// https://syzkaller.appspot.com/bug?id=ab136f1e51bcdf545b941b75c5d4215c6c2e3353
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <unistd.h>

uint64_t r[1] = {0xffffffffffffffff};

int main(void)
{
  syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0);
  intptr_t res = 0;
  memcpy((void*)0x20000080, "/dev/uinput\000", 12);
  res = syscall(__NR_openat, 0xffffffffffffff9c, 0x20000080, 0, 0);
  if (res != -1)
    r[0] = res;
  *(uint16_t*)0x20000240 = 0x2f;
  *(uint32_t*)0x20000244 = 0;
  *(uint32_t*)0x20000248 = 0;
  *(uint32_t*)0x2000024c = 0xffff;
  *(uint32_t*)0x20000250 = 0;
  *(uint32_t*)0x20000254 = 0;
  *(uint32_t*)0x20000258 = 0;
  syscall(__NR_ioctl, r[0], 0x401c5504, 0x20000240);
  syscall(__NR_ioctl, r[0], 0x40045564, 3);
  *(uint16_t*)0x20000000 = 0;
  *(uint16_t*)0x20000002 = 0;
  *(uint16_t*)0x20000004 = 0;
  *(uint16_t*)0x20000006 = 0;
  memcpy((void*)0x20000008,
         "syz0\000\000\000\000\000\200\24017P\345\367\002\000\000\000\000\000"
         "\000\000\b\000\000\000q\253\226%"
         "\000\000\377\377\377\377\377\377\377\347\000\035\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000"
         "\000\000\000\000\000\000\000\000\000\000\000\000\000\000",
         80);
  *(uint32_t*)0x20000058 = 0;
  syscall(__NR_ioctl, r[0], 0x405c5503, 0x20000000);
  syscall(__NR_ioctl, r[0], 0x5501, 0);
  return 0;
}