panic: broken type ref goroutine 26 [running]: github.com/google/syzkaller/prog.ArgCommon.Type(0x0, 0x9ba4c0, 0xcc2c20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:39 +0xe0 github.com/google/syzkaller/prog.(*state).analyzeImpl.func1(0x9b4620, 0xc001519d40, 0xc0018062c0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:69 +0x96 github.com/google/syzkaller/prog.foreachArgImpl(0x9b4620, 0xc001519d40, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:129 +0x113 github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00323c360, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00323c340, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b4760, 0xc00323c1c0, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x62d github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00323c0a0, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00323c040, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b4760, 0xc00323c020, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x62d github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00323c000, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b46a0, 0xc00320de60, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:141 +0x2a3 github.com/google/syzkaller/prog.foreachArgImpl(0x9b46e0, 0xc0015bd200, 0xc0018062c0, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x5e5 github.com/google/syzkaller/prog.ForeachArg(0xc001806180, 0xc000695d38) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.(*state).analyzeImpl(0xc001544730, 0xc001806180, 0xc00295a001) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:58 +0x61 github.com/google/syzkaller/prog.analyze(0xc001fb65c0, 0xc00295a000, 0x274d, 0x3000, 0xc001806140, 0x0, 0xc000695e20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:34 +0xa5 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc000695ec0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:140 +0xc6 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc001806140, 0x9add20, 0xc002254b40, 0x14, 0xc001fb65c0, 0xc00295a000, 0x274d, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea main.(*Proc).loop(0xc001fb6640) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188