r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42441) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000004c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x5, 0x0, @time, {}, {}, @time}, {0x0, 0x0, 0x0, 0x8, @time}], 0x38) panic: bad group arg size 48, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{}} type "array" goroutine 28 [running]: github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bb8, 0x4015170540}, 0x4015494000, 0x4016869d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bf8, 0x4015489260}, 0x4015494000, 0x400e3b9d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304 github.com/google/syzkaller/prog.ForeachArg(0x4015172a00, 0x4016869d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130 github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x401dd28280, 0x0, 0x40152beff0, 0x400e3b9df8) /syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c main.(*Proc).executeHintSeed(0x401501e180, 0x401dd28280, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8 main.(*Proc).smashInput(0x401501e180, 0x401c05aa60) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c main.(*Proc).loop(0x401501e180) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:310 +0x1770