r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)=r1}, 0x20) panic: replaceArg: group fields don't match: 1/0 goroutine 6 [running]: github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1460?}, {0xe56770?, 0xc02e0a1a20?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:377 +0x425 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1440?}, {0xe56770?, 0xc02e0a1a00?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1420?}, {0xe56770?, 0xc02e0a19e0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1360?}, {0xe56770?, 0xc02e0a1920?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a12c0?}, {0xe56770?, 0xc02e0a1880?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a12a0?}, {0xe56770?, 0xc02e0a1860?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1040?}, {0xe56770?, 0xc02e0a1600?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1020?}, {0xe56770?, 0xc02e0a15e0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a1000?}, {0xe56770?, 0xc02e0a15c0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a0fe0?}, {0xe56770?, 0xc02e0a15a0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02e0a0fc0?}, {0xe56770?, 0xc02e0a1580?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.(*StructType).mutate(0x16d44a0, 0xc02e0a1540, 0xc02e09e960, {0xe56770, 0xc02e0a0fa0?}, {0xc02e09e878, {0x1db72e0, 0x4, 0x4}, 0xc02e0b6c60, ...}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:490 +0x185 github.com/google/syzkaller/prog.(*Target).mutateArg(0x418408?, 0xc003dd3ce0?, 0xc022e42900?, {0xe56770, 0xc02e0a0fa0}, {0xc02e09e878, {0x1db72e0, 0x4, 0x4}, 0xc02e0b6c60, ...}, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:245 +0xe2 github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc003dd3d60) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:196 +0x245 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc02e0c2500, {0xe52aa8?, 0xc028e2ba70}, 0x1e, 0xc028586280, 0xc00007cfc0, {0xc01e6a6000, 0xea5c, 0x11000}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:51 +0x2ba main.(*Proc).smashInput(0xc0285862c0, 0xc00db03220) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:221 +0x165 main.(*Proc).loop(0xc0285862c0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0xf2 created by main.main in goroutine 1 /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:336 +0x1665