panic: broken type ref goroutine 30 [running]: github.com/google/syzkaller/prog.ArgCommon.Type(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:39 github.com/google/syzkaller/prog.(*ConstArg).Size(0xc002fcf450, 0xc002fcf450) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:59 +0xed github.com/google/syzkaller/prog.foreachArgImpl(0x9b3220, 0xc002fc3a60, 0xc002fd3c80, 0xc000429320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:142 +0x2ba github.com/google/syzkaller/prog.foreachArgImpl(0x9b3260, 0xc002fd43f0, 0xc002fd3c80, 0xc000429320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:156 +0x5e5 github.com/google/syzkaller/prog.ForeachArg(0xc002fd3a40, 0xc000429320) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:122 +0xdd github.com/google/syzkaller/prog.getCompatibleResources(0xc002fd3980, 0x900296, 0xb, 0xc002b70e00, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:892 +0xb9 github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc002b70e00, 0xc0019e2eb0, 0xcac820, 0x0, 0x898a20, 0x1, 0xc001b50bd0, 0xc000429528, 0x792cc9) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:840 +0xfe github.com/google/syzkaller/prog.(*ResourceType).generate(0xcac820, 0xc002b70e00, 0xc0019e2eb0, 0x0, 0x9b31a0, 0xc001b50bd0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:669 +0x27c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002b70e00, 0xc0019e2eb0, 0x9b9540, 0xcac820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002b70e00, 0xc0019e2eb0, 0xd425a0, 0xc, 0xc, 0xaaaaaaaaaaaaaa00, 0x38, 0x8, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb70a0, 0xc002b70e00, 0xc0019e2eb0, 0x0, 0xd7bd40, 0x0, 0x0, 0x20, 0x20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002b70e00, 0xc0019e2eb0, 0x9b9600, 0xcb70a0, 0x420000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002b70e00, 0xc0019e2eb0, 0xcb7220, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb71e0, 0xc002b70e00, 0xc0019e2eb0, 0x0, 0xd7bd40, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002b70e00, 0xc0019e2eb0, 0x9b9600, 0xcb71e0, 0xd70000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).mutate(0xcafea0, 0xc002b70e00, 0xc0019e2eb0, 0x9b32e0, 0xc002b70ca0, 0xc002b70c48, 0xcb63a0, 0x2, 0x2, 0xc001a65410, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:457 +0x178 github.com/google/syzkaller/prog.(*Target).mutateArg(0xc00008d860, 0xc002b70e00, 0xc0019e2eb0, 0x9b32e0, 0xc002b70ca0, 0xc002b70c48, 0xcb63a0, 0x2, 0x2, 0xc001a65410, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:229 +0xe3 github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc000429ec0, 0xa) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:182 +0x288 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc001b19440, 0x9ac8a0, 0xc0027986c0, 0x14, 0xc00260f340, 0xc002886000, 0x269f, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:47 +0x32c main.(*Proc).loop(0xc00260f3c0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:95 +0x434 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188 OpenBSD/amd64 (ci-openbsd-multicore-5.c.syzkaller.internal) (tty00) login: