?   	github.com/google/syzkaller/dashboard/dashapi	[no test files]
ok  	github.com/google/syzkaller/dashboard/app	0.116s
?   	github.com/google/syzkaller/pkg/debugtracer	[no test files]
?   	github.com/google/syzkaller/pkg/gce	[no test files]
?   	github.com/google/syzkaller/pkg/gcs	[no test files]
?   	github.com/google/syzkaller/pkg/hash	[no test files]
?   	github.com/google/syzkaller/pkg/html/pages	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/iset	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/powerpc	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/powerpc/generated	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86/gen	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86/generated	[no test files]
?   	github.com/google/syzkaller/pkg/ipc/ipcconfig	[no test files]
?   	github.com/google/syzkaller/pkg/kcidb	[no test files]
?   	github.com/google/syzkaller/pkg/report/crash	[no test files]
?   	github.com/google/syzkaller/pkg/rpctype	[no test files]
?   	github.com/google/syzkaller/pkg/signal	[no test files]
?   	github.com/google/syzkaller/pkg/testutil	[no test files]
?   	github.com/google/syzkaller/pkg/tools	[no test files]
?   	github.com/google/syzkaller/sys	[no test files]
?   	github.com/google/syzkaller/sys/akaros	[no test files]
?   	github.com/google/syzkaller/sys/akaros/gen	[no test files]
?   	github.com/google/syzkaller/sys/darwin	[no test files]
?   	github.com/google/syzkaller/sys/darwin/gen	[no test files]
?   	github.com/google/syzkaller/sys/freebsd	[no test files]
?   	github.com/google/syzkaller/sys/freebsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/openbsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/fidlgen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/gen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia	[no test files]
?   	github.com/google/syzkaller/sys/linux/gen	[no test files]
?   	github.com/google/syzkaller/sys/netbsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/syz-extract	[no test files]
?   	github.com/google/syzkaller/sys/syz-sysgen	[no test files]
?   	github.com/google/syzkaller/sys/targets	[no test files]
?   	github.com/google/syzkaller/sys/test	[no test files]
?   	github.com/google/syzkaller/sys/test/gen	[no test files]
?   	github.com/google/syzkaller/sys/trusty	[no test files]
?   	github.com/google/syzkaller/sys/trusty/gen	[no test files]
?   	github.com/google/syzkaller/sys/windows	[no test files]
?   	github.com/google/syzkaller/sys/windows/gen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/layout	[no test files]
?   	github.com/google/syzkaller/syz-runner	[no test files]
?   	github.com/google/syzkaller/tools/syz-benchcmp	[no test files]
?   	github.com/google/syzkaller/tools/syz-bisect	[no test files]
?   	github.com/google/syzkaller/tools/syz-build	[no test files]
?   	github.com/google/syzkaller/tools/syz-check	[no test files]
?   	github.com/google/syzkaller/tools/syz-cover	[no test files]
?   	github.com/google/syzkaller/tools/syz-crush	[no test files]
?   	github.com/google/syzkaller/tools/syz-db	[no test files]
?   	github.com/google/syzkaller/tools/syz-execprog	[no test files]
?   	github.com/google/syzkaller/tools/syz-expand	[no test files]
?   	github.com/google/syzkaller/tools/syz-fillreports	[no test files]
?   	github.com/google/syzkaller/tools/syz-fmt	[no test files]
?   	github.com/google/syzkaller/tools/syz-hubtool	[no test files]
?   	github.com/google/syzkaller/tools/syz-imagegen	[no test files]
?   	github.com/google/syzkaller/tools/syz-kcidb	[no test files]
?   	github.com/google/syzkaller/tools/syz-lore	[no test files]
?   	github.com/google/syzkaller/tools/syz-make	[no test files]
?   	github.com/google/syzkaller/tools/syz-minconfig	[no test files]
?   	github.com/google/syzkaller/tools/syz-mutate	[no test files]
?   	github.com/google/syzkaller/tools/syz-prog2c	[no test files]
?   	github.com/google/syzkaller/tools/syz-query-subsystems	[no test files]
?   	github.com/google/syzkaller/tools/syz-reporter	[no test files]
?   	github.com/google/syzkaller/tools/syz-repro	[no test files]
