? github.com/google/syzkaller/dashboard/dashapi [no test files] ok github.com/google/syzkaller/dashboard/app (cached) ? github.com/google/syzkaller/pkg/debugtracer [no test files] ? github.com/google/syzkaller/pkg/gce [no test files] ? github.com/google/syzkaller/pkg/gcs [no test files] ? github.com/google/syzkaller/pkg/hash [no test files] ok github.com/google/syzkaller/executor 5.194s ok github.com/google/syzkaller/pkg/asset (cached) ok github.com/google/syzkaller/pkg/ast 1.436s ok github.com/google/syzkaller/pkg/auth (cached) ? github.com/google/syzkaller/pkg/html/pages [no test files] ? github.com/google/syzkaller/pkg/ifuzz/iset [no test files] ? github.com/google/syzkaller/pkg/ifuzz/powerpc [no test files] ? github.com/google/syzkaller/pkg/ifuzz/powerpc/generated [no test files] ? github.com/google/syzkaller/pkg/ifuzz/x86 [no test files] ? github.com/google/syzkaller/pkg/ifuzz/x86/gen [no test files] ? github.com/google/syzkaller/pkg/ifuzz/x86/generated [no test files] ? github.com/google/syzkaller/pkg/ipc/ipcconfig [no test files] ? github.com/google/syzkaller/pkg/kcidb [no test files] ? github.com/google/syzkaller/pkg/report/crash [no test files] ? github.com/google/syzkaller/pkg/rpctype [no test files] ? github.com/google/syzkaller/pkg/signal [no test files] ? github.com/google/syzkaller/pkg/stats/syzbotstats [no test files] ? github.com/google/syzkaller/pkg/testutil [no test files] ? github.com/google/syzkaller/pkg/tools [no test files] ok github.com/google/syzkaller/pkg/bisect 29.875s ok github.com/google/syzkaller/pkg/bisect/minimize (cached) ok github.com/google/syzkaller/pkg/build 14.965s ok github.com/google/syzkaller/pkg/compiler 9.110s ok github.com/google/syzkaller/pkg/config (cached) ok github.com/google/syzkaller/pkg/cover 24.432s ok github.com/google/syzkaller/pkg/cover/backend 1.212s --- FAIL: TestGenerate (25.05s) --- FAIL: TestGenerate/fuchsia/amd64 (0.14s) testutil.go:33: seed=1701950472113545570 testutil.go:33: seed=1701950472256547815 --- FAIL: TestGenerate/fuchsia/amd64/0 (0.38s) csource_test.go:150: opts: {Threaded:false Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_one(void) { intptr_t res = 0; memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); syz_future_time(/*when=*/1); syz_job_default(); syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); syz_process_self(); syz_thread_self(); syz_vmar_root_self(); } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :230:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor4177721704 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/12 (0.47s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { if (write(1, "executing program\n", sizeof("executing program\n") - 1)) { } int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :383:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2747534150 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/14 (0.40s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static unsigned long long procid; static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { if (write(1, "executing program\n", sizeof("executing program\n") - 1)) { } int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); for (procid = 0; procid < 2; procid++) { if (fork() == 0) { use_temporary_dir(); do_sandbox_none(); } } sleep(1000000); return 0; } :385:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3418886133 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/9 (1.01s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:9223372036854775807 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :381:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2249699815 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/10 (1.04s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); do_sandbox_none(); return 0; } :369:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor916761352 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/13 (1.17s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { fprintf(stderr, "### start\n"); int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); fprintf(stderr, "### call=0 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 1: res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); fprintf(stderr, "### call=1 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); fprintf(stderr, "### call=2 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); fprintf(stderr, "### call=3 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 4: res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); fprintf(stderr, "### call=4 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); fprintf(stderr, "### call=5 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); fprintf(stderr, "### call=6 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 7: res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); fprintf(stderr, "### call=7 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); fprintf(stderr, "### call=8 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; res = -1; errno = EFAULT; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); fprintf(stderr, "### call=9 errno=%u\n", (intptr_t)(int)res == -1 ? errno : 0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); res = -1; errno = EFAULT; res = syz_execute_func(/*text=*/0x20000000); fprintf(stderr, "### call=10 errno=%u\n", res == -1 ? errno : 0); break; case 11: res = -1; errno = EFAULT; res = syz_future_time(/*when=*/1); fprintf(stderr, "### call=11 errno=%u\n", res == -1 ? errno : 0); break; case 12: res = -1; errno = EFAULT; res = syz_job_default(); fprintf(stderr, "### call=12 errno=%u\n", res == -1 ? errno : 0); break; case 13: res = -1; errno = EFAULT; res = syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); fprintf(stderr, "### call=13 errno=%u\n", res == -1 ? errno : 0); break; case 14: res = -1; errno = EFAULT; res = syz_process_self(); fprintf(stderr, "### call=14 errno=%u\n", res == -1 ? errno : 0); break; case 15: res = -1; errno = EFAULT; res = syz_thread_self(); fprintf(stderr, "### call=15 errno=%u\n", res == -1 ? errno : 0); break; case 16: res = -1; errno = EFAULT; res = syz_vmar_root_self(); fprintf(stderr, "### call=16 errno=%u\n", res == -1 ? errno : 0); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :408:81: error: use of undeclared identifier 'zx_channel_call_etc' res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2551993428 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/1 (0.91s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="bb66f427ae759a6af623910b54e83b5f4aefd5dedf7ae5720a8ab03b72cbce4fb9a0428b6d16114a87d11fc2340e04d976f3ca50e69a60be8090a84fa2af2e7cdbd187674016d10cb0319a93ae2323ce139ff75beb8775e19fbe9e6fa7ca9faaab75692fe582852d8fc0a614597c7b37b82e05b9f0104d68149638697ad68d4cac0fd2fde6402613289724e501ca26b115ab289977c0aa0480b5d6cb1317204a9f3e555cbe474fce5432e9c5997477ae61d78908afe2f545aadd5eaf86f3ed6944664daeb419ed08472e2aba4a38e5661a2e9cc42135ce2a302acc18210f84e510ea35c4a4d8c9fd5f0ffe237b8070d60e35717cbd463f99632d59e2bfe729bdeffbd74557ce329e00209d4c56516089d5d9d719500b701d22c63cbdc2e0ba2ba8a338546ca8e649949070e623e9a6ccbf6c9de50a412017be550b69ae9a41e1040f77e85772079a83e8d0adbb7679489a7750aa6d5ab6dc192cc20cc7f8d859ea532d8a28753b92972b213e125d7341d77071f8d9bb616aba5e3bb497fedcc49f8e3c6239e408c739d4bc0f8422f771c0815de97b62215b869724c5a54e00b4a964dde824a56cdad2114648293e7f08ccf65bd7b13605a3f4d0f85450ed23e85fc701fce84a4e4e98c941fdd30b679d1886b6eecda44926beae786337cc055d9001de8592be9d714848f1b2f2535e9e402ede09d489d5ef063f0387666a84b682db5a72cbb65c9b8a69fd2aa8f3d963aa670f166d4309931e49b00a9fcfce00635d456072f294c710d3432b184393a24ee57271291f1c7f595a36d6c3c1ceabe634945845bffbb6862a08ead46bcb5eea172999a32f7efa6716f38e036ee934ae8e9efe2008c5ac00aa3716f502572348c0310c050de7451c4767930ae1ac2de21afcde0eea06e93bd9216fc29bd853b86ade23fd99a38857e2235ebfb39fd24348e99eff4d6ed18d212bd2e9c81d1454a1c0c96f99860b997181ed12c8e82a7d3525405a376494639be551d1cb25dc166480f10d35b362e4d033bbd4605813aceb839d2ff3b771bee294792d5e7d1b08b99b55463cc21d261e1305ca139efddd968b9c5124572921ef059dfbde18e58e0be30a54c1fb0779e819841d955c1dcaf715c32f5b4b50c14803fa438435e82fff216796401dc5f1ddeb653a9c28a38d83a9174af21c7b8f587eb1563398dce058b0529f85595fe3df0dc8d2fe28bb5ac25d8167d5ce7e1a04634adf64f8bf0e86a7ef0a9025e7733c68faf7af2d00c780149eb4eb577cd68d2e8b7db0ae6c9a7fff06202f01c53f4643d009047ddd622f533595053427712890dfd538fb394993f356f9b62a87fe502ef2cac2220768812ce83faa2b1e37baaf944a860ac09aef2dfffcbca11ef39e4f7c50ae8fc46a53c7bad615fded36a1dfb7ddcbd2189509d4ffff504f3e09e2a839c82e13277fe6a1bffab217952f6d663d43491b6af4396d3dd257c74bf91944568a1fc678ac8f08cc55a30f93d0bbe6ec8f843275a480e5e36779810afe3aac3bc748e1c6ea0d85b42533b1650de38fdeb8983b68d26b8d7ea01fe222bb92dfe41bdaea1ab83bcb7c08fc20e3c8e009b5bbab61d32269d8cbc47069ecc8ca0f0219ae655c1d53e719e29e5836bbb668803d8a527ce539f23ebdd16bb1d60c63f14c4b5b95a02ed844c61ce588f04731183bd56368f58cc9f76514009b3d65b6944dbf6da9c7e892135fbe622b32356623f422e56ac7998e31f626f048659f4eb975f7b3ecdb97cd3cea03a5dcf8140e12182801472f4976c553799e55cf5a009f6a7c9e15617ea8d44c6d21dd6034b49202e54267c83faf105981beb006b05b79062c7399a01a7ac87436ec2be6df6b1521b0fbdddd2d8116010805f3640376ba4ce798df61271e15d61eea40ec93b3da9a4564ea7f8663ccf0e851d88321e859f1569618fe5d07dfa2f7490312c130dbc234c079269c46203d04039acbe165274a18c92cca382c082610c12b34ccc552874f96945c3ebb7d5aff634a13a61ba31c652ee0008e513d30da4cfa0955beba25e5283cee518077ca1f7bc867fd1004166490bd2a520e31cd33921a9fa0af96f8467f7b2f6ed79ca384a6d6689a305ed32222acebdc38431d4da2c6d5932acb6a24634d6cda9dee6becc8e4233ce4181796066477827f0ccb88a00f7d5f39d5d765b5e7a854d5a18a77f51f2d8e267f5424ecaae8f427eebb859ff66ab644a5ff10ec0e88cd1a77851555dfca365bbcc4b1746630a5e7572cfff53c9544bb54851f002ee936271d65265df32295cc7b08ad6ce3d020455e7e077d8046ea5e2ca20dc18b516c9bda366a43421d5717bafb89ac6d092f689bc34c97d355b1cef5ac7d8d6dadb01b9481a81ac065e0078c9b681681a2e2f3e1b10c64702da385d43c57ce004b8e0cf25c12fc088de939da9510ffe178b9cd8974ea0244a971b2cbaf7837b327031ed2a1361f5ae5afa2c9445da29ccf1688b93afbbb618cd01a6de8259f07e6de1af51489fe79d339857716c6b9047c441f640a5174b82c545420ee7afefbf1417ae520cb23de7434f48794450f7dd03a67345feda2275594b11ba1398fb44476261e15abcd0595b86fba9cb3fdc7a5560a047a2af24df4d94974e5c5f9a4b0a76a3bd1ca54c49695e326d1243461ac910a738b8603bd28d727cf604a1435227f319fdf3db88431a163645816a761a5cb350f1122952a21896d396bf7668a9a8a466aa3c840fcd7cc6c1bdd455def94cbc5f2b36be8075319baa2d1ff52960705aee3c902e4e89116fc772bd270cc5e536dafeaa5160fcabdc5fc0f5689267dbed90b8d7785ce260f99fde379a402ec540b44e362625426aa022919dbf2fedb8a94e3b99d45ce07a87437d316069f95371b4bcf618308ce91f3ab5d3e02a756fcbce983861adcb63d586a847e38284eff724718b3e5c37e24caedcd13c13feca8d60ab905c30ac285f2843ec4e57a907cba436bb871a299c083d9df000169a2434576f1430f1589d8f1600aeb29712730b336c371dad124cf6abb8c870cddb5813295eb80a6304b4f567bf34df5fd2a4a6eec247f33223a764663754524302fbf42ba25660260617d4531eadf5e972f82e172699905d5409321f23add734625bce92b18105f0b9c2095c34f3ee323b74d632ceb46832ad3f0439f85ec5dc239f92da4192ee83467e278c185bcc39255e6599d57254ada80f404457b71e651b308e88cedfd23c7352e369e92305c94e0ce6b45ef1e0e73718d7db08ea116512ea22a785ecc6a11f2086c89bb5c207a61248630d486cac34e680808e2bc325f2b6cd2147e380ecb7221ed0f4a70af905574621106746650dbdcf3daaaddcbcb59ab72cecc6a3145db1e389a9f98057daec1a750c766fc3c69ddf9dfdb09e61ab2a115d401e74f4f051956ff019b04dc181db691828da8fbc5fd6af8b58201397450688398f184c8daaa31e317720cca8739c4bde517b3f639abf22af7e4840e3e99beb23dbd5d9b6a24b9f3166f3f20d72f3074b11cce87e2c3eff50e637305a2e8ec4369a3cab4cb37549bb52c4e038d6e093fc7af580abdd41be3b8ec465e1d9c50fd66972122a7ec0fe18bd8607b1d79fa9bf8d60476e1f0d0089ee5c663998eb13448d406a08a6e04a883ff6e75a49b52141e74dc34ceb7047bdf44839d393a2f13a85955f1d2e765ec8186be1fb437b1b577e08c3575744b07ea3c6e8a1bea581baf4c426ef94f13c6f1b07d610374f6422f507300d7cfc995d9a2405b7a6bab2bd6e143b279c2477d5e1332341a24e82d88e7aace73d0062412c2daf185ef286f9745976a81b781a9bc9afd92b62e94d43b0a941d895e8410e418dcaf0dccafb600f52d3dce2b0bfd152055ab3ef2cf8224178f826bd5df457a224df5a20ac41bf4584c19d6383fe34303609d5011d510c29dc6042a129ac9e0da5d7dc2d0292ea5c910ba88020606c3168375e1fe0eba966b6d62b5c8de4abeff1e853706a413ac58e1a09676b3204681087db0fdbb9d7bcbffda90cd0d8995e0c1a76ed2406b4207a9431747798a37a2d7d98493d88738f234d5e6d62de05e67d872279dc39eb29aa8c163ac13de3746d14f59862f473abdbfb4fb76ffa2670801ab042ded540f99616509435984f1f91da17f009c7fb1a1a5911a82cb2a3991735da0ec38666696b21def61df5094c2523065e7002ee4fd96724674922b878766563d28fc603f6d4f703cc1f824a8e9968b70b41c771cfd31961bc80ae706fc3b074c53c7d1697466959bc2d4e0e17fff6512599b46a89d5311174131f465443dd5eeb9946d024666a1ae5cf6b23ceda4e4b7878e0e4659bf49657b2dfdeb4725c10f9fb14b78f406d7866fbbf5b9fe1ff6b5677b562f7adfc364856cc183ba87ab669d4025414580ca11e569c3b5e3e34f167811071b9b126618322b31767d01f475d5903e1e5a15dbc2f6b8b8b8bee2f6eb2238bc74b61089b234b4b1c3fdaa6bde0bbb771c405e4a22ff1e82a1d57da64756420cc9ebce301d0ebe39c9759757dcae1344d906927878806f4cb1f8b0279451a1b046f2cb27923b69ca8d034d6d1abe03b07a266c8fc15a3a83dc05e96acb336a2bb1b26e26400556d2c6e94410f71cdff3585fafab59634569fa3831562c34814fb81442da66a2e6e7a2bc7084553ac8338c4007d5c998ebed8f63d7f303828ed0779763ef00326cdacb189db1b1673d8f0373968e757178431e40f363b3df22d662077772ac65b5361707f3c200798270ae7c94b6fca468afc5e457d7bc3cae02c3084aabddacae4a9d1361a61f40a7b7d12b559a691e39ee47f9f3e2f3838f27a98cbccba4a14076b7d7441afc8f36e5145657a7ff6554fa32cc7b5b689aa837431b1bee183089b363627dec7988c28513722fe5789698f6dba04e1beab4354c370ddc784ea561cdb48a6ad7c458f0544aeeb42fd3a519a0105f52a6f449063d6e3adb6705c1fca18bddb1ed98b98879c513177869998a48cbe48ac410949b9194fdf0ca2e248d7ffa6e96d242659be7e56b32323c46f37baaf5ecd66c5568ac3022b24d495bc47275f5b9141bffe3cd3ec7089fb0f95615c461a40d66cdde5a8c350ab1567f587f3f59483fb77ab08c4bc99d1334814697b6176c051b9cc02b0d028eabf82d99cef402ba469151a9b14929a9f907d35eeb3842f7182eae4eee109075ba16971b24366cbb0282a5cf081bb063423a6096fa74d7cdf98178e6655ff41abc2c6c27d8b4b978e2f8a8c0ea7dc3e52cd381f33f9747b194648a90dd2025d94718a3c70f74dd95c3f17af354a64de99e6e075e1a8b978056fafd15650a5a7866638856dd9ebbca31b1b0c1227ecc84fd6724449e770984f843dac552659344348628d254bd623b677324d974972675694b9e703e78aa962b23e315e1dab093c56ea510807ef76307947006e3d39cb174a784dfa0775e608548862b947faded48a506cb1dfe08719b2946c137b93ce164149ce953b871af747439c969a18da403b51b68e853269bc140e4cf4d6b14d75744e31b2831cbf5bdc81f222148ac18a92c73ae2904d5f4a8806b3d5261a71fea2c8eda39652ad06ee1a57b3110922210a8f097ae01689ace7304e894e2f4aa1661951becbd0c91351ea6ab83f2c76ec3d882cc9152f8eed1d40c42610876c0436552920f0867bf884780a29ce063188e3faf7d16f1d0b17de630e229bb620177ccb88289aa1a1632cc5ae7043d99bb9d2ef0d8a701f4f5fd810560d8c59479bcca1f1faef50b7e25", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :381:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3708425125 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/8 (1.10s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:-9223372036854775808 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :381:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3872133196 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/7 (1.10s) csource_test.go:150: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="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", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void execute_one(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } static void execute_one(void); static void loop(void) { execute_one(); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); loop(); return 0; } :375:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2013720837 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/6 (1.18s) csource_test.go:148: --- FAIL: TestGenerate/fuchsia/amd64/5 (0.92s) csource_test.go:148: --- FAIL: TestGenerate/fuchsia/amd64/4 (0.91s) csource_test.go:148: --- FAIL: TestGenerate/fuchsia/amd64/2 (0.92s) csource_test.go:150: opts: {Threaded:true Repeat:false RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}} program: fdio_service_connect$fuchsia_cobalt_MetricEventLoggerFactory(&(0x7f0000000000), 0x0) (fail_nth: 1) zx_clock_get_details(0x0, 0x400000000000000, &(0x7f0000000080)={0x0, 0x0}) (async) zx_object_wait_many(&(0x7f0000000040)=[{0x0, 0x1ff, 0x4}, {0x0, 0xfffffffb, 0xf80000}], 0x2, r0) (rerun: 4) zx_channel_call$fuchsia_hardware_ethernet_DeviceGetStatus(0x0, 0x0, r0, &(0x7f00000101c0)={&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000010180), 0x10, 0x0, 0x10000}, &(0x7f0000010200), &(0x7f0000010240)) zx_object_get_property$ZX_PROP_REGISTER_GS(0x0, 0x2, &(0x7f0000010280), 0x8) zx_channel_call(0x0, 0x0, r0, &(0x7f0000010540)={&(0x7f00000102c0)="a897e9750b08bf00bedece323dac76c6f42dd0ba4b930ad6621e7124285cfa82b8d0182bb78cd2f04959487e8ec86c642286e536e776dafd70b3fda27ed30a0673cd394aeb6533dd2b98841e078b6c3ac56740056cd4c9191d9b7f22061aa00a0d7c90713349b4351b408d93cc8ab31cb68b629fa2b5a9a12dc5fb8faad6dee48ccf7b0e82a5604968d50e5d7ff4f77ad1c026d61aa720e473d44e167e7be035736f8ca1bf4d368ef84e32bf8a2dab2fce9090725d2b67e781571d815577bd54267bc56b8a54af70b0652973e09a6b58521f639e238474afaf424fa01ff03039b6674939", &(0x7f00000103c0)=[0x0], &(0x7f0000010400)=""/231, &(0x7f0000010500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xe4, 0x1, 0xe7, 0x5}, &(0x7f0000010580), &(0x7f00000105c0)) zx_channel_call$fuchsia_io_FileWriteAt(r2, 0x0, r0, &(0x7f00000206c0)={&(0x7f0000010600)={{}, {0x8, 0xffffffffffffffff}, 0x9}, &(0x7f0000010640), &(0x7f0000010680), &(0x7f0000020680), 0x28, 0x0, 0x10000}, &(0x7f0000020700), &(0x7f0000020740)) zx_clock_get_details(r2, 0x400000000000000, &(0x7f0000020780)={0x0, 0x0}) zx_channel_call$fuchsia_io_FileReadAt(r3, 0x0, r4, &(0x7f00000308c0)={&(0x7f0000020800)={{}, 0x5, 0x9}, &(0x7f0000020840), &(0x7f0000020880), &(0x7f0000030880), 0x20, 0x0, 0x10000}, &(0x7f0000030900), &(0x7f0000030940)) zx_channel_call_etc(r1, 0x90cf, r4, &(0x7f0000032a40)={&(0x7f0000030980)="bb66f427ae759a6af623910b54e83b5f4aefd5dedf7ae5720a8ab03b72cbce4fb9a0428b6d16114a87d11fc2340e04d976f3ca50e69a60be8090a84fa2af2e7cdbd187674016d10cb0319a93ae2323ce139ff75beb8775e19fbe9e6fa7ca9faaab75692fe582852d8fc0a614597c7b37b82e05b9f0104d68149638697ad68d4cac0fd2fde6402613289724e501ca26b115ab289977c0aa0480b5d6cb1317204a9f3e555cbe474fce5432e9c5997477ae61d78908afe2f545aadd5eaf86f3ed6944664daeb419ed08472e2aba4a38e5661a2e9cc42135ce2a302acc18210f84e510ea35c4a4d8c9fd5f0ffe237b8070d60e35717cbd463f99632d59e2bfe729bdeffbd74557ce329e00209d4c56516089d5d9d719500b701d22c63cbdc2e0ba2ba8a338546ca8e649949070e623e9a6ccbf6c9de50a412017be550b69ae9a41e1040f77e85772079a83e8d0adbb7679489a7750aa6d5ab6dc192cc20cc7f8d859ea532d8a28753b92972b213e125d7341d77071f8d9bb616aba5e3bb497fedcc49f8e3c6239e408c739d4bc0f8422f771c0815de97b62215b869724c5a54e00b4a964dde824a56cdad2114648293e7f08ccf65bd7b13605a3f4d0f85450ed23e85fc701fce84a4e4e98c941fdd30b679d1886b6eecda44926beae786337cc055d9001de8592be9d714848f1b2f2535e9e402ede09d489d5ef063f0387666a84b682db5a72cbb65c9b8a69fd2aa8f3d963aa670f166d4309931e49b00a9fcfce00635d456072f294c710d3432b184393a24ee57271291f1c7f595a36d6c3c1ceabe634945845bffbb6862a08ead46bcb5eea172999a32f7efa6716f38e036ee934ae8e9efe2008c5ac00aa3716f502572348c0310c050de7451c4767930ae1ac2de21afcde0eea06e93bd9216fc29bd853b86ade23fd99a38857e2235ebfb39fd24348e99eff4d6ed18d212bd2e9c81d1454a1c0c96f99860b997181ed12c8e82a7d3525405a376494639be551d1cb25dc166480f10d35b362e4d033bbd4605813aceb839d2ff3b771bee294792d5e7d1b08b99b55463cc21d261e1305ca139efddd968b9c5124572921ef059dfbde18e58e0be30a54c1fb0779e819841d955c1dcaf715c32f5b4b50c14803fa438435e82fff216796401dc5f1ddeb653a9c28a38d83a9174af21c7b8f587eb1563398dce058b0529f85595fe3df0dc8d2fe28bb5ac25d8167d5ce7e1a04634adf64f8bf0e86a7ef0a9025e7733c68faf7af2d00c780149eb4eb577cd68d2e8b7db0ae6c9a7fff06202f01c53f4643d009047ddd622f533595053427712890dfd538fb394993f356f9b62a87fe502ef2cac2220768812ce83faa2b1e37baaf944a860ac09aef2dfffcbca11ef39e4f7c50ae8fc46a53c7bad615fded36a1dfb7ddcbd2189509d4ffff504f3e09e2a839c82e13277fe6a1bffab217952f6d663d43491b6af4396d3dd257c74bf91944568a1fc678ac8f08cc55a30f93d0bbe6ec8f843275a480e5e36779810afe3aac3bc748e1c6ea0d85b42533b1650de38fdeb8983b68d26b8d7ea01fe222bb92dfe41bdaea1ab83bcb7c08fc20e3c8e009b5bbab61d32269d8cbc47069ecc8ca0f0219ae655c1d53e719e29e5836bbb668803d8a527ce539f23ebdd16bb1d60c63f14c4b5b95a02ed844c61ce588f04731183bd56368f58cc9f76514009b3d65b6944dbf6da9c7e892135fbe622b32356623f422e56ac7998e31f626f048659f4eb975f7b3ecdb97cd3cea03a5dcf8140e12182801472f4976c553799e55cf5a009f6a7c9e15617ea8d44c6d21dd6034b49202e54267c83faf105981beb006b05b79062c7399a01a7ac87436ec2be6df6b1521b0fbdddd2d8116010805f3640376ba4ce798df61271e15d61eea40ec93b3da9a4564ea7f8663ccf0e851d88321e859f1569618fe5d07dfa2f7490312c130dbc234c079269c46203d04039acbe165274a18c92cca382c082610c12b34ccc552874f96945c3ebb7d5aff634a13a61ba31c652ee0008e513d30da4cfa0955beba25e5283cee518077ca1f7bc867fd1004166490bd2a520e31cd33921a9fa0af96f8467f7b2f6ed79ca384a6d6689a305ed32222acebdc38431d4da2c6d5932acb6a24634d6cda9dee6becc8e4233ce4181796066477827f0ccb88a00f7d5f39d5d765b5e7a854d5a18a77f51f2d8e267f5424ecaae8f427eebb859ff66ab644a5ff10ec0e88cd1a77851555dfca365bbcc4b1746630a5e7572cfff53c9544bb54851f002ee936271d65265df32295cc7b08ad6ce3d020455e7e077d8046ea5e2ca20dc18b516c9bda366a43421d5717bafb89ac6d092f689bc34c97d355b1cef5ac7d8d6dadb01b9481a81ac065e0078c9b681681a2e2f3e1b10c64702da385d43c57ce004b8e0cf25c12fc088de939da9510ffe178b9cd8974ea0244a971b2cbaf7837b327031ed2a1361f5ae5afa2c9445da29ccf1688b93afbbb618cd01a6de8259f07e6de1af51489fe79d339857716c6b9047c441f640a5174b82c545420ee7afefbf1417ae520cb23de7434f48794450f7dd03a67345feda2275594b11ba1398fb44476261e15abcd0595b86fba9cb3fdc7a5560a047a2af24df4d94974e5c5f9a4b0a76a3bd1ca54c49695e326d1243461ac910a738b8603bd28d727cf604a1435227f319fdf3db88431a163645816a761a5cb350f1122952a21896d396bf7668a9a8a466aa3c840fcd7cc6c1bdd455def94cbc5f2b36be8075319baa2d1ff52960705aee3c902e4e89116fc772bd270cc5e536dafeaa5160fcabdc5fc0f5689267dbed90b8d7785ce260f99fde379a402ec540b44e362625426aa022919dbf2fedb8a94e3b99d45ce07a87437d316069f95371b4bcf618308ce91f3ab5d3e02a756fcbce983861adcb63d586a847e38284eff724718b3e5c37e24caedcd13c13feca8d60ab905c30ac285f2843ec4e57a907cba436bb871a299c083d9df000169a2434576f1430f1589d8f1600aeb29712730b336c371dad124cf6abb8c870cddb5813295eb80a6304b4f567bf34df5fd2a4a6eec247f33223a764663754524302fbf42ba25660260617d4531eadf5e972f