Fatal trap 12: page fault while in kernel mode cpuid = 0; apic id = 00 fault virtual address = 0x0 fault code = supervisor read data, page not present instruction pointer = 0x20:0xffffffff81a74900 stack pointer = 0x28:0xfffffe00572a3360 frame pointer = 0x28:0xfffffe00572a33d0 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres 1, long 1, def32 0, gran 1 processor eflags = interrupt enabled, resume, IOPL = 0 current process = 1614 (syz-executor) rdi: 0000000000000000 rsi: 0000000000000000 rdx: 0000000000000000 rcx: fffffe0002bf1850 r8: 0000000000000000 r9: 0000000000000001 rax: fffffe0000000000 rbx: 0000000000000000 rbp: fffffe00572a33d0 r10: 0000000000000000 r11: 0000000000000033 r12: fffffe006decb980 r13: fffffe0077b7c800 r14: fffffe006decb9a4 r15: fffffe0077b7c9d0 trap number = 12 panic: page fault cpuid = 0 time = 1753864754 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00572a2b90 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00572a2cf0 vpanic() at vpanic+0x257/frame 0xfffffe00572a2eb0 panic() at panic+0xb5/frame 0xfffffe00572a2f70 trap_pfault() at trap_pfault+0xaf2/frame 0xfffffe00572a30b0 trap() at trap+0x78e/frame 0xfffffe00572a3290 calltrap() at calltrap+0x8/frame 0xfffffe00572a3290 --- trap 0xc, rip = 0xffffffff81a74900, rsp = 0xfffffe00572a3360, rbp = 0xfffffe00572a33d0 --- in6m_disconnect_locked() at in6m_disconnect_locked+0x140/frame 0xfffffe00572a33d0 in6_leavegroup_locked() at in6_leavegroup_locked+0x1ef/frame 0xfffffe00572a3500 ip6_freemoptions() at ip6_freemoptions+0x282/frame 0xfffffe00572a3560 in_pcbfree() at in_pcbfree+0x682/frame 0xfffffe00572a35b0 sorele_locked() at sorele_locked+0x264/frame 0xfffffe00572a35f0 soclose() at soclose+0x41f/frame 0xfffffe00572a36e0 _fdrop() at _fdrop+0x5c/frame 0xfffffe00572a3710 closef() at closef+0x655/frame 0xfffffe00572a38f0 fdescfree() at fdescfree+0xa5e/frame 0xfffffe00572a3ad0 fork1() at fork1+0x833/frame 0xfffffe00572a3bf0 sys_rfork() at sys_rfork+0x1b7/frame 0xfffffe00572a3d10 amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe00572a3f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00572a3f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a1afa, rsp = 0x8244a3f08, rbp = 0x8244a3f80 --- KDB: enter: panic [ thread pid 1614 tid 101256 ] Stopped at kdb_enter+0x6e: movq $0,0x25c44a7(%rip) db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe006e600000 rdx 0x7ffff rbx 0xffffffff827cb4e0 .str.27 rsp 0xfffffe00572a2cd0 rbp 0xfffffe00572a2cf0 rsi 0x80001 rdi 0xffffffff81614bb9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x17 r12 0xfffffe00541cc780 r13 0xfffffffffffffffe r14 0xffffffff827cb4e0 .str.27 r15 0 rip 0xffffffff815fe6ee kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x25c44a7(%rip) db>