syzbot


panic: malloc: out of space in kmem_map

Status: fixed on 2019/05/21 04:34
Reported-by: syzbot+0b21fd31c3ee9d8363fa@syzkaller.appspotmail.com
Fix commit: During fuzzing, one or many fuzzing processes are often stuck waiting on memory from the subproc malloc subsystem which is exhausted. Attempt to circumvent such scenarios by allocation the kcov coverage buffer using km_alloc() instead.
First crash: 2086d, last: 2021d
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
openbsd panic: malloc: out of space in kmem_map (2) 1 649d 649d 0/3 auto-obsoleted due to no activity on 2023/04/01 13:00
openbsd panic: malloc: out of space in kmem_map (3) 1 34d 34d 0/3 upstream: reported on 2024/09/06 23:26

Sample crash report:
panic: malloc: out of space in kmem_map
Stopped at      db_enter+0x18:  addq    $0x8,%rsp
    TID    PID    UID     PRFLAGS     PFLAGS  CPU  COMMAND
*149799   1663      0         0x2          0    0  syz-executor.0
db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:398
panic() at panic+0x15c sys/kern/subr_prf.c:208
malloc(200000,2a,9) at malloc+0xa79 sys/kern/kern_malloc.c:242
kcovioctl(1b1300,80084b01,ffff8000149f8670,3,ffff800014a04720) at kcovioctl+0xe6 kd_init sys/dev/kcov.c:405 [inline]
kcovioctl(1b1300,80084b01,ffff8000149f8670,3,ffff800014a04720) at kcovioctl+0xe6 sys/dev/kcov.c:298
VOP_IOCTL(fffffd8027e35888,80084b01,ffff8000149f8670,3,fffffd803f7c6c00,ffff800014a04720) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290
vn_ioctl(fffffd802ed2b5b0,80084b01,ffff8000149f8670,ffff800014a04720) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512
sys_ioctl(ffff800014a04720,ffff8000149f87b0,ffff8000149f87a0) at sys_ioctl+0x638
syscall(ffff8000149f8850) at syscall+0x541
Xsyscall(6,36,7f7ffffd3438,36,3,a3ee6418890) at Xsyscall+0x128
end of kernel
end trace frame: 0x7f7ffffd2f50, count: 6
https://www.openbsd.org/ddb.html describes the minimum info required in bug
reports.  Insufficient info makes it difficult to find and fix bugs.

