Fatal trap 12: page fault while in kernel mode cpuid = 1; apic id = 01 kernel trap 12 with interrupts disabled fault virtual address = 0x0 Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff8106b37d fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff8106b37d stack pointer = 0x0:0xfffffe0016aed680 stack pointer = 0x0:0xfffffe001f730150 frame pointer = 0x0:0xfffffe001f7301d0 code segment = base 0x0, limit 0xfffff, type 0x1b frame pointer = 0x0:0xfffffe0016aed700 = DPL 0, pres 1, long 1, def32 0, gran 1 code segment = base 0x0, limit 0xfffff, type 0x1b processor eflags = resume, IOPL = 0 current process = 9465 (syz-executor.2) trap number = 12 panic: page fault cpuid = 0 time = 1560154946 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x47/frame 0xfffffe001f72fdb0 vpanic() at vpanic+0x1e0/frame 0xfffffe001f72fe10 panic() at panic+0x43/frame 0xfffffe001f72fe70 trap_fatal() at trap_fatal+0x4de/frame 0xfffffe001f72fef0 trap_pfault() at trap_pfault+0x9f/frame 0xfffffe001f72ff60 trap() at trap+0x44d/frame 0xfffffe001f730080 calltrap() at calltrap+0x8/frame 0xfffffe001f730080 --- trap 0xc, rip = 0xffffffff8106b37d, rsp = 0xfffffe001f730150, rbp = 0xfffffe001f7301d0 --- callout_process() at callout_process+0x22d/frame 0xfffffe001f7301d0 handleevents() at handleevents+0x314/frame 0xfffffe001f730230 timercb() at timercb+0x3a4/frame 0xfffffe001f730280 lapic_handle_timer() at lapic_handle_timer+0xdf/frame 0xfffffe001f7302c0 Xtimerint() at Xtimerint+0xae/frame 0xfffffe001f7302c0 --- interrupt, rip = 0xffffffff80ff6228, rsp = 0xfffffe001f730390, rbp = 0xfffffe001f7303a0 --- trace_cmp() at trace_cmp+0x8/frame 0xfffffe001f7303a0 pmap_enter() at pmap_enter+0x2ae/frame 0xfffffe001f730480 vm_fault_hold() at vm_fault_hold+0x23ac/frame 0xfffffe001f7305f0 vm_fault() at vm_fault+0xad/frame 0xfffffe001f730630 trap_pfault() at trap_pfault+0x399/frame 0xfffffe001f7306a0 trap() at trap+0x44d/frame 0xfffffe001f7307c0 calltrap() at calltrap+0x8/frame 0xfffffe001f7307c0 --- trap 0xc, rip = 0xffffffff816df006, rsp = 0xfffffe001f730890, rbp = 0xfffffe001f730890 --- copyin_nosmap_erms() at copyin_nosmap_erms+0x156/frame 0xfffffe001f730890 freebsd32_sendmsg() at freebsd32_sendmsg+0x4ca/frame 0xfffffe001f730970 ia32_syscall() at ia32_syscall+0x452/frame 0xfffffe001f730ab0 int0x80_syscall_common() at int0x80_syscall_common+0x9c/frame 0x8142edf KDB: enter: panic [ thread pid 9465 tid 100673 ] Stopped at kdb_enter+0x6a: movq $0,kdb_why