?   	github.com/google/syzkaller/dashboard/dashapi	[no test files]
ok  	github.com/google/syzkaller/dashboard/app	0.063s
ok  	github.com/google/syzkaller/executor	2.260s
ok  	github.com/google/syzkaller/pkg/asset	0.064s
ok  	github.com/google/syzkaller/pkg/ast	0.534s
ok  	github.com/google/syzkaller/pkg/auth	0.007s
ok  	github.com/google/syzkaller/pkg/bisect	6.735s
?   	github.com/google/syzkaller/pkg/debugtracer	[no test files]
?   	github.com/google/syzkaller/pkg/gce	[no test files]
?   	github.com/google/syzkaller/pkg/gcs	[no test files]
?   	github.com/google/syzkaller/pkg/hash	[no test files]
?   	github.com/google/syzkaller/pkg/html	[no test files]
?   	github.com/google/syzkaller/pkg/html/pages	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/iset	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/powerpc	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/powerpc/generated	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86/gen	[no test files]
?   	github.com/google/syzkaller/pkg/ifuzz/x86/generated	[no test files]
ok  	github.com/google/syzkaller/pkg/build	5.231s
ok  	github.com/google/syzkaller/pkg/compiler	2.982s
ok  	github.com/google/syzkaller/pkg/config	0.003s
?   	github.com/google/syzkaller/pkg/ipc/ipcconfig	[no test files]
?   	github.com/google/syzkaller/pkg/kcidb	[no test files]
?   	github.com/google/syzkaller/pkg/rpctype	[no test files]
?   	github.com/google/syzkaller/pkg/signal	[no test files]
?   	github.com/google/syzkaller/pkg/testutil	[no test files]
?   	github.com/google/syzkaller/pkg/tools	[no test files]
ok  	github.com/google/syzkaller/pkg/cover	12.418s
ok  	github.com/google/syzkaller/pkg/cover/backend	0.592s
--- FAIL: TestGenerate (10.26s)
    --- FAIL: TestGenerate/fuchsia/amd64 (0.10s)
        testutil.go:33: seed=1677350242930599764
        --- FAIL: TestGenerate/fuchsia/amd64/4 (0.60s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2584814888 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/7 (0.62s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			loop();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor340678887 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/0 (0.63s)
            csource_test.go:133: opts: {Threaded:false Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_one(void)
                {
                		intptr_t res = 0;
                	inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                	{
                	int i;
                	for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		}
                	}
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                	res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                	if ((int)res != -1)
                		r[0] = res;
                	res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                	if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                	res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                	if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                syz_future_time(0);
                syz_job_default();
                syz_mmap(0x20ffa000, 0x4000);
                syz_process_self();
                syz_thread_self();
                syz_vmar_root_self();
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:7:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor4214045264 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/5 (0.15s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static unsigned long long procid;
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                	for (procid = 0; procid < 4; procid++) {
                		if (fork() == 0) {
                			use_temporary_dir();
                			do_sandbox_none();
                		}
                	}
                	sleep(1000000);
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3579452786 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/6 (0.20s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:10 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 500);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2738229034 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/2 (0.16s)
            csource_test.go:133: opts: {Threaded:true Repeat:false RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void loop(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor198114437 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/3 (0.16s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:10 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor1833385882 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/12 (0.14s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
                	}
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor3632213168 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/14 (0.14s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:2 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static unsigned long long procid;
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	if (write(1, "executing program\n", sizeof("executing program\n") - 1)) {
                	}
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                	for (procid = 0; procid < 2; procid++) {
                		if (fork() == 0) {
                			use_temporary_dir();
                			do_sandbox_none();
                		}
                	}
                	sleep(1000000);
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor2809341416 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/9 (0.13s)
            csource_test.go:133: opts: {Threaded:true Repeat:true RepeatTimes:0 Procs:0 Slowdown:1 Sandbox:none SandboxArg:9223372036854775807 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false UseTmpDir:true HandleSegv:false Repro:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}
                program:
                zx_object_signal(0x0, 0x0, 0x126e00) (fail_nth: 1)
                zx_object_get_info$ZX_INFO_THREAD_STATS(0x0, 0xf, &(0x7f0000000000), 0x8, &(0x7f0000000040), &(0x7f0000000080)) (async)
                zx_vmar_unmap(0x0, 0x0, 0x4) (rerun: 4)
                zx_thread_start(0x0, &(0x7f00000000c0)="c4a3e569b3ed638cf000c42175e1dec4a259ba3b46dfa6a1200000c423d97d55f375c421f1d142a3f30fe6ffc42178137deaf366f00fb03ec4817a128f00800000", &(0x7f0000000140)=""/10, 0x0, 0x0)
                zx_thread_write_state$0(0x0, 0x0, &(0x7f0000000180)=[0x8, 0x1000, 0x9, 0x0, 0x5, 0x7f, 0x1000, 0x9, 0x1ff, 0x8, 0x0, 0x2, 0x9, 0x2, 0x8, 0x4f, 0x7], 0x90)
                r0 = get_root_resource()
                zx_clock_get_details(r0, 0x400000000000000, &(0x7f0000000240)={0x0, <r1=>0x0})
                zx_thread_create(0x0, &(0x7f00000002c0)='\x1f&/[\x00', 0x5, 0x0, &(0x7f0000000300)=<r2=>0x0)
                zx_object_get_property$ZX_PROP_REGISTER_FS(r2, 0x4, &(0x7f0000000340), 0x8)
                zx_channel_call$fuchsia_io_DirectoryAdminLink(0x0, 0x0, r1, &(0x7f0000020600)={&(0x7f0000000380)={{}, {0x5, 0xffffffffffffffff}, 0x0, {0xffffffffffff6b94, 0x994b24c359ddb7bb}, {'\x1f&/[\x00'}, {'\x1f&/[\x00'}}, &(0x7f0000010580), &(0x7f00000105c0), &(0x7f00000205c0), 0x44, 0x1, 0x10000}, &(0x7f0000020640), &(0x7f0000020680))
                syz_execute_func(&(0x7f0000000000)="42d99ae048ad1347daab0e000000c0a748219a06a5c401fdeef4c422e50268fcc402f91ea47a00000000c481fd72e19fc421b9d1ae00000080a5c4417d5b410d")
                syz_future_time(0x0)
                syz_job_default()
                syz_mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
                syz_process_self()
                syz_thread_self()
                syz_vmar_root_self()
                
