Fatal trap 12: page fault while in kernel mode
cpuid = 0; apic id = 00
fault virtual address	= 0xffffffffffffffff
fault code		= supervisor write data, page not present
instruction pointer	= 0x20:0xffffffff8193ee61
stack pointer	        = 0x28:0xfffffe0057a983b0
frame pointer	        = 0x28:0xfffffe0057a983f0
code segment		= base 0x0, limit 0xfffff, type 0x1b
			= DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags	= interrupt enabled, resume, IOPL = 0
current process		= 1482 (syz-executor)
rdi: fffffe0077da8000 rsi: 0000000000000dc4 rdx: 0000000000000dc3
rcx: 0000000000000000  r8: 0000000000000000  r9: 0000000000000001
rax: ffffffffffffffff rbx: fffffe006eb117e0 rbp: fffffe0057a983f0
r10: 0000000000000000 r11: 0000000000000085 r12: fffffe0077da8000
r13: fffffe0077da8008 r14: fffffe0077da8044 r15: ffffffffffffffff
trap number		= 12
panic: page fault
cpuid = 0
time = 1
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0057a97bd0
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0057a97d30
vpanic() at vpanic+0x257/frame 0xfffffe0057a97ef0
panic() at panic+0xb5/frame 0xfffffe0057a97fb0
trap_pfault() at trap_pfault+0xab4/frame 0xfffffe0057a980f0
trap() at trap+0x753/frame 0xfffffe0057a982e0
calltrap() at calltrap+0x8/frame 0xfffffe0057a982e0
--- trap 0xc, rip = 0xffffffff8193ee61, rsp = 0xfffffe0057a983b0, rbp = 0xfffffe0057a983f0 ---
in_pcbremhash_locked() at in_pcbremhash_locked+0x2c1/frame 0xfffffe0057a983f0
in_pcbdrop() at in_pcbdrop+0x98/frame 0xfffffe0057a98410
tcp_close() at tcp_close+0x177/frame 0xfffffe0057a984e0
tcp_disconnect() at tcp_disconnect+0x1ef/frame 0xfffffe0057a98510
tcp_usr_close() at tcp_usr_close+0x189/frame 0xfffffe0057a985f0
soclose() at soclose+0x3d0/frame 0xfffffe0057a986e0
_fdrop() at _fdrop+0x58/frame 0xfffffe0057a98710
closef() at closef+0x655/frame 0xfffffe0057a988f0
fdescfree() at fdescfree+0xa5e/frame 0xfffffe0057a98ad0
fork1() at fork1+0x833/frame 0xfffffe0057a98bf0
sys_rfork() at sys_rfork+0x1b7/frame 0xfffffe0057a98d10
amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe0057a98f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0057a98f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x825223f08, rbp = 0x825223f80 ---
KDB: enter: panic
[ thread pid 1482 tid 100984 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x23eab87(%rip)
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0073400000
rdx                    0x7ffff
rbx         0xffffffff8274a640