8_t*)0x200005b2 = 0;
  *(uint8_t*)0x200005b3 = 0;
  *(uint8_t*)0x200005b4 = 0;
  *(uint8_t*)0x200005b5 = 0;
  *(uint8_t*)0x200005b6 = 0;
  *(uint8_t*)0x200005b7 = 0;
  *(uint8_t*)0x200005b8 = 0;
  *(uint8_t*)0x200005b9 = 0;
  *(uint8_t*)0x200005ba = 0;
  *(uint8_t*)0x200005bb = 0;
  *(uint8_t*)0x200005bc = 0;
  *(uint8_t*)0x200005bd = 0;
  *(uint8_t*)0x200005be = 0;
  *(uint8_t*)0x200005bf = 0;
  *(uint8_t*)0x200005c0 = 0;
  *(uint8_t*)0x200005c1 = 0;
  *(uint8_t*)0x200005c2 = 0;
  *(uint8_t*)0x200005c3 = 0;
  *(uint8_t*)0x200005c4 = 0;
  *(uint8_t*)0x200005c5 = 0;
  *(uint8_t*)0x200005c6 = 0;
  *(uint8_t*)0x200005c7 = 0;
  *(uint8_t*)0x200005c8 = 0;
  *(uint8_t*)0x200005c9 = 0;
  *(uint8_t*)0x200005ca = 0;
  *(uint8_t*)0x200005cb = 0;
  *(uint8_t*)0x200005cc = 0;
  *(uint8_t*)0x200005cd = 0;
  *(uint8_t*)0x200005ce = 0;
  *(uint8_t*)0x200005cf = 0;
  *(uint8_t*)0x200005d0 = 0;
  *(uint8_t*)0x200005d1 = 0;
  *(uint8_t*)0x200005d2 = 0;
  *(uint8_t*)0x200005d3 = 0;
  *(uint8_t*)0x200005d4 = 0;
  *(uint8_t*)0x200005d5 = 0;
  *(uint8_t*)0x200005d6 = 0;
  *(uint8_t*)0x200005d7 = 0;
  *(uint8_t*)0x200005d8 = 0;
  *(uint8_t*)0x200005d9 = 0;
  *(uint8_t*)0x200005da = 0;
  *(uint8_t*)0x200005db = 0;
  *(uint8_t*)0x200005dc = 0;
  *(uint8_t*)0x200005dd = 0;
  *(uint8_t*)0x200005de = 0;
  *(uint8_t*)0x200005df = 0;
  *(uint8_t*)0x200005e0 = 0;
  *(uint8_t*)0x200005e1 = 0;
  *(uint8_t*)0x200005e2 = 0;
  *(uint8_t*)0x200005e3 = 0;
  *(uint8_t*)0x200005e4 = 0;
  *(uint8_t*)0x200005e5 = 0;
  *(uint8_t*)0x200005e6 = 0;
  *(uint8_t*)0x200005e7 = 0;
  *(uint32_t*)0x200005e8 = 0;
  *(uint16_t*)0x200005ec = 0xa8;
  *(uint16_t*)0x200005ee = 0x108;
  *(uint32_t*)0x200005f0 = 0;
  *(uint64_t*)0x200005f8 = 0;
  *(uint64_t*)0x20000600 = 0;
  *(uint16_t*)0x20000608 = 0x60;
  memcpy((void*)0x2000060a, "HMARK\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000",
         29);
  *(uint8_t*)0x20000627 = 0;
  *(uint8_t*)0x20000628 = 0xfe;
  *(uint8_t*)0x20000629 = 0x80;
  *(uint8_t*)0x2000062a = 0;
  *(uint8_t*)0x2000062b = 0;
  *(uint8_t*)0x2000062c = 0;
  *(uint8_t*)0x2000062d = 0;
  *(uint8_t*)0x2000062e = 0;
  *(uint8_t*)0x2000062f = 0;
  *(uint8_t*)0x20000630 = 0;
  *(uint8_t*)0x20000631 = 0;
  *(uint8_t*)0x20000632 = 0;
  *(uint8_t*)0x20000633 = 0;
  *(uint8_t*)0x20000634 = 0;