            csource_test.go:134: failed to build program:
                // autogenerated by syzkaller (https://github.com/google/syzkaller)
                
                #define _GNU_SOURCE 
                
                #include <endian.h>
                #include <errno.h>
                #include <fcntl.h>
                #include <lib/ddk/driver.h>
                #include <lib/fdio/directory.h>
                #include <poll.h>
                #include <pthread.h>
                #include <signal.h>
                #include <stdint.h>
                #include <stdio.h>
                #include <stdlib.h>
                #include <string.h>
                #include <sys/file.h>
                #include <sys/ioctl.h>
                #include <sys/socket.h>
                #include <sys/stat.h>
                #include <sys/time.h>
                #include <sys/types.h>
                #include <sys/uio.h>
                #include <time.h>
                #include <unistd.h>
                #include <utime.h>
                #include <zircon/process.h>
                #include <zircon/status.h>
                #include <zircon/syscalls.h>
                
                static void sleep_ms(uint64_t ms)
                {
                	usleep(ms * 1000);
                }
                
                static uint64_t current_time_ms(void)
                {
                	struct timespec ts;
                	if (clock_gettime(CLOCK_MONOTONIC, &ts))
                	exit(1);
                	return (uint64_t)ts.tv_sec * 1000 + (uint64_t)ts.tv_nsec / 1000000;
                }
                
                static void use_temporary_dir(void)
                {
                	char tmpdir_template[] = "/tmp/syzkaller.XXXXXX";
                	char* tmpdir = mkdtemp(tmpdir_template);
                	if (!tmpdir)
                	exit(1);
                	if (chmod(tmpdir, 0777))
                	exit(1);
                	if (chdir(tmpdir))
                	exit(1);
                }
                
                static int inject_fault(int nth)
                {
                	return 0;
                }
                
