panic: broken type ref goroutine 25 [running]: github.com/google/syzkaller/prog.ArgCommon.Type(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:39 github.com/google/syzkaller/prog.(*ConstArg).Size(0xc000c17470, 0xc000c17470) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:59 +0xed github.com/google/syzkaller/prog.foreachArgImpl(0x9b47c0, 0xc000b6d120, 0xc0031c0540, 0xc0003d9320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:142 +0x2ba github.com/google/syzkaller/prog.foreachArgImpl(0x9b47c0, 0xc000b6cfc0, 0xc0031c0540, 0xc0003d9320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b4800, 0xc000d7b080, 0xc0031c0540, 0xc0003d9320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x5e5 github.com/google/syzkaller/prog.ForeachArg(0xc0031bbf80, 0xc0003d9320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.getCompatibleResources(0xc0031bbac0, 0x9015b6, 0xb, 0xc002c2f580, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:892 +0xb9 github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc002c2f580, 0xc000089770, 0xcafba0, 0x0, 0x899a00, 0x1, 0xc000e17480, 0xc0003d9528, 0x792dc9) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:840 +0xfe github.com/google/syzkaller/prog.(*ResourceType).generate(0xcafba0, 0xc002c2f580, 0xc000089770, 0x0, 0x9b4740, 0xc000e17480, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:669 +0x27c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002c2f580, 0xc000089770, 0x9bac00, 0xcafba0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002c2f580, 0xc000089770, 0xd46f20, 0xc, 0xc, 0xaaaaaaaaaaaaaa00, 0x38, 0x8, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcbc500, 0xc002c2f580, 0xc000089770, 0x0, 0xd806c0, 0x0, 0x0, 0x20, 0x20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002c2f580, 0xc000089770, 0x9bace0, 0xcbc500, 0x420000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002c2f580, 0xc000089770, 0xcb7ca0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcbc6e0, 0xc002c2f580, 0xc000089770, 0x0, 0xd806c0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002c2f580, 0xc000089770, 0x9bace0, 0xcbc6e0, 0xd80000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).mutate(0xcb76e0, 0xc002c2f580, 0xc000089770, 0x9b4880, 0xc002c2f380, 0xc002c2f1e8, 0xcb76a0, 0x2, 0x2, 0xc001f39a40, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:457 +0x178 github.com/google/syzkaller/prog.(*Target).mutateArg(0xc000079520, 0xc002c2f580, 0xc000089770, 0x9b4880, 0xc002c2f380, 0xc002c2f1e8, 0xcb76a0, 0x2, 0x2, 0xc001f39a40, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:229 +0xe3 github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc0003d9ec0, 0xa) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:182 +0x288 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc0038f1700, 0x9ade40, 0xc002645c50, 0x14, 0xc0025fe6c0, 0xc002b9c000, 0x272b, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:47 +0x32c main.(*Proc).loop(0xc0025fe700) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188