82e172699905d5409321f23add734625bce92b18105f0b9c2095c34f3ee323b74d632ceb46832ad3f0439f85ec5dc239f92da4192ee83467e278c185bcc39255e6599d57254ada80f404457b71e651b308e88cedfd23c7352e369e92305c94e0ce6b45ef1e0e73718d7db08ea116512ea22a785ecc6a11f2086c89bb5c207a61248630d486cac34e680808e2bc325f2b6cd2147e380ecb7221ed0f4a70af905574621106746650dbdcf3daaaddcbcb59ab72cecc6a3145db1e389a9f98057daec1a750c766fc3c69ddf9dfdb09e61ab2a115d401e74f4f051956ff019b04dc181db691828da8fbc5fd6af8b58201397450688398f184c8daaa31e317720cca8739c4bde517b3f639abf22af7e4840e3e99beb23dbd5d9b6a24b9f3166f3f20d72f3074b11cce87e2c3eff50e637305a2e8ec4369a3cab4cb37549bb52c4e038d6e093fc7af580abdd41be3b8ec465e1d9c50fd66972122a7ec0fe18bd8607b1d79fa9bf8d60476e1f0d0089ee5c663998eb13448d406a08a6e04a883ff6e75a49b52141e74dc34ceb7047bdf44839d393a2f13a85955f1d2e765ec8186be1fb437b1b577e08c3575744b07ea3c6e8a1bea581baf4c426ef94f13c6f1b07d610374f6422f507300d7cfc995d9a2405b7a6bab2bd6e143b279c2477d5e1332341a24e82d88e7aace73d0062412c2daf185ef286f9745976a81b781a9bc9afd92b62e94d43b0a941d895e8410e418dcaf0dccafb600f52d3dce2b0bfd152055ab3ef2cf8224178f826bd5df457a224df5a20ac41bf4584c19d6383fe34303609d5011d510c29dc6042a129ac9e0da5d7dc2d0292ea5c910ba88020606c3168375e1fe0eba966b6d62b5c8de4abeff1e853706a413ac58e1a09676b3204681087db0fdbb9d7bcbffda90cd0d8995e0c1a76ed2406b4207a9431747798a37a2d7d98493d88738f234d5e6d62de05e67d872279dc39eb29aa8c163ac13de3746d14f59862f473abdbfb4fb76ffa2670801ab042ded540f99616509435984f1f91da17f009c7fb1a1a5911a82cb2a3991735da0ec38666696b21def61df5094c2523065e7002ee4fd96724674922b878766563d28fc603f6d4f703cc1f824a8e9968b70b41c771cfd31961bc80ae706fc3b074c53c7d1697466959bc2d4e0e17fff6512599b46a89d5311174131f465443dd5eeb9946d024666a1ae5cf6b23ceda4e4b7878e0e4659bf49657b2dfdeb4725c10f9fb14b78f406d7866fbbf5b9fe1ff6b5677b562f7adfc364856cc183ba87ab669d4025414580ca11e569c3b5e3e34f167811071b9b126618322b31767d01f475d5903e1e5a15dbc2f6b8b8b8bee2f6eb2238bc74b61089b234b4b1c3fdaa6bde0bbb771c405e4a22ff1e82a1d57da64756420cc9ebce301d0ebe39c9759757dcae1344d906927878806f4cb1f8b0279451a1b046f2cb27923b69ca8d034d6d1abe03b07a266c8fc15a3a83dc05e96acb336a2bb1b26e26400556d2c6e94410f71cdff3585fafab59634569fa3831562c34814fb81442da66a2e6e7a2bc7084553ac8338c4007d5c998ebed8f63d7f303828ed0779763ef00326cdacb189db1b1673d8f0373968e757178431e40f363b3df22d662077772ac65b5361707f3c200798270ae7c94b6fca468afc5e457d7bc3cae02c3084aabddacae4a9d1361a61f40a7b7d12b559a691e39ee47f9f3e2f3838f27a98cbccba4a14076b7d7441afc8f36e5145657a7ff6554fa32cc7b5b689aa837431b1bee183089b363627dec7988c28513722fe5789698f6dba04e1beab4354c370ddc784ea561cdb48a6ad7c458f0544aeeb42fd3a519a0105f52a6f449063d6e3adb6705c1fca18bddb1ed98b98879c513177869998a48cbe48ac410949b9194fdf0ca2e248d7ffa6e96d242659be7e56b32323c46f37baaf5ecd66c5568ac3022b24d495bc47275f5b9141bffe3cd3ec7089fb0f95615c461a40d66cdde5a8c350ab1567f587f3f59483fb77ab08c4bc99d1334814697b6176c051b9cc02b0d028eabf82d99cef402ba469151a9b14929a9f907d35eeb3842f7182eae4eee109075ba16971b24366cbb0282a5cf081bb063423a6096fa74d7cdf98178e6655ff41abc2c6c27d8b4b978e2f8a8c0ea7dc3e52cd381f33f9747b194648a90dd2025d94718a3c70f74dd95c3f17af354a64de99e6e075e1a8b978056fafd15650a5a7866638856dd9ebbca31b1b0c1227ecc84fd6724449e770984f843dac552659344348628d254bd623b677324d974972675694b9e703e78aa962b23e315e1dab093c56ea510807ef76307947006e3d39cb174a784dfa0775e608548862b947faded48a506cb1dfe08719b2946c137b93ce164149ce953b871af747439c969a18da403b51b68e853269bc140e4cf4d6b14d75744e31b2831cbf5bdc81f222148ac18a92c73ae2904d5f4a8806b3d5261a71fea2c8eda39652ad06ee1a57b3110922210a8f097ae01689ace7304e894e2f4aa1661951becbd0c91351ea6ab83f2c76ec3d882cc9152f8eed1d40c42610876c0436552920f0867bf884780a29ce063188e3faf7d16f1d0b17de630e229bb620177ccb88289aa1a1632cc5ae7043d99bb9d2ef0d8a701f4f5fd810560d8c59479bcca1f1faef50b7e25", &(0x7f00000319c0)=[0x0, r2], &(0x7f0000031a00)=""/4096, &(0x7f0000032a00)=[0x0, 0x0, 0x0, 0x0], 0x1000, 0x2, 0x1000, 0x4}, &(0x7f0000032a80), &(0x7f0000032ac0)) syz_execute_func(&(0x7f0000000000)="c4237917f4af420f978383897848f20faef5c42169e0bd22a4794bc402fd35dac4e1017c4640410fc763fd660f38f81de80000006742d23b2dc9cd0000") syz_future_time(0x1) syz_job_default() syz_mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_process_self() syz_thread_self() syz_vmar_root_self() csource_test.go:151: failed to build program: // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static void sleep_ms(uint64_t ms) { usleep(ms * 1000); } static uint64_t current_time_ms(void) { struct timespec ts; if (clock_gettime(CLOCK_MONOTONIC, &ts)) exit(1); return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000; } static void use_temporary_dir(void) { char tmpdir_template[] = "/tmp/syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) exit(1); if (chmod(tmpdir, 0777)) exit(1); if (chdir(tmpdir)) exit(1); } static int inject_fault(int nth) { return 0; } static void setup_fault() { } static void thread_start(void* (*fn)(void*), void* arg) { pthread_t th; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); int i = 0; for (; i < 100; i++) { if (pthread_create(&th, &attr, fn, arg) == 0) { pthread_attr_destroy(&attr); return; } if (errno == EAGAIN) { usleep(50); continue; } break; } exit(1); } typedef struct { int state; } event_t; static void event_init(event_t* ev) { ev->state = 0; } static void event_reset(event_t* ev) { ev->state = 0; } static void event_set(event_t* ev) { if (ev->state) exit(1); __atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE); } static void event_wait(event_t* ev) { while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE)) usleep(200); } static int event_isset(event_t* ev) { return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE); } static int event_timedwait(event_t* ev, uint64_t timeout_ms) { uint64_t start = current_time_ms(); for (;;) { if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED)) return 1; if (current_time_ms() - start > timeout_ms) return 0; usleep(200); } } long syz_mmap(size_t addr, size_t size) { zx_handle_t root = zx_vmar_root_self(); zx_info_vmar_t info; zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0); if (status != ZX_OK) { return status; } zx_handle_t vmo; status = zx_vmo_create(size, 0, &vmo); if (status != ZX_OK) { return status; } uintptr_t mapped_addr; status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE, addr - info.base, vmo, 0, size, &mapped_addr); zx_status_t close_vmo_status = zx_handle_close(vmo); if (close_vmo_status != ZX_OK) { } return status; } static long syz_process_self(void) { return zx_process_self(); } static long syz_thread_self(void) { return zx_thread_self(); } static long syz_vmar_root_self(void) { return zx_vmar_root_self(); } static long syz_job_default(void) { return zx_job_default(); } static long syz_future_time(volatile long when) { zx_time_t delta_ms = 10000; switch (when) { case 0: delta_ms = 5; break; case 1: delta_ms = 30; break; } zx_time_t now = 0; zx_clock_read(ZX_CLOCK_MONOTONIC, &now); return now + delta_ms * 1000 * 1000; } static void loop(); static int do_sandbox_none(void) { loop(); return 0; } #define CAST(f) ({void* p = (void*)f; p; }) static long syz_execute_func(volatile long text) { ((void (*)(void))(text))(); return 0; } struct thread_t { int created, call; event_t ready, done; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { event_wait(&th->ready); event_reset(&th->ready); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); event_set(&th->done); } return 0; } static void