preadv(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000000)=""/115, 0x73}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f00000000c0)=""/98, 0x62}], 0x4, 0x4, 0xfffffa4c)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000400)={0x1})
read(r1, &(0x7f00000001c0)=""/204, 0xcc)
panic: bad group arg size 48, should be <= 24 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2dc, dir:0x0}, Inner:[]prog.Arg{(*prog.GroupArg)(0x402b462ce0)}} type "array"

goroutine 33 [running]:
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bb8, 0x402b462c80}, 0x402b465340, 0x40255afd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5cc
github.com/google/syzkaller/prog.foreachArgImpl({0x4c7bf8, 0x40236293b0}, 0x402b465340, 0x400175bd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x304
github.com/google/syzkaller/prog.ForeachArg(0x402b460d20, 0x40255afd80)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x130
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0x401af18580, 0x0, 0x402b466570, 0x400175bdf8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0x9c
main.(*Proc).executeHintSeed(0x401d066100, 0x401af18580, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xf8
main.(*Proc).smashInput(0x401d066100, 0x4006ce41d0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x8c
main.(*Proc).loop(0x401d066100)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x168
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:310 +0x1770