------------[ cut here ]------------
WARNING: CPU: 1 PID: 6897 at lib/nlattr.c:119 nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118
Modules linked in:
CPU: 1 PID: 6897 Comm: syz-executor.4 Not tainted 6.3.0-rc1-syzkaller-gfe15c26ee26e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118
lr : nla_get_range_unsigned+0x2ec/0x3d4 lib/nlattr.c:118
sp : ffff80001fa46dd0
x29: ffff80001fa46dd0 x28: dfff800000000000 x27: 0000000000000002
x26: ffff80001fa46f30 x25: 1ffff000028e60a8 x24: dfff800000000000
x23: ffff0000d6f9dad0 x22: 00000000ffffffff x21: ffff800014730541
x20: ffff800014730540 x19: ffff80001fa46f90 x18: 1fffe0001b4760b3
x17: 0000000000000000 x16: ffff8000085113d0 x15: 0000000000000000
x14: 0000000000000000 x13: 0000000000000010 x12: 0000000000000002
x11: ff8080000ada29cc x10: 0000000000000000 x9 : ffff80000ada29cc
x8 : ffff0001354c9b40 x7 : 0000000000000000 x6 : 0000000000000023
x5 : ffff0000c2e05bf8 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000000 x1 : 000000000000ffff x0 : 0000000000000000
Call trace:
 nla_get_range_unsigned+0xc0/0x3d4 lib/nlattr.c:118
 __netlink_policy_dump_write_attr+0x35c/0xd18 net/netlink/policy.c:310
 netlink_policy_dump_write+0x148/0x53c net/netlink/policy.c:438
 ctrl_dumppolicy+0x5b8/0x9bc net/netlink/genetlink.c:1602
 genl_lock_dumpit+0x7c/0xa4 net/netlink/genetlink.c:858
 netlink_dump+0x474/0xa84 net/netlink/af_netlink.c:2296
 netlink_recvmsg+0x51c/0xde4 net/netlink/af_netlink.c:2023
 sock_recvmsg_nosec net/socket.c:1015 [inline]
 sock_recvmsg net/socket.c:1036 [inline]
 ____sys_recvmsg+0x230/0x6e8 net/socket.c:2723
 ___sys_recvmsg net/socket.c:2765 [inline]
 do_recvmmsg+0x41c/0xb60 net/socket.c:2859
 __sys_recvmmsg net/socket.c:2938 [inline]
 __do_sys_recvmmsg net/socket.c:2961 [inline]
 __se_sys_recvmmsg net/socket.c:2954 [inline]
 __arm64_sys_recvmmsg+0x180/0x23c net/socket.c:2954
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x198 arch/arm64/kernel/syscall.c:193
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:591
irq event stamp: 134
hardirqs last  enabled at (133): [<ffff800012543b48>] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline]
hardirqs last  enabled at (133): [<ffff800012543b48>] _raw_spin_unlock_irqrestore+0x44/0xa4 kernel/locking/spinlock.c:194
hardirqs last disabled at (134): [<ffff80001245e098>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:405
softirqs last  enabled at (98): [<ffff800008034240>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (96): [<ffff80000803420c>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---