// https://syzkaller.appspot.com/bug?id=c73c0e8f6b39ef1c6fde966e57789d742ef6eda6
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/mount.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

#ifndef __NR_io_uring_register
#define __NR_io_uring_register 427
#endif
#ifndef __NR_io_uring_setup
#define __NR_io_uring_setup 425
#endif

uint64_t r[1] = {0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000,
          /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  const char* reason;
  (void)reason;
  intptr_t res = 0;
  if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
  }
  //  io_uring_setup arguments: [
  //    entries: int32 = 0x10 (4 bytes)
  //    params: ptr[inout, io_uring_params] {
  //      io_uring_params {
  //        sq_entries: int32 = 0x0 (4 bytes)
  //        cq_entries: int32 = 0x0 (4 bytes)
  //        flags: io_uring_setup_flags = 0x3800 (4 bytes)
  //        sq_thread_cpu: int32 = 0x0 (4 bytes)
  //        sq_thread_idle: int32 = 0x0 (4 bytes)
  //        features: int32 = 0x0 (4 bytes)
  //        wq_fd: fd_io_uring (resource)
  //        resv: buffer: {00 00 00 00 00 00 00 00 00 00 00 00} (length 0xc)
  //        sq_off: io_sqring_offsets {
  //          head: int32 = 0x0 (4 bytes)
  //          tail: int32 = 0x0 (4 bytes)
  //          ring_mask: int32 = 0x0 (4 bytes)
  //          ring_entries: int32 = 0x0 (4 bytes)
  //          flags: int32 = 0x0 (4 bytes)
  //          dropped: int32 = 0x0 (4 bytes)
  //          array: int32 = 0x0 (4 bytes)
  //          resv1: int32 = 0x0 (4 bytes)
  //          user_addr: int64 = 0x0 (8 bytes)
  //        }
  //        cq_off: io_cqring_offsets {
  //          head: int32 = 0x0 (4 bytes)
  //          tail: int32 = 0x0 (4 bytes)
  //          ring_mask: int32 = 0x0 (4 bytes)
  //          ring_entries: int32 = 0x0 (4 bytes)
  //          overflow: int32 = 0x0 (4 bytes)
  //          cqes: int32 = 0x0 (4 bytes)
  //          flags: int32 = 0x0 (4 bytes)
  //          resv1: int32 = 0x0 (4 bytes)
  //          user_addr: int64 = 0x0 (8 bytes)
  //        }
  //      }
  //    }
  //  ]
  //  returns fd_io_uring
  *(uint32_t*)0x200000000304 = 0;
  *(uint32_t*)0x200000000308 = 0x3800;
  *(uint32_t*)0x20000000030c = 0;
  *(uint32_t*)0x200000000310 = 0;
  *(uint32_t*)0x200000000318 = 0;
  memset((void*)0x20000000031c, 0, 12);
  res = syscall(__NR_io_uring_setup, /*entries=*/0x10,
                /*params=*/0x200000000300ul);
  if (res != -1)
    r[0] = res;
  //  io_uring_register$IORING_REGISTER_ZCRX_IFQ arguments: [
  //    fd: fd_io_uring (resource)
  //    opcode: const = 0x20 (8 bytes)
  //    arg: ptr[in, io_uring_zcrx_ifq_reg] {
  //      io_uring_zcrx_ifq_reg {
  //        if_idx: int32 = 0x2 (4 bytes)
  //        if_rxq: int32 = 0x0 (4 bytes)
  //        rq_entries: int32 = 0x10 (4 bytes)
  //        flags: zcrx_reg_flags = 0x0 (4 bytes)
  //        area_ptr: ptr[inout, io_uring_zcrx_area_reg] {
  //          io_uring_zcrx_area_reg {
  //            addr: ptr[inout, buffer] {
  //              buffer: {} (length 0x0)
  //            }
  //            len: len = 0x10000 (8 bytes)
  //            rq_area_token: int64 = 0x0 (8 bytes)
  //            flags: io_uring_zcrx_area_flags = 0x0 (4 bytes)
  //            dmabuf_fd: int32 = 0x0 (4 bytes)
  //            __resv2: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //            00} (length 0x10)
  //          }
  //        }
  //        region_ptr: ptr[inout, io_uring_region_desc] {
  //          io_uring_region_desc {
  //            user_addr: ptr[inout, buffer] {
  //              buffer: {} (length 0x0)
  //            }
  //            size: len = 0x10000 (8 bytes)
  //            flags: io_uring_region_desc_flags = 0x1 (4 bytes)
  //            id: int32 = 0x0 (4 bytes)
  //            mmap_offset: int64 = 0x0 (8 bytes)
  //            resv: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //            00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00} (length 0x20)
  //          }
  //        }
  //        offsets: io_uring_zcrx_offsets {
  //          head: int32 = 0x0 (4 bytes)
  //          tail: int32 = 0x0 (4 bytes)
  //          rqes: int32 = 0x0 (4 bytes)
  //          __resv2: const = 0x0 (4 bytes)
  //          __resv: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00}
  //          (length 0x10)
  //        }
  //        zcrx_id: int32 = 0x0 (4 bytes)
  //        rx_buf_len: int32 = 0x1000 (4 bytes)
  //        __resv: buffer: {00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  //        00 00 00 00 00 00 00} (length 0x18)
  //      }
  //    }
  //    nr_args: const = 0x1 (8 bytes)
  //  ]
  *(uint32_t*)0x200000000400 = 2;
  *(uint32_t*)0x200000000404 = 0;
  *(uint32_t*)0x200000000408 = 0x10;
  *(uint32_t*)0x20000000040c = 0;
  *(uint64_t*)0x200000000410 = 0x200000001000;
  *(uint64_t*)0x200000001000 = 0x200000800000;
  *(uint64_t*)0x200000001008 = 0x10000;
  *(uint64_t*)0x200000001010 = 0;
  *(uint32_t*)0x200000001018 = 0;
  *(uint32_t*)0x20000000101c = 0;
  memset((void*)0x200000001020, 0, 16);
  *(uint64_t*)0x200000000418 = 0x200000001800;
  *(uint64_t*)0x200000001800 = 0x200000800000;
  *(uint64_t*)0x200000001808 = 0x10000;
  *(uint32_t*)0x200000001810 = 1;
  *(uint32_t*)0x200000001814 = 0;
  *(uint64_t*)0x200000001818 = 0;
  memset((void*)0x200000001820, 0, 32);
  *(uint32_t*)0x200000000420 = 0;
  *(uint32_t*)0x200000000424 = 0;
  *(uint32_t*)0x200000000428 = 0;
  *(uint32_t*)0x20000000042c = 0;
  memset((void*)0x200000000430, 0, 16);
  *(uint32_t*)0x200000000440 = 0;
  *(uint32_t*)0x200000000444 = 0x1000;
  memset((void*)0x200000000448, 0, 24);
  syscall(__NR_io_uring_register, /*fd=*/r[0], /*opcode=*/0x20ul,
          /*arg=*/0x200000000400ul, /*nr_args=*/1ul);
  return 0;
}