------------[ cut here ]------------
WARNING: CPU: 0 PID: 6978 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2b8/0x378
Modules linked in:
CPU: 0 UID: 0 PID: 6978 Comm: syz.4.100 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nft_socket_init+0x2b8/0x378
lr : nft_socket_init+0x2b4/0x378 net/netfilter/nft_socket.c:220
sp : ffff8000a2166ff0
x29: ffff8000a2166ff0 x28: 1fffe00018ce5ef3 x27: ffff0000f7ce0000
x26: 1fffe0001ef9c004 x25: dfff800000000000 x24: 0000000000000100
x23: 00000000000000ff x22: 00000000ffffffa1 x21: ffff0000f7ce0020
x20: ffff0000c672f798 x19: ffff8000a2167140 x18: 1fffe000366f9a7e
x17: ffff80008fa0d000 x16: ffff80008069cc18 x15: 0000000000000001
x14: 1ffff00011f420ca x13: dfff800000000000 x12: 0000000099788c2e
x11: 00000000ab8cc9aa x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000c9cddac0 x7 : ffff800089db70a0 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002
x2 : 0000000000000008 x1 : 0000000000000100 x0 : 00000000000000ff
Call trace:
 nft_socket_init+0x2b8/0x378 (P)
 nf_tables_newexpr net/netfilter/nf_tables_api.c:3443 [inline]
 nf_tables_newrule+0x12b0/0x1d0c net/netfilter/nf_tables_api.c:4274
 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:524 [inline]
 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:647 [inline]
 nfnetlink_rcv+0xf58/0x20e8 net/netfilter/nfnetlink.c:665
 netlink_unicast_kernel net/netlink/af_netlink.c:1321 [inline]
 netlink_unicast+0x668/0x8a4 net/netlink/af_netlink.c:1347
 netlink_sendmsg+0x7a4/0xa8c net/netlink/af_netlink.c:1891
 sock_sendmsg_nosec net/socket.c:711 [inline]
 __sock_sendmsg net/socket.c:726 [inline]
 ____sys_sendmsg+0x56c/0x840 net/socket.c:2583
 ___sys_sendmsg net/socket.c:2637 [inline]
 __sys_sendmsg+0x238/0x304 net/socket.c:2669
 __do_sys_sendmsg net/socket.c:2674 [inline]
 __se_sys_sendmsg net/socket.c:2672 [inline]
 __arm64_sys_sendmsg+0x80/0x94 net/socket.c:2672
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x54/0x168 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x108 arch/arm64/kernel/entry-common.c:762
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:600
irq event stamp: 618
hardirqs last  enabled at (617): [<ffff8000803d0410>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1535 [inline]
hardirqs last  enabled at (617): [<ffff8000803d0410>] finish_lock_switch+0xbc/0x1e4 kernel/sched/core.c:5123
hardirqs last disabled at (618): [<ffff80008b6da5c4>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488
softirqs last  enabled at (596): [<ffff80008983d47c>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (590): [<ffff80008983d448>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---