loop(void) { int i, call, thread; for (call = 0; call < 17; call++) { for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; event_init(&th->ready); event_init(&th->done); event_set(&th->done); thread_start(thr, th); } if (!event_isset(&th->done)) continue; event_reset(&th->done); th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); event_set(&th->ready); if (call == 1) break; event_timedwait(&th->done, 50); break; } } for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++) sleep_ms(1); } uint64_t r[5] = {0x0, 0x0, 0x0, 0x0, 0x0}; void execute_call(int call) { intptr_t res = 0; switch (call) { case 0: memcpy((void*)0x20000000, "/svc/fuchsia.cobalt.MetricEventLoggerFactory\000", 45); inject_fault(1); ((intptr_t(*)(intptr_t,intptr_t))CAST(fdio_service_connect))(/*path=*/0x20000000, /*handle=*/0); break; case 1: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/0, /*option=*/0x400000000000000, /*details=*/0x20000080); if (res == ZX_OK) r[0] = *(uint64_t*)0x20000088; break; case 2: *(uint32_t*)0x20000040 = 0; *(uint32_t*)0x20000044 = 0x1ff; *(uint32_t*)0x20000048 = 4; *(uint32_t*)0x2000004c = 0; *(uint32_t*)0x20000050 = 0xfffffffb; *(uint32_t*)0x20000054 = 0xf80000; ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); { int i; for(i = 0; i < 4; i++) { ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_wait_many))(/*items=*/0x20000040, /*count=*/2, /*deadline=*/r[0]); } } break; case 3: *(uint64_t*)0x200101c0 = 0x20000100; *(uint32_t*)0x20000100 = 0; memset((void*)0x20000104, 0, 3); *(uint8_t*)0x20000107 = 1; *(uint64_t*)0x20000108 = 0x6d63b33e00000000; *(uint64_t*)0x200101c8 = 0x20000140; *(uint64_t*)0x200101d0 = 0x20000180; *(uint64_t*)0x200101d8 = 0x20010180; *(uint32_t*)0x200101e0 = 0x10; *(uint32_t*)0x200101e4 = 0; *(uint32_t*)0x200101e8 = 0x10000; *(uint32_t*)0x200101ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x200101c0, /*actual_bytes=*/0x20010200, /*actual_handles=*/0x20010240); break; case 4: ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(/*handle=*/0, /*property=*/2, /*value=*/0x20010280, /*size=*/8); break; case 5: *(uint64_t*)0x20010540 = 0x200102c0; memcpy((void*)0x200102c0, "\xa8\x97\xe9\x75\x0b\x08\xbf\x00\xbe\xde\xce\x32\x3d\xac\x76\xc6\xf4\x2d\xd0\xba\x4b\x93\x0a\xd6\x62\x1e\x71\x24\x28\x5c\xfa\x82\xb8\xd0\x18\x2b\xb7\x8c\xd2\xf0\x49\x59\x48\x7e\x8e\xc8\x6c\x64\x22\x86\xe5\x36\xe7\x76\xda\xfd\x70\xb3\xfd\xa2\x7e\xd3\x0a\x06\x73\xcd\x39\x4a\xeb\x65\x33\xdd\x2b\x98\x84\x1e\x07\x8b\x6c\x3a\xc5\x67\x40\x05\x6c\xd4\xc9\x19\x1d\x9b\x7f\x22\x06\x1a\xa0\x0a\x0d\x7c\x90\x71\x33\x49\xb4\x35\x1b\x40\x8d\x93\xcc\x8a\xb3\x1c\xb6\x8b\x62\x9f\xa2\xb5\xa9\xa1\x2d\xc5\xfb\x8f\xaa\xd6\xde\xe4\x8c\xcf\x7b\x0e\x82\xa5\x60\x49\x68\xd5\x0e\x5d\x7f\xf4\xf7\x7a\xd1\xc0\x26\xd6\x1a\xa7\x20\xe4\x73\xd4\x4e\x16\x7e\x7b\xe0\x35\x73\x6f\x8c\xa1\xbf\x4d\x36\x8e\xf8\x4e\x32\xbf\x8a\x2d\xab\x2f\xce\x90\x90\x72\x5d\x2b\x67\xe7\x81\x57\x1d\x81\x55\x77\xbd\x54\x26\x7b\xc5\x6b\x8a\x54\xaf\x70\xb0\x65\x29\x73\xe0\x9a\x6b\x58\x52\x1f\x63\x9e\x23\x84\x74\xaf\xaf\x42\x4f\xa0\x1f\xf0\x30\x39\xb6\x67\x49\x39", 228); *(uint64_t*)0x20010548 = 0x200103c0; *(uint32_t*)0x200103c0 = 0; *(uint64_t*)0x20010550 = 0x20010400; *(uint64_t*)0x20010558 = 0x20010500; *(uint32_t*)0x20010560 = 0xe4; *(uint32_t*)0x20010564 = 1; *(uint32_t*)0x20010568 = 0xe7; *(uint32_t*)0x2001056c = 5; res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/0, /*options=*/0, /*deadline=*/r[0], /*args=*/0x20010540, /*actual_bytes=*/0x20010580, /*actual_handles=*/0x200105c0); if (res == ZX_OK) { r[1] = *(uint32_t*)0x20010504; r[2] = *(uint32_t*)0x20010508; r[3] = *(uint32_t*)0x20010510; } break; case 6: *(uint64_t*)0x200206c0 = 0x20010600; *(uint32_t*)0x20010600 = 0; memset((void*)0x20010604, 0, 3); *(uint8_t*)0x20010607 = 1; *(uint64_t*)0x20010608 = 0x3e5522e500000000; *(uint64_t*)0x20010610 = 8; *(uint64_t*)0x20010618 = -1; *(uint64_t*)0x20010620 = 9; *(uint64_t*)0x200206c8 = 0x20010640; *(uint64_t*)0x200206d0 = 0x20010680; *(uint64_t*)0x200206d8 = 0x20020680; *(uint32_t*)0x200206e0 = 0x28; *(uint32_t*)0x200206e4 = 0; *(uint32_t*)0x200206e8 = 0x10000; *(uint32_t*)0x200206ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[2], /*options=*/0, /*deadline=*/r[0], /*args=*/0x200206c0, /*actual_bytes=*/0x20020700, /*actual_handles=*/0x20020740); break; case 7: res = -1; res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(/*handle=*/r[2], /*option=*/0x400000000000000, /*details=*/0x20020780); if (res == ZX_OK) r[4] = *(uint64_t*)0x20020788; break; case 8: *(uint64_t*)0x200308c0 = 0x20020800; *(uint32_t*)0x20020800 = 0; memset((void*)0x20020804, 0, 3); *(uint8_t*)0x20020807 = 1; *(uint64_t*)0x20020808 = 0x7c724dc400000000; *(uint64_t*)0x20020810 = 5; *(uint64_t*)0x20020818 = 9; *(uint64_t*)0x200308c8 = 0x20020840; *(uint64_t*)0x200308d0 = 0x20020880; *(uint64_t*)0x200308d8 = 0x20030880; *(uint32_t*)0x200308e0 = 0x20; *(uint32_t*)0x200308e4 = 0; *(uint32_t*)0x200308e8 = 0x10000; *(uint32_t*)0x200308ec = 0; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(/*handle=*/r[3], /*options=*/0, /*deadline=*/r[4], /*args=*/0x200308c0, /*actual_bytes=*/0x20030900, /*actual_handles=*/0x20030940); break; case 9: *(uint64_t*)0x20032a40 = 0x20030980; memcpy((void*)0x20030980, "\xbb\x66\xf4\x27\xae\x75\x9a\x6a\xf6\x23\x91\x0b\x54\xe8\x3b\x5f\x4a\xef\xd5\xde\xdf\x7a\xe5\x72\x0a\x8a\xb0\x3b\x72\xcb\xce\x4f\xb9\xa0\x42\x8b\x6d\x16\x11\x4a\x87\xd1\x1f\xc2\x34\x0e\x04\xd9\x76\xf3\xca\x50\xe6\x9a\x60\xbe\x80\x90\xa8\x4f\xa2\xaf\x2e\x7c\xdb\xd1\x87\x67\x40\x16\xd1\x0c\xb0\x31\x9a\x93\xae\x23\x23\xce\x13\x9f\xf7\x5b\xeb\x87\x75\xe1\x9f\xbe\x9e\x6f\xa7\xca\x9f\xaa\xab\x75\x69\x2f\xe5\x82\x85\x2d\x8f\xc0\xa6\x14\x59\x7c\x7b\x37\xb8\x2e\x05\xb9\xf0\x10\x4d\x68\x14\x96\x38\x69\x7a\xd6\x8d\x4c\xac\x0f\xd2\xfd\xe6\x40\x26\x13\x28\x97\x24\xe5\x01\xca\x26\xb1\x15\xab\x28\x99\x77\xc0\xaa\x04\x80\xb5\xd6\xcb\x13\x17\x20\x4a\x9f\x3e\x55\x5c\xbe\x47\x4f\xce\x54\x32\xe9\xc5\x99\x74\x77\xae\x61\xd7\x89\x08\xaf\xe2\xf5\x45\xaa\xdd\x5e\xaf\x86\xf3\xed\x69\x44\x66\x4d\xae\xb4\x19\xed\x08\x47\x2e\x2a\xba\x4a\x38\xe5\x66\x1a\x2e\x9c\xc4\x21\x35\xce\x2a\x30\x2a\xcc\x18\x21\x0f\x84\xe5\x10\xea\x35\xc4\xa4\xd8\xc9\xfd\x5f\x0f\xfe\x23\x7b\x80\x70\xd6\x0e\x35\x71\x7c\xbd\x46\x3f\x99\x63\x2d\x59\xe2\xbf\xe7\x29\xbd\xef\xfb\xd7\x45\x57\xce\x32\x9e\x00\x20\x9d\x4c\x56\x51\x60\x89\xd5\xd9\xd7\x19\x50\x0b\x70\x1d\x22\xc6\x3c\xbd\xc2\xe0\xba\x2b\xa8\xa3\x38\x54\x6c\xa8\xe6\x49\x94\x90\x70\xe6\x23\xe9\xa6\xcc\xbf\x6c\x9d\xe5\x0a\x41\x20\x17\xbe\x55\x0b\x69\xae\x9a\x41\xe1\x04\x0f\x77\xe8\x57\x72\x07\x9a\x83\xe8\xd0\xad\xbb\x76\x79\x48\x9a\x77\x50\xaa\x6d\x5a\xb6\xdc\x19\x2c\xc2\x0c\xc7\xf8\xd8\x59\xea\x53\x2d\x8a\x28\x75\x3b\x92\x97\x2b\x21\x3e\x12\x5d\x73\x41\xd7\x70\x71\xf8\xd9\xbb\x61\x6a\xba\x5e\x3b\xb4\x97\xfe\xdc\xc4\x9f\x8e\x3c\x62\x39\xe4\x08\xc7\x39\xd4\xbc\x0f\x84\x22\xf7\x71\xc0\x81\x5d\xe9\x7b\x62\x21\x5b\x86\x97\x24\xc5\xa5\x4e\x00\xb4\xa9\x64\xdd\xe8\x24\xa5\x6c\xda\xd2\x11\x46\x48\x29\x3e\x7f\x08\xcc\xf6\x5b\xd7\xb1\x36\x05\xa3\xf4\xd0\xf8\x54\x50\xed\x23\xe8\x5f\xc7\x01\xfc\xe8\x4a\x4e\x4e\x98\xc9\x41\xfd\xd3\x0b\x67\x9d\x18\x86\xb6\xee\xcd\xa4\x49\x26\xbe\xae\x78\x63\x37\xcc\x05\x5d\x90\x01\xde\x85\x92\xbe\x9d\x71\x48\x48\xf1\xb2\xf2\x53\x5e\x9e\x40\x2e\xde\x09\xd4\x89\xd5\xef\x06\x3f\x03\x87\x66\x6a\x84\xb6\x82\xdb\x5a\x72\xcb\xb6\x5c\x9b\x8a\x69\xfd\x2a\xa8\xf3\xd9\x63\xaa\x67\x0f\x16\x6d\x43\x09\x93\x1e\x49\xb0\x0a\x9f\xcf\xce\x00\x63\x5d\x45\x60\x72\xf2\x94\xc7\