  *(uint8_t*)0x20000635 = 0;
  *(uint8_t*)0x20000636 = 0;
  *(uint8_t*)0x20000637 = 0xaa;
  *(uint32_t*)0x20000638 = htobe32(0);
  *(uint32_t*)0x2000063c = htobe32(0);
  *(uint32_t*)0x20000640 = htobe32(0);
  *(uint32_t*)0x20000644 = htobe32(0);
  *(uint16_t*)0x20000648 = htobe16(0);
  *(uint16_t*)0x2000064a = htobe16(0);
  *(uint16_t*)0x2000064c = htobe16(0);
  *(uint16_t*)0x2000064e = htobe16(0);
  *(uint32_t*)0x20000650 = 0;
  *(uint16_t*)0x20000654 = 0;
  *(uint32_t*)0x20000658 = 0;
  *(uint32_t*)0x2000065c = 4;
  *(uint32_t*)0x20000660 = 0;
  *(uint8_t*)0x20000668 = 0;
  *(uint8_t*)0x20000669 = 0;
  *(uint8_t*)0x2000066a = 0;
  *(uint8_t*)0x2000066b = 0;
  *(uint8_t*)0x2000066c = 0;
  *(uint8_t*)0x2000066d = 0;
  *(uint8_t*)0x2000066e = 0;
  *(uint8_t*)0x2000066f = 0;
  *(uint8_t*)0x20000670 = 0;
  *(uint8_t*)0x20000671 = 0;
  *(uint8_t*)0x20000672 = 0;
  *(uint8_t*)0x20000673 = 0;
  *(uint8_t*)0x20000674 = 0;
  *(uint8_t*)0x20000675 = 0;
  *(uint8_t*)0x20000676 = 0;
  *(uint8_t*)0x20000677 = 0;
  *(uint8_t*)0x20000678 = 0;
  *(uint8_t*)0x20000679 = 0;
  *(uint8_t*)0x2000067a = 0;
  *(uint8_t*)0x2000067b = 0;
  *(uint8_t*)0x2000067c = 0;
  *(uint8_t*)0x2000067d = 0;
  *(uint8_t*)0x2000067e = 0;
  *(uint8_t*)0x2000067f = 0;
  *(uint8_t*)0x20000680 = 0;
  *(uint8_t*)0x20000681 = 0;
  *(uint8_t*)0x20000682 = 0;
  *(uint8_t*)0x20000683 = 0;
  *(uint8_t*)0x20000684 = 0;
  *(uint8_t*)0x20000685 = 0;
  *(uint8_t*)0x20000686 = 0;
  *(uint8_t*)0x20000687 = 0;
  *(uint8_t*)0x20000688 = 0;
  *(uint8_t*)0x20000689 = 0;
  *(uint8_t*)0x2000068a = 0;
  *(uint8_t*)0x2000068b = 0;
  *(uint8_t*)0x2000068c = 0;
  *(uint8_t*)0x2000068d = 0;
  *(uint8_t*)0x2000068e = 0;
  *(uint8_t*)0x2000068f = 0;
  *(uint8_t*)0x20000690 = 0;
  *(uint8_t*)0x20000691 = 0;
  *(uint8_t*)0x20000692 = 0;
  *(uint8_t*)0x20000693 = 0;
  *(uint8_t*)0x20000694 = 0;
  *(uint8_t*)0x20000695 = 0;
  *(uint8_t*)0x20000696 = 0;
  *(uint8_t*)0x20000697 = 0;
  *(uint8_t*)0x20000698 = 0;
  *(uint8_t*)0x20000699 = 0;
  *(uint8_t*)0x2000069a = 0;
  *(uint8_t*)0x2000069b = 0;
  *(uint8_t*)0x2000069c = 0;
  *(uint8_t*)0x2000069d = 0;
  *(uint8_t*)0x2000069e = 0;
  *(uint8_t*)0x2000069f = 0;
  *(uint8_t*)0x200006a0 = 0;
  *(uint8_t*)0x200006a1 = 0;
  *(uint8_t*)0x200006a2 = 0;
  *(uint8_t*)0x200006a3 = 0;
  *(uint8_t*)0x200006a4 = 0;
