Unable to handle kernel paging request at virtual address 007f800082802c20 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [007f800082802c20] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 3186 Comm: sshd Not tainted 6.9.0-syzkaller-12124-g6d69b6c12fce #0 Hardware name: linux,dummy-virt (DT) pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : inet_sendmsg+0x3c/0x70 net/ipv4/af_inet.c:853 lr : inet_sendmsg+0x28/0x70 net/ipv4/af_inet.c:850 sp : ffff80008927bc20 x29: ffff80008927bc20 x28: f4f0000005f436c0 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000000 x22: f1f000000318d380 x21: f5f0000007709280 x20: 00000000000000f4 x19: ffff80008927bcb0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: f670000005ff6980 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff80008927bd18 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : f5f0000007709280 x3 : ff7f800082802bb8 x2 : 00000000000000f4 x1 : ffff80008927bcb0 x0 : f5f0000007709280 Call trace: inet_sendmsg+0x3c/0x70 net/ipv4/af_inet.c:853 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x54/0x60 net/socket.c:745 sock_write_iter+0x98/0xf8 net/socket.c:1160 new_sync_write fs/read_write.c:497 [inline] vfs_write+0x300/0x368 fs/read_write.c:590 ksys_write+0xe8/0x104 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __arm64_sys_write+0x1c/0x28 fs/read_write.c:652 __invoke_syscall arch/arm64/kernel/syscall.c:34 [inline] invoke_syscall+0x48/0x118 arch/arm64/kernel/syscall.c:48 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:133 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:152 el0_svc+0x34/0xf8 arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 Code: f94016a3 aa1403e2 aa1303e1 aa1503e0 (f9403463) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: f94016a3 ldr x3, [x21, #40] 4: aa1403e2 mov x2, x20 8: aa1303e1 mov x1, x19 c: aa1503e0 mov x0, x21 * 10: f9403463 ldr x3, [x3, #104] <-- trapping instruction