panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x28 pc=0x7733fe] goroutine 23 [running]: github.com/google/syzkaller/prog.clone(0x9b2c60, 0xc0003f00f0, 0xc001240548, 0x9b2c60, 0xc0024da030) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:71 +0x6ee github.com/google/syzkaller/prog.(*Prog).Clone(0xc0007f1840, 0x900149) /syzkaller/gopath/src/github.com/google/syzkaller/prog/clone.go:20 +0x319 github.com/google/syzkaller/prog.(*randGen).resourceCentric(0xc002114b00, 0xc000087810, 0xcac6a0, 0x2d1f87600, 0x37f, 0xc001255830, 0xc00026fbc0, 0x2d1f876b0, 0xc001240858) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:839 +0xc2 github.com/google/syzkaller/prog.(*ResourceType).generate(0xcac6a0, 0xc002114b00, 0xc000087810, 0x0, 0x9b2c60, 0xc0000d7880, 0x29dd78008, 0x0, 0x1) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:669 +0x27c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8f00, 0xcac6a0, 0xc000260000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xd402e0, 0xc, 0xc, 0xaaaaaaaaaaaaaa00, 0x38, 0x8, 0x40c698, 0x203000, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb6c60, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0x10, 0x20, 0x20, 0x20) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb6c60, 0xc000980000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xcb6e20, 0x2, 0x2, 0x414000, 0x2c42d2b58, 0x203000, 0x100, 0x40, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb6de0, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0x10, 0x20, 0xc0021ea7e0, 0xc0028d2850) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb6de0, 0xc0000d0000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).generate(0xcaf9e0, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0xc0021ea7e0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:788 +0xbf github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b9080, 0xcaf9e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xcb5c60, 0x2, 0x2, 0xaaaaaaaaaaaaaa00, 0x38, 0xc0002ad048, 0x40c698, 0x10, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb5c20, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0xc001157fb0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb5c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xcb4ce0, 0x2, 0x2, 0xc00139f000, 0x0, 0xc0002ad350, 0x791637, 0xcb75a0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4ca0, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0x40c698, 0x203000, 0x203000, 0x203000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb4ca0, 0x9b0000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*UnionType).generate(0xcaf860, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0x2, 0x203000, 0x10, 0x10) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:788 +0xbf github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b9080, 0xcaf860, 0x29dd70000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xcab220, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4de0, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0xc002114ea0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb4de0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xccea40, 0x4, 0x4, 0xc0002ad800, 0xc0002ada60, 0x76c7c1, 0xc00139e408, 0xd3b4e0, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*StructType).generate(0xcb4da0, 0xc002114b00, 0xc000087810, 0x0, 0xd79600, 0x0, 0xc0002adae0, 0xc00139e408, 0xd3b4e0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:780 +0x7c github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8fc0, 0xcb4da0, 0xc0002a0000, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*PtrType).generate(0xcae860, 0xc002114b00, 0xc000087810, 0x0, 0x9b2b60, 0xc001157eb0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:797 +0x123 github.com/google/syzkaller/prog.(*randGen).generateArgImpl(0xc002114b00, 0xc000087810, 0x9b8e40, 0xcae860, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:658 +0x450 github.com/google/syzkaller/prog.(*randGen).generateArg(...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:608 github.com/google/syzkaller/prog.(*randGen).generateArgs(0xc002114b00, 0xc000087810, 0xcb3ca0, 0x2, 0x2, 0x49ff00, 0xc001b29c00, 0x16f, 0x16f, 0x1cb2, ...) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:596 +0x116 github.com/google/syzkaller/prog.(*randGen).generateParticularCall(0xc002114b00, 0xc000087810, 0xd32660, 0x161, 0xc000087810, 0xc00139ebc0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:551 +0xd5 github.com/google/syzkaller/prog.(*randGen).generateCall(0xc002114b00, 0xc000087810, 0xc00139e180, 0x6, 0xc00139e180, 0xc00139e3c0, 0xc000087810) /syzkaller/gopath/src/github.com/google/syzkaller/prog/rand.go:540 +0x95 github.com/google/syzkaller/prog.(*mutator).insertCall(0xc001241e18, 0x14) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:141 +0xf2 github.com/google/syzkaller/prog.(*Prog).Mutate(0xc00139e180, 0x9ac260, 0xc0016c6600, 0x14, 0xc001f64b80, 0xc002a3a000, 0x26ac, 0x3000) /syzkaller/gopath/src/github.com/google/syzkaller/prog/mutation.go:45 +0x2ea main.(*Proc).smashInput(0xc001f65f80, 0xc001c6a080) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:213 +0x131 main.(*Proc).loop(0xc001f65f80) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x16b created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:260 +0x1188