// https://syzkaller.appspot.com/bug?id=8bbad4a70e72bac7c7a92eb3d7dd6344eaa2ec72
// autogenerated by syzkaller (https://github.com/google/syzkaller)

#define _GNU_SOURCE

#include <endian.h>
#include <pwd.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/syscall.h>
#include <termios.h>
#include <unistd.h>
#include <util.h>

#define __syscall syscall

static uintptr_t syz_open_pts(void)
{
  int master, slave;
  if (openpty(&master, &slave, NULL, NULL, NULL) == -1)
    return -1;
  if (dup2(master, master + 100) != -1)
    close(master);
  return slave;
}

uint64_t r[2] = {0xffffffffffffffff, 0xffffffffffffffff};

int main(void)
{
  syscall(SYS_mmap, 0x20000000, 0x1000000, 3, 0x1012, -1, 0, 0);
  long res = 0;
  memcpy((void*)0x20000000, "./bus\000", 6);
  syscall(SYS_mknod, 0x20000000, 0x80002002, 0x100a26);
  res = syz_open_pts();
  if (res != -1)
    r[0] = res;
  *(uint32_t*)0x200001c0 = 0xcb;
  syscall(SYS_ioctl, r[0], 0x80047462, 0x200001c0);
  memcpy((void*)0x20000080, "./bus\000", 6);
  res = syscall(SYS_open, 0x20000080, 0, 0);
  if (res != -1)
    r[1] = res;
  *(uint32_t*)0x200000c0 = 2;
  syscall(SYS_ioctl, r[1], 0xc5005601, 0x200000c0);
  return 0;
}