?   	github.com/google/syzkaller/tools/syz-reprolist	[no test files]
?   	github.com/google/syzkaller/tools/syz-runtest	[no test files]
?   	github.com/google/syzkaller/tools/syz-showprio	[no test files]
?   	github.com/google/syzkaller/tools/syz-stress	[no test files]
?   	github.com/google/syzkaller/tools/syz-symbolize	[no test files]
?   	github.com/google/syzkaller/tools/syz-testbed	[no test files]
?   	github.com/google/syzkaller/tools/syz-testbuild	[no test files]
?   	github.com/google/syzkaller/tools/syz-trace2syz	[no test files]
?   	github.com/google/syzkaller/tools/syz-tty	[no test files]
?   	github.com/google/syzkaller/tools/syz-upgrade	[no test files]
?   	github.com/google/syzkaller/tools/syz-usbgen	[no test files]
?   	github.com/google/syzkaller/vm/adb	[no test files]
?   	github.com/google/syzkaller/vm/bhyve	[no test files]
?   	github.com/google/syzkaller/vm/cuttlefish	[no test files]
?   	github.com/google/syzkaller/vm/gce	[no test files]
?   	github.com/google/syzkaller/vm/gvisor	[no test files]
?   	github.com/google/syzkaller/vm/kvm	[no test files]
?   	github.com/google/syzkaller/vm/odroid	[no test files]
?   	github.com/google/syzkaller/vm/proxyapp/mocks	[no test files]
?   	github.com/google/syzkaller/vm/proxyapp/proxyrpc	[no test files]
?   	github.com/google/syzkaller/vm/qemu	[no test files]
?   	github.com/google/syzkaller/vm/starnix	[no test files]
?   	github.com/google/syzkaller/vm/vmm	[no test files]
?   	github.com/google/syzkaller/vm/vmware	[no test files]
ok  	github.com/google/syzkaller/executor	2.969s
ok  	github.com/google/syzkaller/pkg/asset	0.107s
ok  	github.com/google/syzkaller/pkg/ast	0.702s
ok  	github.com/google/syzkaller/pkg/auth	(cached)
ok  	github.com/google/syzkaller/pkg/bisect	49.771s
ok  	github.com/google/syzkaller/pkg/bisect/minimize	(cached)
ok  	github.com/google/syzkaller/pkg/build	7.192s
ok  	github.com/google/syzkaller/pkg/compiler	6.550s
ok  	github.com/google/syzkaller/pkg/config	0.019s
ok  	github.com/google/syzkaller/pkg/cover	11.754s
ok  	github.com/google/syzkaller/pkg/cover/backend	0.597s
--- FAIL: TestGenerate (10.83s)
    --- FAIL: TestGenerate/fuchsia/amd64 (0.07s)
        testutil.go:33: seed=1691488311325022735
        testutil.go:33: seed=1691488311391308471
        --- FAIL: TestGenerate/fuchsia/amd64/12 (0.73s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
                	}
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:281:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3293616070 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/4 (0.84s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:279:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1150113648 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/6 (0.88s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 500);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:279:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1995078717 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/1 (0.89s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:279:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor605927485 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/2 (0.96s)
            csource_test.go:150: opts: {Threaded:true Repeat:false RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void loop(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:273:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1548298709 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/14 (0.96s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static unsigned long long procid;
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
                	}
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7 + procid*16);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                	for (procid = 0; procid < 2; procid++) {
                		if (fork() == 0) {
                			use_temporary_dir();
                			do_sandbox_none();
                		}
                	}
                	sleep(1000000);
                	return 0;