                static void setup_fault()
                {
                }
                
                static void thread_start(void* (*fn)(void*), void* arg)
                {
                	pthread_t th;
                	pthread_attr_t attr;
                	pthread_attr_init(&attr);
                	pthread_attr_setstacksize(&attr, 128 << 10);
                	int i = 0;
                	for (; i < 100; i++) {
                		if (pthread_create(&th, &attr, fn, arg) == 0) {
                			pthread_attr_destroy(&attr);
                			return;
                		}
                		if (errno == EAGAIN) {
                			usleep(50);
                			continue;
                		}
                		break;
                	}
                	exit(1);
                }
                
                typedef struct {
                	int state;
                } event_t;
                
                static void event_init(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_reset(event_t* ev)
                {
                	ev->state = 0;
                }
                
                static void event_set(event_t* ev)
                {
                	if (ev->state)
                	exit(1);
                	__atomic_store_n(&ev->state, 1, __ATOMIC_RELEASE);
                }
                
                static void event_wait(event_t* ev)
                {
                	while (!__atomic_load_n(&ev->state, __ATOMIC_ACQUIRE))
                		usleep(200);
                }
                
                static int event_isset(event_t* ev)
                {
                	return __atomic_load_n(&ev->state, __ATOMIC_ACQUIRE);
                }
                
                static int event_timedwait(event_t* ev, uint64_t timeout_ms)
                {
                	uint64_t start = current_time_ms();
                	for (;;) {
                		if (__atomic_load_n(&ev->state, __ATOMIC_RELAXED))
                			return 1;
                		if (current_time_ms() - start > timeout_ms)
                			return 0;
                		usleep(200);
                	}
                }
                
                long syz_mmap(size_t addr, size_t size)
                {
                	zx_handle_t root = zx_vmar_root_self();
                	zx_info_vmar_t info;
                	zx_status_t status = zx_object_get_info(root, ZX_INFO_VMAR, &info, sizeof(info), 0, 0);
                	if (status != ZX_OK) {
                		return status;
                	}
                	zx_handle_t vmo;
                	status = zx_vmo_create(size, 0, &vmo);
                	if (status != ZX_OK) {
                		return status;
                	}
                	uintptr_t mapped_addr;
                	status = zx_vmar_map(root, ZX_VM_FLAG_SPECIFIC_OVERWRITE | ZX_VM_FLAG_PERM_READ | ZX_VM_FLAG_PERM_WRITE,
                			     addr - info.base, vmo, 0, size,
                			     &mapped_addr);
                	zx_status_t close_vmo_status = zx_handle_close(vmo);
                	if (close_vmo_status != ZX_OK) {
                	}
                	return status;
                }
                
                static long syz_process_self(void)
                {
                	return zx_process_self();
                }
                
                static long syz_thread_self(void)
                {
                	return zx_thread_self();
                }
                
                static long syz_vmar_root_self(void)
                {
                	return zx_vmar_root_self();
                }
                
                static long syz_job_default(void)
                {
                	return zx_job_default();
                }
                
                static long syz_future_time(volatile long when)
                {
                	zx_time_t delta_ms = 10000;
                	switch (when) {
                	case 0:
                		delta_ms = 5;
                		break;
                	case 1:
                		delta_ms = 30;
                		break;
                	}
                	zx_time_t now = 0;
                	zx_clock_read(ZX_CLOCK_MONOTONIC, &now);
                	return now + delta_ms * 1000 * 1000;
                }
                
                static void loop();
                static int do_sandbox_none(void)
                {
                	loop();
                	return 0;
                }
                #define CAST(f) ({void* p = (void*)f; p; })
                
                static long syz_execute_func(volatile long text)
                {
                	((void (*)(void))(text))();
                	return 0;
                }
                
                struct thread_t {
                	int created, call;
                	event_t ready, done;
                };
                
                static struct thread_t threads[16];
                static void execute_call(int call);
                static int running;
                
                static void* thr(void* arg)
                {
                	struct thread_t* th = (struct thread_t*)arg;
                	for (;;) {
                		event_wait(&th->ready);
                		event_reset(&th->ready);
                		execute_call(th->call);
                		__atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED);
                		event_set(&th->done);
                	}
                	return 0;
                }
                
