Extracting prog: 1m26.431167307s
Minimizing prog: 6m9.375189645s
Simplifying prog options: 5m20.18654582s
Extracting C: 53.677895724s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-open-ioctl$LOOP_SET_STATUS64
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2, 0x0, 0x1, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000001800004faa2ad9c084ba001000", "036c47c6780820040000549ba197fce47ddfdd753abd950100002a00ffffffffffffffff0000ecffe8f20000009600", "b7fdbd7b0c36208220000100b9000000000000000000f0ffa1c8fff2ff00", [0x7, 0x1000000000000000]})

program crashed: SYZFAIL: posix_spawnp failed
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register-open
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register
detailed listing:
executing program 0:
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

program did not crash
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$binfmt_register
detailed listing:
executing program 0:
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program did not crash
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program did not crash
testing program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=50.592461574s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
simplifying guilty program options
testing program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
testing program (duration=50.592461574s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program did not crash
testing program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
extracting C reproducer
testing compiled C program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
program did not crash
testing program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
testing program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
testing program (duration=50.592461574s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$binfmt_register-write$binfmt_register
detailed listing:
executing program 0:
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '%', 0x3a, '\b\x00\x00\x00s\x1e8-', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x32)

program crashed: SYZFAIL: posix_spawnp failed
validation run: crashed=true
reproducing took 16m38.645275183s
repro crashed as (corrupted=false):
2025/12/16 03:23:28 executed programs: 273
2025/12/16 03:23:33 executed programs: 573
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:44603->127.0.0.1:38366: read: connection reset by peer

final repro crashed as (corrupted=false):
2025/12/16 03:23:28 executed programs: 273
2025/12/16 03:23:33 executed programs: 573
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
connection error: failed to recv *flatrpc.ExecutorMessageRawT: read tcp 127.0.0.1:44603->127.0.0.1:38366: read: connection reset by peer