timer_create(0x2, &(0x7f0000000000)={0x0, 0x2b}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) pause() (async) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2b}, &(0x7f0000000040)) (async) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) (async) panic: replaceArg: group fields don't match: 2/3 goroutine 24 [running]: github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02441f100?}, {0xe56770?, 0xc02444b520?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:377 +0x425 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02441f120?}, {0xe56770?, 0xc02444b500?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02441f140?}, {0xe56770?, 0xc02444b4e0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02441f160?}, {0xe56770?, 0xc02444b4c0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.replaceArg({0xe56770?, 0xc02441f180?}, {0xe56770?, 0xc02444b4a0?}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/prog.go:382 +0x345 github.com/google/syzkaller/prog.(*StructType).mutate(0x16d44a0, 0xc0241d0a20, 0xc0240e3770, {0xe56770, 0xc02441f1a0?}, {0xc0240e3368, {0x1db72e0, 0x4, 0x4}, 0xc02437f9b0, ...}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:490 +0x185 github.com/google/syzkaller/prog.(*Target).mutateArg(0x0?, 0x7fe596431108?, 0x60?, {0xe56770, 0xc02441f1a0}, {0xc0240e3368, {0x1db72e0, 0x4, 0x4}, 0xc02437f9b0, ...}, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:245 +0xe2 github.com/google/syzkaller/prog.(*mutator).mutateArg(0xc027cbdd60) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:196 +0x245 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc024356c80, {0xe52aa8?, 0xc0286d2900}, 0x1e, 0xc024f34000, 0xc0000929c0, {0xc02032e000, 0xf9df, 0x11000}) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:51 +0x2ba main.(*Proc).smashInput(0xc024f34080, 0xc01c081ae0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:221 +0x165 main.(*Proc).loop(0xc024f34080) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0xf2 created by main.main in goroutine 1 /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:336 +0x1665