// https://syzkaller.appspot.com/bug?id=c248b4a82df7a44e2fdfe33e50a8e4619cc2fff5
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[3] = {0xffffffffffffffff, 0xffffffffffffffff, 0x0};

int main(void)
{
  syscall(__NR_mmap, /*addr=*/0x1ffffffff000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200000000000ul, /*len=*/0x1000000ul,
          /*prot=PROT_WRITE|PROT_READ|PROT_EXEC*/ 7ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  syscall(__NR_mmap, /*addr=*/0x200001000000ul, /*len=*/0x1000ul, /*prot=*/0ul,
          /*flags=MAP_FIXED|MAP_ANONYMOUS|MAP_PRIVATE*/ 0x32ul,
          /*fd=*/(intptr_t)-1, /*offset=*/0ul);
  const char* reason;
  (void)reason;
  intptr_t res = 0;
  if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
  }
  res = syscall(__NR_socket, /*domain=AF_NETLINK*/ 0x10ul,
                /*type=SOCK_RAW*/ 3ul, /*proto=*/0);
  if (res != -1)
    r[0] = res;
  res = syscall(__NR_socketpair, /*domain=*/1ul, /*type=SOCK_SEQPACKET*/ 5ul,
                /*proto=*/0, /*fds=*/0x200000000240ul);
  if (res != -1)
    r[1] = *(uint32_t*)0x200000000244;
  memcpy((void*)0x200000000000,
         "lo\000\000\000\000\000\000\000\000\000\000\000\000\000\000", 16);
  res = syscall(__NR_ioctl, /*fd=*/r[1], /*cmd=*/0x8933,
                /*arg=*/0x200000000000ul);
  if (res != -1)
    r[2] = *(uint32_t*)0x200000000010;
  *(uint64_t*)0x200000000040 = 0;
  *(uint32_t*)0x200000000048 = 0;
  *(uint64_t*)0x200000000050 = 0x200000000280;
  *(uint64_t*)0x200000000280 = 0x200000000080;
  *(uint32_t*)0x200000000080 = 0x2c;
  *(uint16_t*)0x200000000084 = 0x24;
  *(uint16_t*)0x200000000086 = 0xd0f;
  *(uint32_t*)0x200000000088 = 0x70bd2d;
  *(uint32_t*)0x20000000008c = 0;
  *(uint8_t*)0x200000000090 = 0x60;
  *(uint8_t*)0x200000000091 = 0;
  *(uint16_t*)0x200000000092 = 0;
  *(uint32_t*)0x200000000094 = r[2];
  *(uint16_t*)0x200000000098 = 0;
  *(uint16_t*)0x20000000009a = 0xa;
  *(uint16_t*)0x20000000009c = -1;
  *(uint16_t*)0x20000000009e = -1;
  *(uint16_t*)0x2000000000a0 = 0;
  *(uint16_t*)0x2000000000a2 = -1;
  *(uint16_t*)0x2000000000a4 = 8;
  *(uint16_t*)0x2000000000a6 = 1;
  memcpy((void*)0x2000000000a8, "qfq\000", 4);
  *(uint64_t*)0x200000000288 = 0x2c;
  *(uint64_t*)0x200000000058 = 1;
  *(uint64_t*)0x200000000060 = 0;
  *(uint64_t*)0x200000000068 = 0;
  *(uint32_t*)0x200000000070 = 0;
  syscall(__NR_sendmsg, /*fd=*/r[0], /*msg=*/0x200000000040ul,
          /*f=MSG_BATCH|MSG_NOSIGNAL|MSG_EOR*/ 0x44080ul);
  *(uint64_t*)0x200000000100 = 0;
  *(uint32_t*)0x200000000108 = 0;
  *(uint64_t*)0x200000000110 = 0x200000000380;
  *(uint64_t*)0x200000000380 = 0x200000019580;
  *(uint32_t*)0x200000019580 = 0x40;
  *(uint16_t*)0x200000019584 = 0x24;
  *(uint16_t*)0x200000019586 = 0xd0f;
  *(uint32_t*)0x200000019588 = 0x70bd26;
  *(uint32_t*)0x20000001958c = 0;
  *(uint8_t*)0x200000019590 = 0x60;
  *(uint8_t*)0x200000019591 = 0;
  *(uint16_t*)0x200000019592 = 0;
  *(uint32_t*)0x200000019594 = r[2];
  *(uint16_t*)0x200000019598 = 0;
  *(uint16_t*)0x20000001959a = 0;
  *(uint16_t*)0x20000001959c = 0xfff2;
  *(uint16_t*)0x20000001959e = 0xa;
  *(uint16_t*)0x2000000195a0 = 0;
  *(uint16_t*)0x2000000195a2 = 0;
  *(uint16_t*)0x2000000195a4 = 0xd;
  *(uint16_t*)0x2000000195a6 = 1;
  memcpy((void*)0x2000000195a8, "fq_codel\000", 9);
  *(uint16_t*)0x2000000195b4 = 0xc;
  *(uint16_t*)0x2000000195b6 = 2;
  *(uint16_t*)0x2000000195b8 = 8;
  *(uint16_t*)0x2000000195ba = 9;
  *(uint32_t*)0x2000000195bc = 7;
  *(uint64_t*)0x200000000388 = 0x40;
  *(uint64_t*)0x200000000118 = 1;
  *(uint64_t*)0x200000000120 = 0;
  *(uint64_t*)0x200000000128 = 0;
  *(uint32_t*)0x200000000130 = 0;
  syscall(__NR_sendmsg, /*fd=*/r[0], /*msg=*/0x200000000100ul,
          /*f=MSG_CONFIRM*/ 0x800ul);
  return 0;
}