Referring to the kernel source: "Kernel pointers have redundant information, so we can use a scheme in which we can return either an error code or a pointer [...] with the same return value."
-1..- 4095 ( 0xfffff000-0xffffffff 32- ) errno . 4KB 0xffffe000-0xffffefff vssoall vdso magic, vdso , , [stack] /proc/*/maps 0xffffdfff , [vdso] 0xffffe000 .