sys/linux/dev_uinput.txt

# Copyright 2018 syzkaller project authors. All rights reserved.
# Use of this source code is governed by Apache 2 LICENSE that can be found in the LICENSE file.

include <uapi/linux/fcntl.h>
include <uapi/linux/uinput.h>

resource fd_uinput[fd]

openat$uinput(fd const[AT_FDCWD], file ptr[in, string["/dev/uinput"]], flags flags[uinput_open_flags], mode const[0]) fd_uinput
write$uinput_user_dev(fd fd_uinput, data ptr[in, uinput_user_dev], len len[data])
write$input_event(fd fd_uinput, data ptr[in, input_event], len len[data])
ioctl$UI_GET_VERSION(fd fd_uinput, cmd const[UI_GET_VERSION], arg ptr[out, int32])
ioctl$UI_DEV_CREATE(fd fd_uinput, cmd const[UI_DEV_CREATE])
ioctl$UI_DEV_DESTROY(fd fd_uinput, cmd const[UI_DEV_DESTROY])
ioctl$UI_DEV_SETUP(fd fd_uinput, cmd const[UI_DEV_SETUP], arg ptr[in, uinput_setup])
ioctl$UI_SET_EVBIT(fd fd_uinput, cmd const[UI_SET_EVBIT], arg intptr[0:EV_MAX])
ioctl$UI_SET_KEYBIT(fd fd_uinput, cmd const[UI_SET_KEYBIT], arg intptr[0:KEY_MAX])
ioctl$UI_SET_RELBIT(fd fd_uinput, cmd const[UI_SET_RELBIT], arg intptr[0:REL_MAX])
ioctl$UI_SET_MSCBIT(fd fd_uinput, cmd const[UI_SET_MSCBIT], arg intptr[0:ABS_MAX])
ioctl$UI_SET_ABSBIT(fd fd_uinput, cmd const[UI_SET_ABSBIT], arg intptr[0:MSC_MAX])
ioctl$UI_SET_LEDBIT(fd fd_uinput, cmd const[UI_SET_LEDBIT], arg intptr[0:LED_MAX])
ioctl$UI_SET_SNDBIT(fd fd_uinput, cmd const[UI_SET_SNDBIT], arg intptr[0:SND_MAX])
ioctl$UI_SET_FFBIT(fd fd_uinput, cmd const[UI_SET_FFBIT], arg intptr[0:FF_MAX])
ioctl$UI_SET_SWBIT(fd fd_uinput, cmd const[UI_SET_SWBIT], arg intptr[0:SW_MAX])
ioctl$UI_SET_PROPBIT(fd fd_uinput, cmd const[UI_SET_PROPBIT], arg intptr[0:INPUT_PROP_MAX])
ioctl$UI_SET_PHYS(fd fd_uinput, cmd const[UI_SET_PHYS], arg ptr[in, string[uinput_names]])
ioctl$UI_BEGIN_FF_UPLOAD(fd fd_uinput, cmd const[UI_BEGIN_FF_UPLOAD], arg ptr[in, uinput_ff_upload])
ioctl$UI_BEGIN_FF_ERASE(fd fd_uinput, cmd const[UI_BEGIN_FF_ERASE], arg ptr[in, uinput_ff_erase])
ioctl$UI_END_FF_UPLOAD(fd fd_uinput, cmd const[UI_END_FF_UPLOAD], arg ptr[in, uinput_ff_upload])
ioctl$UI_END_FF_ERASE(fd fd_uinput, cmd const[UI_END_FF_ERASE], arg ptr[in, uinput_ff_erase])
ioctl$UI_GET_SYSNAME(fd fd_uinput, cmd const[UI_GET_SYSNAME_64], arg ptr[out, array[int8, 64]])
ioctl$UI_ABS_SETUP(fd fd_uinput, cmd const[UI_ABS_SETUP], arg ptr[in, uinput_abs_setup])

input_id {
	bustype	int16
	vendor	int16
	product	int16
	version	int16
}

uinput_user_dev {
	name		string[uinput_names, UINPUT_MAX_NAME_SIZE]
	id		input_id
	ff_effects_max	int32[1:FF_EFFECT_MAX]
	absmax		array[int32, ABS_CNT]
	absmin		array[int32, ABS_CNT]
	absfuzz		array[int32, ABS_CNT]
	absflat		array[int32, ABS_CNT]
}

uinput_setup {
	id		input_id
	name		string[uinput_names, UINPUT_MAX_NAME_SIZE]
	ff_effects_max	int32[1:FF_EFFECT_MAX]
}

uinput_ff_upload {
	request_id	int32[0:16]
	retval		int32
	effect		ff_effect
	old		ff_effect
}

uinput_ff_erase {
	request_id	int32[0:16]
	retval		int32
	effect_id	int32
}

uinput_abs_setup {
	code	int16
	absinfo	input_absinfo
}

uinput_names = "syz0", "syz1"
uinput_open_flags = O_RDWR, O_RDWR_NONBLOCK

define UI_GET_SYSNAME_64	UI_GET_SYSNAME(64)