Fatal trap 12: page fault while in kernel mode cpuid = 0; interface if_tuntap.1 already present in the KLD 'kernel'! apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present linker_load_file: /boot/kernel/if_tap.ko - unsupported file type instruction pointer = 0x20:0xffffffff818a8ffd stack pointer = 0x28:0xfffffe00212adfd0 interface if_tuntap.1 already present in the KLD 'kernel'! linker_load_file: /boot/kernel/if_tap.ko - unsupported file type frame pointer = 0x28:0xfffffe00212ae030 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 801 (syz-executor.3) trap number = 12 panic: page fault cpuid = 0 time = 1558328648 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe00212adc30 vpanic() at vpanic+0x1e0/frame 0xfffffe00212adc90 panic() at panic+0x43/frame 0xfffffe00212adcf0 trap_fatal() at trap_fatal+0x4c6/frame 0xfffffe00212add70 trap_pfault() at trap_pfault+0x9f/frame 0xfffffe00212adde0 trap() at trap+0x44d/frame 0xfffffe00212adf00 calltrap() at calltrap+0x8/frame 0xfffffe00212adf00 --- trap 0xc, rip = 0xffffffff818a8ffd, rsp = 0xfffffe00212adfd0, rbp = 0xfffffe00212ae030 --- link_elf_search_symbol() at link_elf_search_symbol+0x7d/frame 0xfffffe00212ae030 linker_ddb_search_symbol() at linker_ddb_search_symbol+0xa7/frame 0xfffffe00212ae090 stack_sbuf_print_ddb() at stack_sbuf_print_ddb+0x6a/frame 0xfffffe00212ae0f0 witness_debugger() at witness_debugger+0xa7/frame 0xfffffe00212ae220 witness_checkorder() at witness_checkorder+0xf72/frame 0xfffffe00212ae2d0 _sx_xlock() at _sx_xlock+0xb3/frame 0xfffffe00212ae320 ufsdirhash_add() at ufsdirhash_add+0x42/frame 0xfffffe00212ae3c0 ufs_direnter() at ufs_direnter+0x5ed/frame 0xfffffe00212ae490 ufs_makeinode() at ufs_makeinode+0xa7f/frame 0xfffffe00212ae630 ufs_create() at ufs_create+0x40/frame 0xfffffe00212ae670 VOP_CREATE_APV() at VOP_CREATE_APV+0xc2/frame 0xfffffe00212ae6a0 vn_open_cred() at vn_open_cred+0x409/frame 0xfffffe00212ae800 kern_openat() at kern_openat+0x2f7/frame 0xfffffe00212ae980 amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe00212aeab0 fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe00212aeab0 --- syscall (5, FreeBSD ELF64, sys_open), rip = 0x2000000b, rsp = 0x7fffdfffdeb8, rbp = 0xa --- KDB: enter: panic [ thread pid 801 tid 100118 ] Stopped at kdb_enter+0x6a: movq $0,kdb_why