panic: pmap_san_enter_alloc_4k: no memory to grow shadow map cpuid = 1 time = 1707056556 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe007d4b7530 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe007d4b7690 vpanic() at vpanic+0x26a/frame 0xfffffe007d4b7850 panic() at panic+0xb5/frame 0xfffffe007d4b7910 pmap_san_enter_alloc_4k() at pmap_san_enter_alloc_4k+0x4b/frame 0xfffffe007d4b7930 pmap_san_enter() at pmap_san_enter+0x356/frame 0xfffffe007d4b7970 kasan_shadow_map() at kasan_shadow_map+0x98/frame 0xfffffe007d4b7990 pmap_growkernel() at pmap_growkernel+0xd7/frame 0xfffffe007d4b79f0 vm_map_insert1() at vm_map_insert1+0x6af/frame 0xfffffe007d4b7b30 vm_map_find() at vm_map_find+0xb37/frame 0xfffffe007d4b7c90 kva_import() at kva_import+0xd4/frame 0xfffffe007d4b7d70 vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe007d4b7e60 vmem_xalloc() at vmem_xalloc+0x569/frame 0xfffffe007d4b7f20 kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe007d4b7f70 vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe007d4b8050 vmem_xalloc() at vmem_xalloc+0x569/frame 0xfffffe007d4b8110 vmem_alloc() at vmem_alloc+0xfe/frame 0xfffffe007d4b8170 kmem_malloc_domainset() at kmem_malloc_domainset+0x189/frame 0xfffffe007d4b82b0 keg_alloc_slab() at keg_alloc_slab+0x1d3/frame 0xfffffe007d4b83d0 zone_import() at zone_import+0x2cb/frame 0xfffffe007d4b85b0 zone_alloc_item() at zone_alloc_item+0x16a/frame 0xfffffe007d4b8690 malloc() at malloc+0xf7/frame 0xfffffe007d4b86d0 proc_init() at proc_init+0x297/frame 0xfffffe007d4b8710 keg_alloc_slab() at keg_alloc_slab+0x6a5/frame 0xfffffe007d4b8830 zone_import() at zone_import+0x2cb/frame 0xfffffe007d4b8a10 zone_alloc_item() at zone_alloc_item+0x16a/frame 0xfffffe007d4b8af0 fork1() at fork1+0xc22/frame 0xfffffe007d4b8c10 sys_fork() at sys_fork+0xe3/frame 0xfffffe007d4b8d10 amd64_syscall() at amd64_syscall+0x473/frame 0xfffffe007d4b8f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe007d4b8f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x2aeb2a, rsp = 0x8262b0f08, rbp = 0x8262b0f80 --- KDB: enter: panic [ thread pid 17925 tid 120596 ] Stopped at kdb_enter+0x6e: movq $0,0x21942e7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff826f9f40 .str.27 rsp 0xfffffe007d4b7670 rbp 0xfffffe007d4b7690 rsi 0 rdi 0xffffffff815de239 printf+0x149 r8 0 r9 0xffffffff r10 0x7 r11 0x6 r12 0xfffffe007a72e740 r13 0xfffffffffffffffd r14 0xffffffff826f9f40 .str.27 r15 0 rip 0xffffffff815cad2e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x21942e7(%rip) db> show proc Process 17925 (syz-executor.0) at 0xfffffe0057202ae0: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 17721 at 0xfffffe007ac1fae0 ABI: FreeBSD ELF64 flag: 0x10000000 flag2: 0 arguments: /root/syz-executor.0 exec reaper: 0xfffffe00541ec040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe007a6b5c08 (map 0xfffffe007a6b5c08) (map.pmap 0xfffffe007a6b5cc8) (pmap 0xfffffe007a6b5d38) threads: 1 120596 Run CPU 1 syz-executor.0 db> serialport: VM disconnected.