last executing test programs:

2.028623486s ago: executing program 4 (id=250):
setregid(0xffffffffffffffff, 0x0)

1.717047093s ago: executing program 4 (id=258):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000480)=0x56924bf)

1.71224576s ago: executing program 5 (id=260):
r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0)
ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000d40)={0x101, 0x3, 0x9, {[0x2, 0x0, 0xf, 0x800, 0x1ec, 0xad2e, 0x9, 0x5, 0x4, 0x9, 0x8000, 0xad, 0x4, 0x1, 0xa, 0x5, 0x5, 0x3], [0x200, 0x43, 0xae9e, 0x10000, 0xffffffff80000000, 0xb, 0x3, 0x0, 0x3, 0x4], [0x1, 0xbe, 0x8000000000000000, 0x1, 0x4, 0x7fffffff80000000], [0x8, 0x3, 0x5, 0x8001, 0x5, 0x4], [{0xd1, 0xfff, 0x7}, {0xe93d, 0x4, 0x9, 0x3ff}, {0x6000, 0xd, 0x4, 0x2}, {0x6, 0x3, 0x8, 0x5}, {0x2, 0xc417, 0x4, 0xffffffffffff28fa}, {0x2, 0x6, 0x8, 0x2}, {0x6, 0x6, 0x4, 0x90dc}, {0x8, 0x6a0d, 0x83c, 0x4}], {0x0, 0x9, 0x0, 0x40}, {0x400, 0x1, 0x4, 0x1}}})

1.708274371s ago: executing program 0 (id=262):
r0 = socket(0x18, 0x3, 0x8)
setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x7, 0x2)

1.66902385s ago: executing program 1 (id=263):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0)
lseek(r0, 0xffffffffffffffff, 0x2)

1.463084159s ago: executing program 1 (id=268):
r0 = socket(0x11, 0x3, 0x1)
sendto$unix(r0, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x6, 0x0, 0x0)

1.267959711s ago: executing program 6 (id=269):
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1c, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}, @window={0x3, 0x3, 0x4}]}}}}}}}})
sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0)

1.266261656s ago: executing program 2 (id=270):
r0 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_LOCK(r0, 0x3)

1.264510772s ago: executing program 3 (id=271):
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x35, 0x0, 0x0)

1.262706572s ago: executing program 7 (id=272):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x28, &(0x7f0000000000), 0x0)

1.2611553s ago: executing program 0 (id=273):
r0 = socket(0x1e, 0x3, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x1}, 0xc)

1.254251162s ago: executing program 6 (id=274):
r0 = socket(0x2, 0x1, 0x0)
shutdown(r0, 0x1)

1.067017076s ago: executing program 3 (id=275):
setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62})
poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0)

1.063793067s ago: executing program 2 (id=276):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240), 0x0)

1.062188073s ago: executing program 1 (id=277):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x41, 0x0, 0x0)

1.060775982s ago: executing program 7 (id=278):
r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
fcntl$getown(r0, 0x5)

1.059225012s ago: executing program 6 (id=279):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000740)={0x0, 0xfffffffd, 0x3, 0x7, "00010000000000000020000017a0e1f7708a9338", 0x0, 0xfffffffd})

1.051027616s ago: executing program 3 (id=280):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x0, 0x0})

1.028645179s ago: executing program 5 (id=281):
ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0xfffc, 0x0, 0xfb}, {0x7, 0x0, 0x40}, {0x6, 0x0, 0x0, 0x80}]})
sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0)

979.900721ms ago: executing program 0 (id=282):
r0 = socket(0x18, 0x3, 0x0)
setsockopt(r0, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4)

858.797618ms ago: executing program 2 (id=283):
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1)
minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3)

853.350717ms ago: executing program 7 (id=284):
r0 = kqueue()
kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0)

749.738627ms ago: executing program 1 (id=285):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x20, 0x0})

748.250765ms ago: executing program 4 (id=286):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

741.694767ms ago: executing program 3 (id=287):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x1f, &(0x7f00000000c0), 0x0)

616.494086ms ago: executing program 6 (id=288):
mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x400)
open$dir(&(0x7f0000000700)='./file0\x00', 0x0, 0x0)

614.024282ms ago: executing program 4 (id=289):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$TIOCSETA(r0, 0xc2084415, &(0x7f0000000380)={0x345c, 0x8094c, 0x202, 0x0, "000059f0779d000000000100", 0x8})

611.967541ms ago: executing program 3 (id=290):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
ioctl$TIOCSETA(r0, 0xc4504441, &(0x7f0000000000)={0x800, 0xffff002f, 0xe9, 0x7ffffffd, "01af9b1977000000d0fb2cc46001a83a00", 0x10008000, 0xb})

610.43887ms ago: executing program 5 (id=291):
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, 0x0, 0x0)
sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xd79b41c173cbb07f)

609.902405ms ago: executing program 2 (id=292):
r0 = socket$inet6(0x18, 0x3, 0x0)
listen(r0, 0xe)

