last executing test programs:

13.739263ms ago: executing program 5 (id=6):
r0 = getsid(0xffffffffffffffff)
kill(r0, 0xb)
setpgid(0xffffffffffffffff, r0)
kill(r0, 0x10)
setsid()
r1 = getuid()
getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, 0xc)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{r1, 0x0, r2, 0xffffffffffffffff, 0x1, 0x7, 0x3}, 0x1, r0, r0, 0xfff7, 0x0, 0xff, 0x10001, 0xbf, 0x8, 0x8fe, 0x5})
r5 = socket$inet6(0x18, 0x4, 0x1)
getpeername$inet6(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x1c)
fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
lchown(&(0x7f0000000140)='./file0\x00', r6, r3)
wait4(r0, &(0x7f0000000200), 0x8, &(0x7f0000000240))
r8 = socket$inet6(0x18, 0x3, 0x40)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8, 0x1)
ioctl$DIOCRGETTSTATS(r9, 0xc4504440, &(0x7f00000028c0)={{'./file0\x00', './file0\x00', 0x50, 0x4}, &(0x7f0000000340)=[{'./file0\x00', './file0\x00', 0x8, 0x6}, {'./file0\x00', './file0\x00', 0x0, 0xa}, {'./file0\x00', '.\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x18, 0x3}, {'./file0\x00', './file0\x00', 0x8, 0x40}, {'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x52, 0x1}, {'./file0\x00', './file0\x00', 0x8, 0x4}, {'./file0\x00', './file0\x00', 0x9, 0xf}], 0x0, 0x9, 0x5a, 0x4, 0x7, 0x7, 0x40, 0xf5e1})
r10 = getsid(r4)
r11 = socket$inet6(0x18, 0x8000, 0x0)
fcntl$setown(r8, 0x6, r0)
listen(r5, 0x200)
getpeername$inet6(r11, &(0x7f0000002d40), &(0x7f0000002d80)=0x1c)
getpeername(r8, &(0x7f0000002dc0)=@in6, &(0x7f0000002e00)=0x1c)
ioctl$DIOCGETQUEUES(r9, 0xc148445e, &(0x7f0000002e40)={0x6, 0x1ff, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x10000, 0x5}, {0x1, 0x10000}, 0x745}, {{0x0, 0xeb66}, {0xb0, 0x80}, 0x8}, {{0x200, 0x8}, {}, 0x10000}, {0x3, 0x7, 0x5, 0x27ec}, 0x0, 0x4c2, 0x6, 0xe, 0x8}})
getppid()
sendto$inet6(r11, &(0x7f0000002fc0)="d7e2f1c4ba51c6e67e7ba146026962f955a3cf211238571705deda73d1ed792071ae489b3a44a0eb1d6fc30922978fe76379a904ac15368b77fde01c5ca45b8c2c9ede5576b57fd6537e4d5fba54856ef1a82f131423fd5879fb669db3a2f17ad5aea175125c2e8ae315cffa38ff0fe2430a21bcd54c585b28b215a7fc954cae6893b01240f1f8bf46", 0x89, 0x403, &(0x7f0000003080)={0x1c, 0x18, 0x2, 0xffffffff, "4a4b787f373fc34bc66a05f98e02def0", 0x1}, 0x1c)
getsockopt$sock_cred(r11, 0xffff, 0x1022, &(0x7f00000030c0)={<r12=>0x0}, &(0x7f0000003100)=0xc)
r13 = getgid()
semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000003140)={{r6, r7, r12, r13, 0xa, 0xff, 0x6}, 0x0, 0x1000, 0x0, 0x0, 0xb2ce, 0x0, 0x1})
ktrace(&(0x7f00000031c0)='./file0\x00', 0x1, 0x500, r10)
fchown(r11, r6, r7)

0s ago: executing program 0 (id=1):
r0 = socket(0x18, 0x4, 0x0)
getsockopt(r0, 0x29, 0x37, 0x0, 0x0)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x1, 0x82)
r1 = syz_open_pts()
close(r1)
setrlimit(0x8, &(0x7f0000000300)={0x42, 0x63})
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x4ebfac6bbaf7861)
r2 = syz_open_pts()
close(r2)
ioctl$TIOCSETD(r1, 0x8004745f, &(0x7f0000000000)=0x1d)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xab0683f520fc993, 0x5012, 0xffffffffffffffff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='#[\x00', &(0x7f00000000c0)='(!-@[}\x00'], &(0x7f0000000380)=[&(0x7f0000000140)='%\x00', &(0x7f0000000180)=':/%]+}[^{,\x00', &(0x7f00000001c0)='/\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='^[*%!\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00'])
r3 = socket(0x18, 0x2, 0x4)
mquery(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x1, 0x0, r0, 0x7)
setsockopt(r3, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4)
setsockopt(r3, 0x1000000000029, 0xc, 0x0, 0x0)
r4 = socket(0x2, 0x4001, 0x0)
r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff)
close(r5)
getpeername$unix(r5, &(0x7f00000003c0)=@file={0x0, 0x0, ""/254}, &(0x7f00000004c0)=0x100)
socket(0x18, 0x4, 0x0) (async)
getsockopt(r0, 0x29, 0x37, 0x0, 0x0) (async)
poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x1, 0x82) (async)
syz_open_pts() (async)
close(r1) (async)
setrlimit(0x8, &(0x7f0000000300)={0x42, 0x63}) (async)
open(&(0x7f0000000180)='./file0\x00', 0x0, 0x4ebfac6bbaf7861) (async)
syz_open_pts() (async)
close(r2) (async)
ioctl$TIOCSETD(r1, 0x8004745f, &(0x7f0000000000)=0x1d) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xab0683f520fc993, 0x5012, 0xffffffffffffffff, 0x0) (async)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='#[\x00', &(0x7f00000000c0)='(!-@[}\x00'], &(0x7f0000000380)=[&(0x7f0000000140)='%\x00', &(0x7f0000000180)=':/%]+}[^{,\x00', &(0x7f00000001c0)='/\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='^[*%!\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00']) (async)
socket(0x18, 0x2, 0x4) (async)
mquery(&(0x7f0000308000/0x3000)=nil, 0x3000, 0x1, 0x0, r0, 0x7) (async)
setsockopt(r3, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) (async)
setsockopt(r3, 0x1000000000029, 0xc, 0x0, 0x0) (async)
socket(0x2, 0x4001, 0x0) (async)
fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) (async)
close(r5) (async)
getpeername$unix(r5, &(0x7f00000003c0)=@file={0x0, 0x0, ""/254}, &(0x7f00000004c0)=0x100) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 54: Connection reset by peer)


OpenBSD/amd64 (ci-openbsd-setuid-0.us-central1-a.c.syzkaller.internal) (tty00)

login: uvn_flush: obj=0xfffff4006f7c2a58, offset=0x3ff000.  error during pageout.
uvn_flush: WARNING: changes to page may be lost!
set $lines = 0
Password:
Login incorrect
login: show panic
Password:
Login incorrect
login: trace
Password:
Login incorrect
login: show proc
Password:
Login incorrect
show all locks
login: Password:
Login incorrect
show all pools
login: Password:
Login incorrect
trace
login: Password:
Login incorrect
trace
login: Password: