panic: broken type ref goroutine 28 [running]: github.com/google/syzkaller/prog.ArgCommon.Type(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:39 github.com/google/syzkaller/prog.foreachArgImpl(0x9b2c80, 0xc00361d160, 0xc003628c80, 0xc0033a2688) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:135 +0x81d github.com/google/syzkaller/prog.foreachArgImpl(0x9b2d40, 0xc00361d140, 0xc003628c80, 0xc0033a2688) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:159 +0x62d github.com/google/syzkaller/prog.foreachArgImpl(0x9b2cc0, 0xc003626cf0, 0xc003628c80, 0xc0033a2688) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x5e5 github.com/google/syzkaller/prog.ForeachArg(0xc0036288c0, 0xc0033a2688) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.getCompatibleResources(0xc003628780, 0x900149, 0xb, 0xc002d7b220, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:892 +0xb9 github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc002d7b220, 0xc002871180, 0xcac6a0, 0x0, 0x9b2d00, 0xc002917770, 0xc001a9ff98, 0x1, 0xc001d1c900) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:840 +0xfe github.com/google/syzkaller/prog.(*ResourceType).generate(0xcac6a0, 0xc002d7b220, 0xc002871180, 0x0, 0x9b2d00, 0xc000041180, 0x2fe0e6008, 0x0, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:669 +0x27c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b8fa0, 0xcac6a0, 0xc001a90000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xd402e0, 0xc, 0xc, 0xaaaaaaaaaaaaaa00, 0x38, 0x8, 0x4, 0x203000, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb6c60, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0x10, 0x20, 0x20, 0x20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb6c60, 0xc002f70000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xcb6e20, 0x2, 0x2, 0x0, 0xc00287c6f0, 0x203000, 0xcbff80, 0xc001d1cd48, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb6de0, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0x10, 0x20, 0xc002d8c320, 0xc0028c9088) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb6de0, 0xc000070000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).generate(0xcaf9e0, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0xc002d8c320, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:788 +0xbf github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9120, 0xcaf9e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xcb5c60, 0x2, 0x2, 0xaaaaaaaaaaaaaa00, 0x38, 0xc001d1d0f0, 0x40c698, 0x10, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb5c20, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0xc0028cfd20, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xcb4ce0, 0x2, 0x2, 0xc002918300, 0x0, 0xc001d1d3f8, 0x7917b7, 0xcb75a0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4ca0, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0xc0028cfc90, 0x0, 0x203000, 0x203000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb4ca0, 0x9b0000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).generate(0xcaf860, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0x2, 0x203000, 0x10, 0x10) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:788 +0xbf github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9120, 0xcaf860, 0x2fe0e0000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xcab220, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4de0, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0xc002d8c0e0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb4de0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xccea40, 0x4, 0x4, 0xc001d1d900, 0xc001d1db08, 0x76c7c1, 0xc002913e48, 0xcc4300, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4da0, 0xc002d7b220, 0xc002871180, 0x0, 0xd79600, 0x0, 0xc001d1db88, 0xc002913e48, 0xcc4300) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b9060, 0xcb4da0, 0xc001d10000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*PtrType).generate(0xcae860, 0xc002d7b220, 0xc002871180, 0x0, 0x9b2c00, 0xc0028cfbd0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:797 +0x123 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002d7b220, 0xc002871180, 0x9b8ee0, 0xcae860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002d7b220, 0xc002871180, 0xcb3ca0, 0x2, 0x2, 0xc00271e000, 0x16f, 0x16f, 0x17b1, 0x161, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc002d7b220, 0xc002871180, 0xd32660, 0x161, 0xc002871180, 0xc002871130) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:551 +0xd5 github.com/google/syzkaller/prog.(*randGen).generateCall(0xc002d7b220, 0xc002871180, 0xc002913b80, 0x9, 0xc002913b80, 0xc002913e40, 0xc002871180) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:540 +0x95 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc0033a3ec0, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:141 +0xf2 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc002913b80, 0x9ac300, 0xc002311fb0, 0x14, 0xc0020e7e80, 0xc00267c000, 0x2751, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea main.(*Proc).loop(0xc002483c40) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188 OpenBSD/amd64 (ci-openbsd-main-7.c.syzkaller.internal) (tty00) login: