Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x0
fault code = supervisor read data, page not present
01:44:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x1, @multicast1}, 0x10)
ioctl$DIOCSETTIMEOUT(0xffffffffffffffff, 0xc008441d, &(0x7f0000000080))
r1 = socket$inet6_sctp(0x1c, 0xd4f8e30120fd1675, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRESSES(0xffffffffffffff9c, 0x84, 0x8004, &(0x7f0000000040)={<r2=>0x0, &(0x7f00000000c0)=[@in={0x2, 0xffffffffffffffff, @broadcast}, @in6={0x1c, 0xffffffffffffffff, 0x0, @empty}, @in6={0x1c, 0xffffffffffffffff, 0x0, @mcast1}, @in6={0x1c, 0xffffffffffffffff, 0x0, @loopback}]}, &(0x7f0000000140)=0x10)
setsockopt$inet6_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000180)={r2, 0x100, 0x47, 0x3, 0x50}, 0x14)
recvfrom$inet(r0, 0x0, 0xff0b, 0x80002, 0x0, 0x800e003e5)
shutdown(r0, 0x0)
instruction pointer = 0x20:0xffffffff818c05ad
stack pointer = 0x28:0xfffffe0020ed1290
frame pointer = 0x28:0xfffffe0020ed12f0
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 823 (syz-executor.0)
trap number = 12
panic: page fault
cpuid = 0
time = 1560908699
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0020ed0ef0
vpanic() at vpanic+0x1e0/frame 0xfffffe0020ed0f50
panic() at panic+0x43/frame 0xfffffe0020ed0fb0
trap_fatal() at trap_fatal+0x4de/frame 0xfffffe0020ed1030
trap_pfault() at trap_pfault+0x9f/frame 0xfffffe0020ed10a0
trap() at trap+0x44d/frame 0xfffffe0020ed11c0
calltrap() at calltrap+0x8/frame 0xfffffe0020ed11c0
--- trap 0xc, rip = 0xffffffff818c05ad, rsp = 0xfffffe0020ed1290, rbp = 0xfffffe0020ed12f0 ---
link_elf_search_symbol() at link_elf_search_symbol+0x7d/frame 0xfffffe0020ed12f0
linker_ddb_search_symbol() at linker_ddb_search_symbol+0xa7/frame 0xfffffe0020ed1350
stack_sbuf_print_ddb() at stack_sbuf_print_ddb+0x6a/frame 0xfffffe0020ed13b0
witness_debugger() at witness_debugger+0xa7/frame 0xfffffe0020ed14e0
witness_checkorder() at witness_checkorder+0xf72/frame 0xfffffe0020ed1590
_sx_xlock() at _sx_xlock+0xb3/frame 0xfffffe0020ed15e0
inp_setmoptions() at inp_setmoptions+0x17c9/frame 0xfffffe0020ed17c0
ip_ctloutput() at ip_ctloutput+0x7fd/frame 0xfffffe0020ed1810
rip_ctloutput() at rip_ctloutput+0x2c9/frame 0xfffffe0020ed1850
sosetopt() at sosetopt+0x101/frame 0xfffffe0020ed18d0
kern_setsockopt() at kern_setsockopt+0x158/frame 0xfffffe0020ed1950
sys_setsockopt() at sys_setsockopt+0x33/frame 0xfffffe0020ed1980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0020ed1ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0020ed1ab0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x4131fa, rsp = 0x7fffdfffdf38, rbp = 0x5 ---
KDB: enter: panic
[ thread pid 823 tid 100120 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why