SWƷXA#B~x ͊ix_XT8lqTL X;3ܹ$1a;s3<荣#C(<4}Q)|ɘBq{;iy"[X-k(vj8DGtRCMo!6ELru-yHYxQXs*|"4G0B>O #0 qU a{(Lr>ĥଜ3Wjĭ4 zU:ؔۈˆԚ+Fid:{ܪ,PN,uܛS5wD]EkV/l:7panic: malloc: out of space in kmem_map Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *315331 78047 0 0x2 0 0 syz-executor.0 db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x15c sys/kern/subr_prf.c:208 malloc(200000,2a,9) at malloc+0xa79 sys/kern/kern_malloc.c:242 kcovioctl(1b1300,80084b01,ffff800014a0bf00,3,ffff8000149c6020) at kcovioctl+0xe6 kd_init sys/dev/kcov.c:405 [inline] kcovioctl(1b1300,80084b01,ffff800014a0bf00,3,ffff8000149c6020) at kcovioctl+0xe6 sys/dev/kcov.c:298 VOP_IOCTL(fffffd803bf300d0,80084b01,ffff800014a0bf00,3,fffffd803f7c69c0,ffff8000149c6020) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290 vn_ioctl(fffffd802f702f10,80084b01,ffff800014a0bf00,ffff8000149c6020) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512 sys_ioctl(ffff8000149c6020,ffff800014a0c040,ffff800014a0c030) at sys_ioctl+0x638 syscall(ffff800014a0c0e0) at syscall+0x541 Xsyscall(6,36,7f7ffffdf828,36,3,9b747433890) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdf340, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic malloc: out of space in kmem_map ddb> trace db_enter() at db_enter+0x18 sys/arch/amd64/amd64/db_interface.c:399 panic() at panic+0x15c sys/kern/subr_prf.c:208 malloc(200000,2a,9) at malloc+0xa79 sys/kern/kern_malloc.c:242 kcovioctl(1b1300,80084b01,ffff800014a0bf00,3,ffff8000149c6020) at kcovioctl+0xe6 kd_init sys/dev/kcov.c:405 [inline] kcovioctl(1b1300,80084b01,ffff800014a0bf00,3,ffff8000149c6020) at kcovioctl+0xe6 sys/dev/kcov.c:298 VOP_IOCTL(fffffd803bf300d0,80084b01,ffff800014a0bf00,3,fffffd803f7c69c0,ffff8000149c6020) at VOP_IOCTL+0x9a sys/kern/vfs_vops.c:290 vn_ioctl(fffffd802f702f10,80084b01,ffff800014a0bf00,ffff8000149c6020) at vn_ioctl+0xc9 sys/kern/vfs_vnops.c:512 sys_ioctl(ffff8000149c6020,ffff800014a0c040,ffff800014a0c030) at sys_ioctl+0x638 syscall(ffff800014a0c0e0) at syscall+0x541 Xsyscall(6,36,7f7ffffdf828,36,3,9b747433890) at Xsyscall+0x128 end of kernel end trace frame: 0x7f7ffffdf340, count: -9 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff800014a0bb30 rbx 0xffff800014a0bbe0 rdx 0x2 rcx 0 rax 0 r8 0xffff800014a0baf0 r9 0x1 r10 0 r11 0xc5f13abcb945fcd1 r12 0x3000000008 r13 0xffff800014a0bb40 r14 0x100 r15 0x1 rip 0xffffffff815a6408 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff800014a0bb20 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb> show proc PROC (syz-executor.0) pid=315331 stat=onproc flags process=2 proc=0 pri=51, usrpri=51, nice=20 forw=0xffffffffffffffff, list=0xffff8000149c72e0,0xffffffff822d72a8 process=0xffff8000ffff6358 user=0xffff800014a07000, vmspace=0xfffffd803f013d68 estcpu=1, cpticks=2, pctcpu=0.0 user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND *78047 315331 70641 0 7 0x2 syz-executor.0 27782 40264 0 0 3 0x14200 bored sosplice 41828 175881 70641 0 3 0x82 piperd syz-executor.1 70641 488492 51983 0 3 0x82 kqread syz-fuzzer 70641 266310 