// https://syzkaller.appspot.com/bug?id=3c6370447a4c2f892914935ddf604adfcce5b92e
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul,
          /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  const char* reason;
  (void)reason;
  intptr_t res = 0;
  if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
  }
  //  setsockopt$IPT_SO_SET_REPLACE arguments: [
  //    fd: sock_in (resource)
  //    level: const = 0x0 (4 bytes)
  //    opt: const = 0x40 (4 bytes)
  //    val: ptr[in, ipt_replace] {
  //      union ipt_replace {
  //        raw: ipt_replace_t["raw", 2, 3, IPT_RAW_VALID_HOOKS,
  //        ipt_raw_matches, ipt_raw_targets, ipt_hook, ipt_unused, ipt_unused,
  //        ipt_hook, ipt_unused, ipt_hook, ipt_unused, ipt_unused, ipt_hook,
  //        ipt_unused] {
  //          name: buffer: {72 61 77 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //          00 00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x20)
  //          valid_hooks: const = 0x9 (4 bytes)
  //          num_entries: const = 0x3 (4 bytes)
  //          size: bytesize = 0x2b0 (4 bytes)
  //          hook_pre_routing: const = 0x108 (4 bytes)
  //          hook_local_in: const = 0xffffffff (4 bytes)
  //          hook_forward: const = 0xffffffff (4 bytes)
  //          hook_local_out: const = 0x218 (4 bytes)
  //          hook_post_routing: const = 0xffffffff (4 bytes)
  //          underflow_pre_routing: const = 0x218 (4 bytes)
  //          underflow_local_in: const = 0xffffffff (4 bytes)
  //          underflow_forward: const = 0xffffffff (4 bytes)
  //          underflow_local_out: const = 0x218 (4 bytes)
  //          underflow_post_routing: const = 0xffffffff (4 bytes)
  //          num_counters: const = 0x3 (4 bytes)
  //          counters: nil
  //          entries: ipt_replace_entries[2, ipt_raw_matches, ipt_raw_targets]
  //          {
  //            entries: array[ipt_entry[ipt_raw_matches, ipt_raw_targets]] {
  //              ipt_entry[ipt_raw_matches, ipt_raw_targets] {
  //                matches: ipt_entry_matches[ipt_raw_matches] {
  //                  ip: union ipt_ip_or_uncond {
  //                    uncond: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00
  //                    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                    00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x54)
  //                  }
  //                  nfcache: const = 0x0 (4 bytes)
  //                  target_offset: len = 0xc0 (2 bytes)
  //                  next_offset: len = 0x108 (2 bytes)
  //                  comefrom: const = 0x0 (4 bytes)
  //                  counters: xt_counters {
  //                    pcnt: const = 0x0 (8 bytes)
  //                    bcnt: const = 0x0 (8 bytes)
  //                  }
  //                  matches: array[ipt_raw_matches] {
  //                    union ipt_raw_matches {
  //                      common: union ipt_matches {
  //                        unspec: union xt_unspec_matches {
  //                          pkttype: xt_entry_match_t["pkttype",
  //                          xt_pkttype_info, 0] {
  //                            header: xt_entry_match["pkttype", 0] {
  //                              match_size: len = 0x28 (2 bytes)
  //                              name: buffer: {70 6b 74 74 79 70 65 00 00 00
  //                              00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                              00 00 00 00} (length 0x1d) revision: const =
  //                              0x0 (1 bytes)
  //                            }
  //                            data: xt_pkttype_info {
  //                              pkttype: int32 = 0x10 (4 bytes)
  //                              invert: int32 = 0x7245e6fd (4 bytes)