                }
                
                <stdin>:283:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor792698050 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/0 (1.05s)
            csource_test.go:150: opts: {Threaded:false Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_one(void)
                {
                		intptr_t res = 0;
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                	inject_fault(1);
                	res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                	if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                	}
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                	res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                	{
                	int i;
                	for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		}
                	}
                	if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                	res = -1;
                res = syz_future_time(/*when=*/1);
                	if ((int)res != -1)
                		r[5] = res;
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                	res = -1;
                res = syz_future_time(/*when=*/0);
                	if ((int)res != -1)
                		r[6] = res;
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                	res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                	if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                syz_future_time(/*when=*/0);
                syz_job_default();
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                syz_process_self();
                syz_thread_self();
                syz_vmar_root_self();
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:146:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2439404871 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/13 (1.07s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	fprintf(stderr, "### start\n");
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		fprintf(stderr, "### call=0 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		fprintf(stderr, "### call=1 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		break;
                	case 2:
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		fprintf(stderr, "### call=2 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		fprintf(stderr, "### call=3 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		break;
                	case 4:
                		res = -1;
                		errno = EFAULT;
                res = syz_future_time(/*when=*/1);
                		fprintf(stderr, "### call=4 errno=%u\n", res == -1 ? errno : 0);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		fprintf(stderr, "### call=5 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		break;
                	case 6:
                		res = -1;
                		errno = EFAULT;
                res = syz_future_time(/*when=*/0);
                		fprintf(stderr, "### call=6 errno=%u\n", res == -1 ? errno : 0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		fprintf(stderr, "### call=7 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		break;
                	case 8:
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		fprintf(stderr, "### call=8 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                		res = -1;
                		errno = EFAULT;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		fprintf(stderr, "### call=9 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                		res = -1;
                		errno = EFAULT;
                res = syz_execute_func(/*text=*/0x20000000);
                		fprintf(stderr, "### call=10 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 11:
                		res = -1;
                		errno = EFAULT;
                res = syz_future_time(/*when=*/0);
                		fprintf(stderr, "### call=11 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 12:
                		res = -1;