  *(uint8_t*)0x200006a5 = 0;
  *(uint8_t*)0x200006a6 = 0;
  *(uint8_t*)0x200006a7 = 0;
  *(uint8_t*)0x200006a8 = 0;
  *(uint8_t*)0x200006a9 = 0;
  *(uint8_t*)0x200006aa = 0;
  *(uint8_t*)0x200006ab = 0;
  *(uint8_t*)0x200006ac = 0;
  *(uint8_t*)0x200006ad = 0;
  *(uint8_t*)0x200006ae = 0;
  *(uint8_t*)0x200006af = 0;
  *(uint8_t*)0x200006b0 = 0;
  *(uint8_t*)0x200006b1 = 0;
  *(uint8_t*)0x200006b2 = 0;
  *(uint8_t*)0x200006b3 = 0;
  *(uint8_t*)0x200006b4 = 0;
  *(uint8_t*)0x200006b5 = 0;
  *(uint8_t*)0x200006b6 = 0;
  *(uint8_t*)0x200006b7 = 0;
  *(uint8_t*)0x200006b8 = 0;
  *(uint8_t*)0x200006b9 = 0;
  *(uint8_t*)0x200006ba = 0;
  *(uint8_t*)0x200006bb = 0;
  *(uint8_t*)0x200006bc = 0;
  *(uint8_t*)0x200006bd = 0;
  *(uint8_t*)0x200006be = 0;
  *(uint8_t*)0x200006bf = 0;
  *(uint8_t*)0x200006c0 = 0;
  *(uint8_t*)0x200006c1 = 0;
  *(uint8_t*)0x200006c2 = 0;
  *(uint8_t*)0x200006c3 = 0;
  *(uint8_t*)0x200006c4 = 0;
  *(uint8_t*)0x200006c5 = 0;
  *(uint8_t*)0x200006c6 = 0;
  *(uint8_t*)0x200006c7 = 0;
  *(uint8_t*)0x200006c8 = 0;
  *(uint8_t*)0x200006c9 = 0;
  *(uint8_t*)0x200006ca = 0;
  *(uint8_t*)0x200006cb = 0;
  *(uint8_t*)0x200006cc = 0;
  *(uint8_t*)0x200006cd = 0;
  *(uint8_t*)0x200006ce = 0;
  *(uint8_t*)0x200006cf = 0;
  *(uint8_t*)0x200006d0 = 0;
  *(uint8_t*)0x200006d1 = 0;
  *(uint8_t*)0x200006d2 = 0;
  *(uint8_t*)0x200006d3 = 0;
  *(uint8_t*)0x200006d4 = 0;
  *(uint8_t*)0x200006d5 = 0;
  *(uint8_t*)0x200006d6 = 0;
  *(uint8_t*)0x200006d7 = 0;
  *(uint8_t*)0x200006d8 = 0;
  *(uint8_t*)0x200006d9 = 0;
  *(uint8_t*)0x200006da = 0;
  *(uint8_t*)0x200006db = 0;
  *(uint8_t*)0x200006dc = 0;
  *(uint8_t*)0x200006dd = 0;
  *(uint8_t*)0x200006de = 0;
  *(uint8_t*)0x200006df = 0;
  *(uint8_t*)0x200006e0 = 0;
  *(uint8_t*)0x200006e1 = 0;
  *(uint8_t*)0x200006e2 = 0;
  *(uint8_t*)0x200006e3 = 0;
  *(uint8_t*)0x200006e4 = 0;
  *(uint8_t*)0x200006e5 = 0;
  *(uint8_t*)0x200006e6 = 0;
  *(uint8_t*)0x200006e7 = 0;
  *(uint8_t*)0x200006e8 = 0;
  *(uint8_t*)0x200006e9 = 0;
  *(uint8_t*)0x200006ea = 0;
  *(uint8_t*)0x200006eb = 0;
  *(uint8_t*)0x200006ec = 0;
  *(uint8_t*)0x200006ed = 0;
  *(uint8_t*)0x200006ee = 0;
  *(uint8_t*)0x200006ef = 0;
  *(uint32_t*)0x200006f0 = 0;
  *(uint16_t*)0x200006f4 = 0xe0;
  *(uint16_t*)0x200006f6 = 0x128;
  *(uint32_t*)0x200006f8 = 0;