607.489628ms ago: executing program 0 (id=293):
r0 = socket(0x2, 0x3, 0x3)
setsockopt$inet_opts(r0, 0x0, 0x9, 0x0, 0x0)

606.922616ms ago: executing program 7 (id=294):
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x80)

389.25364ms ago: executing program 1 (id=295):
mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2000, 0x407d)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

387.746938ms ago: executing program 6 (id=296):
r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0)
ioctl$WSKBDIO_COMPLEXBELL(r0, 0x4004570c, &(0x7f0000001400))

385.132472ms ago: executing program 5 (id=297):
r0 = socket$inet(0x2, 0x3, 0x9)
setsockopt(r0, 0x0, 0xe, 0x0, 0x0)

383.754834ms ago: executing program 2 (id=298):
setreuid(0x0, 0xee01)
chroot(0x0)

350.621053ms ago: executing program 0 (id=299):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x812, r0, 0x800000000000)

188.817808ms ago: executing program 4 (id=300):
ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000055f000/0x2000)=nil, 0x200007bfffffffbe}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006c3000/0x3000)=nil, 0x4}, {&(0x7f00000ea000/0x4000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f0000740000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000000000001000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000442000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0xffffffffffffffac}, {&(0x7f000021f000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000561000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf978}, {&(0x7f000074a000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xd}, {&(0x7f000020c000/0x3000)=nil, &(0x7f00007ac000/0x1000)=nil, 0x800000012b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x2}, {&(0x7f000078e000/0xb000)=nil, &(0x7f0000714000/0x3000)=nil}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000582000/0xb000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000036e000/0x3000)=nil, 0x1020039f7}, {&(0x7f00001e1000/0x4000)=nil, &(0x7f000055e000/0x1000)=nil, 0xffffffffffffffff}], './file0/file0\x00'})
syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x2, 0x1, 0x30, 0x64, 0x3, 0x6, 0x70, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x7, 0x1e, [@local={0xac, 0x14, 0x0}]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}})

186.957142ms ago: executing program 7 (id=301):
r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000280)="54a9", 0x2}], 0x1)

185.514644ms ago: executing program 3 (id=302):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500060003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x0, 0x0, 0x0)

184.017656ms ago: executing program 2 (id=303):
r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10248, 0x0)
ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000000)=0x48)

182.323882ms ago: executing program 5 (id=304):
r0 = socket(0x18, 0x1, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000040)=0x2f, 0x1)

180.736539ms ago: executing program 1 (id=305):
ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, &(0x7f0000000000)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x2}, 0x6, &(0x7f00000003c0)="808f643b27da5db78de07d2b0ffbc05bc906aa654bb4ae3384fe6f5b54eb996eacaf981c99c213e2bba73f4133a5d70d759d3c86801b4d07a6a9b001c0b4297151cc28e2dbd90de9418cee114caf8de15b81540bec2bacf4b8991b2fa225e6c000000000", 0x0, 0x0, 0x0)

173.398485ms ago: executing program 4 (id=306):
r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0)
ioctl$TIOCSETA(r0, 0xc0104454, &(0x7f0000000740)={0xd, 0x6, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0x1bf, 0x7fffffff})

9.073963ms ago: executing program 7 (id=307):
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, r0, 0x0)

7.516214ms ago: executing program 6 (id=308):
mknod(&(0x7f0000000200)='./file1\x00', 0x2000, 0x909)
open$dir(&(0x7f0000000040)='./file1\x00', 0x40, 0x8)

5.751457ms ago: executing program 0 (id=309):
r0 = socket(0x18, 0x3, 0x0)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)

0s ago: executing program 5 (id=310):
r0 = socket(0x11, 0x3, 0x0)
sendto$unix(r0, &(0x7f0000000000)="b10005016000000416000000070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts.
panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/main/kernel/sys/net/rtable.c", line 132
Starting stack trace...
panic(ffffffff833548ee) at panic+0x1ba
__assert(ffffffff83390278,ffffffff8336ffdd,84,ffffffff833e58f3) at __assert+0x29
rtmap_grow(17,21) at rtmap_grow+0x1f2
rtable_add(16) at rtable_add+0x289
route_output(fffffd8069940a00,ffff800001407c08) at route_output+0x564
route_send(ffff800001407c08,fffffd8069940a00,0,0) at route_send+0xd7
sosend(ffff800001407c08,0,ffff80003651db68,0,0,de5f5dda) at sosend+0x804
sendit(ffff80002a7b4d10,3,ffff80003651dc60,de5f5dda,ffff80003651dd00) at sendit+0x5a5
sys_sendto(ffff80002a7b4d10,ffff80003651ddb0,ffff80003651dd00) at sys_sendto+0x8d
syscall(ffff80003651ddb0) at syscall+0x962
Xsyscall() at Xsyscall+0x128
end of kernel
end trace frame: 0x73259fd0590, count: 246
End of stack trace.