// https://syzkaller.appspot.com/bug?id=33be1b73bbecb4b62186627650e6ce0965465ba4
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <dirent.h>
#include <endian.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/prctl.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <time.h>
#include <unistd.h>

#ifndef __NR_bpf
#define __NR_bpf 321
#endif

static void sleep_ms(uint64_t ms)
{
  usleep(ms * 1000);
}

static uint64_t current_time_ms(void)
{
  struct timespec ts;
  if (clock_gettime(CLOCK_MONOTONIC, &ts))
    exit(1);
  return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
}

#define BITMASK(bf_off, bf_len) (((1ull << (bf_len)) - 1) << (bf_off))
#define STORE_BY_BITMASK(type, htobe, addr, val, bf_off, bf_len)               \
  *(type*)(addr) =                                                             \
      htobe((htobe(*(type*)(addr)) & ~BITMASK((bf_off), (bf_len))) |           \
            (((type)(val) << (bf_off)) & BITMASK((bf_off), (bf_len))))

static bool write_file(const char* file, const char* what, ...)
{
  char buf[1024];
  va_list args;
  va_start(args, what);
  vsnprintf(buf, sizeof(buf), what, args);
  va_end(args);
  buf[sizeof(buf) - 1] = 0;
  int len = strlen(buf);
  int fd = open(file, O_WRONLY | O_CLOEXEC);
  if (fd == -1)
    return false;
  if (write(fd, buf, len) != len) {
    int err = errno;
    close(fd);
    errno = err;
    return false;
  }
  close(fd);
  return true;
}

static void kill_and_wait(int pid, int* status)
{
  kill(-pid, SIGKILL);
  kill(pid, SIGKILL);
  for (int i = 0; i < 100; i++) {
    if (waitpid(-1, status, WNOHANG | __WALL) == pid)
      return;
    usleep(1000);
  }
  DIR* dir = opendir("/sys/fs/fuse/connections");
  if (dir) {
    for (;;) {
      struct dirent* ent = readdir(dir);
      if (!ent)
        break;
      if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
        continue;
      char abort[300];
      snprintf(abort, sizeof(abort), "/sys/fs/fuse/connections/%s/abort",
               ent->d_name);
      int fd = open(abort, O_WRONLY);
      if (fd == -1) {
        continue;
      }
      if (write(fd, abort, 1) < 0) {
      }
      close(fd);
    }
    closedir(dir);
  } else {
  }
  while (waitpid(-1, status, __WALL) != pid) {
  }
}

static void setup_test()
{
  prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0);
  setpgrp();
  write_file("/proc/self/oom_score_adj", "1000");
}

static void execute_one(void);

#define WAIT_FLAGS __WALL

static void loop(void)
{
  int iter = 0;
  for (;; iter++) {
    int pid = fork();
    if (pid < 0)
      exit(1);
    if (pid == 0) {
      setup_test();
      execute_one();
      exit(0);
    }
    int status = 0;
    uint64_t start = current_time_ms();
    for (;;) {
      if (waitpid(-1, &status, WNOHANG | WAIT_FLAGS) == pid)
        break;
      sleep_ms(1);
      if (current_time_ms() - start < 5000)
        continue;
      kill_and_wait(pid, &status);
      break;
    }
  }
}

uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff};