Crashes (97):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2019/03/30 18:40 openbsd 67caf7119898 c35ee0ea .config console log report ci-openbsd-main
2019/03/30 15:43 openbsd 67caf7119898 c35ee0ea .config console log report ci-openbsd-multicore
2019/03/30 08:55 openbsd 67caf7119898 c35ee0ea .config console log report ci-openbsd-multicore
2019/03/30 06:39 openbsd 20a5560209a4 c35ee0ea .config console log report ci-openbsd-main
2019/03/29 23:56 openbsd 20a5560209a4 c35ee0ea .config console log report ci-openbsd-main
2019/03/29 16:13 openbsd 6218530a164e e825006c .config console log report ci-openbsd-multicore
2019/03/29 13:29 openbsd 6218530a164e e825006c .config console log report ci-openbsd-main
2019/03/29 11:32 openbsd 6218530a164e e825006c .config console log report ci-openbsd-multicore
2019/03/29 10:15 openbsd 6218530a164e e825006c .config console log report ci-openbsd-main
2019/03/29 00:46 openbsd 7ac074f6b41e 14c58f8d .config console log report ci-openbsd-main
2019/03/28 20:37 openbsd 8423d6adca2c 14c58f8d .config console log report ci-openbsd-multicore
2019/03/28 14:01 openbsd 7ac074f6b41e f94f56fe .config console log report ci-openbsd-main
2019/03/28 12:07 openbsd 7ac074f6b41e f94f56fe .config console log report ci-openbsd-main
2019/03/27 21:32 openbsd c95a22197bfd f94f56fe .config console log report ci-openbsd-main
2019/03/27 15:49 openbsd 709e530bc956 70d776a2 .config console log report ci-openbsd-main
2019/03/27 13:05 openbsd 690d147bdb68 70d776a2 .config console log report ci-openbsd-multicore
2019/03/27 11:01 openbsd 690d147bdb68 70d776a2 .config console log report ci-openbsd-multicore
2019/03/27 04:11 openbsd ad597a5fc5a3 55684ce1 .config console log report ci-openbsd-multicore
2019/03/26 07:04 openbsd 6a51f920f2c9 55684ce1 .config console log report ci-openbsd-main
2019/03/25 21:31 openbsd 13a73e99f6f8 52a20ba4 .config console log report ci-openbsd-multicore
2019/03/25 06:52 openbsd b3dbd5f2ca08 2c86e0a5 .config console log report ci-openbsd-main
2019/03/25 05:41 openbsd b3dbd5f2ca08 2c86e0a5 .config console log report ci-openbsd-main
2019/03/25 03:09 openbsd b3dbd5f2ca08 2c86e0a5 .config console log report ci-openbsd-multicore
2019/03/24 17:35 openbsd d42c39d7dcd1 acbc5b7d .config console log report ci-openbsd-multicore
2019/03/24 15:05 openbsd d42c39d7dcd1 acbc5b7d .config console log report ci-openbsd-main
2019/03/24 13:06 openbsd d42c39d7dcd1 acbc5b7d .config console log report ci-openbsd-multicore
2019/03/24 09:34 openbsd d42c39d7dcd1 acbc5b7d .config console log report ci-openbsd-multicore
2019/03/23 22:13 openbsd c610539b3c4a a2cef203 .config console log report ci-openbsd-main
2019/03/23 18:14 openbsd c610539b3c4a a2cef203 .config console log report ci-openbsd-multicore
2019/03/23 16:02 openbsd c610539b3c4a a2cef203 .config console log report ci-openbsd-main
2019/03/23 07:53 openbsd 8ed1f8bf5951 3361bde5 .config console log report ci-openbsd-main
2019/03/23 05:09 openbsd 8ed1f8bf5951 3361bde5 .config console log report ci-openbsd-main
2019/03/23 01:51 openbsd 9c1f1fecff88 028c0951 .config console log report ci-openbsd-multicore
2019/03/22 22:24 openbsd 9c1f1fecff88 028c0951 .config console log report ci-openbsd-main
2019/03/22 19:57 openbsd 9c1f1fecff88 028c0951 .config console log report ci-openbsd-multicore
2019/03/22 15:09 openbsd 31520b764003 dce6e62f .config console log report ci-openbsd-multicore
2019/03/22 12:14 openbsd 31520b764003 dce6e62f .config console log report ci-openbsd-multicore
2019/03/22 06:39 openbsd 31520b764003 dce6e62f .config console log report ci-openbsd-multicore
2019/03/22 02:55 openbsd 31520b764003 dce6e62f .config console log report ci-openbsd-multicore
2019/03/22 00:08 openbsd 31520b764003 dce6e62f .config console log report ci-openbsd-main
2019/03/21 20:47 openbsd f475d39eb98b f6094a8c .config console log report ci-openbsd-main
2019/03/21 18:34 openbsd f475d39eb98b f6094a8c .config console log report ci-openbsd-main
2019/03/21 16:45 openbsd f475d39eb98b f6094a8c .config console log report ci-openbsd-multicore
2019/03/21 14:52 openbsd f475d39eb98b f6094a8c .config console log report ci-openbsd-multicore
2019/03/21 11:11 openbsd db552f66a6b6 427ea487 .config console log report ci-openbsd-multicore
2019/03/21 03:56 openbsd db552f66a6b6 427ea487 .config console log report ci-openbsd-multicore
2019/03/21 01:22 openbsd db552f66a6b6 427ea487 .config console log report ci-openbsd-multicore
2019/03/20 21:29 openbsd 180e3f4c9de8 142c38ee .config console log report ci-openbsd-multicore
2019/03/20 19:15 openbsd 180e3f4c9de8 142c38ee .config console log report ci-openbsd-multicore
2019/03/20 16:28 openbsd 180e3f4c9de8 142c38ee .config console log report ci-openbsd-multicore
2019/03/20 11:08 openbsd 6a543b343b5b 2458c1c6 .config console log report ci-openbsd-multicore
2019/03/20 10:58 openbsd 6a543b343b5b 2458c1c6 .config console log report ci-openbsd-multicore
2019/03/20 09:28 openbsd 6a543b343b5b 2458c1c6 .config console log report ci-openbsd-multicore
2019/03/20 03:32 openbsd 6a543b343b5b 2458c1c6 .config console log report ci-openbsd-multicore
2019/03/20 03:20 openbsd 6a543b343b5b 2458c1c6 .config console log report ci-openbsd-multicore
2019/03/19 23:02 openbsd a5f4ee4e3f8f e4549234 .config console log report ci-openbsd-multicore
2019/03/19 16:37 openbsd a5f4ee4e3f8f e4549234 .config console log report ci-openbsd-multicore
2019/02/16 13:02 openbsd f4f0873d2d98 f42dee6d .config console log report ci-openbsd-multicore
2019/02/16 11:08 openbsd 9a029001a5d5 f42dee6d .config console log report ci-openbsd-multicore
2019/02/14 14:59 openbsd 296ad85980ac 6a46f448 .config console log report ci-openbsd-multicore
2019/02/14 07:05 openbsd 296ad85980ac 6a46f448 .config console log report ci-openbsd-multicore
2019/02/13 20:04 openbsd d5be5a4dcd6f 0a49c954 .config console log report ci-openbsd-main
2019/02/12 05:11 openbsd 2a8cd46f780e 65a0d619 .config console log report ci-openbsd-multicore
2019/02/11 05:00 openbsd d1b04a408aa9 b4f792e4 .config console log report ci-openbsd-main
2019/02/09 16:49 openbsd 4071f8002cf2 d75f7686 .config console log report ci-openbsd-multicore
2019/02/09 10:10 openbsd ff85eb9967fa fa6c7b70 .config console log report ci-openbsd-multicore
2019/02/08 03:37 openbsd 6e31582a5a78 aa4feb03 .config console log report ci-openbsd-multicore
2019/02/04 13:39 openbsd 6e31582a5a78 d672172c .config console log report ci-openbsd-multicore
2019/01/24 21:32 openbsd 6be7898a800b fea4b504 .config console log report ci-openbsd-main
* Struck through repros no longer work on HEAD.