sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e00004010000040000000000000000000030000000026f000a"], 0xb8}, 0x1, 0xfffff000}, 0x0) 00:07:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}, 0x1, 0xfffff000}, 0x0) panic: bad group arg size 192, should be <= 120 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{(*prog.GroupArg)(0x401d307a20), (*prog.GroupArg)(0x401d307a40), (*prog.GroupArg)(0x401d307a60), (*prog.GroupArg)(0x401d307a80), (*prog.GroupArg)(0x401d307ac0)}} type "array" goroutine 32 [running]: github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bb8, 0x401d3079c0}, 0x401d33d200, 0x4001415d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bf8, 0x401d3613e0}, 0x401d33d200, 0x4001415d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304 github.com/google/syzkaller/prog.ForeachArg(0x401d30ae10, 0x4001415d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130 github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x401d047d00, 0x0, 0x401d340900, 0x4001415df8) /syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c main.(*Proc).executeHintSeed(0x401c6b13c0, 0x401d047d00, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8 main.(*Proc).smashInput(0x401c6b13c0, 0x40112148d0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c main.(*Proc).loop(0x401c6b13c0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:310 +0x1770