                		errno = EFAULT;
                res = syz_job_default();
                		fprintf(stderr, "### call=12 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 13:
                		res = -1;
                		errno = EFAULT;
                res = syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		fprintf(stderr, "### call=13 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 14:
                		res = -1;
                		errno = EFAULT;
                res = syz_process_self();
                		fprintf(stderr, "### call=14 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 15:
                		res = -1;
                		errno = EFAULT;
                res = syz_thread_self();
                		fprintf(stderr, "### call=15 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	case 16:
                		res = -1;
                		errno = EFAULT;
                res = syz_vmar_root_self();
                		fprintf(stderr, "### call=16 errno=%u\n", res == -1 ? errno : 0);
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:281:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3367789097 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/3 (1.11s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:10 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:279:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1177798642 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/9 (0.92s)
            csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:9223372036854775807 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_channel_call_etc(0x0, 0x3f, 0x7fffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)="c90e2be6d60ec7c9619e18678eaab1c9b567cada130c859cbe7816d669ddf6280237d55ae46d585200bc1ab3e7296d6ad5f58dcd7383c29ad48aa3420b4a751de00707d6e06c88f8", &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=""/171, &(0x7f0000000180)=[<r0=>0x0, 0x0, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0], 0x48, 0x2, 0xab, 0x7}, &(0x7f0000000200), &(0x7f0000000240)) (fail_nth: 1)
                zx_port_cancel(r2, 0x0, 0xf) (async)
                zx_vcpu_create(r1, 0x8, 0x5, &(0x7f0000000280)=<r4=>0x0) (rerun: 4)
                zx_guest_set_trap(r3, 0x0, 0x6, 0x1f1d400000000000, r4, 0x20)
                r5 = syz_future_time(0x1)
                zx_channel_call$fuchsia_devicesettings_DeviceSettingsManagerGetInteger(r0, 0x0, r5, &(0x7f0000010380)={&(0x7f00000002c0)={{}, {0x5, 0xffffffffffffffff}, {'\\'}}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000010340), 0x28, 0x0, 0x10000}, &(0x7f00000103c0), &(0x7f0000010400))
                r6 = syz_future_time(0x0)
                zx_channel_call$fuchsia_io_DirectoryAdminRewind(r2, 0x0, r6, &(0x7f0000020500)={&(0x7f0000010440), &(0x7f0000010480), &(0x7f00000104c0), &(0x7f00000204c0), 0x10, 0x0, 0x10000}, &(0x7f0000020540), &(0x7f0000020580))
                zx_vcpu_create(r1, 0x6, 0x20, &(0x7f00000205c0)=<r7=>0x0)
                zx_channel_call$fuchsia_io_NodeClose(r7, 0x0, r5, &(0x7f00000306c0)={&(0x7f0000020600), &(0x7f0000020640), &(0x7f0000020680), &(0x7f0000030680), 0x10, 0x0, 0x10000}, &(0x7f0000030700), &(0x7f0000030740))
                syz_execute_func(&(0x7f0000000000)="c4c2d198d12e2ef3f041310743dfc6a0322333333333333343d8e6c442f9306e5a67f3450f2a59d366450fc7f58f69e89896db0000000f1c7b00")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:151: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[8] = {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                *(uint64_t*)0x200001c0 = 0x20000000;
                memcpy((void*)0x20000000, "\xc9\x0e\x2b\xe6\xd6\x0e\xc7\xc9\x61\x9e\x18\x67\x8e\xaa\xb1\xc9\xb5\x67\xca\xda\x13\x0c\x85\x9c\xbe\x78\x16\xd6\x69\xdd\xf6\x28\x02\x37\xd5\x5a\xe4\x6d\x58\x52\x00\xbc\x1a\xb3\xe7\x29\x6d\x6a\xd5\xf5\x8d\xcd\x73\x83\xc2\x9a\xd4\x8a\xa3\x42\x0b\x4a\x75\x1d\xe0\x07\x07\xd6\xe0\x6c\x88\xf8", 72);
                *(uint64_t*)0x200001c8 = 0x20000080;
                *(uint32_t*)0x20000080 = 0;
                *(uint32_t*)0x20000084 = 0;
                *(uint64_t*)0x200001d0 = 0x200000c0;
