syzbot

panic: pmap_san_enter_alloc_4k: no memory to grow shadow map
cpuid = 0
time = 1754977762
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe0056da8010
kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0056da8170
vpanic() at vpanic+0x257/frame 0xfffffe0056da8330
panic() at panic+0xb5/frame 0xfffffe0056da83f0
pmap_san_enter_alloc_4k() at pmap_san_enter_alloc_4k+0x4b/frame 0xfffffe0056da8410
pmap_san_enter() at pmap_san_enter+0x353/frame 0xfffffe0056da8450
kasan_shadow_map() at kasan_shadow_map+0x78/frame 0xfffffe0056da8470
pmap_growkernel() at pmap_growkernel+0xd1/frame 0xfffffe0056da84d0
vm_map_insert1() at vm_map_insert1+0x672/frame 0xfffffe0056da8610
vm_map_find_locked() at vm_map_find_locked+0xa12/frame 0xfffffe0056da8780
vm_map_find() at vm_map_find+0xc7/frame 0xfffffe0056da87f0
kva_import() at kva_import+0xd4/frame 0xfffffe0056da88d0
vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe0056da89c0
vmem_xalloc() at vmem_xalloc+0x538/frame 0xfffffe0056da8a60
kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe0056da8ab0
vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe0056da8b90
vmem_xalloc() at vmem_xalloc+0x538/frame 0xfffffe0056da8c30
vmem_alloc() at vmem_alloc+0xfe/frame 0xfffffe0056da8c90
kmem_malloc_domainset() at kmem_malloc_domainset+0x17e/frame 0xfffffe0056da8dd0
malloc_large() at malloc_large+0x3e/frame 0xfffffe0056da8e10
ip6_ctloutput() at ip6_ctloutput+0xb56/frame 0xfffffe0056da9890
udp_ctloutput() at udp_ctloutput+0x21b/frame 0xfffffe0056da9970
sogetopt() at sogetopt+0x1fa/frame 0xfffffe0056da9af0
kern_getsockopt() at kern_getsockopt+0x2a9/frame 0xfffffe0056da9c50
sys_getsockopt() at sys_getsockopt+0x121/frame 0xfffffe0056da9d10
amd64_syscall() at amd64_syscall+0x4e2/frame 0xfffffe0056da9f30
fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0056da9f30
--- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a1bba, rsp = 0x821d76f08, rbp = 0x821d76f80 ---
KDB: enter: panic
[ thread pid 937 tid 100165 ]
Stopped at      kdb_enter+0x6e: movq    $0,0x25c3f57(%rip)
db> 
db> set $lines = 0
db> set $maxwidth = 0
db> show registers
cs                        0x20
ds                        0x3b
es                        0x3b
fs                        0x13
gs                        0x1b
ss                        0x28
rax                       0x12
rcx         0xfffffe0002bf1850
rdx         0xdffff7c000000000
rbx         0xffffffff827cd960  .str.27
rsp         0xfffffe0056da8150
rbp         0xfffffe0056da8170
rsi                          0
rdi         0xffffffff830004e8  panicstr
r8                           0
r9                  0xffffffff
r10                          0
r11                       0x3f
r12         0xfffffe0054122780
r13         0xfffffffffffffffe
r14         0xffffffff827cd960  .str.27
r15                          0
rip         0xffffffff815fec3e  kdb_enter+0x6e
rflags                    0x46
kdb_enter+0x6e: movq    $0,0x25c3f57(%rip)
db> show proc
Process 937 (syz-executor) at 0xfffffe005410f010:
 state: NORMAL
 uid: 0  gids: 0, 5
 parent: pid 910 at 0xfffffe00540cc570
 ABI: FreeBSD ELF64
 flag: 0x10000080  flag2: 0
 arguments: ./syz-executor exec
 reaper: 0xfffffe0007809010 reapsubtree: 1
 sigparent: 20
 vmspace: 0xfffffe005411ab68
   (map 0xfffffe005411ab68)
   (map.pmap 0xfffffe005411ac08)
   (pmap 0xfffffe005411ac78)
 threads: 4
100140                   RunQ                                syz-executor
100163                   S       select  0xfffffe0053ed6cc0  syz-executor
100165                   Run     CPU 0                       syz-executor
100167                   S       uwait   0xfffffe006e68d200  syz-executor
db>