x10\xd3\x43\x2b\x18\x43\x93\xa2\x4e\xe5\x72\x71\x29\x1f\x1c\x7f\x59\x5a\x36\xd6\xc3\xc1\xce\xab\xe6\x34\x94\x58\x45\xbf\xfb\xb6\x86\x2a\x08\xea\xd4\x6b\xcb\x5e\xea\x17\x29\x99\xa3\x2f\x7e\xfa\x67\x16\xf3\x8e\x03\x6e\xe9\x34\xae\x8e\x9e\xfe\x20\x08\xc5\xac\x00\xaa\x37\x16\xf5\x02\x57\x23\x48\xc0\x31\x0c\x05\x0d\xe7\x45\x1c\x47\x67\x93\x0a\xe1\xac\x2d\xe2\x1a\xfc\xde\x0e\xea\x06\xe9\x3b\xd9\x21\x6f\xc2\x9b\xd8\x53\xb8\x6a\xde\x23\xfd\x99\xa3\x88\x57\xe2\x23\x5e\xbf\xb3\x9f\xd2\x43\x48\xe9\x9e\xff\x4d\x6e\xd1\x8d\x21\x2b\xd2\xe9\xc8\x1d\x14\x54\xa1\xc0\xc9\x6f\x99\x86\x0b\x99\x71\x81\xed\x12\xc8\xe8\x2a\x7d\x35\x25\x40\x5a\x37\x64\x94\x63\x9b\xe5\x51\xd1\xcb\x25\xdc\x16\x64\x80\xf1\x0d\x35\xb3\x62\xe4\xd0\x33\xbb\xd4\x60\x58\x13\xac\xeb\x83\x9d\x2f\xf3\xb7\x71\xbe\xe2\x94\x79\x2d\x5e\x7d\x1b\x08\xb9\x9b\x55\x46\x3c\xc2\x1d\x26\x1e\x13\x05\xca\x13\x9e\xfd\xdd\x96\x8b\x9c\x51\x24\x57\x29\x21\xef\x05\x9d\xfb\xde\x18\xe5\x8e\x0b\xe3\x0a\x54\xc1\xfb\x07\x79\xe8\x19\x84\x1d\x95\x5c\x1d\xca\xf7\x15\xc3\x2f\x5b\x4b\x50\xc1\x48\x03\xfa\x43\x84\x35\xe8\x2f\xff\x21\x67\x96\x40\x1d\xc5\xf1\xdd\xeb\x65\x3a\x9c\x28\xa3\x8d\x83\xa9\x17\x4a\xf2\x1c\x7b\x8f\x58\x7e\xb1\x56\x33\x98\xdc\xe0\x58\xb0\x52\x9f\x85\x59\x5f\xe3\xdf\x0d\xc8\xd2\xfe\x28\xbb\x5a\xc2\x5d\x81\x67\xd5\xce\x7e\x1a\x04\x63\x4a\xdf\x64\xf8\xbf\x0e\x86\xa7\xef\x0a\x90\x25\xe7\x73\x3c\x68\xfa\xf7\xaf\x2d\x00\xc7\x80\x14\x9e\xb4\xeb\x57\x7c\xd6\x8d\x2e\x8b\x7d\xb0\xae\x6c\x9a\x7f\xff\x06\x20\x2f\x01\xc5\x3f\x46\x43\xd0\x09\x04\x7d\xdd\x62\x2f\x53\x35\x95\x05\x34\x27\x71\x28\x90\xdf\xd5\x38\xfb\x39\x49\x93\xf3\x56\xf9\xb6\x2a\x87\xfe\x50\x2e\xf2\xca\xc2\x22\x07\x68\x81\x2c\xe8\x3f\xaa\x2b\x1e\x37\xba\xaf\x94\x4a\x86\x0a\xc0\x9a\xef\x2d\xff\xfc\xbc\xa1\x1e\xf3\x9e\x4f\x7c\x50\xae\x8f\xc4\x6a\x53\xc7\xba\xd6\x15\xfd\xed\x36\xa1\xdf\xb7\xdd\xcb\xd2\x18\x95\x09\xd4\xff\xff\x50\x4f\x3e\x09\xe2\xa8\x39\xc8\x2e\x13\x27\x7f\xe6\xa1\xbf\xfa\xb2\x17\x95\x2f\x6d\x66\x3d\x43\x49\x1b\x6a\xf4\x39\x6d\x3d\xd2\x57\xc7\x4b\xf9\x19\x44\x56\x8a\x1f\xc6\x78\xac\x8f\x08\xcc\x55\xa3\x0f\x93\xd0\xbb\xe6\xec\x8f\x84\x32\x75\xa4\x80\xe5\xe3\x67\x79\x81\x0a\xfe\x3a\xac\x3b\xc7\x48\xe1\xc6\xea\x0d\x85\xb4\x25\x33\xb1\x65\x0d\xe3\x8f\xde\xb8\x98\x3b\x68\xd2\x6b\x8d\x7e\xa0\x1f\xe2\x22\xbb\x92\xdf\xe4\x1b\xda\xea\x1a\xb8\x3b\xcb\x7c\x08\xfc\x20\xe3\xc8\xe0\x09\xb5\xbb\xab\x61\xd3\x22\x69\xd8\xcb\xc4\x70\x69\xec\xc8\xca\x0f\x02\x19\xae\x65\x5c\x1d\x53\xe7\x19\xe2\x9e\x58\x36\xbb\xb6\x68\x80\x3d\x8a\x52\x7c\xe5\x39\xf2\x3e\xbd\xd1\x6b\xb1\xd6\x0c\x63\xf1\x4c\x4b\x5b\x95\xa0\x2e\xd8\x44\xc6\x1c\xe5\x88\xf0\x47\x31\x18\x3b\xd5\x63\x68\xf5\x8c\xc9\xf7\x65\x14\x00\x9b\x3d\x65\xb6\x94\x4d\xbf\x6d\xa9\xc7\xe8\x92\x13\x5f\xbe\x62\x2b\x32\x35\x66\x23\xf4\x22\xe5\x6a\xc7\x99\x8e\x31\xf6\x26\xf0\x48\x65\x9f\x4e\xb9\x75\xf7\xb3\xec\xdb\x97\xcd\x3c\xea\x03\xa5\xdc\xf8\x14\x0e\x12\x18\x28\x01\x47\x2f\x49\x76\xc5\x53\x79\x9e\x55\xcf\x5a\x00\x9f\x6a\x7c\x9e\x15\x61\x7e\xa8\xd4\x4c\x6d\x21\xdd\x60\x34\xb4\x92\x02\xe5\x42\x67\xc8\x3f\xaf\x10\x59\x81\xbe\xb0\x06\xb0\x5b\x79\x06\x2c\x73\x99\xa0\x1a\x7a\xc8\x74\x36\xec\x2b\xe6\xdf\x6b\x15\x21\xb0\xfb\xdd\xdd\x2d\x81\x16\x01\x08\x05\xf3\x64\x03\x76\xba\x4c\xe7\x98\xdf\x61\x27\x1e\x15\xd6\x1e\xea\x40\xec\x93\xb3\xda\x9a\x45\x64\xea\x7f\x86\x63\xcc\xf0\xe8\x51\xd8\x83\x21\xe8\x59\xf1\x56\x96\x18\xfe\x5d\x07\xdf\xa2\xf7\x49\x03\x12\xc1\x30\xdb\xc2\x34\xc0\x79\x26\x9c\x46\x20\x3d\x04\x03\x9a\xcb\xe1\x65\x27\x4a\x18\xc9\x2c\xca\x38\x2c\x08\x26\x10\xc1\x2b\x34\xcc\xc5\x52\x87\x4f\x96\x94\x5c\x3e\xbb\x7d\x5a\xff\x63\x4a\x13\xa6\x1b\xa3\x1c\x65\x2e\xe0\x00\x8e\x51\x3d\x30\xda\x4c\xfa\x09\x55\xbe\xba\x25\xe5\x28\x3c\xee\x51\x80\x77\xca\x1f\x7b\xc8\x67\xfd\x10\x04\x16\x64\x90\xbd\x2a\x52\x0e\x31\xcd\x33\x92\x1a\x9f\xa0\xaf\x96\xf8\x46\x7f\x7b\x2f\x6e\xd7\x9c\xa3\x84\xa6\xd6\x68\x9a\x30\x5e\xd3\x22\x22\xac\xeb\xdc\x38\x43\x1d\x4d\xa2\xc6\xd5\x93\x2a\xcb\x6a\x24\x63\x4d\x6c\xda\x9d\xee\x6b\xec\xc8\xe4\x23\x3c\xe4\x18\x17\x96\x06\x64\x77\x82\x7f\x0c\xcb\x88\xa0\x0f\x7d\x5f\x39\xd5\xd7\x65\xb5\xe7\xa8\x54\xd5\xa1\x8a\x77\xf5\x1f\x2d\x8e\x26\x7f\x54\x24\xec\xaa\xe8\xf4\x27\xee\xbb\x85\x9f\xf6\x6a\xb6\x44\xa5\xff\x10\xec\x0e\x88\xcd\x1a\x77\x85\x15\x55\xdf\xca\x36\x5b\xbc\xc4\xb1\x74\x66\x30\xa5\xe7\x57\x2c\xff\xf5\x3c\x95\x44\xbb\x54\x85\x1f\x00\x2e\xe9\x36\x27\x1d\x65\x26\x5d\xf3\x22\x95\xcc\x7b\x08\xad\x6c\xe3\xd0\x20\x45\x5e\x7e\x07\x7d\x80\x46\xea\x5e\x2c\xa2\x0d\xc1\x8b\x51\x6c\x9b\xda\x36\x6a\x43\x42\x1d\x57\x17\xba\xfb\x89\xac\x6d\x09\x2f\x68\x9b\xc3\x4c\x97\xd3\x55\xb1\xce\xf5\xac\x7d\x8d\x6d\xad\xb0\x1b\x94\x81\xa8\x1a\xc0\x65\xe0\x07\x8c\x9b\x68\x16\x81\xa2\xe2\xf3\xe1\xb1\x0c\x64\x70\x2d\xa3\x85\xd4\x3c\x57\xce\x00\x4b\x8e\x0c\xf2\x5c\x12\xfc\x08\x8d\xe9\x39\xda\x95\x10\xff\xe1\x78\xb9\xcd\x89\x74\xea\x02\x44\xa9\x71\xb2\xcb\xaf\x78\x37\xb3\x27\x03\x1e\xd2\xa1\x36\x1f\x5a\xe5\xaf\xa2\xc9\x44\x5d\xa2\x9c\xcf\x16\x88\xb9\x3a\xfb\xbb\x61\x8c\xd0\x1a\x6d\xe8\x25\x9f\x07\xe6\xde\x1a\xf5\x14\x89\xfe\x79\xd3\x39\x85\x77\x16\xc6\xb9\x04\x7c\x44\x1f\x64\x0a\x51\x74\xb8\x2c\x54\x54\x20\xee\x7a\xfe\xfb\xf1\x41\x7a\xe5\x20\xcb\x23\xde\x74\x34\xf4\x87\x94\x45\x0f\x7d\xd0\x3a\x67\x34\x5f\xed\xa2\x27\x55\x94\xb1\x1b\xa1\x39\x8f\xb4\x44\x76\x26\x1e\x15\xab\xcd\x05\x95\xb8\x6f\xba\x9c\xb3\xfd\xc7\xa5\x56\x0a\x04\x7a\x2a\xf2\x4d\xf4\xd9\x49\x74\xe5\xc5\xf9\xa4\xb0\xa7\x6a\x3b\xd1\xca\x54\xc4\x96\x95\xe3\x26\xd1\x24\x34\x61\xac\x91\x0a\x73\x8b\x86\x03\xbd\x28\xd7\x27\xcf\x60\x4a\x14\x35\x22\x7f\x31\x9f\xdf\x3d\xb8\x84\x31\xa1\x63\x64\x58\x16\xa7\x61\xa5\xcb\x35\x0f\x11\x22\x95\x2a\x21\x89\x6d\x39\x6b\xf7\x66\x8a\x9a\x8a\x46\x6a\xa3\xc8\x40\xfc\xd7\xcc\x6c\x1b\xdd\x45\x5d\xef\x94\xcb\xc5\xf2\xb3\x6b\xe8\x07\x53\x19\xba\xa2\xd1\xff\x52\x96\x07\x05\xae\xe3\xc9\x02\xe4\xe8\x91\x16\xfc\x77\x2b\xd2\x70\xcc\x5e\x53\x6d\xaf\xea\xa5\x16\x0f\xca\xbd\xc5\xfc\x0f\x56\x89\x26\x7d\xbe\xd9\x0b\x8d\x77\x85\xce\x26\x0f\x99\xfd\xe3\x79\xa4\x02\xec\x54\x0b\x44\xe3\x62\x62\x54\x26\xaa\x02\x29\x19\xdb\xf2\xfe\xdb\x8a\x94\xe3\xb9\x9d\x45\xce\x07\xa8\x74\x37\xd3\x16\x06\x9f\x95\x37\x1b\x4b\xcf\x61\x83\x08\xce\x91\xf3\xab\x5d\x3e\x02\xa7\x56\xfc\xbc\xe9\x83\x86\x1a\xdc\xb6\x3d\x58\x6a\x84\x7e\x38\x28\x4e\xff\x72\x47\x18\xb3\xe5\xc3\x7e\x24\xca\xed\xcd\x13\xc1\x3f\xec\xa8\xd6\x0a\xb9\x05\xc3\x0a\xc2\x85\xf2\x84\x3e\xc4\xe5\x7a\x90\x7c\xba\x43\x6b\xb8\x71\xa2\x99\xc0\x83\xd9\xdf\x00\x01\x69\xa2\x43\x45\x76\xf1\x43\x0f\x15\x89\xd8\xf1\x60\x0a\xeb\x29\x71\x27\x30\xb3\x36\xc3\x71\xda\xd1\x24\xcf\x6a\xbb\x8c\x87\x0c\xdd\xb5\x81\x32\x95\xeb\x80\xa6\x30\x4b\x4f\x56\x7b\xf3\x4d\xf5\xfd\x2a\x4a\x6e\xec\x24\x7f\x33\x22\x3a\x76\x46\x63\x75\x45\x24\x30\x2f\xbf\x42\xba\x25\x66\x02\x60\x61\x7d\x45\x31\xea\xdf\x5e\x97\x2f\x82\xe1\x72\x69\x99\x05\xd5\x40\x93\x21\xf2\x3a\xdd\x73\x46\x25\xbc\xe9\x2b\x18\x10\x5f\x0b\x9c\x20\x95\xc3\x4f\x3e\xe3\x23\xb7\x4d\x63\x2c\xeb\x46\x83\x2a\xd3\xf0\x43\x9f\x85\xec\x5d\xc2\x39\xf9\x2d\xa4\x19\x2e\xe8\x34\x67\xe2\x78\xc1\x85\xbc\xc3\x92\x55\xe6\x59\x9d\x57\x25\x4a\xda\x80\xf4\x04\x45\x7b\x71\xe6\x51\xb3\x08\xe8\x8c\xed\xfd\x23\xc7\x35\x2e\x36\x9e\x92\x30\x5c\x94\xe0\xce\x6b\x45\xef\x1e\x0e\x73\x71\x8d\x7d\xb0\x8e\xa1\x16\x51\x2e\xa2\x2a\x78\x5e\xcc\x6a\x11\xf2\x08\x6c\x89\xbb\x5c\x20\x7a\x61\x24\x86\x30\xd4\x86\xca\xc3\x4e\x68\x08\x08\xe2\xbc\x32\x5f\x2b\x6c\xd2\x14\x7e\x38\x0e\xcb\x72\x21\xed\x0f\x4a\x70\xaf\x90\x55\x74\x62\x11\x06\x74\x66\x50\xdb\xdc\xf3\xda\xaa\xdd\xcb\xcb\x59\xab\x72\xce\xcc\x6a\x31\x45\xdb\x1e\x38\x9a\x9f\x98\x05\x7d\xae\xc1\xa7\x50\xc7\x66\xfc\x3c\x69\xdd\xf9\xdf\xdb