------------[ cut here ]------------
WARNING: CPU: 0 PID: 5658 at lib/nlattr.c:123 nla_get_range_unsigned+0x69/0x200 lib/nlattr.c:122
Modules linked in:
CPU: 0 UID: 0 PID: 5658 Comm: syz.1.16 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(undef) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
RIP: 0010:nla_get_range_unsigned+0x69/0x200 lib/nlattr.c:122
Code: ff 66 85 ed 78 1e 41 0f b7 6e 0a 31 ff 89 ee e8 ed 61 15 ff 66 85 ed 0f 88 8d 01 00 00 e8 3f 5e 15 ff eb 09 e8 38 5e 15 ff 90 <0f> 0b 90 48 c7 03 00 00 00 00 45 0f b6 3e 4c 89 ff 48 c7 c6 b0 23
RSP: 0018:ffffc90001a6baa0 EFLAGS: 00010293
RAX: ffffffff824ce9c8 RBX: ffffc90001a6bad8 RCX: ffff888171670000
RDX: 0000000000000000 RSI: 000000000000dd00 RDI: 0000000000000000
RBP: 000000000000dd00 R08: ffff888171670000 R09: 0000000000000004
R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000002
R13: ffff8881717c4000 R14: ffffffff84d59050 R15: ffffffff84d59050
FS:  00007fe083d876c0(0000) GS:ffff8882afd52000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fe082f74420 CR3: 00000001729c0000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __netlink_policy_dump_write_attr+0x363/0x850 net/netlink/policy.c:316
 netlink_policy_dump_write+0x93/0x200 net/netlink/policy.c:447
 ctrl_dumppolicy+0x199/0x410 net/netlink/genetlink.c:1743
 genl_dumpit+0x64/0xb0 net/netlink/genetlink.c:1027
 netlink_dump+0x234/0x550 net/netlink/af_netlink.c:2309
 netlink_recvmsg+0x31a/0x610 net/netlink/af_netlink.c:1965
 sock_recvmsg_nosec net/socket.c:1017 [inline]
 sock_recvmsg+0xc4/0xf0 net/socket.c:1039
 __sys_recvfrom+0x1ea/0x2c0 net/socket.c:2230
 __do_sys_recvfrom net/socket.c:2245 [inline]
 __se_sys_recvfrom net/socket.c:2241 [inline]
 __x64_sys_recvfrom+0x28/0x40 net/socket.c:2241
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xe2/0x210 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe082f90734
Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04
RSP: 002b:00007fe083d85f30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 00007fe082f90734
RDX: 0000000000001000 RSI: 00007fe083d86010 RDI: 0000000000000003
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
R13: 00007fe083d85fc0 R14: 000000000000000d R15: 0000000000000000
 </TASK>