20, &(0x7f0000000680)={0x0, 0x1, {0xe52f, @struct={0x7ff, 0xb3b}, 0x0, 0x8000000000000000, 0x80000001, 0x73, 0x0, 0x9, 0xca, @struct={0x8, 0xb7}, 0x8, 0xc0000000, [0x4, 0x100, 0x401, 0x7f, 0x9, 0x873]}, {0x55, @struct={0x9, 0x1}, r1, 0x8001, 0xfff, 0xe4d0, 0xb1, 0x7, 0x40, @usage=0x1000, 0xffffffff, 0x1000, [0x4, 0x40, 0x7, 0x0, 0x0, 0x7]}, {0xa4, @usage=0x3, 0x0, 0xa84, 0x7fffffff, 0x2, 0x0, 0xffffffff, 0x20, @struct={0x1, 0x1ff}, 0x10000, 0x8, [0x9, 0x1f, 0x2eeb, 0x1ff, 0x4, 0x6]}, {0x7, 0x2, 0x10000}})
panic: bad group arg size 48, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{(*prog.GroupArg)(0x400e49b460)}} type "array"

goroutine 13 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7838, 0x400e49b400}, 0x400e54f240, 0x402575bd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7878, 0x400fc09770}, 0x400e54f240, 0x401dd3bd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304
github.com/google/syzkaller/prog.ForeachArg(0x400e325b30, 0x402575bd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x4020ad0ec0, 0x0, 0x400e5513e0, 0x401dd3bdf8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c
main.(*Proc).executeHintSeed(0x4014de2a00, 0x4020ad0ec0, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8
main.(*Proc).smashInput(0x4014de2a00, 0x400c3bc980)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c
main.(*Proc).loop(0x4014de2a00)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x170c