                static void execute_one(void)
                {
                	int i, call, thread;
                	for (call = 0; call < 17; call++) {
                		for (thread = 0; thread < (int)(sizeof(threads) / sizeof(threads[0])); thread++) {
                			struct thread_t* th = &threads[thread];
                			if (!th->created) {
                				th->created = 1;
                				event_init(&th->ready);
                				event_init(&th->done);
                				event_set(&th->done);
                				thread_start(thr, th);
                			}
                			if (!event_isset(&th->done))
                				continue;
                			event_reset(&th->done);
                			th->call = call;
                			__atomic_fetch_add(&running, 1, __ATOMIC_RELAXED);
                			event_set(&th->ready);
                			if (call == 1)
                				break;
                			event_timedwait(&th->done, 50);
                			break;
                		}
                	}
                	for (i = 0; i < 100 && __atomic_load_n(&running, __ATOMIC_RELAXED); i++)
                		sleep_ms(1);
                }
                
                static void execute_one(void);
                static void loop(void)
                {
                	execute_one();
                }
                
                uint64_t r[3] = {0x0, 0x0, 0x0};
                
                void execute_call(int call)
                {
                		intptr_t res = 0;
                	switch (call) {
                	case 0:
                		inject_fault(1);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_object_signal))(0, 0, 0x126e00);
                		break;
                	case 1:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_info))(0, 0xf, 0x20000000, 8, 0x20000040, 0x20000080);
                		break;
                	case 2:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                		{
                		int i;
                		for(i = 0; i < 4; i++) {
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_vmar_unmap))(0, 0, 4);
                				}
                		}
                		break;
                	case 3:
                memcpy((void*)0x200000c0, "\xc4\xa3\xe5\x69\xb3\xed\x63\x8c\xf0\x00\xc4\x21\x75\xe1\xde\xc4\xa2\x59\xba\x3b\x46\xdf\xa6\xa1\x20\x00\x00\xc4\x23\xd9\x7d\x55\xf3\x75\xc4\x21\xf1\xd1\x42\xa3\xf3\x0f\xe6\xff\xc4\x21\x78\x13\x7d\xea\xf3\x66\xf0\x0f\xb0\x3e\xc4\x81\x7a\x12\x8f\x00\x80\x00\x00", 65);
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_start))(0, 0x200000c0, 0x20000140, 0, 0);
                		break;
                	case 4:
                *(uint64_t*)0x20000180 = 8;
                *(uint64_t*)0x20000188 = 0x1000;
                *(uint64_t*)0x20000190 = 9;
                *(uint64_t*)0x20000198 = 0;
                *(uint64_t*)0x200001a0 = 5;
                *(uint64_t*)0x200001a8 = 0x7f;
                *(uint64_t*)0x200001b0 = 0x1000;
                *(uint64_t*)0x200001b8 = 9;
                *(uint64_t*)0x200001c0 = 0x1ff;
                *(uint64_t*)0x200001c8 = 8;
                *(uint64_t*)0x200001d0 = 0;
                *(uint64_t*)0x200001d8 = 2;
                *(uint64_t*)0x200001e0 = 9;
                *(uint64_t*)0x200001e8 = 2;
                *(uint64_t*)0x200001f0 = 8;
                *(uint64_t*)0x200001f8 = 0x4f;
