Extracting prog: 1m9.382004618s
Minimizing prog: 9m42.840921914s
Simplifying prog options: 5m4.79594175s
Extracting C: 1m25.376227369s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$ext4-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0xe, &(0x7f0000000280)={[{@init_itable}, {@grpid}, {@jqfmt_vfsv1}]}, 0x23, 0x46b, &(0x7f0000000d40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program crashed: SYZFAIL: posix_spawnp failed
single: successfully extracted reproducer
found reproducer with 5 syscalls
minimizing guilty program
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$ext4-syz_mount_image$fuse
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0xe, &(0x7f0000000280)={[{@init_itable}, {@grpid}, {@jqfmt_vfsv1}]}, 0x23, 0x46b, &(0x7f0000000d40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$ext4-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000009c0)='./file0\x00', 0xe, &(0x7f0000000280)={[{@init_itable}, {@grpid}, {@jqfmt_vfsv1}]}, 0x23, 0x46b, &(0x7f0000000d40)="$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")
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program did not crash
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=30.862983024s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
program did not crash
simplifying guilty program options
testing program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
program did not crash
testing program (duration=30.862983024s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
program did not crash
testing program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
testing program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
testing program (duration=30.862983024s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-syz_mount_image$fuse-mount$overlay
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xaa, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
reproducing took 19m36.510644159s
repro crashed as (corrupted=false):
2025/12/19 09:34:59 executed programs: 276
2025/12/19 09:35:04 executed programs: 579
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:33431->127.0.0.1:59192: read: connection reset by peer

final repro crashed as (corrupted=false):
2025/12/19 09:34:59 executed programs: 276
2025/12/19 09:35:04 executed programs: 579
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:33431->127.0.0.1:59192: read: connection reset by peer