  *(uint64_t*)0x20000700 = 0;
  *(uint64_t*)0x20000708 = 0;
  *(uint16_t*)0x20000710 = 0x38;
  memcpy((void*)0x20000712, "devgroup\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x2000072f = 0;
  *(uint32_t*)0x20000730 = 0;
  *(uint32_t*)0x20000734 = 0;
  *(uint32_t*)0x20000738 = 0;
  *(uint32_t*)0x2000073c = 0;
  *(uint32_t*)0x20000740 = 0;
  *(uint16_t*)0x20000748 = 0x48;
  memcpy((void*)0x2000074a, "TEE\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000",
         29);
  *(uint8_t*)0x20000767 = 1;
  *(uint8_t*)0x20000768 = 0xfe;
  *(uint8_t*)0x20000769 = 0x80;
  *(uint8_t*)0x2000076a = 0;
  *(uint8_t*)0x2000076b = 0;
  *(uint8_t*)0x2000076c = 0;
  *(uint8_t*)0x2000076d = 0;
  *(uint8_t*)0x2000076e = 0;
  *(uint8_t*)0x2000076f = 0;
  *(uint8_t*)0x20000770 = 0;
  *(uint8_t*)0x20000771 = 0;
  *(uint8_t*)0x20000772 = 0;
  *(uint8_t*)0x20000773 = 0;
  *(uint8_t*)0x20000774 = 0;
  *(uint8_t*)0x20000775 = 0;
  *(uint8_t*)0x20000776 = 0;
  *(uint8_t*)0x20000777 = 0xaa;
  memcpy((void*)0x20000778, "veth0_to_team\000\000\000", 16);
  *(uint64_t*)0x20000788 = 0;
  *(uint8_t*)0x20000790 = 0;
  *(uint8_t*)0x20000791 = 0;
  *(uint8_t*)0x20000792 = 0;
  *(uint8_t*)0x20000793 = 0;
  *(uint8_t*)0x20000794 = 0;
  *(uint8_t*)0x20000795 = 0;
  *(uint8_t*)0x20000796 = 0;
  *(uint8_t*)0x20000797 = 0;
  *(uint8_t*)0x20000798 = 0;
  *(uint8_t*)0x20000799 = 0;
  *(uint8_t*)0x2000079a = -1;
  *(uint8_t*)0x2000079b = -1;
  *(uint32_t*)0x2000079c = htobe32(0);
  *(uint8_t*)0x200007a0 = 0;
  *(uint8_t*)0x200007a1 = 0;
  *(uint8_t*)0x200007a2 = 0;
  *(uint8_t*)0x200007a3 = 0;
  *(uint8_t*)0x200007a4 = 0;
  *(uint8_t*)0x200007a5 = 0;
  *(uint8_t*)0x200007a6 = 0;
  *(uint8_t*)0x200007a7 = 0;
  *(uint8_t*)0x200007a8 = 0;
  *(uint8_t*)0x200007a9 = 0;
  *(uint8_t*)0x200007aa = -1;
  *(uint8_t*)0x200007ab = -1;
  *(uint32_t*)0x200007ac = htobe32(0);
  *(uint32_t*)0x200007b0 = htobe32(0);
  *(uint32_t*)0x200007b4 = htobe32(0);
  *(uint32_t*)0x200007b8 = htobe32(0);
  *(uint32_t*)0x200007bc = htobe32(0);
  *(uint32_t*)0x200007c0 = htobe32(0);
  *(uint32_t*)0x200007c4 = htobe32(0);
  *(uint32_t*)0x200007c8 = htobe32(0);
  *(uint32_t*)0x200007cc = htobe32(0);
  memcpy((void*)0x200007d0, "veth1_virt_wifi\000", 16);
  memcpy((void*)0x200007e0, "ip6_vti0\000\000\000\000\000\000\000\000", 16);
  *(uint8_t*)0x200007f0 = 0;
