Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff8159d501 stack pointer = 0x28:0xfffffe0056e03a80 frame pointer = 0x28:0xfffffe0056e03bc0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = resume, IOPL = 0 current process = 1437 (syz-executor) rdi: 0000000000000000 rsi: 0000000000000000 rdx: 0000000000000000 rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001 rax: fffffe0000000000 rbx: fffffe0054128498 rbp: fffffe0056e03bc0 r10: 17ba2bb63037941b r11: 0000000000000017 r12: 0000000000000000 r13: 0000004b1803250f r14: fffffe0054128490 r15: 0000000000000000 trap number = 12 panic: page fault cpuid = 0 time = 33 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056e032b0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056e03410 vpanic() at vpanic+0x257/frame 0xfffffe0056e035d0 panic() at panic+0xb5/frame 0xfffffe0056e03690 trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe0056e037d0 trap() at trap+0x78e/frame 0xfffffe0056e039b0 calltrap() at calltrap+0x8/frame 0xfffffe0056e039b0 --- trap 0xc, rip = 0xffffffff8159d501, rsp = 0xfffffe0056e03a80, rbp = 0xfffffe0056e03bc0 --- callout_process() at callout_process+0x441/frame 0xfffffe0056e03bc0 handleevents() at handleevents+0x3ee/frame 0xfffffe0056e03c30 timercb() at timercb+0x3cb/frame 0xfffffe0056e03cf0 lapic_handle_timer() at lapic_handle_timer+0x17f/f