// https://syzkaller.appspot.com/bug?id=acc91fc5738dacbfaa1163219fc6bf0685224b60
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[1] = {0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, 0x1ffff000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x20000000ul, 0x1000000ul, 7ul, 0x32ul, -1, 0ul);
  syscall(__NR_mmap, 0x21000000ul, 0x1000ul, 0ul, 0x32ul, -1, 0ul);
  intptr_t res = 0;
  memcpy((void*)0x20000000, "/dev/ptmx\000", 10);
  res =
      syscall(__NR_openat, 0xffffffffffffff9cul, 0x20000000ul, 0x80101ul, 0ul);
  if (res != -1)
    r[0] = res;
  *(uint32_t*)0x200001c0 = 0x11c;
  *(uint32_t*)0x200001c4 = 6;
  *(uint64_t*)0x200001c8 = 0;
  *(uint64_t*)0x200001d0 = 0;
  *(uint64_t*)0x200001d8 = 0;
  *(uint32_t*)0x200001e0 = 0xf3;
  *(uint32_t*)0x200001e4 = 0;
  memcpy(
      (void*)0x200001e8,
      "\0035\323\246h\237\335\300&K\323\311\037s\362\352@/"
      ":J\264\346#"
      "\021\236\264n\2104\0303\264\377\005\250\346\316\301fT\324\271^"
      "\n\315\030\352\353\221\242q\370\337\245\032/\350 "
      "\333\261\302\306\\\263\300\364N\320~"
      "4\371\234O\241\326d\217\365\323\345\022\212\340b\373\263\314\216\005\034"
      "\364\232h.\317)\226mi>e\240\2438\231\214\347\327]"
      "\347f\222\035\346\016J\201\303\032\035\023\313{v\035d\334\244)N\263\251-"
      "\v\231\347\023.\365\247{"
      "\271\240\313\277\355pu\247\2428\v\355\t\rCcp\2126\370\322\r\275,"
      "\377\230\226\260\337\025\261@\250\305\241\004\372v\323~"
      "s\365\206\216\202\367\322\241{\3535e\332\206\225yw&\245\221\354\315\372&"
      "\352\355-\275\236\340\342\234`\221\264r\032\3211&\312L\003B,\341:"
      "\210\"\0258n\207w\275i\267\264\266\2576\215",
      243);
  *(uint8_t*)0x200002db = 0;
  syscall(__NR_write, r[0], 0x200001c0ul, 0x11cul);
  return 0;
}