  //                            }
  //                          }
  //                        }
  //                      }
  //                    }
  //                    union ipt_raw_matches {
  //                      common: union ipt_matches {
  //                        ttl: xt_entry_match_t["ttl", ipt_ttl_info, 0] {
  //                          header: xt_entry_match["ttl", 0] {
  //                            match_size: len = 0x28 (2 bytes)
  //                            name: buffer: {74 74 6c 00 00 00 00 00 00 00 00
  //                            00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                            00 00} (length 0x1d) revision: const = 0x0 (1
  //                            bytes)
  //                          }
  //                          data: ipt_ttl_info {
  //                            mode: ipt_ttl_mode = 0x1 (1 bytes)
  //                            ttl: int8 = 0xc (1 bytes)
  //                          }
  //                          pad = 0x0 (6 bytes)
  //                        }
  //                      }
  //                    }
  //                  }
  //                }
  //                target: union ipt_raw_targets {
  //                  unspec: union xt_unspec_raw_targets {
  //                    CT0: xt_target_t["CT", xt_ct_target_info, 0] {
  //                      target_size: len = 0x48 (2 bytes)
  //                      name: buffer: {43 54 00 00 00 00 00 00 00 00 00 00 00
  //                      00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  //                      (length 0x1d) revision: const = 0x0 (1 bytes) data:
  //                      xt_ct_target_info {
  //                        flags: int16 = 0x1 (2 bytes)
  //                        zone: int16 = 0x5 (2 bytes)
  //                        ct_events: int32 = 0x1 (4 bytes)
  //                        exp_events: int32 = 0xfffffc00 (4 bytes)
  //                        helper: buffer: {00 00 00 00 00 00 00 00 00 00 00 00
  //                        00 00 00 00} (length 0x10) pad = 0x0 (4 bytes) ct:
  //                        align64[intptr] {
  //                          v: intptr = 0x6 (8 bytes)
  //                        }
  //                      }
  //                    }
  //                  }
  //                }
  //              }
  //              ipt_entry[ipt_raw_matches, ipt_raw_targets] {
  //                matches: ipt_entry_matches[ipt_raw_matches] {
  //                  ip: union ipt_ip_or_uncond {
  //                    ip: ipt_ip {
  //                      src: union ipv4_addr {
  //                        rand_addr: int32be = 0x64010101 (4 bytes)
  //                      }
  //                      dst: union ipv4_addr {
  //                        loopback: const = 0x7f000001 (4 bytes)
  //                      }
  //                      smsk: ipv4_addr_mask_vals = 0x0 (4 bytes)
  //                      dmsk: ipv4_addr_mask_vals = 0xffffff00 (4 bytes)
  //                      iniface: buffer: {6c 6f 00 00 00 00 00 00 00 00 00 00
  //                      00 00 00 00} (length 0x10) outiface: buffer: {76 65 74
  //                      68 31 5f 74 6f 5f 62 61 74 61 64 76 00} (length 0x10)
  //                      iniface_mask: devname_mask {
  //                        lo: devname_mask_values = 0x0 (1 bytes)
  //                        pad = 0x0 (15 bytes)
  //                      }
  //                      outiface_mask: devname_mask {
  //                        lo: devname_mask_values = 0x0 (1 bytes)
  //                        pad = 0x0 (15 bytes)
  //                      }
  //                      proto: ipv4_types = 0x6 (2 bytes)
  //                      flags: ipt_ip_flags = 0x1 (1 bytes)
