Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0xe0
fault code		= supervisor read data, page not present
instruction pointer	= 0x20:0xffffffff8137c510
stack pointer	        = 0x28:0xfffffe00255e5540
frame pointer	        = 0x28:0xfffffe00255e55a0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 2950 (syz-executor.0)
trap number		= 12
panic: page fault
cpuid = 0
time = 1605258431
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00255e51a0
vpanic() at vpanic+0x1c7/frame 0xfffffe00255e5200
panic() at panic+0x43/frame 0xfffffe00255e5260
trap_fatal() at trap_fatal+0x4cd/frame 0xfffffe00255e52e0
trap_pfault() at trap_pfault+0xd4/frame 0xfffffe00255e5350
trap() at trap+0x41d/frame 0xfffffe00255e5470
calltrap() at calltrap+0x8/frame 0xfffffe00255e5470
--- trap 0xc, rip = 0xffffffff8137c510, rsp = 0xfffffe00255e5540, rbp = 0xfffffe00255e55a0 ---
in6_unlink_ifa() at in6_unlink_ifa+0x120/frame 0xfffffe00255e55a0
in6_purgeaddr() at in6_purgeaddr+0x5d6/frame 0xfffffe00255e56b0
if_purgeaddrs() at if_purgeaddrs+0x1b4/frame 0xfffffe00255e5770
tundtor() at tundtor+0x3ef/frame 0xfffffe00255e57d0
devfs_destroy_cdevpriv() at devfs_destroy_cdevpriv+0xc4/frame 0xfffffe00255e5800
devfs_close_f() at devfs_close_f+0x7a/frame 0xfffffe00255e5830
_fdrop() at _fdrop+0x3a/frame 0xfffffe00255e5860
closef() at closef+0x2a1/frame 0xfffffe00255e58f0
fdescfree_fds() at fdescfree_fds+0x125/frame 0xfffffe00255e5950
fdescfree() at fdescfree+0x601/frame 0xfffffe00255e5a30
exit1() at exit1+0x6c5/frame 0xfffffe00255e5aa0
sys_sys_exit() at sys_sys_exit+0xd/frame 0xfffffe00255e5ab0
amd64_syscall() at amd64_syscall+0x244/frame 0xfffffe00255e5bf0
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00255e5bf0
--- syscall (1, FreeBSD ELF64, sys_sys_exit), rip = 0x2e523a, rsp = 0x7fffffffdf18, rbp = 0x7fffffffdf20 ---
KDB: enter: panic
[ thread pid 2950 tid 100136 ]
Stopped at      kdb_enter+0x67: movq    $0,0x147b2c6(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db>