syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x8118, 0x0, &(0x7f00000004c0), 0x28184c0, &(0x7f0000000980)=ANY=[@ANYBLOB='nonumtail\x00\x00\x00harset=default,check=normal,iocharset=utf8,utf8=1,utf8=0,shortname=lowkr,usefree,\x00'], 0x0)
panic: bad group arg size 48, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[]prog.Arg{}} type "array"

goroutine 30 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x8b4158, 0xc013c34e60}, 0xc010bf7600, 0xc002fb5d00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5d9
github.com/google/syzkaller/prog.foreachArgImpl({0x8b4198, 0xc0158fe960}, 0xc010bf7600, 0xc00053dd00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x337
github.com/google/syzkaller/prog.ForeachArg(0xc0158f1a90, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x105
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc0103132c0, 0x0, 0xc014db56b0, 0xc00053dd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xaa
main.(*Proc).executeHintSeed(0xc0103132c0, 0x2a0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xd2
main.(*Proc).smashInput(0xc0103132c0, 0xc015bfc470)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x88
main.(*Proc).loop(0xc0103132c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x125
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x15a5