  //                      invflags: ipt_ip_invflags = 0x8 (1 bytes)
  //                    }
  //                  }
  //                  nfcache: const = 0x0 (4 bytes)
  //                  target_offset: len = 0xc8 (2 bytes)
  //                  next_offset: len = 0x110 (2 bytes)
  //                  comefrom: const = 0x0 (4 bytes)
  //                  counters: xt_counters {
  //                    pcnt: const = 0x0 (8 bytes)
  //                    bcnt: const = 0x0 (8 bytes)
  //                  }
  //                  matches: array[ipt_raw_matches] {
  //                    union ipt_raw_matches {
  //                      inet: union xt_inet_raw_matches {
  //                        rpfilter: xt_entry_match_t["rpfilter",
  //                        xt_rpfilter_info, 0] {
  //                          header: xt_entry_match["rpfilter", 0] {
  //                            match_size: len = 0x28 (2 bytes)
  //                            name: buffer: {72 70 66 69 6c 74 65 72 00 00 00
  //                            00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                            00 00} (length 0x1d) revision: const = 0x0 (1
  //                            bytes)
  //                          }
  //                          data: xt_rpfilter_info {
  //                            flags: xt_rpfilter_flags = 0x4 (1 bytes)
  //                          }
  //                          pad = 0x0 (7 bytes)
  //                        }
  //                      }
  //                    }
  //                    union ipt_raw_matches {
  //                      common: union ipt_matches {
  //                        addrtype: xt_entry_match_t["addrtype",
  //                        xt_addrtype_info, 0] {
  //                          header: xt_entry_match["addrtype", 0] {
  //                            match_size: len = 0x30 (2 bytes)
  //                            name: buffer: {61 64 64 72 74 79 70 65 00 00 00
  //                            00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                            00 00} (length 0x1d) revision: const = 0x0 (1
  //                            bytes)
  //                          }
  //                          data: xt_addrtype_info {
  //                            source: xt_addrtype_type = 0x9 (2 bytes)
  //                            dest: xt_addrtype_type = 0x3c1 (2 bytes)
  //                            invert_source: int32 = 0x0 (4 bytes)
  //                            invert_dest: int32 = 0x0 (4 bytes)
  //                          }
  //                          pad = 0x0 (4 bytes)
  //                        }
  //                      }
  //                    }
  //                  }
  //                }
  //                target: union ipt_raw_targets {
  //                  common: union ipt_targets {
  //                    unspec: union xt_unspec_targets {
  //                      IDLETIMER: xt_target_t["IDLETIMER", idletimer_tg_info,
  //                      0] {
  //                        target_size: len = 0x48 (2 bytes)
  //                        name: buffer: {49 44 4c 45 54 49 4d 45 52 00 00 00
  //                        00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  //                        (length 0x1d) revision: const = 0x0 (1 bytes) data:
  //                        idletimer_tg_info {
  //                          timeout: int32 = 0x100 (4 bytes)
  //                          label: buffer: {73 79 7a 30 00 00 00 00 00 00 00
  //                          00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                          00} (length 0x1c) timer: align64[intptr] {
  //                            v: intptr = 0xd21 (8 bytes)
  //                          }
  //                        }