                *(uint64_t*)0x200001d8 = 0x20000180;
                *(uint32_t*)0x200001e0 = 0x48;
                *(uint32_t*)0x200001e4 = 2;
                *(uint32_t*)0x200001e8 = 0xab;
                *(uint32_t*)0x200001ec = 7;
                		inject_fault(1);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                		if (res == ZX_OK) {
                r[0] = *(uint32_t*)0x20000180;
                r[1] = *(uint32_t*)0x2000018c;
                r[2] = *(uint32_t*)0x20000194;
                r[3] = *(uint32_t*)0x20000198;
                		}
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_port_cancel))(/*port=*/r[2], /*source=*/0, /*key=*/0x3f7);
                		break;
                	case 2:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/8, /*entry=*/5, /*out=*/0x20000280);
                				}
                		}
                		if (res == ZX_OK)
                r[4] = *(uint32_t*)0x20000280;
                		break;
                	case 3:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_guest_set_trap))(/*handle=*/r[3], /*kind=*/0, /*vaddr=*/6, /*size=*/0x1f1d400000000000, /*port_handle=*/r[4], /*key=*/0x20);
                		break;
                	case 4:
                		res = -1;
                res = syz_future_time(/*when=*/1);
                		if ((int)res != -1)
                				r[5] = res;
                		break;
                	case 5:
                *(uint64_t*)0x20010380 = 0x200002c0;
                *(uint32_t*)0x200002c0 = 0;
                memset((void*)0x200002c4, 0, 3);
                *(uint8_t*)0x200002c7 = 1;
                *(uint64_t*)0x200002c8 = 0x5ccdedb900000000;
                *(uint64_t*)0x200002d0 = 5;
                *(uint64_t*)0x200002d8 = -1;
                memset((void*)0x200002e0, 92, 1);
                *(uint64_t*)0x20010388 = 0x20000300;
                *(uint64_t*)0x20010390 = 0x20000340;
                *(uint64_t*)0x20010398 = 0x20010340;
                *(uint32_t*)0x200103a0 = 0x28;
                *(uint32_t*)0x200103a4 = 0;
                *(uint32_t*)0x200103a8 = 0x10000;
                *(uint32_t*)0x200103ac = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[0], /*options=*/0, /*deadline=*/r[5], /*args=*/0x20010380, /*actual_bytes=*/0x200103c0, /*actual_handles=*/0x20010400);
                		break;
                	case 6:
                		res = -1;
                res = syz_future_time(/*when=*/0);
                		if ((int)res != -1)
                				r[6] = res;
                		break;
                	case 7:
                *(uint64_t*)0x20020500 = 0x20010440;
                *(uint32_t*)0x20010440 = 0;
                memset((void*)0x20010444, 0, 3);
                *(uint8_t*)0x20010447 = 1;
                *(uint64_t*)0x20010448 = 0x7072fd8700000000;
                *(uint64_t*)0x20020508 = 0x20010480;
                *(uint64_t*)0x20020510 = 0x200104c0;
                *(uint64_t*)0x20020518 = 0x200204c0;
                *(uint32_t*)0x20020520 = 0x10;
                *(uint32_t*)0x20020524 = 0;
                *(uint32_t*)0x20020528 = 0x10000;
                *(uint32_t*)0x2002052c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[6], /*args=*/0x20020500, /*actual_bytes=*/0x20020540, /*actual_handles=*/0x20020580);
                		break;
                	case 8:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_vcpu_create))(/*guest=*/r[1], /*options=*/6, /*entry=*/0x20, /*out=*/0x200205c0);
                		if (res == ZX_OK)
                r[7] = *(uint32_t*)0x200205c0;
                		break;
                	case 9:
                *(uint64_t*)0x200306c0 = 0x20020600;
                *(uint32_t*)0x20020600 = 0;
                memset((void*)0x20020604, 0, 3);
                *(uint8_t*)0x20020607 = 1;
                *(uint64_t*)0x20020608 = 0x52b9568700000000;
                *(uint64_t*)0x200306c8 = 0x20020640;
                *(uint64_t*)0x200306d0 = 0x20020680;
                *(uint64_t*)0x200306d8 = 0x20030680;
                *(uint32_t*)0x200306e0 = 0x10;