                *(uint64_t*)0x20000200 = 7;
                *(uint64_t*)0x20000208 = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_write_state))(0, 0, 0x20000180, 0x90);
                		break;
                	case 5:
                		res = -1;
                res = ((intptr_t(*)())CAST(get_root_resource))();
                		if ((int)res != -1)
                				r[0] = res;
                		break;
                	case 6:
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t))CAST(zx_clock_get_details))(r[0], 0x400000000000000, 0x20000240);
                		if (res == ZX_OK)
                r[1] = *(uint64_t*)0x20000248;
                		break;
                	case 7:
                memcpy((void*)0x200002c0, "\037&/[\000", 5);
                		res = -1;
                res = ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_thread_create))(0, 0x200002c0, 5, 0, 0x20000300);
                		if (res == ZX_OK)
                r[2] = *(uint32_t*)0x20000300;
                		break;
                	case 8:
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_object_get_property))(r[2], 4, 0x20000340, 8);
                		break;
                	case 9:
                *(uint64_t*)0x20020600 = 0x20000380;
                *(uint32_t*)0x20000380 = 0;
                memset((void*)0x20000384, 0, 3);
                *(uint8_t*)0x20000387 = 1;
                *(uint64_t*)0x20000388 = 0x1b8a5e6400000000;
                *(uint64_t*)0x20000390 = 5;
                *(uint64_t*)0x20000398 = -1;
                *(uint32_t*)0x200003a0 = 0;
                *(uint64_t*)0x200003a4 = 0xffffffffffff6b94;
                *(uint64_t*)0x200003ac = 0x994b24c359ddb7bb;
                memcpy((void*)0x200003b4, "\037&/[\000", 5);
                memcpy((void*)0x200003bc, "\037&/[\000", 5);
                *(uint64_t*)0x20020608 = 0x20010580;
                *(uint32_t*)0x20010580 = 0;
                *(uint64_t*)0x20020610 = 0x200105c0;
                *(uint64_t*)0x20020618 = 0x200205c0;
                *(uint32_t*)0x20020620 = 0x44;
                *(uint32_t*)0x20020624 = 1;
                *(uint32_t*)0x20020628 = 0x10000;
                *(uint32_t*)0x2002062c = 0;
                ((intptr_t(*)(intptr_t,intptr_t,intptr_t,intptr_t,intptr_t,intptr_t))CAST(zx_channel_call))(0, 0, r[1], 0x20020600, 0x20020640, 0x20020680);
                		break;
                	case 10:
                memcpy((void*)0x20000000, "\x42\xd9\x9a\xe0\x48\xad\x13\x47\xda\xab\x0e\x00\x00\x00\xc0\xa7\x48\x21\x9a\x06\xa5\xc4\x01\xfd\xee\xf4\xc4\x22\xe5\x02\x68\xfc\xc4\x02\xf9\x1e\xa4\x7a\x00\x00\x00\x00\xc4\x81\xfd\x72\xe1\x9f\xc4\x21\xb9\xd1\xae\x00\x00\x00\x80\xa5\xc4\x41\x7d\x5b\x41\x0d", 64);
                syz_execute_func(0x20000000);
                		break;
                	case 11:
                syz_future_time(0);
                		break;
                	case 12:
                syz_job_default();
                		break;
                	case 13:
                syz_mmap(0x20ffa000, 0x4000);
                		break;
                	case 14:
                syz_process_self();
                		break;
                	case 15:
                syz_thread_self();
                		break;
                	case 16:
                syz_vmar_root_self();
                		break;
                	}
                
