------------[ cut here ]------------ WARNING: CPU: 0 PID: 14764 at lib/nlattr.c:119 nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118 Modules linked in: CPU: 0 PID: 14764 Comm: syz-executor.5 Not tainted 6.3.0-rc1-syzkaller-gfe15c26ee26e #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118 lr : nla_get_range_unsigned+0x2ec/0x3d4 lib/nlattr.c:118 sp : ffff8000214071d0 x29: ffff8000214071d0 x28: dfff800000000000 x27: 0000000000000002 x26: ffff800021407330 x25: 1ffff000028e60a8 x24: dfff800000000000 x23: ffff0000f8f715d0 x22: 00000000ffffffff x21: ffff800014730541 x20: ffff800014730540 x19: ffff800021407390 x18: 1fffe0002514a2b3 x17: 0000000000000000 x16: ffff8000085113d0 x15: 0000000000000000 x14: 0000000000000002 x13: 0000000000000010 x12: 0000000000040000 x11: 00000000000065f3 x10: ffff8000280ae000 x9 : ffff80000ada29cc x8 : 00000000000065f4 x7 : 0000000000000000 x6 : 0000000000000023 x5 : ffff0000d2bb1e88 x4 : 0000000000000000 x3 : 0000000000000010 x2 : 0000000000000000 x1 : 000000000000ffff x0 : 0000000000000000 Call trace: nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118 __netlink_policy_dump_write_attr+0x35c/0xd18 net/netlink/policy.c:310 netlink_policy_dump_write+0x148/0x53c net/netlink/policy.c:438 ctrl_dumppolicy+0x5b8/0x9bc net/netlink/genetlink.c:1602 genl_lock_dumpit+0x7c/0xa4 net/netlink/genetlink.c:858 netlink_dump+0x474/0xa84 net/netlink/af_netlink.c:2296 netlink_recvmsg+0x51c/0xde4 net/netlink/af_netlink.c:2023 sock_recvmsg_nosec net/socket.c:1015 [inline] sock_recvmsg net/socket.c:1036 [inline] __sys_recvfrom+0x2f8/0x48c net/socket.c:2197 __do_sys_recvfrom net/socket.c:2215 [inline] __se_sys_recvfrom net/socket.c:2211 [inline] __arm64_sys_recvfrom+0xd8/0xf8 net/socket.c:2211 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591 irq event stamp: 380 hardirqs last enabled at (379): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:84 [inline] hardirqs last enabled at (379): [] exit_to_kernel_mode+0xe8/0x118 arch/arm64/kernel/entry-common.c:94 hardirqs last disabled at (380): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405 softirqs last enabled at (272): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (270): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]---