perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x9d, 0x7, 0x0, 0x80, 0x0, 0xffffffffffffff81, 0x40010, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x1}, 0x4144, 0x771d, 0x2, 0xa, 0x7fffffffffffffff, 0x7ff, 0x489}, 0xffffffffffffffff, 0x1, r6, 0x8) panic: bad group arg size 48, should be <= 0 for &prog.GroupArg{ArgCommon:prog.ArgCommon{ref:0x2de, dir:0x0}, Inner:[]prog.Arg{}} type "array" goroutine 28 [running]: github.com/google/syzkaller/prog.foreachArgImpl({0x8b4158, 0xc02421c6c0}, 0xc02416ff00, 0xc000f99d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:157 +0x5d9 github.com/google/syzkaller/prog.foreachArgImpl({0x8b4198, 0xc02423aab0}, 0xc02416ff00, 0xc000f99d00) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:164 +0x337 github.com/google/syzkaller/prog.ForeachArg(0xc02423c230, 0x0) /syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0x105 github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc0262781c0, 0x5, 0xc024231380, 0xc000f99d80) /syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:78 +0xaa main.(*Proc).executeHintSeed(0xc0262781c0, 0xf6d, 0x5) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0xd2 main.(*Proc).smashInput(0xc0262781c0, 0xc026f62de0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:214 +0x88 main.(*Proc).loop(0xc0262781c0) /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x125 created by main.main /syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:307 +0x15a5