\x09\xe6\x1a\xb2\xa1\x15\xd4\x01\xe7\x4f\x4f\x05\x19\x56\xff\x01\x9b\x04\xdc\x18\x1d\xb6\x91\x82\x8d\xa8\xfb\xc5\xfd\x6a\xf8\xb5\x82\x01\x39\x74\x50\x68\x83\x98\xf1\x84\xc8\xda\xaa\x31\xe3\x17\x72\x0c\xca\x87\x39\xc4\xbd\xe5\x17\xb3\xf6\x39\xab\xf2\x2a\xf7\xe4\x84\x0e\x3e\x99\xbe\xb2\x3d\xbd\x5d\x9b\x6a\x24\xb9\xf3\x16\x6f\x3f\x20\xd7\x2f\x30\x74\xb1\x1c\xce\x87\xe2\xc3\xef\xf5\x0e\x63\x73\x05\xa2\xe8\xec\x43\x69\xa3\xca\xb4\xcb\x37\x54\x9b\xb5\x2c\x4e\x03\x8d\x6e\x09\x3f\xc7\xaf\x58\x0a\xbd\xd4\x1b\xe3\xb8\xec\x46\x5e\x1d\x9c\x50\xfd\x66\x97\x21\x22\xa7\xec\x0f\xe1\x8b\xd8\x60\x7b\x1d\x79\xfa\x9b\xf8\xd6\x04\x76\xe1\xf0\xd0\x08\x9e\xe5\xc6\x63\x99\x8e\xb1\x34\x48\xd4\x06\xa0\x8a\x6e\x04\xa8\x83\xff\x6e\x75\xa4\x9b\x52\x14\x1e\x74\xdc\x34\xce\xb7\x04\x7b\xdf\x44\x83\x9d\x39\x3a\x2f\x13\xa8\x59\x55\xf1\xd2\xe7\x65\xec\x81\x86\xbe\x1f\xb4\x37\xb1\xb5\x77\xe0\x8c\x35\x75\x74\x4b\x07\xea\x3c\x6e\x8a\x1b\xea\x58\x1b\xaf\x4c\x42\x6e\xf9\x4f\x13\xc6\xf1\xb0\x7d\x61\x03\x74\xf6\x42\x2f\x50\x73\x00\xd7\xcf\xc9\x95\xd9\xa2\x40\x5b\x7a\x6b\xab\x2b\xd6\xe1\x43\xb2\x79\xc2\x47\x7d\x5e\x13\x32\x34\x1a\x24\xe8\x2d\x88\xe7\xaa\xce\x73\xd0\x06\x24\x12\xc2\xda\xf1\x85\xef\x28\x6f\x97\x45\x97\x6a\x81\xb7\x81\xa9\xbc\x9a\xfd\x92\xb6\x2e\x94\xd4\x3b\x0a\x94\x1d\x89\x5e\x84\x10\xe4\x18\xdc\xaf\x0d\xcc\xaf\xb6\x00\xf5\x2d\x3d\xce\x2b\x0b\xfd\x15\x20\x55\xab\x3e\xf2\xcf\x82\x24\x17\x8f\x82\x6b\xd5\xdf\x45\x7a\x22\x4d\xf5\xa2\x0a\xc4\x1b\xf4\x58\x4c\x19\xd6\x38\x3f\xe3\x43\x03\x60\x9d\x50\x11\xd5\x10\xc2\x9d\xc6\x04\x2a\x12\x9a\xc9\xe0\xda\x5d\x7d\xc2\xd0\x29\x2e\xa5\xc9\x10\xba\x88\x02\x06\x06\xc3\x16\x83\x75\xe1\xfe\x0e\xba\x96\x6b\x6d\x62\xb5\xc8\xde\x4a\xbe\xff\x1e\x85\x37\x06\xa4\x13\xac\x58\xe1\xa0\x96\x76\xb3\x20\x46\x81\x08\x7d\xb0\xfd\xbb\x9d\x7b\xcb\xff\xda\x90\xcd\x0d\x89\x95\xe0\xc1\xa7\x6e\xd2\x40\x6b\x42\x07\xa9\x43\x17\x47\x79\x8a\x37\xa2\xd7\xd9\x84\x93\xd8\x87\x38\xf2\x34\xd5\xe6\xd6\x2d\xe0\x5e\x67\xd8\x72\x27\x9d\xc3\x9e\xb2\x9a\xa8\xc1\x63\xac\x13\xde\x37\x46\xd1\x4f\x59\x86\x2f\x47\x3a\xbd\xbf\xb4\xfb\x76\xff\xa2\x67\x08\x01\xab\x04\x2d\xed\x54\x0f\x99\x61\x65\x09\x43\x59\x84\xf1\xf9\x1d\xa1\x7f\x00\x9c\x7f\xb1\xa1\xa5\x91\x1a\x82\xcb\x2a\x39\x91\x73\x5d\xa0\xec\x38\x66\x66\x96\xb2\x1d\xef\x61\xdf\x50\x94\xc2\x52\x30\x65\xe7\x00\x2e\xe4\xfd\x96\x72\x46\x74\x92\x2b\x87\x87\x66\x56\x3d\x28\xfc\x60\x3f\x6d\x4f\x70\x3c\xc1\xf8\x24\xa8\xe9\x96\x8b\x70\xb4\x1c\x77\x1c\xfd\x31\x96\x1b\xc8\x0a\xe7\x06\xfc\x3b\x07\x4c\x53\xc7\xd1\x69\x74\x66\x95\x9b\xc2\xd4\xe0\xe1\x7f\xff\x65\x12\x59\x9b\x46\xa8\x9d\x53\x11\x17\x41\x31\xf4\x65\x44\x3d\xd5\xee\xb9\x94\x6d\x02\x46\x66\xa1\xae\x5c\xf6\xb2\x3c\xed\xa4\xe4\xb7\x87\x8e\x0e\x46\x59\xbf\x49\x65\x7b\x2d\xfd\xeb\x47\x25\xc1\x0f\x9f\xb1\x4b\x78\xf4\x06\xd7\x86\x6f\xbb\xf5\xb9\xfe\x1f\xf6\xb5\x67\x7b\x56\x2f\x7a\xdf\xc3\x64\x85\x6c\xc1\x83\xba\x87\xab\x66\x9d\x40\x25\x41\x45\x80\xca\x11\xe5\x69\xc3\xb5\xe3\xe3\x4f\x16\x78\x11\x07\x1b\x9b\x12\x66\x18\x32\x2b\x31\x76\x7d\x01\xf4\x75\xd5\x90\x3e\x1e\x5a\x15\xdb\xc2\xf6\xb8\xb8\xb8\xbe\xe2\xf6\xeb\x22\x38\xbc\x74\xb6\x10\x89\xb2\x34\xb4\xb1\xc3\xfd\xaa\x6b\xde\x0b\xbb\x77\x1c\x40\x5e\x4a\x22\xff\x1e\x82\xa1\xd5\x7d\xa6\x47\x56\x42\x0c\xc9\xeb\xce\x30\x1d\x0e\xbe\x39\xc9\x75\x97\x57\xdc\xae\x13\x44\xd9\x06\x92\x78\x78\x80\x6f\x4c\xb1\xf8\xb0\x27\x94\x51\xa1\xb0\x46\xf2\xcb\x27\x92\x3b\x69\xca\x8d\x03\x4d\x6d\x1a\xbe\x03\xb0\x7a\x26\x6c\x8f\xc1\x5a\x3a\x83\xdc\x05\xe9\x6a\xcb\x33\x6a\x2b\xb1\xb2\x6e\x26\x40\x05\x56\xd2\xc6\xe9\x44\x10\xf7\x1c\xdf\xf3\x58\x5f\xaf\xab\x59\x63\x45\x69\xfa\x38\x31\x56\x2c\x34\x81\x4f\xb8\x14\x42\xda\x66\xa2\xe6\xe7\xa2\xbc\x70\x84\x55\x3a\xc8\x33\x8c\x40\x07\xd5\xc9\x98\xeb\xed\x8f\x63\xd7\xf3\x03\x82\x8e\xd0\x77\x97\x63\xef\x00\x32\x6c\xda\xcb\x18\x9d\xb1\xb1\x67\x3d\x8f\x03\x73\x96\x8e\x75\x71\x78\x43\x1e\x40\xf3\x63\xb3\xdf\x22\xd6\x62\x07\x77\x72\xac\x65\xb5\x36\x17\x07\xf3\xc2\x00\x79\x82\x70\xae\x7c\x94\xb6\xfc\xa4\x68\xaf\xc5\xe4\x57\xd7\xbc\x3c\xae\x02\xc3\x08\x4a\xab\xdd\xac\xae\x4a\x9d\x13\x61\xa6\x1f\x40\xa7\xb7\xd1\x2b\x55\x9a\x69\x1e\x39\xee\x47\xf9\xf3\xe2\xf3\x83\x8f\x27\xa9\x8c\xbc\xcb\xa4\xa1\x40\x76\xb7\xd7\x44\x1a\xfc\x8f\x36\xe5\x14\x56\x57\xa7\xff\x65\x54\xfa\x32\xcc\x7b\x5b\x68\x9a\xa8\x37\x43\x1b\x1b\xee\x18\x30\x89\xb3\x63\x62\x7d\xec\x79\x88\xc2\x85\x13\x72\x2f\xe5\x78\x96\x98\xf6\xdb\xa0\x4e\x1b\xea\xb4\x35\x4c\x37\x0d\xdc\x78\x4e\xa5\x61\xcd\xb4\x8a\x6a\xd7\xc4\x58\xf0\x54\x4a\xee\xb4\x2f\xd3\xa5\x19\xa0\x10\x5f\x52\xa6\xf4\x49\x06\x3d\x6e\x3a\xdb\x67\x05\xc1\xfc\xa1\x8b\xdd\xb1\xed\x98\xb9\x88\x79\xc5\x13\x17\x78\x69\x99\x8a\x48\xcb\xe4\x8a\xc4\x10\x94\x9b\x91\x94\xfd\xf0\xca\x2e\x24\x8d\x7f\xfa\x6e\x96\xd2\x42\x65\x9b\xe7\xe5\x6b\x32\x32\x3c\x46\xf3\x7b\xaa\xf5\xec\xd6\x6c\x55\x68\xac\x30\x22\xb2\x4d\x49\x5b\xc4\x72\x75\xf5\xb9\x14\x1b\xff\xe3\xcd\x3e\xc7\x08\x9f\xb0\xf9\x56\x15\xc4\x61\xa4\x0d\x66\xcd\xde\x5a\x8c\x35\x0a\xb1\x56\x7f\x58\x7f\x3f\x59\x48\x3f\xb7\x7a\xb0\x8c\x4b\xc9\x9d\x13\x34\x81\x46\x97\xb6\x17\x6c\x05\x1b\x9c\xc0\x2b\x0d\x02\x8e\xab\xf8\x2d\x99\xce\xf4\x02\xba\x46\x91\x51\xa9\xb1\x49\x29\xa9\xf9\x07\xd3\x5e\xeb\x38\x42\xf7\x18\x2e\xae\x4e\xee\x10\x90\x75\xba\x16\x97\x1b\x24\x36\x6c\xbb\x02\x82\xa5\xcf\x08\x1b\xb0\x63\x42\x3a\x60\x96\xfa\x74\xd7\xcd\xf9\x81\x78\xe6\x65\x5f\xf4\x1a\xbc\x2c\x6c\x27\xd8\xb4\xb9\x78\xe2\xf8\xa8\xc0\xea\x7d\xc3\xe5\x2c\xd3\x81\xf3\x3f\x97\x47\xb1\x94\x64\x8a\x90\xdd\x20\x25\xd9\x47\x18\xa3\xc7\x0f\x74\xdd\x95\xc3\xf1\x7a\xf3\x54\xa6\x4d\xe9\x9e\x6e\x07\x5e\x1a\x8b\x97\x80\x56\xfa\xfd\x15\x65\x0a\x5a\x78\x66\x63\x88\x56\xdd\x9e\xbb\xca\x31\xb1\xb0\xc1\x22\x7e\xcc\x84\xfd\x67\x24\x44\x9e\x77\x09\x84\xf8\x43\xda\xc5\x52\x65\x93\x44\x34\x86\x28\xd2\x54\xbd\x62\x3b\x67\x73\x24\xd9\x74\x97\x26\x75\x69\x4b\x9e\x70\x3e\x78\xaa\x96\x2b\x23\xe3\x15\xe1\xda\xb0\x93\xc5\x6e\xa5\x10\x80\x7e\xf7\x63\x07\x94\x70\x06\xe3\xd3\x9c\xb1\x74\xa7\x84\xdf\xa0\x77\x5e\x60\x85\x48\x86\x2b\x94\x7f\xad\xed\x48\xa5\x06\xcb\x1d\xfe\x08\x71\x9b\x29\x46\xc1\x37\xb9\x3c\xe1\x64\x14\x9c\xe9\x53\xb8\x71\xaf\x74\x74\x39\xc9\x69\xa1\x8d\xa4\x03\xb5\x1b\x68\xe8\x53\x26\x9b\xc1\x40\xe4\xcf\x4d\x6b\x14\xd7\x57\x44\xe3\x1b\x28\x31\xcb\xf5\xbd\xc8\x1f\x22\x21\x48\xac\x18\xa9\x2c\x73\xae\x29\x04\xd5\xf4\xa8\x80\x6b\x3d\x52\x61\xa7\x1f\xea\x2c\x8e\xda\x39\x65\x2a\xd0\x6e\xe1\xa5\x7b\x31\x10\x92\x22\x10\xa8\xf0\x97\xae\x01\x68\x9a\xce\x73\x04\xe8\x94\xe2\xf4\xaa\x16\x61\x95\x1b\xec\xbd\x0c\x91\x35\x1e\xa6\xab\x83\xf2\xc7\x6e\xc3\xd8\x82\xcc\x91\x52\xf8\xee\xd1\xd4\x0c\x42\x61\x08\x76\xc0\x43\x65\x52\x92\x0f\x08\x67\xbf\x88\x47\x80\xa2\x9c\xe0\x63\x18\x8e\x3f\xaf\x7d\x16\xf1\xd0\xb1\x7d\xe6\x30\xe2\x29\xbb\x62\x01\x77\xcc\xb8\x82\x89\xaa\x1a\x16\x32\xcc\x5a\xe7\x04\x3d\x99\xbb\x9d\x2e\xf0\xd8\xa7\x01\xf4\xf5\xfd\x81\x05\x60\xd8\xc5\x94\x79\xbc\xca\x1f\x1f\xae\xf5\x0b\x7e\x25", 4096); *(uint64_t*)0x20032a48 = 0x200319c0; *(uint32_t*)0x200319c0 = 0; *(uint32_t*)0x200319c4 = r[2]; *(uint64_t*)0x20032a50 = 0x20031a00; *(uint64_t*)0x20032a58 = 0x20032a00; *(uint32_t*)0x20032a60 = 0x1000; *(uint32_t*)0x20032a64 = 2; *(uint32_t*)0x20032a68 = 0x1000; *(uint32_t*)0x20032a6c = 4; ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); break; case 10: memcpy((void*)0x20000000, "\xc4\x23\x79\x17\xf4\xaf\x42\x0f\x97\x83\x83\x89\x78\x48\xf2\x0f\xae\xf5\xc4\x21\x69\xe0\xbd\x22\xa4\x79\x4b\xc4\x02\xfd\x35\xda\xc4\xe1\x01\x7c\x46\x40\x41\x0f\xc7\x63\xfd\x66\x0f\x38\xf8\x1d\xe8\x00\x00\x00\x67\x42\xd2\x3b\x2d\xc9\xcd\x00\x00", 61); syz_execute_func(/*text=*/0x20000000); break; case 11: