[ 12.858796][ T1] loop: module loaded [ 12.884097][ T1] scsi host0: ata_piix [ 12.887698][ T1] scsi host1: ata_piix [ 12.889266][ T1] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc080 irq 14 lpm-pol 0 [ 12.889506][ T1] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc088 irq 15 lpm-pol 0 [ 12.899632][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 12.901455][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 12.901769][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 12.906641][ T1] rtc_cmos 00:04: RTC can wake from S4 [ 12.911833][ T1] rtc_cmos 00:04: registered as rtc0 [ 12.912172][ T1] rtc_cmos 00:04: setting system clock to 2024-03-22T00:13:43 UTC (1711066423) [ 12.913158][ T1] rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 12.917581][ T1] i6300ESB timer 0000:00:03.0: initialized. heartbeat=30 sec (nowayout=0) [ 12.919408][ T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev [ 12.923345][ T50] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 12.930820][ T50] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 [ 12.933443][ T1] NET: Registered PF_INET6 protocol family [ 12.939960][ T1] Segment Routing with IPv6 [ 12.940505][ T1] In-situ OAM (IOAM) with IPv6 [ 12.941068][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 12.945126][ T1] NET: Registered PF_PACKET protocol family [ 12.945404][ T1] 9pnet: Installing 9P2000 support [ 12.948857][ T1] Key type dns_resolver registered [ 12.954284][ T1] IPI shorthand broadcast: enabled [ 13.043100][ T66] ata2: found unknown device (class 0) [ 13.044111][ T66] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 13.047047][ T68] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 13.086664][ T68] scsi 1:0:0:0: Attached scsi generic sg0 type 5 [ 13.217992][ T1] sched_clock: Marking stable (13204007711, 13959832)->(13229309643, -11342100) [ 13.219271][ T1] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 13.220407][ T1] registered taskstats version 1 [ 13.222864][ T1] Loading compiled-in X.509 certificates [ 13.334054][ T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 14916) [ 13.334068][ T75] kmemleak: Automatic memory scanning thread started [ 13.334406][ T1] page_owner is disabled [ 13.336560][ T1] PM: Magic number: 0:798:203 [ 13.337000][ T1] printk: legacy console [netcon0] enabled [ 13.337334][ T1] netconsole: network logging started [ 13.339694][ T1] ALSA device list: [ 13.339880][ T1] No soundcards found. [ 13.341482][ T1] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 13.342427][ T1] 9pnet_virtio: no channels available for device [ 13.348562][ T1] ================================================================== [ 13.348872][ T1] BUG: KASAN: slab-use-after-free in v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.349171][ T1] Read of size 8 at addr ffff888002b1b730 by task swapper/0/1 [ 13.349463][ T1] [ 13.349567][ T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.8.0-virtme #1 [ 13.349870][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 13.350319][ T1] Call Trace: [ 13.350476][ T1] <TASK> [ 13.350583][ T1] dump_stack_lvl+0x82/0xd0 [ 13.350788][ T1] print_address_description.constprop.0+0x2c/0x3b0 [ 13.351035][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.351179][ T1] print_report+0xb4/0x270 [ 13.351334][ T1] ? kasan_addr_to_slab+0x4e/0x90 [ 13.351495][ T1] kasan_report+0xbd/0xf0 [ 13.351603][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.351741][ T1] v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.351879][ T1] v9fs_fid_iget_dotl+0x18c/0x210 [ 13.352020][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.352125][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.352264][ T1] ? vfs_parse_fs_string+0xdb/0x130 [ 13.352404][ T1] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 13.352546][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.352683][ T1] legacy_get_tree+0x107/0x200 [ 13.352822][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.352963][ T1] do_new_mount+0x27d/0x5e0 [ 13.353103][ T1] ? __pfx_do_new_mount+0x10/0x10 [ 13.353240][ T1] ? __pfx___debug_check_no_obj_freed+0x10/0x10 [ 13.353412][ T1] ? __virt_addr_valid+0x227/0x420 [ 13.353554][ T1] path_mount+0x271/0x14f0 [ 13.353693][ T1] ? __pfx_path_mount+0x10/0x10 [ 13.353837][ T1] ? kmem_cache_free+0xd7/0x220 [ 13.353980][ T1] ? kern_path+0x3d/0x50 [ 13.354086][ T1] init_mount+0x9d/0xf0 [ 13.354193][ T1] ? __pfx_init_mount+0x10/0x10 [ 13.354333][ T1] do_mount_root+0xbc/0x330 [ 13.354471][ T1] mount_root_generic+0x22c/0x470 [ 13.354611][ T1] ? __pfx_mount_root_generic+0x10/0x10 [ 13.354750][ T1] ? mount_root+0x25b/0x2f0 [ 13.354891][ T1] prepare_namespace+0xa5/0x2d0 [ 13.355033][ T1] ? __pfx_prepare_namespace+0x10/0x10 [ 13.355182][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.355319][ T1] kernel_init+0x20/0x200 [ 13.355422][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.355561][ T1] ret_from_fork+0x31/0x70 [ 13.355700][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.355838][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.355979][ T1] </TASK> [ 13.356085][ T1] [ 13.356159][ T1] Allocated by task 1: [ 13.356262][ T1] kasan_save_stack+0x24/0x50 [ 13.356408][ T1] kasan_save_track+0x14/0x30 [ 13.356545][ T1] __kasan_kmalloc+0x7f/0x90 [ 13.356682][ T1] p9_client_getattr_dotl+0x4c/0x1a0 [ 13.356819][ T1] v9fs_fid_iget_dotl+0xca/0x210 [ 13.356958][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.357061][ T1] legacy_get_tree+0x107/0x200 [ 13.357196][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.357339][ T1] do_new_mount+0x27d/0x5e0 [ 13.357478][ T1] path_mount+0x271/0x14f0 [ 13.357616][ T1] init_mount+0x9d/0xf0 [ 13.357719][ T1] do_mount_root+0xbc/0x330 [ 13.357854][ T1] mount_root_generic+0x22c/0x470 [ 13.357989][ T1] prepare_namespace+0xa5/0x2d0 [ 13.358130][ T1] kernel_init+0x20/0x200 [ 13.358232][ T1] ret_from_fork+0x31/0x70 [ 13.358369][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.358505][ T1] [ 13.358581][ T1] Freed by task 1: [ 13.358684][ T1] kasan_save_stack+0x24/0x50 [ 13.358825][ T1] kasan_save_track+0x14/0x30 [ 13.358962][ T1] kasan_save_free_info+0x3b/0x60 [ 13.359101][ T1] __kasan_slab_free+0xf4/0x180 [ 13.359239][ T1] kfree+0xd3/0x230 [ 13.359345][ T1] v9fs_fid_iget_dotl+0x15e/0x210 [ 13.359481][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.359584][ T1] legacy_get_tree+0x107/0x200 [ 13.359725][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.359865][ T1] do_new_mount+0x27d/0x5e0 [ 13.360005][ T1] path_mount+0x271/0x14f0 [ 13.360144][ T1] init_mount+0x9d/0xf0 [ 13.360246][ T1] do_mount_root+0xbc/0x330 [ 13.360382][ T1] mount_root_generic+0x22c/0x470 [ 13.360519][ T1] prepare_namespace+0xa5/0x2d0 [ 13.360655][ T1] kernel_init+0x20/0x200 [ 13.360765][ T1] ret_from_fork+0x31/0x70 [ 13.360901][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.361042][ T1] [ 13.361116][ T1] The buggy address belongs to the object at ffff888002b1b730 [ 13.361116][ T1] which belongs to the cache kmalloc-192 of size 192 [ 13.361447][ T1] The buggy address is located 0 bytes inside of [ 13.361447][ T1] freed 192-byte region [ffff888002b1b730, ffff888002b1b7f0) [ 13.361781][ T1] [ 13.361852][ T1] The buggy address belongs to the physical page: [ 13.362022][ T1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888002b1b868 pfn:0x2b1a [ 13.362297][ T1] head: order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 13.362506][ T1] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1) [ 13.362716][ T1] page_type: 0xffffffff() [ 13.362824][ T1] raw: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.363071][ T1] raw: ffff888002b1b868 00000000001a0014 00000001ffffffff 0000000000000000 [ 13.363315][ T1] head: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.363561][ T1] head: ffff888002b1b868 00000000001a0014 00000001ffffffff 0000000000000000 [ 13.363804][ T1] head: 0080000000000001 ffffea00000ac681 dead000000000122 00000000ffffffff [ 13.364045][ T1] head: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 13.364294][ T1] page dumped because: kasan: bad access detected [ 13.364463][ T1] [ 13.364530][ T1] Memory state around the buggy address: [ 13.364662][ T1] ffff888002b1b600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 13.364862][ T1] ffff888002b1b680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 13.365072][ T1] >ffff888002b1b700: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 13.365278][ T1] ^ [ 13.365412][ T1] ffff888002b1b780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 13.365609][ T1] ffff888002b1b800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 13.365807][ T1] ================================================================== [ 13.366026][ T1] Disabling lock debugging due to kernel taint [ 13.366471][ T1] VFS: Mounted root (9p filesystem) readonly on device 0:20. [ 13.368109][ T1] devtmpfs: mounted [ 13.412367][ T1] Freeing unused kernel image (initmem) memory: 6440K [ 13.412598][ T1] Write protecting the kernel read-only data: 59392k [ 13.413455][ T1] Freeing unused kernel image (rodata/data gap) memory: 1028K [ 13.413713][ T1] Run /home/virtme/virtme-ng/virtme/guest/virtme-init as init process [ 19.307053][ T171] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 19.307634][ T171] kworker/u20:12 (171) used greatest stack depth: 27376 bytes left [ 19.308670][ T167] kworker/u19:11 (167) used greatest stack depth: 27280 bytes left [ 19.309504][ T163] kworker/u18:11 (163) used greatest stack depth: 27272 bytes left [ 19.348759][ T1] Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). [ 19.349156][ T1] CPU: 3 PID: 1 Comm: swapper/0 Tainted: G B 6.8.0-virtme #1 [ 19.349442][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.349824][ T1] Call Trace: [ 19.349945][ T1] <TASK> [ 19.350035][ T1] panic+0x506/0x5b0 [ 19.350175][ T1] ? __pfx_panic+0x10/0x10 [ 19.350354][ T1] ? kmem_cache_free+0xd7/0x220 [ 19.350526][ T1] ? kernel_execve+0x32a/0x460 [ 19.350736][ T1] kernel_init+0xee/0x200 [ 19.350867][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.351037][ T1] ret_from_fork+0x31/0x70 [ 19.351210][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.351378][ T1] ret_from_fork_asm+0x1a/0x30 [ 19.351555][ T1] </TASK> [ 19.351763][ T1] Kernel Offset: 0x6a00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 19.352158][ T1] ---[ end Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). ]--- WAIT TIMEOUT stderr