general protection fault, probably for non-canonical address 0xff888116ebcad0ef: 0000 [#1] PREEMPT SMP CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted 5.11.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Workqueue: netns cleanup_net RIP: 0010:rtnl_prop_list_size net/core/rtnetlink.c:1000 [inline] RIP: 0010:if_nlmsg_size+0x20a/0x3f0 net/core/rtnetlink.c:1062 Code: 8b 51 10 48 8d 41 10 48 83 e6 f4 48 83 c6 14 48 39 c2 0f 84 e2 01 00 00 48 8b 41 10 48 8d 50 f0 b8 04 00 00 00 48 39 ca 74 13 <48> 8b 52 10 48 05 84 00 00 00 48 83 ea 10 48 39 ca 75 ed 48 8d 65 RSP: 0018:ffffc90000057c28 EFLAGS: 00010287 RAX: 0000000000000004 RBX: ffffffff84829180 RCX: ffff888116ebcabf RDX: ff888116ebcad0ef RSI: 0000000000000008 RDI: 0000000000000282 RBP: ffffc90000057c58 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000800 R13: 00000000000000c0 R14: 0000000000000344 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffb3b3fc70 CR3: 0000000107396000 CR4: 0000000000350ee0 Call Trace: rtmsg_ifinfo_build_skb+0x37/0xe0 net/core/rtnetlink.c:3794 rtmsg_ifinfo_event.part.40+0x12/0x40 net/core/rtnetlink.c:3830 rtmsg_ifinfo_event net/core/rtnetlink.c:3841 [inline] rtmsg_ifinfo+0x19/0x20 net/core/rtnetlink.c:3839 dev_close_many+0xd1/0x140 net/core/dev.c:1640 rollback_registered_many+0x118/0x5f0 net/core/dev.c:9472 unregister_netdevice_many+0x12/0x70 net/core/dev.c:10730 ip_tunnel_delete_nets+0x19f/0x260 net/ipv4/ip_tunnel.c:1115 cleanup_net+0x273/0x400 net/core/net_namespace.c:604 process_one_work+0x293/0x600 kernel/workqueue.c:2275 worker_thread+0x38/0x380 kernel/workqueue.c:2421 kthread+0x145/0x170 kernel/kthread.c:292 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:296 Modules linked in: ---[ end trace 2ad7f3f6c01f7357 ]--- RIP: 0010:rtnl_prop_list_size net/core/rtnetlink.c:1000 [inline] RIP: 0010:if_nlmsg_size+0x20a/0x3f0 net/core/rtnetlink.c:1062 Code: 8b 51 10 48 8d 41 10 48 83 e6 f4 48 83 c6 14 48 39 c2 0f 84 e2 01 00 00 48 8b 41 10 48 8d 50 f0 b8 04 00 00 00 48 39 ca 74 13 <48> 8b 52 10 48 05 84 00 00 00 48 83 ea 10 48 39 ca 75 ed 48 8d 65 RSP: 0018:ffffc90000057c28 EFLAGS: 00010287 RAX: 0000000000000004 RBX: ffffffff84829180 RCX: ffff888116ebcabf RDX: ff888116ebcad0ef RSI: 0000000000000008 RDI: 0000000000000282 RBP: ffffc90000057c58 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000800 R13: 00000000000000c0 R14: 0000000000000344 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fffb3b3fc70 CR3: 0000000107396000 CR4: 0000000000350ee0