  //                      }
  //                    }
  //                  }
  //                }
  //              }
  //            }
  //            underflow: ipt_entry_underflow {
  //              matches: ipt_entry_underflow_matches {
  //                ip: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                00 00 00 00 00 00 00 00} (length 0x54) nfcache: const = 0x0
  //                (4 bytes) target_offset: len = 0x70 (2 bytes) next_offset:
  //                len = 0x98 (2 bytes) comefrom: const = 0x0 (4 bytes)
  //                counters: xt_counters {
  //                  pcnt: const = 0x0 (8 bytes)
  //                  bcnt: const = 0x0 (8 bytes)
  //                }
  //              }
  //              target: xt_target_t["", const[NF_ACCEPT_VERDICT, int32], 0] {
  //                target_size: len = 0x28 (2 bytes)
  //                name: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //                00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x1d)
  //                revision: const = 0x0 (1 bytes)
  //                data: const = 0xfffffffe (4 bytes)
  //                pad = 0x0 (4 bytes)
  //              }
  //            }
  //          }
  //        }
  //      }
  //    }
  //    len: len = 0x310 (8 bytes)
  //  ]
  memcpy((void*)0x200000000280,
         "raw\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000\000\000\000\000\000",
         32);
  *(uint32_t*)0x2000000002a0 = 9;
  *(uint32_t*)0x2000000002a4 = 3;
  *(uint32_t*)0x2000000002a8 = 0x2b0;
  *(uint32_t*)0x2000000002ac = 0x108;
  *(uint32_t*)0x2000000002b0 = -1;
  *(uint32_t*)0x2000000002b4 = -1;
  *(uint32_t*)0x2000000002b8 = 0x218;
  *(uint32_t*)0x2000000002bc = -1;
  *(uint32_t*)0x2000000002c0 = 0x218;
  *(uint32_t*)0x2000000002c4 = -1;
  *(uint32_t*)0x2000000002c8 = -1;
  *(uint32_t*)0x2000000002cc = 0x218;
  *(uint32_t*)0x2000000002d0 = -1;
  *(uint32_t*)0x2000000002d4 = 3;
  *(uint64_t*)0x2000000002d8 = 0;
  memset((void*)0x2000000002e0, 0, 84);
  *(uint32_t*)0x200000000334 = 0;
  *(uint16_t*)0x200000000338 = 0xc0;
  *(uint16_t*)0x20000000033a = 0x108;
  *(uint32_t*)0x20000000033c = 0;
  *(uint64_t*)0x200000000340 = 0;
  *(uint64_t*)0x200000000348 = 0;
  *(uint16_t*)0x200000000350 = 0x28;
  memcpy((void*)0x200000000352,
         "pkttype\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x20000000036f = 0;
  *(uint32_t*)0x200000000370 = 0x10;
  *(uint32_t*)0x200000000374 = 0x7245e6fd;
  *(uint16_t*)0x200000000378 = 0x28;
  memcpy((void*)0x20000000037a,
         "ttl\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x200000000397 = 0;
  *(uint8_t*)0x200000000398 = 1;
  *(uint8_t*)0x200000000399 = 0xc;
  *(uint16_t*)0x2000000003a0 = 0x48;
  memcpy((void*)0x2000000003a2,
         "CT\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x2000000003bf = 0;
  *(uint16_t*)0x2000000003c0 = 1;
  *(uint16_t*)0x2000000003c2 = 5;
  *(uint32_t*)0x2000000003c4 = 1;
  *(uint32_t*)0x2000000003c8 = 0xfffffc00;
  memset((void*)0x2000000003cc, 0, 16);
  *(uint64_t*)0x2000000003e0 = 6;
  *(uint32_t*)0x2000000003e8 = htobe32(0x64010101);
  *(uint32_t*)0x2000000003ec = htobe32(0x7f000001);
  *(uint32_t*)0x2000000003f0 = htobe32(0);
  *(uint32_t*)0x2000000003f4 = htobe32(0xffffff00);
  memcpy((void*)0x2000000003f8,
         "lo\000\000\000\000\000\000\000\000\000\000\000\000\000\000", 16);
  memcpy((void*)0x200000000408, "veth1_to_batadv\000", 16);
  *(uint8_t*)0x200000000418 = 0;
  *(uint8_t*)0x200000000428 = 0;
  *(uint16_t*)0x200000000438 = 6;
  *(uint8_t*)0x20000000043a = 1;
  *(uint8_t*)0x20000000043b = 8;
  *(uint32_t*)0x20000000043c = 0;
  *(uint16_t*)0x200000000440 = 0xc8;
  *(uint16_t*)0x200000000442 = 0x110;
  *(uint32_t*)0x200000000444 = 0;
  *(uint64_t*)0x200000000448 = 0;
  *(uint64_t*)0x200000000450 = 0;