                *(uint32_t*)0x200306e4 = 0;
                *(uint32_t*)0x200306e8 = 0x10000;
                *(uint32_t*)0x200306ec = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[7], /*options=*/0, /*deadline=*/r[5], /*args=*/0x200306c0, /*actual_bytes=*/0x20030700, /*actual_handles=*/0x20030740);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\xc4\xc2\xd1\x98\xd1\x2e\x2e\xf3\xf0\x41\x31\x07\x43\xdf\xc6\xa0\x32\x23\x33\x33\x33\x33\x33\x33\x43\xd8\xe6\xc4\x42\xf9\x30\x6e\x5a\x67\xf3\x45\x0f\x2a\x59\xd3\x66\x45\x0f\xc7\xf5\x8f\x69\xe8\x98\x96\xdb\x00\x00\x00\x0f\x1c\x7b\x00", 58);
                syz_execute_func(/*text=*/0x20000000);
                		break;
                	case 11:
                syz_future_time(/*when=*/0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(/*addr=*/0x20ffb000, /*len=*/0x2000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:279:81: error: use of undeclared identifier 'zx_channel_call_etc'
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/0, /*options=*/0x3f, /*deadline=*/0x7fffffffffffffff, /*args=*/0x200001c0, /*actual_bytes=*/0x20000200, /*actual_handles=*/0x20000240);
                                                                                                ^
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1103412985 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/8 (1.10s)
            csource_test.go:148: 
        --- FAIL: TestGenerate/fuchsia/amd64/10 (1.11s)
            csource_test.go:148: 
        --- FAIL: TestGenerate/fuchsia/amd64/7 (1.16s)
            csource_test.go:148: 
        --- FAIL: TestGenerate/fuchsia/amd64/5 (1.27s)
            csource_test.go:148: 
FAIL
FAIL	github.com/google/syzkaller/pkg/csource	13.805s
ok  	github.com/google/syzkaller/pkg/db	3.454s
ok  	github.com/google/syzkaller/pkg/email	(cached)
ok  	github.com/google/syzkaller/pkg/email/lore	0.063s
ok  	github.com/google/syzkaller/pkg/host	20.312s
ok  	github.com/google/syzkaller/pkg/html	0.065s
ok  	github.com/google/syzkaller/pkg/ifuzz	(cached)
ok  	github.com/google/syzkaller/pkg/image	(cached)
ok  	github.com/google/syzkaller/pkg/instance	5.227s
ok  	github.com/google/syzkaller/pkg/ipc	13.757s
ok  	github.com/google/syzkaller/pkg/kconfig	1.087s
ok  	github.com/google/syzkaller/pkg/kd	(cached)
ok  	github.com/google/syzkaller/pkg/log	(cached)
ok  	github.com/google/syzkaller/pkg/mgrconfig	4.347s
ok  	github.com/google/syzkaller/pkg/osutil	0.237s
ok  	github.com/google/syzkaller/pkg/report	9.969s
ok  	github.com/google/syzkaller/pkg/repro	4.555s
ok  	github.com/google/syzkaller/pkg/runtest	62.753s
ok  	github.com/google/syzkaller/pkg/serializer	(cached)
ok  	github.com/google/syzkaller/pkg/stats	(cached)
ok  	github.com/google/syzkaller/pkg/subsystem	0.099s
ok  	github.com/google/syzkaller/pkg/subsystem/linux	0.154s
ok  	github.com/google/syzkaller/pkg/subsystem/lists	0.569s
ok  	github.com/google/syzkaller/pkg/symbolizer	0.215s
ok  	github.com/google/syzkaller/pkg/tool	(cached)
ok  	github.com/google/syzkaller/pkg/vcs	16.795s
ok  	github.com/google/syzkaller/prog	16.328s
ok  	github.com/google/syzkaller/prog/test	(cached)
ok  	github.com/google/syzkaller/sys/linux	(cached)
ok  	github.com/google/syzkaller/sys/netbsd	(cached)
ok  	github.com/google/syzkaller/sys/openbsd	(cached)
ok  	github.com/google/syzkaller/syz-ci	4.696s
ok  	github.com/google/syzkaller/syz-fuzzer	0.716s
ok  	github.com/google/syzkaller/syz-hub	0.301s
ok  	github.com/google/syzkaller/syz-hub/state	0.404s
ok  	github.com/google/syzkaller/syz-manager	4.996s
ok  	github.com/google/syzkaller/syz-verifier	4.741s
ok  	github.com/google/syzkaller/tools/syz-kconf	0.294s
ok  	github.com/google/syzkaller/tools/syz-linter	1.713s
ok  	github.com/google/syzkaller/tools/syz-trace2syz/parser	(cached)
ok  	github.com/google/syzkaller/tools/syz-trace2syz/proggen	(cached)
ok  	github.com/google/syzkaller/vm	12.464s
ok  	github.com/google/syzkaller/vm/isolated	3.878s
ok  	github.com/google/syzkaller/vm/proxyapp	5.975s
ok  	github.com/google/syzkaller/vm/vmimpl	3.988s
FAIL