// https://syzkaller.appspot.com/bug?id=2ffd9d5cc6ebb3a02c5c1ec0e102c190cca0718a
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[1] = {0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul);
  intptr_t res = 0;
  res = syscall(__NR_socket, /*domain=*/0x10ul, /*type=*/3ul, /*proto=*/0);
  if (res != -1)
    r[0] = res;
  *(uint64_t*)0x20000000 = 0;
  *(uint32_t*)0x20000008 = 0;
  *(uint64_t*)0x20000010 = 0x20000080;
  *(uint64_t*)0x20000080 = 0x200000c0;
  memcpy((void*)0x200000c0,
         "\x3c\x00\x00\x00\x18\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a"
         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x15\x00\x08\x00"
         "\x00\x00\x08\x00\x04\x00",
         40);
  *(uint32_t*)0x200000e8 = -1;
  memcpy(
      (void*)0x200000ec,
      "\x10\x00\x17\x80\x0c\x00\x01\x00\x00\x00\x00\x00\x03\x00\x00\x00\xb1\x02"
      "\xfb\xda\xec\xe3\xe1\x52\xaa\x27\x8c\x4b\xe6\x34\x38\x22\x51\x27\x4e\xf7"
      "\x29\x56\xa3\xa0\x63\xb0\x7a\x0a\x61\x8d\x68\x2e\x5b\xda\x65\xfb\xf9\xff"
      "\x24\xb9\x52\x49\xd6\xf3\xa8\xeb\x2e\x14\xc7\x62\xce\x10\xa1\xe4\xa6\xad"
      "\xf1\xc1\x2a\x0f\x98\xc1\x2b\xce\xe9\xb0\x3c\x7c\x81\xec\x73\x33\x3b\xfc"
      "\x2c\x0b\x7d\xa0\xe2\x26\xb6\x98\xe4\x67\x4a\xa7\x30\x5a\x18\x0f\x44\xab"
      "\xac\x80\xd0\x7b\x4f\x81\xac\x11\x73\x4a\x73\x93\x74\x18\x13\x2f\x6d\x6d"
      "\xc3\x4c\x24\x35\xd7\xf1\xc6\xf3\x1e\x83\x65\xe4\x70\x58\x27\xa5\xc6\xf0"
      "\x04\xdf\x78\x0c\x92\xf4\x40\x97\x37\x0f\xda\x0a\x94\xbe\x42\x8d\xa0\x6d"
      "\xaa\x66\x6c\xb8\xea\x20\x4f\x42\xf4\xd8\xab\x13\xd3\x2c\x56\x0a\x56\x0d"
      "\xf8\xa7\xcc\x59\xde\x7d\x65\xc7\xaf\x16\x74\x95\x8c\x22\x95\xea\x31\xf7"
      "\x8e\x74\xf7\x01\x54\x7c\x77\x1b\x25\xa0\x58\x25\x95\x5d\x22\x7b\x1e\xcb"
      "\x8f\x39\xf4\x46\x71\x2f\xe2\xe7\xde\x4f\x33\x11\x25\xe9\x6b\xc7\x02\xda"
      "\xf2\xde\x61\x35\x2b\xf4\xfe\xcc\x32\x3a\xde\xdd\xba\x9f\x17\x08\x27\x58"
      "\x26\x1c\x51\x0d\x8a\x8d\x70\xed\x25\x5c\x91\x9f\xb2\x15\xc3\xbd\xf9\x66"
      "\x4e\x7d\x98\x6f",
      274);
  *(uint64_t*)0x20000088 = 0x3c;
  *(uint64_t*)0x20000018 = 1;
  *(uint64_t*)0x20000020 = 0;
  *(uint64_t*)0x20000028 = 0;
  *(uint32_t*)0x20000030 = 0;
  syscall(__NR_sendmsg, /*fd=*/r[0], /*msg=*/0x20000000ul, /*f=*/0ul);
  return 0;
}