  *(uint16_t*)0x200000000458 = 0x28;
  memcpy((void*)0x20000000045a,
         "rpfilter\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x200000000477 = 0;
  *(uint8_t*)0x200000000478 = 4;
  *(uint16_t*)0x200000000480 = 0x30;
  memcpy((void*)0x200000000482,
         "addrtype\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000",
         29);
  *(uint8_t*)0x20000000049f = 0;
  *(uint16_t*)0x2000000004a0 = 9;
  *(uint16_t*)0x2000000004a2 = 0x3c1;
  *(uint32_t*)0x2000000004a4 = 0;
  *(uint32_t*)0x2000000004a8 = 0;
  *(uint16_t*)0x2000000004b0 = 0x48;
  memcpy((void*)0x2000000004b2,
         "IDLETIMER\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000",
         29);
  *(uint8_t*)0x2000000004cf = 0;
  *(uint32_t*)0x2000000004d0 = 0x100;
  memcpy((void*)0x2000000004d4,
         "syz0\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000",
         28);
  *(uint64_t*)0x2000000004f0 = 0xd21;
  memset((void*)0x2000000004f8, 0, 84);
  *(uint32_t*)0x20000000054c = 0;
  *(uint16_t*)0x200000000550 = 0x70;
  *(uint16_t*)0x200000000552 = 0x98;
  *(uint32_t*)0x200000000554 = 0;
  *(uint64_t*)0x200000000558 = 0;
  *(uint64_t*)0x200000000560 = 0;
  *(uint16_t*)0x200000000568 = 0x28;
  memset((void*)0x20000000056a, 0, 29);
  *(uint8_t*)0x200000000587 = 0;
  *(uint32_t*)0x200000000588 = 0xfffffffe;
  syscall(__NR_setsockopt, /*fd=*/(intptr_t)-1, /*level=*/0, /*opt=*/0x40,
          /*val=*/0x200000000280ul, /*len=*/0x310ul);
  //  pipe2$9p arguments: [
  //    pipefd: ptr[out, pipe_9p] {
  //      pipe_9p {
  //        rfd: rfd9p (resource)
  //        wfd: wfd9p (resource)
  //      }
  //    }
  //    flags: pipe_flags = 0x0 (8 bytes)
  //  ]
  res = syscall(__NR_pipe2, /*pipefd=*/0x200000000240ul, /*flags=*/0ul);
  if (res != -1) {
    r[0] = *(uint32_t*)0x200000000240;
    r[1] = *(uint32_t*)0x200000000244;
  }
  //  write$P9_RVERSION arguments: [
  //    fd: wfd9p (resource)
  //    data: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //        union ANYUNION {
  //          ANYBLOB: buffer: {15 00 00 00 65 ff ff 09 7b 00 00 08 00 39 50 32
  //          30 30 30 2e 4c} (length 0x15)
  //        }
  //      }
  //    }
  //    size: bytesize = 0x15 (8 bytes)
  //  ]
  memcpy((void*)0x200000000080,
         "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30"
         "\x30\x30\x2e\x4c",
         21);
  syscall(__NR_write, /*fd=*/r[1], /*data=*/0x200000000080ul, /*size=*/0x15ul);
  //  dup arguments: [
  //    oldfd: fd (resource)
  //  ]
  //  returns fd
  res = syscall(__NR_dup, /*oldfd=*/r[1]);
  if (res != -1)
    r[2] = res;
  //  write$FUSE_BMAP arguments: [
  //    fd: fd_fuse (resource)
  //    arg: ptr[in, fuse_out_t[fuse_unique, fuse_bmap_out]] {
  //      fuse_out_t[fuse_unique, fuse_bmap_out] {
  //        len: len = 0x18 (4 bytes)
  //        err: fuse_errors = 0x0 (4 bytes)
  //        unique: fuse_unique (resource)
  //        payload: fuse_bmap_out {
  //          block: int64 = 0x0 (8 bytes)
  //        }
  //      }
  //    }
  //    len: bytesize = 0x18 (8 bytes)
  //  ]
  *(uint32_t*)0x200000000100 = 0x18;
  *(uint32_t*)0x200000000104 = 0;
  *(uint64_t*)0x200000000108 = 0;
  *(uint64_t*)0x200000000110 = 0;
  syscall(__NR_write, /*fd=*/r[2], /*arg=*/0x200000000100ul, /*len=*/0x18ul);
  //  write$FUSE_DIRENTPLUS arguments: [
  //    fd: fd_fuse (resource)
  //    arg: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //        union ANYUNION {
  //          ANYBLOB: buffer: {b0} (length 0x1)
  //        }
  //      }
  //    }
  //    len: bytesize = 0xb0 (8 bytes)
  //  ]
  memset((void*)0x200000002100, 176, 1);
  syscall(__NR_write, /*fd=*/r[2], /*arg=*/0x200000002100ul, /*len=*/0xb0ul);
  //  write$FUSE_DIRENTPLUS arguments: [
  //    fd: fd_fuse (resource)