void execute_one(void)
{
  intptr_t res = 0;
  *(uint32_t*)0x20caefb8 = 6;
  *(uint32_t*)0x20caefbc = 3;
  *(uint64_t*)0x20caefc0 = 0x200003c0;
  memcpy(
      (void*)0x200003c0,
      "\x85\x00\x00\x00\x7d\x00\x00\x00\x7c\x00\x00\x00\x00\x00\x00\x00\x95\x00"
      "\x00\x00\x00\x00\x00\x00\x59\xf6\xa2\xc3\x0e\xff\x3c\xff\x98\x37\xf1\xad"
      "\x5e\x6e\x00\x08\x8f\x85\xd0\xdc\x61\xbd\x96\x3e\xd5\x77\xe4\xe7\x10\xb6"
      "\x38\x32\x26\x04\xf7\xa8\x1b\xf1\x28\xd9\x08\x5a\x94\x69\x08\x95\x24\x9d"
      "\x10\xc9\x6c\xe1\xbb\x69\x05\x79\x1f\xd9\x28\xb3\x6e\x5e\xb3\x77\x2b\x42"
      "\x88\xa3\x8a\x2e\x64\x0b\x71\xf6\xe6\xbe\xca\xce\x68\xc6\x1a\x02\x17\x0c"
      "\x92\x5a\xdc\x04\x9c\x8d\x70\x19\xf8\xdb\x7b\x2c\x6f\xc6\x68\x38\x85\x81"
      "\x21\x06\x0d\xe6\xdf\xbf\x81\x8a\x17\x38\x38\x79\xde\x2b\xc2\x6e\x9b\x5f"
      "\x66\x6d\x2c\x40\xeb\xe3\xde\x19\x62\x53\xad\x92\x60\x63\x10\x48\x30\x0b"
      "\x3e\x2a\xf7\xc5\x8e\xe8\x76\xa1\x61\xb9\xe0\x17\x8d\xe1\xdf\xde\x5e\x4d"
      "\x24\xfd\xc3\xcb\x48\xa0\x25\xfd\x2e\xa9\x4c\x7f\x40\xe8\xe8\xbb\xee\xfc"
      "\xe0\x03\x88\xfc\xea\x55\x99\x38\xb0\x96\x48\x79\x08\x01\x83\x1a\x86\x93"
      "\x72\x54\x41\x33\xae\x36\xe4\xe1\x90\xd9\xe0\xf3\x7c\xe4\xd0\x63\x9a\x00"
      "\x92\x5c\x2b\x2d\x43\x52\xca\x77\x0b\x69\x1d\x88\xa9\x82\xd4\x5d\x87\x31"
      "\xdd\xf8\x51\xcd\x49\xc3\xa1\xf2\x2c\xf2\x45\xdd\xaa\xd7\x7f\x3b\xb1\xb2"
      "\x68\xe0\xf8\xda\xd9\xa9\x1b\x84\x17\x6b\x2e\x31\xee\x16\x14\x55\x63\x5c"
      "\x40\xb6\x3c\x2f\x5a\x22\x5c\xb6\x9c\xad\x57\x6b\xd3\x69\x33\x3c\xff\xa8"
      "\x77\x77\x60\x39\x13\x33\x8e\x5e\xa6\x1e\x85\x60\xbe\x5c\xe5\xdd\x48\x73"
      "\xa6\xd4\x5a\x45\x8b\xa1\x66\x30\xf3\x88\x75\x6d\x10\xe9\x2b\x2e\xe8\x27"
      "\x11\x70\xd9\x89\x74\x3d\x5a\xf0\xad\x92\x94\xa4\x8f\xbd\x96\x7e\xec\x53"
      "\x6c\x12\x78\xa1\xe8\x15\xb4\x6b\xfb\x29\x29\x23\x4f\xaf\xa4\x9c\xbc\x9e"
      "\x53\x6b\xac\x84\x8c\xac\x31\x4e\x2f\xc3\xae\x15\xa4\xef\xb5\x35\xf6\x30"
      "\x3e\x1c\x64\xdf\xad\x86\x12\x82\x92\x10\x73\xbc\x8a\x72\x2a\x46\x10\x1b"
      "\x48\xa5\xc0\x33\x27\xb9\x61\x32\xd4\x2a\x37\xfd\x8a\xb1\x2e\xad\xea\x27"
      "\x76\xd9\xf2\x2f\xc6\x3b\x65\xcb\x97\xfb\xb9\xbe\xc0\xdb\x5d\x64\x8c\x4d"
      "\xc9\x25\xf9\x36\x08\xba\xac\x54\x60\xd6\x52\xf2\xa0\x76\xa0\x21\x06\x65"
      "\xfd\x04\xfb\xe5\x6d\xdc\x00\xfa\x0a\xac\x94\x7b\xa5\xbb\x42\x06\x19\x11"
      "\x15\xb0\x15\x2f\x0c\x4a\xb3\xac\x23\xf5\x49\xac\xf2\x0d\x1d\x3a\xac\xcd"
      "\xbf\x6f\x5e\xeb\xf7\x7a\xb7\x96\x2a\x09\x84\x7a\x83\xc5\x34\xea\xb5\xa4"
      "\xb5\xcc\xf2\x9c\x5f\x63\x58\xcb\xab\xad\x44\xde\x63\xf3\xce\x63\xfe\xd4"
      "\x7c\x58\x32\xf7\x11\x9e\xd0\xd9\x55\xd0\x45\xc5\x5a\xa2\x76\x4e\x37\xa9"
