general protection fault, probably for non-canonical address 0xff88812c10a6e0: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 5932 Comm: syz-executor Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 RIP: 0010:find_stack lib/stackdepot.c:209 [inline] RIP: 0010:__stack_depot_save+0x1c8/0x4c0 lib/stackdepot.c:305 Code: 41 29 f5 4c 8b 3d b0 dd 95 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c <44> 39 6b 08 75 f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c RSP: 0018:ffffc9000438e2c8 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00ff88812c10a6e0 RCX: 0000000000000001 RDX: 00000000001d20c0 RSI: 0000000000000010 RDI: ffffc9000438e380 RBP: ffffc9000438e320 R08: 00000000d10577b3 R09: 00000000f8f48637 R10: 0000000000000002 R11: 00000000037cdb78 R12: 0000000000000010 R13: 00000000f6270bff R14: 0000000000000bff R15: ffff88823ff00000 FS: 000055558e1e8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555741db888 CR3: 000000013d63a000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: stack_depot_save+0xe/0x10 lib/stackdepot.c:384 save_stack+0x171/0x230 mm/page_owner.c:159 __set_page_owner+0x3b/0x2a0 mm/page_owner.c:219 set_page_owner include/linux/page_owner.h:35 [inline] post_alloc_hook mm/page_alloc.c:2456 [inline] prep_new_page+0x179/0x180 mm/page_alloc.c:2462 get_page_from_freelist+0x223b/0x23d0 mm/page_alloc.c:4254 __alloc_pages_nodemask+0x290/0x620 mm/page_alloc.c:5370 alloc_slab_page mm/slub.c:-1 [inline] allocate_slab mm/slub.c:1813 [inline] new_slab+0x84/0x3f0 mm/slub.c:1874 new_slab_objects mm/slub.c:2632 [inline] ___slab_alloc+0x2a6/0x450 mm/slub.c:2796 __slab_alloc+0x63/0xa0 mm/slub.c:2836 slab_alloc_node mm/slub.c:2918 [inline] slab_alloc mm/slub.c:2960 [inline] __kmalloc_track_caller+0x1ec/0x320 mm/slub.c:4541 kmemdup+0x26/0x60 mm/util.c:131 __devinet_sysctl_register+0xb6/0x3a0 net/ipv4/devinet.c:2586 devinet_sysctl_register+0x169/0x1e0 net/ipv4/devinet.c:2638 inetdev_init+0x273/0x480 net/ipv4/devinet.c:277 inetdev_event+0x1f7/0x1040 net/ipv4/devinet.c:1544 notifier_call_chain kernel/notifier.c:83 [inline] raw_notifier_call_chain+0x90/0x100 kernel/notifier.c:410 call_netdevice_notifiers_info net/core/dev.c:2054 [inline] call_netdevice_notifiers_extack net/core/dev.c:2066 [inline] call_netdevice_notifiers+0x119/0x190 net/core/dev.c:2080 register_netdevice+0x1056/0x13e0 net/core/dev.c:10087 veth_newlink+0x853/0xb60 drivers/net/veth.c:1387 __rtnl_newlink net/core/rtnetlink.c:3482 [inline] rtnl_newlink+0x1310/0x18f0 net/core/rtnetlink.c:3530 rtnetlink_rcv_msg+0xa31/0xcc0 net/core/rtnetlink.c:5610 netlink_rcv_skb+0x1f5/0x440 net/netlink/af_netlink.c:2503 rtnetlink_rcv+0x1c/0x20 net/core/rtnetlink.c:5628 netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline] netlink_unicast+0x876/0xa40 net/netlink/af_netlink.c:1340 netlink_sendmsg+0x89c/0xb50 net/netlink/af_netlink.c:1914 sock_sendmsg_nosec net/socket.c:652 [inline] __sock_sendmsg net/socket.c:664 [inline] __sys_sendto+0x467/0x620 net/socket.c:2006 __do_sys_sendto net/socket.c:2018 [inline] __se_sys_sendto net/socket.c:2014 [inline] __x64_sys_sendto+0xe5/0x100 net/socket.c:2014 do_syscall_64+0x31/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x61/0xcb RIP: 0033:0x7f45f29e1117 Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff RSP: 002b:00007ffda2912c10 EFLAGS: 00000202 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 000055558e1e8500 RCX: 00007f45f29e1117 RDX: 000000000000006c RSI: 00007f45f37bf670 RDI: 0000000000000003 RBP: 0000000000000001 R08: 00007ffda2912c74 R09: 000000000000000c R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 R13: 0000000000000000 R14: 00007f45f37bf670 R15: 0000000000000000 Modules linked in: ---[ end trace 53ae22312807927c ]--- RIP: 0010:find_stack lib/stackdepot.c:209 [inline] RIP: 0010:__stack_depot_save+0x1c8/0x4c0 lib/stackdepot.c:305 Code: 41 29 f5 4c 8b 3d b0 dd 95 04 45 89 ee 41 81 e6 ff 0f 00 00 4b 8b 1c f7 48 85 db 74 59 44 89 e6 eb 08 48 8b 1b 48 85 db 74 4c <44> 39 6b 08 75 f2 44 39 63 0c 75 ec 45 31 c0 4e 8b 0c c7 4e 3b 4c RSP: 0018:ffffc9000438e2c8 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00ff88812c10a6e0 RCX: 0000000000000001 RDX: 00000000001d20c0 RSI: 0000000000000010 RDI: ffffc9000438e380 RBP: ffffc9000438e320 R08: 00000000d10577b3 R09: 00000000f8f48637 R10: 0000000000000002 R11: 00000000037cdb78 R12: 0000000000000010 R13: 00000000f6270bff R14: 0000000000000bff R15: ffff88823ff00000 FS: 000055558e1e8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee498c31b8 CR3: 000000013d63a000 CR4: 00000000003506a0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess): 0: 41 29 f5 sub %esi,%r13d 3: 4c 8b 3d b0 dd 95 04 mov 0x495ddb0(%rip),%r15 # 0x495ddba a: 45 89 ee mov %r13d,%r14d d: 41 81 e6 ff 0f 00 00 and $0xfff,%r14d 14: 4b 8b 1c f7 mov (%r15,%r14,8),%rbx 18: 48 85 db test %rbx,%rbx 1b: 74 59 je 0x76 1d: 44 89 e6 mov %r12d,%esi 20: eb 08 jmp 0x2a 22: 48 8b 1b mov (%rbx),%rbx 25: 48 85 db test %rbx,%rbx 28: 74 4c je 0x76 * 2a: 44 39 6b 08 cmp %r13d,0x8(%rbx) <-- trapping instruction 2e: 75 f2 jne 0x22 30: 44 39 63 0c cmp %r12d,0xc(%rbx) 34: 75 ec jne 0x22 36: 45 31 c0 xor %r8d,%r8d 39: 4e 8b 0c c7 mov (%rdi,%r8,8),%r9 3d: 4e rex.WRX 3e: 3b .byte 0x3b 3f: 4c rex.WR