fcntl$setsig(r0, 0xa, 0x32) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x40801, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18}, './file0\x00'}) panic: bad group arg size 12, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x23e, dir:0x0}, Inner:[]prog.Arg{}} type "array" goroutine 38 [running]: github.com/google/syzkaller/prog.foreachArgImpl({0x8b4158, 0xc0189b5480}, 0xc00f1857c0, 0xc002ff9d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5d9 github.com/google/syzkaller/prog.foreachArgImpl({0x8b4198, 0xc00f48b500}, 0xc00f1857c0, 0xc002ff9d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x337 github.com/google/syzkaller/prog.ForeachArg(0xc00ef35720, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x105 github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc01afc3a80, 0x0, 0xc00ef679b0, 0xc002ff9d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xaa main.(*Proc).executeHintSeed(0xc01afc3a80, 0x0, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xd2 main.(*Proc).smashInput(0xc01afc3a80, 0xc010712790) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x88 main.(*Proc).loop(0xc01afc3a80) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x125 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x15a5