  //    arg: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //        union ANYUNION {
  //          ANYBLOB: buffer: {10} (length 0x1)
  //        }
  //      }
  //    }
  //    len: bytesize = 0x10 (8 bytes)
  //  ]
  memset((void*)0x200000000140, 16, 1);
  syscall(__NR_write, /*fd=*/r[2], /*arg=*/0x200000000140ul, /*len=*/0x10ul);
  //  write$FUSE_NOTIFY_RETRIEVE arguments: [
  //    fd: fd_fuse (resource)
  //    arg: ptr[in, fuse_notify[FUSE_NOTIFY_RETRIEVE,
  //    fuse_notify_retrieve_out]] {
  //      fuse_notify[FUSE_NOTIFY_RETRIEVE, fuse_notify_retrieve_out] {
  //        len: len = 0x30 (4 bytes)
  //        err: const = 0x5 (4 bytes)
  //        unique: const = 0x0 (8 bytes)
  //        payload: fuse_notify_retrieve_out {
  //          notify_unique: const = 0x0 (8 bytes)
  //          nodeid: int64 = 0x1 (8 bytes)
  //          offset: int64 = 0x5 (8 bytes)
  //          size: int32 = 0x7 (4 bytes)
  //          padding: const = 0x0 (4 bytes)
  //        }
  //      }
  //    }
  //    len: bytesize = 0x30 (8 bytes)
  //  ]
  *(uint32_t*)0x200000000200 = 0x30;
  *(uint32_t*)0x200000000204 = 5;
  *(uint64_t*)0x200000000208 = 0;
  *(uint64_t*)0x200000000210 = 0;
  *(uint64_t*)0x200000000218 = 1;
  *(uint64_t*)0x200000000220 = 5;
  *(uint32_t*)0x200000000228 = 7;
  *(uint32_t*)0x20000000022c = 0;
  syscall(__NR_write, /*fd=*/r[2], /*arg=*/0x200000000200ul, /*len=*/0x30ul);
  //  write$FUSE_DIRENTPLUS arguments: [
  //    fd: fd_fuse (resource)
  //    arg: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //        union ANYUNION {
  //          ANYBLOB: buffer: {b0 00 00 00 00 00 00} (length 0x7)
  //        }
  //        union ANYUNION {
  //          ANYRES16: ANYRES16 (resource)
  //        }
  //      }
  //    }
  //    len: bytesize = 0xb0 (8 bytes)
  //  ]
  memcpy((void*)0x2000000002c0, "\xb0\x00\x00\x00\x00\x00\x00", 7);
  *(uint16_t*)0x2000000002c7 = -1;
  syscall(__NR_write, /*fd=*/r[2], /*arg=*/0x2000000002c0ul, /*len=*/0xb0ul);
  //  mkdirat arguments: [
  //    fd: fd_dir (resource)
  //    path: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8)
  //    }
  //    mode: open_mode = 0x0 (8 bytes)
  //  ]
  memcpy((void*)0x200000000000, "./file0\000", 8);
  syscall(__NR_mkdirat, /*fd=*/0xffffff9c, /*path=*/0x200000000000ul,
          /*mode=*/0ul);
  //  mount$9p_fd arguments: [
  //    src: const = 0x0 (8 bytes)
  //    dst: ptr[in, buffer] {
  //      buffer: {2e 2f 66 69 6c 65 30 00} (length 0x8)
  //    }
  //    type: ptr[in, buffer] {
  //      buffer: {39 70 00} (length 0x3)
  //    }
  //    flags: mount_flags = 0x0 (8 bytes)
  //    opts: ptr[inout, array[ANYUNION]] {
  //      array[ANYUNION] {
  //        union ANYUNION {
  //          ANYBLOB: buffer: {74 72 61 6e 73 3d 66 64 2c 72 66 64 6e 6f 3d}
  //          (length 0xf)
  //        }
  //        union ANYUNION {
  //          ANYRESHEX: ANYRES64 (resource)
  //        }
  //        union ANYUNION {
  //          ANYBLOB: buffer: {2c 77 66 64 6e 6f 3d} (length 0x7)
  //        }
  //        union ANYUNION {
  //          ANYRESHEX: ANYRES64 (resource)
  //        }
  //        union ANYUNION {
  //          ANYBLOB: buffer: {2c 70 6f 73 69 78 61 63 6c} (length 0x9)
  //        }
  //      }
  //    }
  //  ]
  memcpy((void*)0x2000000003c0, "./file0\000", 8);
  memcpy((void*)0x200000000b80, "9p\000", 3);
  memcpy((void*)0x200000000580, "trans=fd,rfdno=", 15);
  sprintf((char*)0x20000000058f, "0x%016llx", (long long)r[0]);
  memcpy((void*)0x2000000005a1, ",wfdno=", 7);
  sprintf((char*)0x2000000005a8, "0x%016llx", (long long)r[2]);
  memcpy((void*)0x2000000005ba, ",posixacl", 9);
  syscall(__NR_mount, /*src=*/0ul, /*dst=*/0x2000000003c0ul,
          /*type=*/0x200000000b80ul, /*flags=*/0ul, /*opts=*/0x200000000580ul);
  return 0;
}