  *(uint8_t*)0x20000800 = 0;
  *(uint16_t*)0x20000810 = 0;
  *(uint8_t*)0x20000812 = 0;
  *(uint8_t*)0x20000813 = 0;
  *(uint8_t*)0x20000814 = 0;
  *(uint32_t*)0x20000818 = 0;
  *(uint16_t*)0x2000081c = 0xd0;
  *(uint16_t*)0x2000081e = 0xf8;
  *(uint32_t*)0x20000820 = 0;
  *(uint64_t*)0x20000828 = 0;
  *(uint64_t*)0x20000830 = 0;
  *(uint16_t*)0x20000838 = 0x28;
  memcpy((void*)0x2000083a, "hl\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000",
         29);
  *(uint8_t*)0x20000857 = 0;
  *(uint8_t*)0x20000858 = 0;
  *(uint8_t*)0x20000859 = 0;
  *(uint16_t*)0x20000860 = 0x28;
  memcpy((void*)0x20000862, "REJECT\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x2000087f = 0;
  *(uint32_t*)0x20000880 = 0;
  *(uint8_t*)0x20000888 = 0;
  *(uint8_t*)0x20000889 = 0;
  *(uint8_t*)0x2000088a = 0;
  *(uint8_t*)0x2000088b = 0;
  *(uint8_t*)0x2000088c = 0;
  *(uint8_t*)0x2000088d = 0;
  *(uint8_t*)0x2000088e = 0;
  *(uint8_t*)0x2000088f = 0;
  *(uint8_t*)0x20000890 = 0;
  *(uint8_t*)0x20000891 = 0;
  *(uint8_t*)0x20000892 = 0;
  *(uint8_t*)0x20000893 = 0;
  *(uint8_t*)0x20000894 = 0;
  *(uint8_t*)0x20000895 = 0;
  *(uint8_t*)0x20000896 = 0;
  *(uint8_t*)0x20000897 = 0;
  *(uint8_t*)0x20000898 = 0;
  *(uint8_t*)0x20000899 = 0;
  *(uint8_t*)0x2000089a = 0;
  *(uint8_t*)0x2000089b = 0;
  *(uint8_t*)0x2000089c = 0;
  *(uint8_t*)0x2000089d = 0;
  *(uint8_t*)0x2000089e = 0;
  *(uint8_t*)0x2000089f = 0;
  *(uint8_t*)0x200008a0 = 0;
  *(uint8_t*)0x200008a1 = 0;
  *(uint8_t*)0x200008a2 = 0;
  *(uint8_t*)0x200008a3 = 0;
  *(uint8_t*)0x200008a4 = 0;
  *(uint8_t*)0x200008a5 = 0;
  *(uint8_t*)0x200008a6 = 0;
  *(uint8_t*)0x200008a7 = 0;
  *(uint8_t*)0x200008a8 = 0;
  *(uint8_t*)0x200008a9 = 0;
  *(uint8_t*)0x200008aa = 0;
  *(uint8_t*)0x200008ab = 0;
  *(uint8_t*)0x200008ac = 0;
  *(uint8_t*)0x200008ad = 0;
  *(uint8_t*)0x200008ae = 0;
  *(uint8_t*)0x200008af = 0;
  *(uint8_t*)0x200008b0 = 0;
  *(uint8_t*)0x200008b1 = 0;
  *(uint8_t*)0x200008b2 = 0;
  *(uint8_t*)0x200008b3 = 0;
  *(uint8_t*)0x200008b4 = 0;
  *(uint8_t*)0x200008b5 = 0;
  *(uint8_t*)0x200008b6 = 0;
  *(uint8_t*)0x200008b7 = 0;
  *(uint8_t*)0x200008b8 = 0;
  *(uint8_t*)0x200008b9 = 0;
  *(uint8_t*)0x200008ba = 0;
  *(uint8_t*)0x200008bb = 0;
  *(uint8_t*)0x200008bc = 0;
  *(uint8_t*)0x200008bd = 0;