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 320617 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 459506 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 40164 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 243147 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 508626 51983 0 3 0x4000082 thrsleep syz-fuzzer 70641 38138 51983 0 3 0x4000082 thrsleep syz-fuzzer 51983 162975 5316 0 3 0x10008a pause ksh 5316 171474 56214 0 3 0x92 select sshd 83763 472073 1 0 3 0x100083 ttyin getty 56214 292840 1 0 3 0x80 select sshd 77610 264566 20400 73 3 0x100090 kqread syslogd 20400 357546 1 0 3 0x100082 netio syslogd 41154 22510 1 77 3 0x100090 poll dhclient 78100 14087 1 0 3 0x80 poll dhclient 47983 57763 0 0 3 0x14200 pgzero zerothread 35580 138123 0 0 3 0x14200 aiodoned aiodoned 49285 219697 0 0 3 0x14200 syncer update 5285 85352 0 0 3 0x14200 cleaner cleaner 32946 209122 0 0 3 0x14200 reaper reaper 61871 393728 0 0 3 0x14200 pgdaemon pagedaemon 8780 304897 0 0 3 0x14200 bored crynlk 86390 468160 0 0 3 0x14200 bored crypto 5560 299214 0 0 3 0x40014200 acpi0 acpi0 99225 375071 0 0 3 0x14200 bored softnet 49743 51090 0 0 3 0x14200 bored systqmp 88033 283861 0 0 3 0x14200 bored systq 92518 367838 0 0 3 0x40014200 bored softclock 82877 352039 0 0 3 0x40014200 idle0 1872 57899 0 0 3 0x14200 bored smr 1 523524 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim Kern Lim devbuf 9477 71877K 71885K 78643K 10795 0 0 pcb 23 9K 11K 78643K 385 0 0 rtable 85 3K 4K 78643K 456 0 0 ifaddr 43 11K 12K 78643K 137 0 0 counters 19 16K 16K 78643K 19 0 0 ioctlops 0 0K 2K 78643K 29 0 0 iov 0 0K 16K 78643K 104 0 0 mount 1 1K 1K 78643K 1 0 0 vnodes 1197 75K 75K 78643K 1811 0 0 UFS quota 1 32K 32K 78643K 1 0 0 UFS mount 5 36K 36K 78643K 5 0 0 shm 2 1K 5K 78643K 21 0 0 VM map 2 0K 0K 78643K 2 0 0 sem 12 0K 0K 78643K 94 0 0 dirhash 12 2K 2K 78643K 12 0 0 ACPI 1793 195K 288K 78643K 12537 0 0 file desc 4 9K 17K 78643K 771 0 0 sigio 0 0K 0K 78643K 10 0 0 proc 41 30K 46K 78643K 412 0 0 subproc 53 55297K 67586K 78643K 261 0 0 NFS srvsock 1 0K 0K 78643K 1 0 0 NFS daemon 1 16K 16K 78643K 1 0 0 ip_moptions 0 0K 0K 78643K 53 0 0 in_multi 22 1K 2K 78643K 110 0 0 ether_multi 1 0K 0K 78643K 8 0 0 mrt 0 0K 0K 78643K 5 0 0 ISOFS mount 1 32K 32K 78643K 1 0 0 MSDOSFS mount 1 16K 16K 78643K 1 0 0 ttys 78 344K 344K 78643K 78 0 0 exec 0 0K 1K 78643K 250 0 0 pagedep 1 8K 8K 78643K 1 0 0 inodedep 1 32K 32K 78643K 1 0 0 newblk 1 0K 0K 78643K 1 0 0 VM swap 7 26K 26K 78643K 7 0 0 UVM amap 75 12K 21K 78643K 2554 0 0 UVM aobj 50 4K 4K 78643K 52 0 0 memdesc 1 4K 4K 78643K 1 0 0 crypto data 1 1K 1K 78643K 1 0 0 ip6_options 0 0K 0K 78643K 19 0 0 NDP 8 0K 0K 78643K 42 0 0 temp 129 2353K 2419K 78643K 5181 0 0 kqueue 0 0K 0K 78643K 5 0 0 SYN cache 2 16K 16K 78643K 2 0 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 9 0 6 1 0 1 1 0 8 0 inpcbpl 280 290 0 283 1 0 1 1 0 8 0 plimitpl 152 41 0 34 1 0 1 1 0 8 0 rtentry 112 86 0 55 2 0 2 2 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpcb 544 96 0 92 1 0 1 1 0 8 