netlink: 'syz.9.438': attribute type 7 has an invalid length.
------------[ cut here ]------------
WARNING: mm/vma.h:277 at assert_sane_pgoff mm/vma.h:277 [inline], CPU#0: syz.9.438/7814
WARNING: mm/vma.h:277 at vma_set_pgoff mm/vma.h:283 [inline], CPU#0: syz.9.438/7814
WARNING: mm/vma.h:277 at vma_add_pgoff+0x50c/0x700 mm/vma.h:314, CPU#0: syz.9.438/7814
Modules linked in:
CPU: 0 UID: 0 PID: 7814 Comm: syz.9.438 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : assert_sane_pgoff mm/vma.h:277 [inline]
pc : vma_set_pgoff mm/vma.h:283 [inline]
pc : vma_add_pgoff+0x50c/0x700 mm/vma.h:314
lr : assert_sane_pgoff mm/vma.h:277 [inline]
lr : vma_set_pgoff mm/vma.h:283 [inline]
lr : vma_add_pgoff+0x50c/0x700 mm/vma.h:314
sp : ffff800093e975c0
x29: ffff800093e975e0 x28: 1fffe0001c69ff4a x27: 0000000000000001
x26: ffff800093e97c40 x25: dfff800000000000 x24: 1fffe0001c69ff50
x23: ffff0000e34ffa80 x22: 0000000000020002 x21: ffff0000e34ffa48
x20: ffff0000e34ffa00 x19: 0000000020006000 x18: 0000000000000000
x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000002bf
x8 : ffff800097e0c000 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080ae89e0
x2 : 0000000000020006 x1 : ffff0000d7c48000 x0 : 0000000000000001
Call trace:
 assert_sane_pgoff mm/vma.h:277 [inline] (P)
 vma_set_pgoff mm/vma.h:283 [inline] (P)
 vma_add_pgoff+0x50c/0x700 mm/vma.h:314 (P)
 __split_vma+0x248/0x83c mm/vma.c:568
 split_vma mm/vma.c:643 [inline]
 vma_modify+0x1290/0x18f0 mm/vma.c:1779
 vma_modify_flags+0x228/0x33c mm/vma.c:1799
 mprotect_fixup+0x2b0/0x728 mm/mprotect.c:824
 do_mprotect_pkey+0x7f8/0xa84 mm/mprotect.c:1002
 __do_sys_mprotect mm/mprotect.c:1023 [inline]
 __se_sys_mprotect mm/mprotect.c:1020 [inline]
 __arm64_sys_mprotect+0x88/0xa0 mm/mprotect.c:1020
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x244 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0xec/0x23c arch/arm64/kernel/syscall.c:121
 do_el0_svc+0x4c/0x5c arch/arm64/kernel/syscall.c:140
 el0_svc+0x64/0x260 arch/arm64/kernel/entry-common.c:758
 el0t_64_sync_handler+0x44/0x104 arch/arm64/kernel/entry-common.c:777
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:590
irq event stamp: 1836
hardirqs last  enabled at (1835): [<ffff8000869844d4>] local_daif_restore arch/arm64/include/asm/daifflags.h:75 [inline]
hardirqs last  enabled at (1835): [<ffff8000869844d4>] el0_svc+0x54/0x260 arch/arm64/kernel/entry-common.c:757
hardirqs last disabled at (1836): [<ffff8000869841d4>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:445
softirqs last  enabled at (1830): [<ffff80008013b050>] local_bh_enable include/linux/bottom_half.h:33 [inline]
softirqs last  enabled at (1830): [<ffff80008013b050>] put_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:251 [inline]
softirqs last  enabled at (1830): [<ffff80008013b050>] fpsimd_restore_current_state+0x39c/0x9c8 arch/arm64/kernel/fpsimd.c:1797
softirqs last disabled at (1828): [<ffff80008013acf8>] local_bh_disable include/linux/bottom_half.h:20 [inline]
softirqs last disabled at (1828): [<ffff80008013acf8>] get_cpu_fpsimd_context arch/arm64/kernel/fpsimd.c:234 [inline]
softirqs last disabled at (1828): [<ffff80008013acf8>] fpsimd_restore_current_state+0x44/0x9c8 arch/arm64/kernel/fpsimd.c:1790
---[ end trace 0000000000000000 ]---