a\x99\x847\xaaqJ\xdb\x9fE\xc1p\x80\x0e\x9a\x98C\x1aT\t\xcc\xc4\xfd\xa8\x0e9\xcf\x01\x00\x00\x00\xee \xb8\f\xf5I\x89\x8f\x11\x92!6x\x05\\K\xfc\xb2\x9cuOC\xfc\bO\xa0\xf9\x8f\x9c\xf0\xa9\x94?_\xb21\x90\xed\xbf\xf1Q\x9c/P\xaf\x86\x95o=g\xa8E\x10\xde%\xbd]\x13\xf4F\xc6\xd4\xb2`\xef\x1apI1?\x04\x00\xbe\xb2~Z\xbf\xf9\xfa.\xb3\xd5\x00', &(0x7f0000000000)='./file0\x00', r1) (async)
panic: bad group arg size 24, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{}} type "array"

goroutine 30 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7838, 0x4016ede880}, 0x4016ef5d80, 0x40015c9d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7878, 0x401723dc20}, 0x4016ef5d80, 0x40015c9d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304
github.com/google/syzkaller/prog.ForeachArg(0x4017200910, 0x40015c9d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x401b626b40, 0x0, 0x4016effad0, 0x40015c9df8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c
main.(*Proc).executeHintSeed(0x401ee00340, 0x401b626b40, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8
main.(*Proc).smashInput(0x401ee00340, 0x400e78b820)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c
main.(*Proc).loop(0x401ee00340)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x170c