  *(uint8_t*)0x200008be = 0;
  *(uint8_t*)0x200008bf = 0;
  *(uint8_t*)0x200008c0 = 0;
  *(uint8_t*)0x200008c1 = 0;
  *(uint8_t*)0x200008c2 = 0;
  *(uint8_t*)0x200008c3 = 0;
  *(uint8_t*)0x200008c4 = 0;
  *(uint8_t*)0x200008c5 = 0;
  *(uint8_t*)0x200008c6 = 0;
  *(uint8_t*)0x200008c7 = 0;
  *(uint8_t*)0x200008c8 = 0;
  *(uint8_t*)0x200008c9 = 0;
  *(uint8_t*)0x200008ca = 0;
  *(uint8_t*)0x200008cb = 0;
  *(uint8_t*)0x200008cc = 0;
  *(uint8_t*)0x200008cd = 0;
  *(uint8_t*)0x200008ce = 0;
  *(uint8_t*)0x200008cf = 0;
  *(uint8_t*)0x200008d0 = 0;
  *(uint8_t*)0x200008d1 = 0;
  *(uint8_t*)0x200008d2 = 0;
  *(uint8_t*)0x200008d3 = 0;
  *(uint8_t*)0x200008d4 = 0;
  *(uint8_t*)0x200008d5 = 0;
  *(uint8_t*)0x200008d6 = 0;
  *(uint8_t*)0x200008d7 = 0;
  *(uint8_t*)0x200008d8 = 0;
  *(uint8_t*)0x200008d9 = 0;
  *(uint8_t*)0x200008da = 0;
  *(uint8_t*)0x200008db = 0;
  *(uint8_t*)0x200008dc = 0;
  *(uint8_t*)0x200008dd = 0;
  *(uint8_t*)0x200008de = 0;
  *(uint8_t*)0x200008df = 0;
  *(uint8_t*)0x200008e0 = 0;
  *(uint8_t*)0x200008e1 = 0;
  *(uint8_t*)0x200008e2 = 0;
  *(uint8_t*)0x200008e3 = 0;
  *(uint8_t*)0x200008e4 = 0;
  *(uint8_t*)0x200008e5 = 0;
  *(uint8_t*)0x200008e6 = 0;
  *(uint8_t*)0x200008e7 = 0;
  *(uint8_t*)0x200008e8 = 0;
  *(uint8_t*)0x200008e9 = 0;
  *(uint8_t*)0x200008ea = 0;
  *(uint8_t*)0x200008eb = 0;
  *(uint8_t*)0x200008ec = 0;
  *(uint8_t*)0x200008ed = 0;
  *(uint8_t*)0x200008ee = 0;
  *(uint8_t*)0x200008ef = 0;
  *(uint8_t*)0x200008f0 = 0;
  *(uint8_t*)0x200008f1 = 0;
  *(uint8_t*)0x200008f2 = 0;
  *(uint8_t*)0x200008f3 = 0;
  *(uint8_t*)0x200008f4 = 0;
  *(uint8_t*)0x200008f5 = 0;
  *(uint8_t*)0x200008f6 = 0;
  *(uint8_t*)0x200008f7 = 0;
  *(uint8_t*)0x200008f8 = 0;
  *(uint8_t*)0x200008f9 = 0;
  *(uint8_t*)0x200008fa = 0;
  *(uint8_t*)0x200008fb = 0;
  *(uint8_t*)0x200008fc = 0;
  *(uint8_t*)0x200008fd = 0;
  *(uint8_t*)0x200008fe = 0;
  *(uint8_t*)0x200008ff = 0;
  *(uint8_t*)0x20000900 = 0;
  *(uint8_t*)0x20000901 = 0;
  *(uint8_t*)0x20000902 = 0;
  *(uint8_t*)0x20000903 = 0;
  *(uint8_t*)0x20000904 = 0;
  *(uint8_t*)0x20000905 = 0;
  *(uint8_t*)0x20000906 = 0;
  *(uint8_t*)0x20000907 = 0;
  *(uint8_t*)0x20000908 = 0;
  *(uint8_t*)0x20000909 = 0;
  *(uint8_t*)0x2000090a = 0;
  *(uint8_t*)0x2000090b = 0;
  *(uint8_t*)0x2000090c = 0;
  *(uint8_t*)0x2000090d = 0;