      "\xbc\xea\x23\xc8\x7a\xd3\xd0\xdc\xa0\x11\xc5\x96\x23\x46\x32\x2f\xe8\x41"
      "\x8b\x31\xd9\x60\x60\x42\x35\x0d\xee\xd5\xcc\x24\x82\xd8\xdd\x45\x06\x55"
      "\xe9\xdf\x41\x00\x00\x01\x00\x00\x00\x00\x00\x55\x58\xc4\x46\x03\xa9\xde"
      "\x8a\xdc\xcc\xfb\x91\xb3\xd0\xe2\x7d\xbd\x96\x7c\xcf\x14\xe9\x4e\x4e\x7d"
      "\x60\xa0\x73\x80\xcf\x22\x95\x47\x5c\x81\x9b\x78\xf4\x15\x40\x2d\xd3\xc1"
      "\x96\x32\xc7\xcc\x18\xd0\x95\xb7\xda\x83\x52\xe4\x07\x63\x91\x39\xe8\xd4"
      "\xfe\xb2\x57\x97\x1f\x4a\xfb\x64\x7c\x69\xd8\x19\x7e\xee\xca\x1c\xb5\x05"
      "\x99\x89\xb5\x69\x3d\x83\x47\x24\x29\x6e\x1f\x09\x44\x80\x02\x9b\xb7\x09"
      "\xd6\x1c\xd0\x45\x0b\x2a\xa3\x8f\x73\x5d\x89\x74\x83\xb4\x79\xd9\xe9\x9d"
      "\x20\xc6\xed\x3a\x63\x89\x2a\x59\xfc\x13\xc4\x05\x63\xfd\xbe\x48\xf6\x83"
      "\x5e\x28\xf8\x5c\x72\x39\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\xe4\x9e"
      "\x42\xec\x3d\x32\x8e\x6a\xc1\xeb\x3d\x75\x3b\x55\x59\x91\xd6\x56\x22\x9a"
      "\x4c\x4e\x52\x47\xe7\x48\x29\x9b\xdc\x75\xaa\x5e\x9f\x73\x0d\xe7\xc0\xa0"
      "\xbf\x2c\x08\x72\x1e\x3b\x11\x15\x90\x95\x7f\xfe\x07\xfd\x58\xba\x0f\xf3"
      "\x3b\x3e\xde\x50\x35\x60\x0f\xbf\x93\x72\x47\x93\xb3\xc8\x81\x74\xf7\xb6"
      "\x5b\xdd\x3a\x39\xe9\xe0\xee\x2b\x97\x58\x84\xcf\x5a\x22\x71\x4a\x78\xf4"
      "\x3e\xe7\x84\x54\x34\xa7\x29\xad\xf4\xc7\x87\xb5\x5a\x7c\x03\xa1\x00\x73"
      "\x7a\xfc\xce\x99\x2f\xbb\x5f\x4e\x27\x2e\x01\xe7\x02\x42\x0c\x54\x88\xb2"
      "\x09\xf2\xaa\xac\xbe\xf9\xbd\xf7\x6a\xbe\xb7\x8c\x3a\xd2\x4d\x25\xb4\x86"
      "\xeb\xd3\x97\x7a\x92\x81\x76\x26\xd7\x94\xdc\x9f\x9d\xaf\xbe\x6e\x08\xc8"
      "\x4c\x11\x86\x7e\xa1\xb2\x57\xda\x26\x94\x0e\xd7\xf4\xaf\xe6\x8e\x18\xb5"
      "\x8d\x75\xfd\x85\x4d\x9d\xcc\xb5\x2f\x32\x10\x55\x68\x0d\x78\x64\x0a\x86"
      "\x21\x63\xef\x96\xe8\x53\x8a\x6b\x88\x6c\xd2\xa6\x87\x58\xa9\x42\x65\x2b"
      "\x32\x8b\xb5\x46\x7c\x0c\xf4\xc6\xda\x1c\x6c\x3c\xe5\x94\xda\x43\xbe\x22"
      "\x05\x8c\x10\x9f\xcf\x65\x21\x50\xb3\x81\xa6\x56\x1c\xa2\xbd\xbc\x31\xdc"
      "\xc7\x65\x27\x23\x66\xec\x44\xca\x25\x6c\x62\x63\x7d\xbd\xcf\xdb\x66\x30"
      "\x82\x6e\x03\x58\x0e\x15\x80\x22\xfb\x48\xfe\x42\xe2\xfd\xfb\x6e\x2b\xbd"
      "\x72\x48\x98\x81\xc8\x3b\x45\x5a\xd8\x9a\x74\x26\x30\x7f\x0d\xd1\x42\x58"
      "\x35\x01\x16\x12\x03\x6e\x34\xfb\x91\xbc\x1a\xb7\x26\x64\xe5\x2c\x71\x98"
      "\xfc\x53\x2b\xcb\x26\x53\x51\x2c\xe8\x6f\x9a\xf8\xb8\x2e\xa7\x55\xa3\x11"
      "\x18\x7a\x0a\x0d\x29\x3a\xab\x7a\x58\xde\x81\xd6\x2f\xe0\x81\x5c\x41\x8b"
      "\x95\x02\x46\xca\x06\x07\xe7\xaf\x6f\xea\xd6\xd4\xc0\x5f\xb2\xd9\x12\x3c"
