Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 fault virtual address = 0x5c fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81539331 stack pointer = 0x28:0xfffffe0029b7b020 frame pointer = 0x28:0xfffffe0029b7b060 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 9828 (syz-executor.1) trap number = 12 panic: page fault cpuid = 1 time = 4197545 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe0029b7ac80 vpanic() at vpanic+0x1e0/frame 0xfffffe0029b7ace0 panic() at panic+0x43/frame 0xfffffe0029b7ad40 trap_fatal() at trap_fatal+0x4c6/frame 0xfffffe0029b7adc0 trap_pfault() at trap_pfault+0x9f/frame 0xfffffe0029b7ae30 trap() at trap+0x44d/frame 0xfffffe0029b7af50 calltrap() at calltrap+0x8/frame 0xfffffe0029b7af50 --- trap 0xc, rip = 0xffffffff81539331, rsp = 0xfffffe0029b7b020, rbp = 0xfffffe0029b7b060 --- uma_dbg_free() at uma_dbg_free+0x171/frame 0xfffffe0029b7b060 uma_zfree_arg() at uma_zfree_arg+0x1aa/frame 0xfffffe0029b7b0f0 m_freem() at m_freem+0x13f/frame 0xfffffe0029b7b120 ip_output() at ip_output+0x1f21/frame 0xfffffe0029b7b290 sctp_lowlevel_chunk_output() at sctp_lowlevel_chunk_output+0xfbe/frame 0xfffffe0029b7b3e0 sctp_send_abort_tcb() at sctp_send_abort_tcb+0x360/frame 0xfffffe0029b7b4c0 sctp_abort_an_association() at sctp_abort_an_association+0x38/frame 0xfffffe0029b7b500 sctp_lower_sosend() at sctp_lower_sosend+0x2b12/frame 0xfffffe0029b7b6d0 sctp_sosend() at sctp_sosend+0x510/frame 0xfffffe0029b7b800 sosend() at sosend+0xc6/frame 0xfffffe0029b7b870 soo_write() at soo_write+0x61/frame 0xfffffe0029b7b8b0 dofilewrite() at dofilewrite+0xfd/frame 0xfffffe0029b7b910 kern_writev() at kern_writev+0x66/frame 0xfffffe0029b7b950 sys_writev() at sys_writev+0x50/frame 0xfffffe0029b7b980 amd64_syscall() at amd64_syscall+0x436/frame 0xfffffe0029b7bab0 fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0029b7bab0 --- syscall (198, FreeBSD ELF64, nosys), rip = 0x41309a, rsp = 0x7fffdffdcf38, rbp = 0x3 --- KDB: enter: panic [ thread pid 9828 tid 101771 ] Stopped at kdb_enter+0x6a: movq $0,kdb_why