open(&(0x7f0000000040)='./file2\x00', 0x608880, 0x127)
mkdir(&(0x7f0000000580)='./bus\x00', 0x0) (async)
rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00')
rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000180)='./file0/../file0\x00')
panic: bad group arg size 192, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[]prog.Arg{}} type "array"

goroutine 30 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x8b4538, 0xc023f8c1e0}, 0xc015b54a80, 0xc0071c1d00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5d9
github.com/google/syzkaller/prog.foreachArgImpl({0x8b4578, 0xc024201a10}, 0xc015b54a80, 0xc0071c1d00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x337
github.com/google/syzkaller/prog.ForeachArg(0xc01d1da4b0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x105
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc0277f6280, 0x0, 0xc01b68d590, 0xc0071c1d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xaa
main.(*Proc).executeHintSeed(0xc0277f6280, 0x4cc, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xd2
main.(*Proc).smashInput(0xc0277f6280, 0xc01e7b2c40)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x88
main.(*Proc).loop(0xc0277f6280)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x125
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x15a5