      "\x04\x62\x5b\xba\x73\x7e\x9b\x01\xf8\x25\xd3\x68\xc0\x10\xcf\xf4\x0f\x70"
      "\x96\xa1\x75\xc7\x75\xac\x24\x0c\x28\x51\xda\xaf\xe2\xee\x84\xbd\x3b\xd4"
      "\xdc\xdd\xcf\x0d\xe0\x96\x55\x0a\x42\xd3\xde\xbb\xc3\x38\x85\xe4\x07\x40"
      "\x16\xca\xe9\x37\x45\xba\x80\xd8\xea\xe0\x9c\x3b\x3c\xb3\x9a\xba\xa6\x13"
      "\x16\xde\xd0\x80\xe8\xfa\x9b\xfc\xf8\x79\xd2\x8b\x20\xe9\x35\xbb\x5b\x1e"
      "\x63\xaf\x31\x00\x00\xc5\xc7\x35\x3d\xc6\x6c\x7b\x9d\xdf\x89\xae\x6e\x6f"
      "\x7a\xc9\x41\xd9\xb2\x84\x68\x16\x4e\xe4\x18\xe6\xa2\xd8\x84\x07\x67\x53"
      "\xeb\x4f\x8a\x00\x2b\x7f\x3e\x17\x22\xfa\xa0\x30\x8f\x65\xb1\x0b\x29\x14"
      "\x83\xa2\x44\x0d\x6c\xdf\x1a\xa8\xd0\x28\x64\x64\x57\xa8\xf4\x47\x33\x1f"
      "\xed\xca\xac\xf4\x62\x70\xae\x7f\x43\x3d\x5e\x8e\x1a\xd6\x12\x48\xb1\x6b"
      "\x08\x07\xfd\x56\x9b\xe1\xa3\x76\xee\x8b\x84\x9c\x02\x19\xb7\x08\xe4\x55"
      "\xe8\xb7\x33\xda\x43\xa5\xd4\xe4\xb1\x9a\x34\xca\x87\x83\x01\x21\xc7\x84"
      "\x65\xdd\x38\x96\x75\xa6\xce\x95\x9e\xd9\x9c\x37\x98\x78\xf6\xbe\x12\x1b"
      "\xb8\x09\x3b\xea\x1e\xbe\x77\xda\x45\x90\x65\x3d\x44\x07\x4e\xf8\x3d\x93"
      "\x6c\xe6\x03\x1e\x0d\x61\xab\x8f\x7e\x70\xcf\x25\x48\x64\xbc\x3b\x25\xfc"
      "\x81\x41\x4f\xb4\xd0\x6f\x72\x18\x16\x04\xb9\x0d\x2c\xe8\xbd\x59\xb0\x00"
      "\x00\x00\x00\x00\x00\x00\x00\x00\x00",
      1431);
  *(uint64_t*)0x20caefc8 = 0x20281ffc;
  memcpy((void*)0x20281ffc, "GPL\000", 4);
  *(uint32_t*)0x20caefd0 = 0;
  *(uint32_t*)0x20caefd4 = 0;
  *(uint64_t*)0x20caefd8 = 0;
  *(uint32_t*)0x20caefe0 = 0;
  *(uint32_t*)0x20caefe4 = 0;
  memset((void*)0x20caefe8, 0, 16);
  *(uint32_t*)0x20caeff8 = 0;
  *(uint32_t*)0x20caeffc = 0;
  *(uint32_t*)0x20caf000 = -1;
  *(uint32_t*)0x20caf004 = 8;
  *(uint64_t*)0x20caf008 = 0x20000000;
  *(uint32_t*)0x20000000 = 0;
  *(uint32_t*)0x20000004 = 0;
  *(uint32_t*)0x20caf010 = 0;
  *(uint32_t*)0x20caf014 = 0x10;
  *(uint64_t*)0x20caf018 = 0x20000000;
  *(uint32_t*)0x20000000 = 0;
  *(uint32_t*)0x20000004 = 0;
  *(uint32_t*)0x20000008 = 0;
  *(uint32_t*)0x2000000c = 0;
  *(uint32_t*)0x20caf020 = 0xfcc4;
  *(uint32_t*)0x20caf024 = 0;
  *(uint32_t*)0x20caf028 = -1;
  *(uint32_t*)0x20caf02c = 0;
  *(uint64_t*)0x20caf030 = 0;
  *(uint64_t*)0x20caf038 = 0;
  *(uint32_t*)0x20caf040 = 0x10;
  *(uint32_t*)0x20caf044 = 0;
  res = syscall(__NR_bpf, /*cmd=*/5ul, /*arg=*/0x20caefb8ul, /*size=*/0x48ul);
  if (res != -1)
    r[0] = res;
  *(uint32_t*)0x20000340 = r[0];
  *(uint32_t*)0x20000344 = 0;
  *(uint32_t*)0x20000348 = 0;
  *(uint32_t*)0x2000034c = 0xf000;
  *(uint64_t*)0x20000350 = 0;
  *(uint64_t*)0x20000358 = 0;
  *(uint32_t*)0x20000360 = 0x1700;
  *(uint32_t*)0x20000364 = 8;
  *(uint32_t*)0x20000368 = 0;
  *(uint32_t*)0x2000036c = 0;
  *(uint64_t*)0x20000370 = 0;
  *(uint64_t*)0x20000378 = 0;
  *(uint32_t*)0x20000380 = 2;
  *(uint32_t*)0x20000384 = 0x5000000;
  *(uint32_t*)0x20000388 = 0;
  syscall(__NR_bpf, /*cmd=*/0xaul, /*arg=*/0x20000340ul, /*size=*/0x48ul);
  *(uint32_t*)0x200009c0 = 0x19;
  *(uint32_t*)0x200009c4 = 4;
  *(uint32_t*)0x200009c8 = 8;
  *(uint32_t*)0x200009cc = 8;
  *(uint32_t*)0x200009d0 = 0;
  *(uint32_t*)0x200009d4 = -1;
  *(uint32_t*)0x200009d8 = 0;
  memset((void*)0x200009dc, 0, 16);
  *(uint32_t*)0x200009ec = 0;
  *(uint32_t*)0x200009f0 = -1;
  *(uint32_t*)0x200009f4 = 0;
  *(uint32_t*)0x200009f8 = 0;
  *(uint32_t*)0x200009fc = 0;
  *(uint64_t*)0x20000a00 = 0;
  res = syscall(__NR_bpf, /*cmd=*/0ul, /*arg=*/0x200009c0ul, /*size=*/0x48ul);
  if (res != -1)
    r[1] = res;
  *(uint32_t*)0x200000c0 = 6;
  *(uint32_t*)0x200000c4 = 0xc;
  *(uint64_t*)0x200000c8 = 0x20000000;
  *(uint8_t*)0x20000000 = 0x18;
  STORE_BY_BITMASK(uint8_t, , 0x20000001, 0, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000001, 0, 4, 4);
  *(uint16_t*)0x20000002 = 0;
  *(uint32_t*)0x20000004 = 0;
  *(uint8_t*)0x20000008 = 0;
  *(uint8_t*)0x20000009 = 0;
  *(uint16_t*)0x2000000a = 0;
  *(uint32_t*)0x2000000c = 0;
  *(uint8_t*)0x20000010 = 0x18;
  STORE_BY_BITMASK(uint8_t, , 0x20000011, 1, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000011, 1, 4, 4);
  *(uint16_t*)0x20000012 = 0;
  *(uint32_t*)0x20000014 = r[1];
  *(uint8_t*)0x20000018 = 0;
  *(uint8_t*)0x20000019 = 0;
  *(uint16_t*)0x2000001a = 0;
  *(uint32_t*)0x2000001c = 0;
  STORE_BY_BITMASK(uint8_t, , 0x20000020, 7, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000020, 0, 3, 1);
  STORE_BY_BITMASK(uint8_t, , 0x20000020, 0xb, 4, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000021, 8, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000021, 0, 4, 4);
  *(uint16_t*)0x20000022 = 0;
  *(uint32_t*)0x20000024 = 0;
  STORE_BY_BITMASK(uint8_t, , 0x20000028, 3, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000028, 3, 3, 2);
  STORE_BY_BITMASK(uint8_t, , 0x20000028, 3, 5, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000029, 0xa, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000029, 8, 4, 4);
  *(uint16_t*)0x2000002a = 0xfff8;
  *(uint32_t*)0x2000002c = 0;
  STORE_BY_BITMASK(uint8_t, , 0x20000030, 4, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000030, 1, 3, 1);
  STORE_BY_BITMASK(uint8_t, , 0x20000030, 0xb, 4, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000031, 2, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000031, 0xa, 4, 4);
  *(uint16_t*)0x20000032 = 0;
  *(uint32_t*)0x20000034 = 0;