                }
                int main(void)
                {
                syz_mmap(0x20000000, 0x1000000);
                	setup_fault();
                			use_temporary_dir();
                			do_sandbox_none();
                	return 0;
                }
                
                <stdin>:8:10: fatal error: 'lib/ddk/driver.h' file not found
                #include <lib/ddk/driver.h>
                         ^~~~~~~~~~~~~~~~~~
                1 error generated.
                
                compiler invocation: /syzkaller/shared/fuchsia/prebuilt/third_party/clang/linux-x64/bin/clang [-o /tmp/syz-executor951339916 -DGOOS_fuchsia=1 -DGOARCH_amd64=1 -DHOSTGOOS_linux=1 -x c - -Wno-deprecated -target x86_64-fuchsia -ldriver -lfdio -lzircon --sysroot /syzkaller/shared/fuchsia/out/x64/zircon_toolchain/obj/zircon/public/sysroot/sysroot -I /syzkaller/shared/fuchsia/sdk/lib/fdio/include -I /syzkaller/shared/fuchsia/zircon/system/ulib/fidl/include -I /syzkaller/shared/fuchsia/src/lib/ddk/include -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.device.manager -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.nand -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.power.statecontrol -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/sdk/fidl/fuchsia.hardware.usb.peripheral -I /syzkaller/shared/fuchsia/out/x64/fidling/gen/zircon/vdso/zx -L /syzkaller/shared/fuchsia/out/x64/x64-shared -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-array-bounds -Wno-unused-command-line-argument]
        --- FAIL: TestGenerate/fuchsia/amd64/13 (0.16s)
            csource_test.go:131: 
        --- FAIL: TestGenerate/fuchsia/amd64/10 (0.12s)
            csource_test.go:131: 
        --- FAIL: TestGenerate/fuchsia/amd64/1 (0.11s)
            csource_test.go:131: 
        --- FAIL: TestGenerate/fuchsia/amd64/8 (0.11s)
            csource_test.go:131: 
FAIL
FAIL	github.com/google/syzkaller/pkg/csource	13.755s
ok  	github.com/google/syzkaller/pkg/db	2.446s
ok  	github.com/google/syzkaller/pkg/email	0.022s
ok  	github.com/google/syzkaller/pkg/host	20.690s
ok  	github.com/google/syzkaller/pkg/ifuzz	0.446s
ok  	github.com/google/syzkaller/pkg/image	1.745s
ok  	github.com/google/syzkaller/pkg/instance	1.712s
ok  	github.com/google/syzkaller/pkg/ipc	20.526s
ok  	github.com/google/syzkaller/pkg/kconfig	0.418s
ok  	github.com/google/syzkaller/pkg/kd	0.003s
ok  	github.com/google/syzkaller/pkg/log	0.003s
ok  	github.com/google/syzkaller/pkg/mgrconfig	2.208s
ok  	github.com/google/syzkaller/pkg/osutil	0.117s
ok  	github.com/google/syzkaller/pkg/report	9.392s
ok  	github.com/google/syzkaller/pkg/repro	2.430s
ok  	github.com/google/syzkaller/pkg/runtest	50.927s
ok  	github.com/google/syzkaller/pkg/serializer	0.011s
ok  	github.com/google/syzkaller/pkg/stats	0.011s
ok  	github.com/google/syzkaller/pkg/subsystem	0.023s
ok  	github.com/google/syzkaller/pkg/subsystem/linux	0.050s
ok  	github.com/google/syzkaller/pkg/subsystem/lists	0.152s
ok  	github.com/google/syzkaller/pkg/symbolizer	0.088s
ok  	github.com/google/syzkaller/pkg/tool	0.030s
ok  	github.com/google/syzkaller/pkg/vcs	7.545s
?   	github.com/google/syzkaller/sys	[no test files]
?   	github.com/google/syzkaller/sys/akaros	[no test files]
?   	github.com/google/syzkaller/sys/akaros/gen	[no test files]
?   	github.com/google/syzkaller/sys/darwin	[no test files]
?   	github.com/google/syzkaller/sys/darwin/gen	[no test files]
?   	github.com/google/syzkaller/sys/freebsd	[no test files]
?   	github.com/google/syzkaller/sys/freebsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/fidlgen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/gen	[no test files]
?   	github.com/google/syzkaller/sys/fuchsia/layout	[no test files]
?   	github.com/google/syzkaller/sys/linux/gen	[no test files]
?   	github.com/google/syzkaller/sys/netbsd	[no test files]
?   	github.com/google/syzkaller/sys/netbsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/openbsd/gen	[no test files]
?   	github.com/google/syzkaller/sys/syz-extract	[no test files]
?   	github.com/google/syzkaller/sys/syz-sysgen	[no test files]
?   	github.com/google/syzkaller/sys/targets	[no test files]
?   	github.com/google/syzkaller/sys/test	[no test files]
