openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x80003, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@nomblk_io_submit}, {@norecovery}, {@mblk_io_submit}, {@nombcache}, {@discard}]}, 0x0)
panic: bad group arg size 144, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{}} type "array"

goroutine 25 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bb8, 0x4016057b00}, 0x400bb262c0, 0x401bc49d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bf8, 0x400c790a20}, 0x400bb262c0, 0x401bc49d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304
github.com/google/syzkaller/prog.ForeachArg(0x4006fb9db0, 0x401bc49d80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x401df48140, 0x1, 0x400c60c450, 0x401bc49df8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c
main.(*Proc).executeHintSeed(0x4017292140, 0x401df48140, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8
main.(*Proc).smashInput(0x4017292140, 0x401d5344a0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c
main.(*Proc).loop(0x4017292140)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:310 +0x1770