The boot-write-failure path's fake child carries no stdin handle, so the unconditional destroy threw inside the spawn error handler and mislabeled the worker-exit. Use the optional-call form; the no-stdin branch is exercised by that same test.
The boot-write-failure path's fake child carries no stdin handle, so the unconditional destroy threw inside the spawn error handler and mislabeled the worker-exit. Use the optional-call form; the no-stdin branch is exercised by that same test.