0 nd6 48 14 0 12 1 0 1 1 0 8 0 ppxss 1128 14 0 14 5 4 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 393 0 248 12 0 12 12 0 8 1 art_table 32 394 0 248 2 0 2 2 0 8 0 art_node 16 85 0 57 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 4 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 90 0 80 1 0 1 1 0 8 0 shmpl 112 50 0 2 2 0 2 2 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino1pl 128 3019 0 1593 47 0 47 47 0 8 0 ffsino 240 3019 0 1593 85 0 85 85 0 8 0 nchpl 144 4217 0 2573 62 0 62 62 0 8 0 uvmvnodes 72 3222 0 0 59 0 59 59 0 8 0 vnodes 200 3222 0 0 170 0 170 170 0 8 0 namei 1024 11900 0 11900 2 1 1 1 0 8 1 scsiplug 64 1 0 1 1 1 0 1 0 8 0 scxspl 192 12792 0 12792 14 13 1 6 0 8 1 sigapl 432 923 0 911 2 0 2 2 0 8 0 futexpl 56 10289 0 10289 1 0 1 1 0 8 1 knotepl 112 297 0 276 1 0 1 1 0 8 0 kqueuepl 104 150 0 148 1 0 1 1 0 8 0 pipepl 112 582 0 563 5 4 1 2 0 8 0 fdescpl 424 924 0 911 2 0 2 2 0 8 0 filepl 120 5253 0 5165 5 1 4 5 0 8 1 lockfpl 104 252 0 252 2 1 1 1 0 8 1 lockfspl 32 346 0 346 2 1 1 1 0 8 1 sessionpl 112 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 21 1 0 1 1 0 8 0 ucredpl 96 1173 0 1166 1 0 1 1 0 8 0 zombiepl 144 911 0 911 2 1 1 1 0 8 1 processpl 840 939 0 911 4 0 4 4 0 8 0 procpl 600 1866 0 1831 5 1 4 4 0 8 0 sosppl 128 1 0 1 1 1 0 1 0 8 0 sockpl 384 602 0 585 4 1 3 4 0 8 1 mcl64k 65536 528 0 528 66 66 0 65 0 8 0 mcl16k 16384 2 0 2 2 2 0 1 0 8 0 mcl12k 12288 12 0 12 3 2 1 1 0 8 1 mcl9k 9216 6 0 6 2 2 0 1 0 8 0 mcl8k 8192 10 0 10 4 3 1 1 0 8 1 mcl4k 4096 48 0 48 3 2 1 1 0 8 1 mcl2k2 2112 5 0 5 4 4 0 1 0 8 0 mcl2k 2048 48031 0 47991 15 9 6 12 0 8 0 mtagpl 80 4 0 4 2 2 0 1 0 8 0 mbufpl 256 83165 0 83101 42 35 7 37 0 8 0 bufpl 256 6878 0 2389 281 0 281 281 0 8 0 anonpl 16 96409 0 89323 70 25 45 53 0 62 8 amapchunkpl 152 3561 0 3474 6 1 5 5 0 158 0 amappl16 192 4764 0 4294 60 35 25 36 0 8 1 amappl15 184 48 0 44 1 0 1 1 0 8 0 amappl14 176 76 0 74 2 1 1 1 0 8 0 amappl13 168 43 0 38 1 0 1 1 0 8 0 amappl12 160 54 0 51 1 0 1 1 0 8 0 amappl11 152 247 0 235 1 0 1 1 0 8 0 amappl10 144 123 0 122 2 1 1 1 0 8 0 amappl9 136 942 0 936 1 0 1 1 0 8 0 amappl8 128 507 0 494 1 0 1 1 0 8 0 amappl7 120 100 0 95 1 0 1 1 0 8 0 amappl6 112 274 0 268 1 0 1 1 0 8 0 amappl5 104 148 0 136 1 0 1 1 0 8 0 amappl4 96 1074 0 1050 2 1 1 2 0 8 0 amappl3 88 214 0 209 1 0 1 1 0 8 0 amappl2 80 7082 0 7044 2 0 2 2 0 8 1 amappl1 72 24884 0 24499 26 17 9 19 0 8 0 amappl 72 2107 0 2076 1 0 1 1 0 75 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma64 64 259 0 259 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 17 0 17 1 1 0 1 0 8 0 aobjpl 64 51 0 2 1 0 1 1 0 8 0 uaddrrnd 24 924 0 911 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 924 0 911 1 0 1 1 0 8 0 vmmpekpl 168 9958 0 9937 2 0 2 2 0 8 0 vmmpepl 168 105437 0 104157 115 37 78 78 0 357 15 vmsppl 264 923 0 911 1 0 1 1 0 8 0 pdppl 4096 1854 0 1822 5 0 5 5 0 8 0 pvpl 32 318713 0 308624 165 36 129 138 0 265 30 pmappl 192 923 0 911 1 0 1 1 0 8 0 extentpl 40 39 0 25 1 0 1 1 0 8 0 phpool 112 524 0 120 15 1 14 15 0 8 0