// https://syzkaller.appspot.com/bug?id=704e8f8042049fb353885d97e1cc7f88fa82b0ce
// autogenerated by syzkaller (http://github.com/google/syzkaller)

#define _GNU_SOURCE
#include <endian.h>
#include <stdint.h>
#include <string.h>
#include <sys/syscall.h>
#include <unistd.h>

uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff};
void loop()
{
  long res;
  memcpy((void*)0x20000280, "/dev/infiniband/rdma_cm", 24);
  res = syscall(__NR_openat, 0xffffffffffffff9c, 0x20000280, 2, 0);
  if (res != -1)
    r[0] = res;
  *(uint32_t*)0x20000580 = 0;
  *(uint16_t*)0x20000584 = 0x18;
  *(uint16_t*)0x20000586 = 0xfa00;
  *(uint64_t*)0x20000588 = 0;
  *(uint64_t*)0x20000590 = 0x20000540;
  *(uint16_t*)0x20000598 = 0x13f;
  *(uint8_t*)0x2000059a = 0;
  *(uint8_t*)0x2000059b = 0;
  *(uint8_t*)0x2000059c = 0;
  *(uint8_t*)0x2000059d = 0;
  *(uint8_t*)0x2000059e = 0;
  *(uint8_t*)0x2000059f = 0;
  res = syscall(__NR_write, r[0], 0x20000580, 0x20);
  if (res != -1)
    r[1] = *(uint32_t*)0x20000540;
  memcpy((void*)0x200000c0, "\x0e\x00\x00\x00\x00\x00\x00\xfa", 8);
  *(uint64_t*)0x200000c8 = 0x20000080;
  *(uint32_t*)0x200000d0 = r[1];
  memcpy((void*)0x200000d4,
         "\x00\x00\x00\x00\x01\x00\xfd\xff\xb4\xf4\xfe\x3e\xc3\xd9\x1c\xbd\x3d"
         "\x43\x25\x46\x88\x16\x10\x8d\x0e\x3f\x2c\x0c\xd1\xd9\x84\x51\x2b\x9d"
         "\xdd\xf4\x8a\xe6\x32\x77\x63\x96\x88\xa0\x46\x1a\x2c\x1c\xc5\x27\xe1"
         "\x68\xaa\xd8\xca\xb8\xe2\x6d\x49\x32\xad\x22\xfe\x3d\x73\x71\x9d\x68"
         "\x16\x28\xbb\x00\x4a\x4c\x75\x33\x0a\x7e\xd5\x28\xd6\x48\x7d\x00\x00"
         "\x00\x00",
         87);
  syscall(__NR_write, r[0], 0x200000c0, 0x6b);
}

int main()
{
  syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  loop();
  return 0;
}