Fatal trap 12: page fault while in kernel mode
cpuid = 1; apic id = 01
fault virtual address = 0x5c
fault code = supervisor read data, page not present
instruction pointer = 0x20:0xffffffff81539331
stack pointer = 0x28:0xfffffe0029b7b020
frame pointer = 0x28:0xfffffe0029b7b060
code segment = base 0x0, limit 0xfffff, type 0x1b
= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags = interrupt enabled, resume, IOPL = 0
current process = 9828 (syz-executor.1)
trap number = 12
panic: page fault
cpuid = 1
time = 4197545
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0029b7ac80
vpanic() at vpanic+0x1e0/frame 0xfffffe0029b7ace0
panic() at panic+0x43/frame 0xfffffe0029b7ad40
trap_fatal() at trap_fatal+0x4c6/frame 0xfffffe0029b7adc0
trap_pfault() at trap_pfault+0x9f/frame 0xfffffe0029b7ae30
trap() at trap+0x44d/frame 0xfffffe0029b7af50
calltrap() at calltrap+0x8/frame 0xfffffe0029b7af50
--- trap 0xc, rip = 0xffffffff81539331, rsp = 0xfffffe0029b7b020, rbp = 0xfffffe0029b7b060 ---
uma_dbg_free() at uma_dbg_free+0x171/frame 0xfffffe0029b7b060
uma_zfree_arg() at uma_zfree_arg+0x1aa/frame 0xfffffe0029b7b0f0
m_freem() at m_freem+0x13f/frame 0xfffffe0029b7b120
ip_output() at ip_output+0x1f21/frame 0xfffffe0029b7b290
sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0xfbe/frame 0xfffffe0029b7b3e0
sctp_send_abort_tcb() at sctp_send_abort_tcb+0x360/frame 0xfffffe0029b7b4c0
sctp_abort_an_association() at sctp_abort_an_association+0x38/frame 0xfffffe0029b7b500
sctp_lower_sosend() at sctp_lower_sosend+0x2b12/frame 0xfffffe0029b7b6d0
sctp_sosend() at sctp_sosend+0x510/frame 0xfffffe0029b7b800
sosend() at sosend+0xc6/frame 0xfffffe0029b7b870
soo_write() at soo_write+0x61/frame 0xfffffe0029b7b8b0
dofilewrite() at dofilewrite+0xfd/frame 0xfffffe0029b7b910
kern_writev() at kern_writev+0x66/frame 0xfffffe0029b7b950
sys_writev() at sys_writev+0x50/frame 0xfffffe0029b7b980
amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0029b7bab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0029b7bab0
--- syscall (198, FreeBSD ELF64, nosys), rip = 0x41309a, rsp = 0x7fffdffdcf38, rbp = 0x3 ---
KDB: enter: panic
[ thread pid 9828 tid 101771 ]
Stopped at kdb_enter+0x6a: movq $0,kdb_why