  *(uint8_t*)0x2000090e = 0;
  *(uint8_t*)0x2000090f = 0;
  *(uint32_t*)0x20000910 = 0;
  *(uint16_t*)0x20000914 = 0xa8;
  *(uint16_t*)0x20000916 = 0xd0;
  *(uint32_t*)0x20000918 = 0;
  *(uint64_t*)0x20000920 = 0;
  *(uint64_t*)0x20000928 = 0;
  *(uint16_t*)0x20000930 = 0x28;
  memcpy((void*)0x20000932, "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000\000\000\000\000\000\000\000"
                            "\000\000\000\000\000",
         29);
  *(uint8_t*)0x2000094f = 0;
  *(uint32_t*)0x20000950 = 0xfffffffe;
  syscall(__NR_setsockopt, r[0], 0x29, 0x40, 0x20000500ul, 0x458ul);
  syscall(__NR_unshare, 0x6c060000ul);
  res = syscall(__NR_socket, 0x10ul, 3ul, 0xc);
  if (res != -1)
    r[1] = res;
  *(uint64_t*)0x20000180 = 0;
  *(uint32_t*)0x20000188 = 0;
  *(uint64_t*)0x20000190 = 0x20000100;
  *(uint64_t*)0x20000100 = 0x20000000;
  *(uint32_t*)0x20000000 = 0x40;
  *(uint8_t*)0x20000004 = 0;
  *(uint8_t*)0x20000005 = 0xb;
  *(uint16_t*)0x20000006 = 0x2053;
  *(uint32_t*)0x20000008 = 0;
  *(uint32_t*)0x2000000c = 0;
  *(uint8_t*)0x20000010 = 3;
  *(uint8_t*)0x20000011 = 0;
  *(uint16_t*)0x20000012 = htobe16(0);
  *(uint16_t*)0x20000014 = 0x18;
  *(uint16_t*)0x20000016 = 2;
  *(uint16_t*)0x20000018 = 0x14;
  STORE_BY_BITMASK(uint16_t, , 0x2000001a, 1, 0, 14);
  STORE_BY_BITMASK(uint16_t, , 0x2000001b, 0, 6, 1);
  STORE_BY_BITMASK(uint16_t, , 0x2000001b, 1, 7, 1);
  *(uint16_t*)0x2000001c = 8;
  *(uint16_t*)0x2000001e = 1;
  *(uint8_t*)0x20000020 = 0xac;
  *(uint8_t*)0x20000021 = 0x14;
  *(uint8_t*)0x20000022 = 0x14;
  *(uint8_t*)0x20000023 = 0xbb;
  *(uint16_t*)0x20000024 = 8;
  *(uint16_t*)0x20000026 = 2;
  *(uint32_t*)0x20000028 = htobe32(0);
  *(uint16_t*)0x2000002c = 8;
  STORE_BY_BITMASK(uint16_t, , 0x2000002e, 3, 0, 14);
  STORE_BY_BITMASK(uint16_t, , 0x2000002f, 1, 6, 1);
  STORE_BY_BITMASK(uint16_t, , 0x2000002f, 0, 7, 1);
  *(uint32_t*)0x20000030 = htobe32(0);
  *(uint16_t*)0x20000034 = 9;
  *(uint16_t*)0x20000036 = 1;
  memcpy((void*)0x20000038, "syz1\000", 5);
  *(uint64_t*)0x20000108 = 0x40;
  *(uint64_t*)0x20000198 = 1;
  *(uint64_t*)0x200001a0 = 0;
  *(uint64_t*)0x200001a8 = 0;
  *(uint32_t*)0x200001b0 = 0;
  syscall(__NR_sendmsg, r[1], 0x20000180ul, 0ul);
}
int main(void)
{
  syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  loop();
  return 0;
}