panic: pmap_san_enter_alloc_4k: no memory to grow shadow map cpuid = 1 time = 1725249584 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00958687b0 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe0095868910 vpanic() at vpanic+0x280/frame 0xfffffe0095868ad0 panic() at panic+0xb5/frame 0xfffffe0095868b90 pmap_san_enter_alloc_4k() at pmap_san_enter_alloc_4k+0x4b/frame 0xfffffe0095868bb0 pmap_san_enter() at pmap_san_enter+0x356/frame 0xfffffe0095868bf0 kasan_shadow_map() at kasan_shadow_map+0x98/frame 0xfffffe0095868c10 pmap_growkernel() at pmap_growkernel+0xd7/frame 0xfffffe0095868c70 vm_map_insert1() at vm_map_insert1+0x673/frame 0xfffffe0095868db0 vm_map_find() at vm_map_find+0xaeb/frame 0xfffffe0095868f10 kva_import() at kva_import+0xd4/frame 0xfffffe0095868ff0 vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe00958690e0 vmem_xalloc() at vmem_xalloc+0x565/frame 0xfffffe00958691a0 kva_import_domain() at kva_import_domain+0x5f/frame 0xfffffe00958691f0 vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe00958692e0 vmem_xalloc() at vmem_xalloc+0x565/frame 0xfffffe00958693a0 vm_thread_kstack_arena_import() at vm_thread_kstack_arena_import+0x9e/frame 0xfffffe0095869410 vmem_try_fetch() at vmem_try_fetch+0x21e/frame 0xfffffe00958694f0 vmem_xalloc() at vmem_xalloc+0x565/frame 0xfffffe00958695b0 vmem_alloc() at vmem_alloc+0xfe/frame 0xfffffe0095869610 vm_thread_stack_create() at vm_thread_stack_create+0x28f/frame 0xfffffe0095869900 kstack_import() at kstack_import+0x9b/frame 0xfffffe0095869950 cache_alloc() at cache_alloc+0x81a/frame 0xfffffe0095869a10 cache_alloc_retry() at cache_alloc_retry+0x2e/frame 0xfffffe0095869a50 vm_thread_new() at vm_thread_new+0x91/frame 0xfffffe0095869ab0 thread_alloc() at thread_alloc+0x72/frame 0xfffffe0095869af0 fork1() at fork1+0xad9/frame 0xfffffe0095869c10 sys_fork() at sys_fork+0xe3/frame 0xfffffe0095869d10 amd64_syscall() at amd64_syscall+0x4cb/frame 0xfffffe0095869f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe0095869f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x39a4ca, rsp = 0x8267f1f08, rbp = 0x8267f1f80 --- KDB: enter: panic [ thread pid 5478 tid 107522 ] Stopped at kdb_enter+0x6e: movq $0,0x23e2ce7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db> show registers cs 0x20 ds 0x3b es 0x3b fs 0x13 gs 0x1b ss 0x28 rax 0x12 rcx 0xfffffe00033eee30 rdx 0 rbx 0xffffffff82718dc0 .str.27 rsp 0xfffffe00958688f0 rbp 0xfffffe0095868910 rsi 0 rdi 0xffffffff815ce5b9 printf+0x149 r8 0 r9 0xffffffff r10 0 r11 0x3f r12 0xfffffe00962bb000 r13 0xfffffffffffffffd r14 0xffffffff82718dc0 .str.27 r15 0 rip 0xffffffff815ba32e kdb_enter+0x6e rflags 0x46 kdb_enter+0x6e: movq $0,0x23e2ce7(%rip) db> show proc Process 5478 (syz-executor) at 0xfffffe00962bf560: state: NORMAL uid: 0 gids: 0, 0, 5 parent: pid 5167 at 0xfffffe0092ed9000 ABI: FreeBSD ELF64 flag: 0x10000000 flag2: 0 arguments: ./syz-executor exec reaper: 0xfffffe0007a07040 reapsubtree: 1 sigparent: 20 vmspace: 0xfffffe00962a9738 (map 0xfffffe00962a9738) (map.pmap 0xfffffe00962a97f8) (pmap 0xfffffe00962a9868) threads: 1 107522 Run CPU 1 syz-executor db> serialport: VM disconnected.