?   	github.com/google/syzkaller/sys/test/gen	[no test files]
?   	github.com/google/syzkaller/sys/trusty	[no test files]
?   	github.com/google/syzkaller/sys/trusty/gen	[no test files]
?   	github.com/google/syzkaller/sys/windows	[no test files]
?   	github.com/google/syzkaller/sys/windows/gen	[no test files]
?   	github.com/google/syzkaller/syz-runner	[no test files]
?   	github.com/google/syzkaller/tools/syz-benchcmp	[no test files]
?   	github.com/google/syzkaller/tools/syz-bisect	[no test files]
?   	github.com/google/syzkaller/tools/syz-build	[no test files]
?   	github.com/google/syzkaller/tools/syz-check	[no test files]
?   	github.com/google/syzkaller/tools/syz-cover	[no test files]
?   	github.com/google/syzkaller/tools/syz-crush	[no test files]
?   	github.com/google/syzkaller/tools/syz-db	[no test files]
?   	github.com/google/syzkaller/tools/syz-execprog	[no test files]
?   	github.com/google/syzkaller/tools/syz-expand	[no test files]
?   	github.com/google/syzkaller/tools/syz-fillreports	[no test files]
?   	github.com/google/syzkaller/tools/syz-fmt	[no test files]
?   	github.com/google/syzkaller/tools/syz-hubtool	[no test files]
?   	github.com/google/syzkaller/tools/syz-imagegen	[no test files]
?   	github.com/google/syzkaller/tools/syz-kcidb	[no test files]
?   	github.com/google/syzkaller/tools/syz-make	[no test files]
?   	github.com/google/syzkaller/tools/syz-minconfig	[no test files]
?   	github.com/google/syzkaller/tools/syz-mutate	[no test files]
?   	github.com/google/syzkaller/tools/syz-prog2c	[no test files]
?   	github.com/google/syzkaller/tools/syz-query-subsystems	[no test files]
?   	github.com/google/syzkaller/tools/syz-reporter	[no test files]
?   	github.com/google/syzkaller/tools/syz-repro	[no test files]
?   	github.com/google/syzkaller/tools/syz-reprolist	[no test files]
?   	github.com/google/syzkaller/tools/syz-runtest	[no test files]
?   	github.com/google/syzkaller/tools/syz-showprio	[no test files]
?   	github.com/google/syzkaller/tools/syz-stress	[no test files]
?   	github.com/google/syzkaller/tools/syz-symbolize	[no test files]
?   	github.com/google/syzkaller/tools/syz-testbed	[no test files]
?   	github.com/google/syzkaller/tools/syz-testbuild	[no test files]
?   	github.com/google/syzkaller/tools/syz-trace2syz	[no test files]
?   	github.com/google/syzkaller/tools/syz-tty	[no test files]
?   	github.com/google/syzkaller/tools/syz-upgrade	[no test files]
?   	github.com/google/syzkaller/tools/syz-usbgen	[no test files]
?   	github.com/google/syzkaller/vm/adb	[no test files]
?   	github.com/google/syzkaller/vm/bhyve	[no test files]
?   	github.com/google/syzkaller/vm/cuttlefish	[no test files]
?   	github.com/google/syzkaller/vm/gce	[no test files]
?   	github.com/google/syzkaller/vm/gvisor	[no test files]
?   	github.com/google/syzkaller/vm/kvm	[no test files]
?   	github.com/google/syzkaller/vm/odroid	[no test files]
?   	github.com/google/syzkaller/vm/proxyapp/mocks	[no test files]
?   	github.com/google/syzkaller/vm/proxyapp/proxyrpc	[no test files]
?   	github.com/google/syzkaller/vm/qemu	[no test files]
?   	github.com/google/syzkaller/vm/starnix	[no test files]
?   	github.com/google/syzkaller/vm/vmm	[no test files]
?   	github.com/google/syzkaller/vm/vmware	[no test files]
ok  	github.com/google/syzkaller/prog	11.213s
ok  	github.com/google/syzkaller/prog/test	0.474s
ok  	github.com/google/syzkaller/sys/linux	0.150s
ok  	github.com/google/syzkaller/sys/openbsd	0.016s
ok  	github.com/google/syzkaller/syz-ci	1.792s
ok  	github.com/google/syzkaller/syz-fuzzer	0.413s
ok  	github.com/google/syzkaller/syz-hub	0.013s
ok  	github.com/google/syzkaller/syz-hub/state	0.029s
ok  	github.com/google/syzkaller/syz-manager	1.784s
ok  	github.com/google/syzkaller/syz-verifier	1.405s
ok  	github.com/google/syzkaller/tools/syz-kconf	0.009s
ok  	github.com/google/syzkaller/tools/syz-linter	0.996s
ok  	github.com/google/syzkaller/tools/syz-trace2syz/parser	0.007s
ok  	github.com/google/syzkaller/tools/syz-trace2syz/proggen	0.131s
ok  	github.com/google/syzkaller/vm	9.343s
ok  	github.com/google/syzkaller/vm/isolated	1.377s
ok  	github.com/google/syzkaller/vm/proxyapp	3.464s
ok  	github.com/google/syzkaller/vm/vmimpl	1.340s
FAIL