  STORE_BY_BITMASK(uint8_t, , 0x20000038, 6, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000038, 0, 3, 1);
  STORE_BY_BITMASK(uint8_t, , 0x20000038, 0xa, 4, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000039, 2, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000039, 0, 4, 4);
  *(uint16_t*)0x2000003a = 0;
  *(uint32_t*)0x2000003c = 0xfffffff8;
  STORE_BY_BITMASK(uint8_t, , 0x20000040, 7, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000040, 0, 3, 1);
  STORE_BY_BITMASK(uint8_t, , 0x20000040, 0xb, 4, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000041, 3, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000041, 0, 4, 4);
  *(uint16_t*)0x20000042 = 0;
  *(uint32_t*)0x20000044 = 8;
  STORE_BY_BITMASK(uint8_t, , 0x20000048, 7, 0, 3);
  STORE_BY_BITMASK(uint8_t, , 0x20000048, 0, 3, 1);
  STORE_BY_BITMASK(uint8_t, , 0x20000048, 0xb, 4, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000049, 4, 0, 4);
  STORE_BY_BITMASK(uint8_t, , 0x20000049, 0, 4, 4);
  *(uint16_t*)0x2000004a = 0;
  *(uint32_t*)0x2000004c = 0;
  *(uint8_t*)0x20000050 = 0x85;
  *(uint8_t*)0x20000051 = 0;
  *(uint16_t*)0x20000052 = 0;
  *(uint32_t*)0x20000054 = 0x33;
  *(uint8_t*)0x20000058 = 0x95;
  *(uint8_t*)0x20000059 = 0;
  *(uint16_t*)0x2000005a = 0;
  *(uint32_t*)0x2000005c = 0;
  *(uint64_t*)0x200000d0 = 0x20000180;
  memcpy((void*)0x20000180, "GPL\000", 4);
  *(uint32_t*)0x200000d8 = 0;
  *(uint32_t*)0x200000dc = 0;
  *(uint64_t*)0x200000e0 = 0;
  *(uint32_t*)0x200000e8 = 0;
  *(uint32_t*)0x200000ec = 0;
  memset((void*)0x200000f0, 0, 16);
  *(uint32_t*)0x20000100 = 0;
  *(uint32_t*)0x20000104 = 0;
  *(uint32_t*)0x20000108 = -1;
  *(uint32_t*)0x2000010c = 0;
  *(uint64_t*)0x20000110 = 0;
  *(uint32_t*)0x20000118 = 0;
  *(uint32_t*)0x2000011c = 0;
  *(uint64_t*)0x20000120 = 0;
  *(uint32_t*)0x20000128 = 0;
  *(uint32_t*)0x2000012c = 0;
  *(uint32_t*)0x20000130 = 0;
  *(uint32_t*)0x20000134 = 0;
  *(uint64_t*)0x20000138 = 0;
  *(uint64_t*)0x20000140 = 0;
  *(uint32_t*)0x20000148 = 0;
  *(uint32_t*)0x2000014c = 0;
  res = syscall(__NR_bpf, /*cmd=*/5ul, /*arg=*/0x200000c0ul, /*size=*/0x90ul);
  if (res != -1)
    r[2] = res;
  *(uint32_t*)0x20000500 = r[2];
  *(uint32_t*)0x20000504 = -1;
  *(uint32_t*)0x20000508 = 0;
  syscall(__NR_bpf, /*cmd=*/0xaul, /*arg=*/0x20000500ul, /*size=*/0xcul);
}
int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1,
          /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul,
          /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1,
          /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul, /*fd=*/-1,
          /*offset=*/0ul);
  loop();
  return 0;
}