syz_future_time(/*when=*/1); break; case 12: syz_job_default(); break; case 13: syz_mmap(/*addr=*/0x20ffd000, /*len=*/0x2000); break; case 14: syz_process_self(); break; case 15: syz_thread_self(); break; case 16: syz_vmar_root_self(); break; } } int main(void) { syz_mmap(/*addr=*/0x20000000, /*len=*/0x1000000); setup_fault(); use_temporary_dir(); do_sandbox_none(); return 0; } :375:75: error: use of undeclared identifier 'zx_channel_call_etc' ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call_etc))(/*handle=*/r[1], /*options=*/0x90cf, /*deadline=*/r[4], /*args=*/0x20032a40, /*actual_bytes=*/0x20032a80, /*actual_handles=*/0x20032ac0); ^ 1 error generated. compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3710577562 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument] --- FAIL: TestGenerate/fuchsia/amd64/3 (0.86s) csource_test.go:148: FAIL FAIL github.com/google/syzkaller/pkg/csource 33.691s ok github.com/google/syzkaller/pkg/db (cached) ok github.com/google/syzkaller/pkg/email (cached) ok github.com/google/syzkaller/pkg/email/lore (cached) ok github.com/google/syzkaller/pkg/host 25.534s ok github.com/google/syzkaller/pkg/html (cached) ok github.com/google/syzkaller/pkg/ifuzz (cached) ok github.com/google/syzkaller/pkg/image 4.894s ok github.com/google/syzkaller/pkg/instance 7.476s ok github.com/google/syzkaller/pkg/ipc 28.801s ok github.com/google/syzkaller/pkg/kconfig (cached) ok github.com/google/syzkaller/pkg/kd (cached) ok github.com/google/syzkaller/pkg/log (cached) ok github.com/google/syzkaller/pkg/mgrconfig 9.104s ok github.com/google/syzkaller/pkg/osutil (cached) ok github.com/google/syzkaller/pkg/report 20.184s ok github.com/google/syzkaller/pkg/repro 8.040s ok github.com/google/syzkaller/pkg/runtest 102.345s ok github.com/google/syzkaller/pkg/serializer (cached) ok github.com/google/syzkaller/pkg/stats (cached) ok github.com/google/syzkaller/pkg/subsystem (cached) ok github.com/google/syzkaller/pkg/subsystem/linux (cached) ok github.com/google/syzkaller/pkg/subsystem/lists (cached) ok github.com/google/syzkaller/pkg/symbolizer (cached) ok github.com/google/syzkaller/pkg/tool (cached) ok github.com/google/syzkaller/pkg/vcs (cached) ? github.com/google/syzkaller/sys [no test files] ? github.com/google/syzkaller/sys/akaros/gen [no test files] ? github.com/google/syzkaller/sys/akaros [no test files] ? github.com/google/syzkaller/sys/darwin [no test files] ? github.com/google/syzkaller/sys/darwin/gen [no test files] ? github.com/google/syzkaller/sys/freebsd [no test files] ? github.com/google/syzkaller/sys/freebsd/gen [no test files] ? github.com/google/syzkaller/sys/fuchsia [no test files] ? github.com/google/syzkaller/sys/fuchsia/fidlgen [no test files] ? github.com/google/syzkaller/sys/fuchsia/gen [no test files] ? github.com/google/syzkaller/sys/fuchsia/layout [no test files] ? github.com/google/syzkaller/sys/linux/gen [no test files] ? github.com/google/syzkaller/sys/netbsd/gen [no test files] ? github.com/google/syzkaller/sys/openbsd/gen [no test files] ? github.com/google/syzkaller/sys/syz-extract [no test files] ? github.com/google/syzkaller/sys/syz-sysgen [no test files] ? github.com/google/syzkaller/sys/targets [no test files] ? github.com/google/syzkaller/sys/test [no test files] ? github.com/google/syzkaller/sys/test/gen [no test files] ? github.com/google/syzkaller/sys/trusty [no test files] ? github.com/google/syzkaller/sys/trusty/gen [no test files] ? github.com/google/syzkaller/sys/windows [no test files] ? github.com/google/syzkaller/sys/windows/gen [no test files] ? github.com/google/syzkaller/tools/syz-crush [no test files] ? github.com/google/syzkaller/tools/syz-execprog [no test files] ? github.com/google/syzkaller/tools/syz-benchcmp [no test files] ? github.com/google/syzkaller/tools/syz-cover [no test files] ? github.com/google/syzkaller/tools/syz-db [no test files] ? github.com/google/syzkaller/tools/syz-bisect [no test files] ? github.com/google/syzkaller/tools/syz-expand [no test files] ? github.com/google/syzkaller/syz-runner [no test files] ? github.com/google/syzkaller/tools/syz-build [no test files] ? github.com/google/syzkaller/tools/syz-check [no test files] ? github.com/google/syzkaller/tools/syz-fillreports [no test files] ? github.com/google/syzkaller/tools/syz-fmt [no test files] ? github.com/google/syzkaller/tools/syz-hubtool [no test files] ? github.com/google/syzkaller/tools/syz-imagegen [no test files] ? github.com/google/syzkaller/tools/syz-kcidb [no test files] ? github.com/google/syzkaller/tools/syz-lore [no test files] ? github.com/google/syzkaller/tools/syz-make [no test files] ? github.com/google/syzkaller/tools/syz-minconfig [no test files] ? github.com/google/syzkaller/tools/syz-mutate [no test files] ? github.com/google/syzkaller/tools/syz-prog2c [no test files] ? github.com/google/syzkaller/tools/syz-query-subsystems [no test files] ? github.com/google/syzkaller/tools/syz-reporter [no test files] ? github.com/google/syzkaller/tools/syz-repro [no test files] ? github.com/google/syzkaller/tools/syz-reprolist [no test files] ? github.com/google/syzkaller/tools/syz-runtest [no test files] ? github.com/google/syzkaller/tools/syz-showprio [no test files] ? github.com/google/syzkaller/tools/syz-stress [no test files] ? github.com/google/syzkaller/tools/syz-symbolize [no test files] ? github.com/google/syzkaller/tools/syz-testbed [no test files] ? github.com/google/syzkaller/tools/syz-testbuild [no test files] ? github.com/google/syzkaller/tools/syz-trace2syz [no test files] ? github.com/google/syzkaller/tools/syz-tty [no test files] ? github.com/google/syzkaller/tools/syz-upgrade [no test files] ? github.com/google/syzkaller/tools/syz-usbgen [no test files] ? github.com/google/syzkaller/vm/adb [no test files] ? github.com/google/syzkaller/vm/bhyve [no test files] ? github.com/google/syzkaller/vm/cuttlefish [no test files] ? github.com/google/syzkaller/vm/gce [no test files] ? github.com/google/syzkaller/vm/gvisor [no test files] ? github.com/google/syzkaller/vm/kvm [no test files] ? github.com/google/syzkaller/vm/odroid [no test files] ? github.com/google/syzkaller/vm/proxyapp/mocks [no test files] ? github.com/google/syzkaller/vm/proxyapp/proxyrpc [no test files] ? github.com/google/syzkaller/vm/qemu [no test files] ? github.com/google/syzkaller/vm/starnix [no test files] ? github.com/google/syzkaller/vm/vmm [no test files] ? github.com/google/syzkaller/vm/vmware [no test files] ok github.com/google/syzkaller/prog 167.015s ok github.com/google/syzkaller/prog/test (cached) ok github.com/google/syzkaller/sys/linux 0.265s ok github.com/google/syzkaller/sys/netbsd (cached) ok github.com/google/syzkaller/sys/openbsd (cached) ok github.com/google/syzkaller/syz-ci 3.999s ok github.com/google/syzkaller/syz-fuzzer 0.697s ok github.com/google/syzkaller/syz-hub 0.028s ok github.com/google/syzkaller/syz-hub/state 0.090s ok github.com/google/syzkaller/syz-manager 4.452s ok github.com/google/syzkaller/syz-verifier 3.653s ok github.com/google/syzkaller/tools/syz-kconf (cached) ok github.com/google/syzkaller/tools/syz-linter 2.492s ok github.com/google/syzkaller/tools/syz-trace2syz/parser 0.050s ok github.com/google/syzkaller/tools/syz-trace2syz/proggen 0.405s ok github.com/google/syzkaller/vm 12.818s ok github.com/google/syzkaller/vm/isolated 4.734s ok github.com/google/syzkaller/vm/proxyapp 7.702s ok github.com/google/syzkaller/vm/vmimpl 5.079s FAIL