[ 13.515873][ T1] loop: module loaded [ 13.539903][ T1] scsi host0: ata_piix [ 13.543575][ T1] scsi host1: ata_piix [ 13.545088][ T1] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc080 irq 14 lpm-pol 0 [ 13.545307][ T1] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc088 irq 15 lpm-pol 0 [ 13.556965][ T1] tun: Universal TUN/TAP device driver, 1.6 [ 13.559388][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 13.561858][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 13.562175][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 13.566058][ T1] rtc_cmos 00:04: RTC can wake from S4 [ 13.570058][ T51] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 13.573381][ T1] rtc_cmos 00:04: registered as rtc0 [ 13.573647][ T1] rtc_cmos 00:04: setting system clock to 2024-03-22T00:14:23 UTC (1711066463) [ 13.574727][ T1] rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 13.577983][ T51] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 [ 13.579034][ T1] i6300ESB timer 0000:00:03.0: initialized. heartbeat=30 sec (nowayout=0) [ 13.593521][ T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev [ 13.619519][ T1] netem: version 1.3 [ 13.620275][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver [ 13.624838][ T1] IPv4 over IPsec tunneling driver [ 13.628850][ T1] NET: Registered PF_INET6 protocol family [ 13.636685][ T1] Segment Routing with IPv6 [ 13.637239][ T1] In-situ OAM (IOAM) with IPv6 [ 13.641438][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 13.650057][ T1] NET: Registered PF_PACKET protocol family [ 13.650986][ T1] 8021q: 802.1Q VLAN Support v1.8 [ 13.651328][ T1] 9pnet: Installing 9P2000 support [ 13.654737][ T1] Key type dns_resolver registered [ 13.660095][ T1] IPI shorthand broadcast: enabled [ 13.703156][ T66] ata2: found unknown device (class 0) [ 13.704311][ T66] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 13.708522][ T61] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 13.733256][ T61] scsi 1:0:0:0: Attached scsi generic sg0 type 5 [ 13.949215][ T1] sched_clock: Marking stable (13939006940, 9994551)->(13973262268, -24260777) [ 13.950461][ T1] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 13.952289][ T1] registered taskstats version 1 [ 13.954733][ T1] Loading compiled-in X.509 certificates [ 14.075791][ T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 14342) [ 14.075804][ T77] kmemleak: Automatic memory scanning thread started [ 14.076127][ T1] page_owner is disabled [ 14.077510][ T1] PM: Magic number: 0:798:203 [ 14.077809][ T1] printk: legacy console [netcon0] enabled [ 14.078096][ T1] netconsole: network logging started [ 14.079449][ T1] ALSA device list: [ 14.079571][ T1] No soundcards found. [ 14.081099][ T1] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 14.081888][ T1] 9pnet_virtio: no channels available for device [ 14.086103][ T1] ================================================================== [ 14.086301][ T1] BUG: KASAN: slab-use-after-free in v9fs_stat2inode_dotl+0x9d6/0xb80 [ 14.086508][ T1] Read of size 8 at addr ffff8880030db4c0 by task swapper/0/1 [ 14.086714][ T1] [ 14.086784][ T1] CPU: 2 PID: 1 Comm: swapper/0 Not tainted 6.8.0-virtme #1 [ 14.086985][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 14.087266][ T1] Call Trace: [ 14.087361][ T1] [ 14.087429][ T1] dump_stack_lvl+0x82/0xd0 [ 14.087575][ T1] print_address_description.constprop.0+0x2c/0x3b0 [ 14.087736][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 14.087872][ T1] print_report+0xb4/0x270 [ 14.087997][ T1] ? kasan_addr_to_slab+0x4e/0x90 [ 14.088123][ T1] kasan_report+0xbd/0xf0 [ 14.088218][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 14.088346][ T1] v9fs_stat2inode_dotl+0x9d6/0xb80 [ 14.088486][ T1] v9fs_fid_iget_dotl+0x18c/0x210 [ 14.088628][ T1] v9fs_mount+0x3fe/0x7d0 [ 14.088730][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 14.088855][ T1] ? vfs_parse_fs_string+0xdb/0x130 [ 14.088985][ T1] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 14.089110][ T1] ? kasan_save_track+0x14/0x30 [ 14.089235][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 14.089360][ T1] legacy_get_tree+0x107/0x200 [ 14.089489][ T1] ? alloc_fs_context+0x4b6/0x860 [ 14.089632][ T1] vfs_get_tree+0x8a/0x2e0 [ 14.089778][ T1] do_new_mount+0x27d/0x5e0 [ 14.089908][ T1] ? __pfx_do_new_mount+0x10/0x10 [ 14.090039][ T1] ? __pfx___debug_check_no_obj_freed+0x10/0x10 [ 14.090199][ T1] ? __virt_addr_valid+0x227/0x420 [ 14.090331][ T1] path_mount+0x271/0x14f0 [ 14.090458][ T1] ? __pfx_path_mount+0x10/0x10 [ 14.090586][ T1] ? kmem_cache_free+0xd7/0x220 [ 14.090714][ T1] ? kern_path+0x3d/0x50 [ 14.090812][ T1] init_mount+0x9d/0xf0 [ 14.090915][ T1] ? __pfx_init_mount+0x10/0x10 [ 14.091043][ T1] do_mount_root+0xbc/0x330 [ 14.091178][ T1] mount_root_generic+0x22c/0x470 [ 14.091304][ T1] ? __pfx_mount_root_generic+0x10/0x10 [ 14.091429][ T1] ? mount_root+0x25b/0x2f0 [ 14.091557][ T1] prepare_namespace+0xa5/0x2d0 [ 14.091683][ T1] ? __pfx_prepare_namespace+0x10/0x10 [ 14.091812][ T1] ? __pfx_kernel_init+0x10/0x10 [ 14.091941][ T1] kernel_init+0x20/0x200 [ 14.092036][ T1] ? __pfx_kernel_init+0x10/0x10 [ 14.092160][ T1] ret_from_fork+0x31/0x70 [ 14.092292][ T1] ? __pfx_kernel_init+0x10/0x10 [ 14.092417][ T1] ret_from_fork_asm+0x1a/0x30 [ 14.092575][ T1] [ 14.092676][ T1] [ 14.092743][ T1] Allocated by task 1: [ 14.092838][ T1] kasan_save_stack+0x24/0x50 [ 14.092972][ T1] kasan_save_track+0x14/0x30 [ 14.093096][ T1] __kasan_kmalloc+0x7f/0x90 [ 14.093220][ T1] p9_client_getattr_dotl+0x4c/0x1a0 [ 14.093351][ T1] v9fs_fid_iget_dotl+0xca/0x210 [ 14.093481][ T1] v9fs_mount+0x3fe/0x7d0 [ 14.093579][ T1] legacy_get_tree+0x107/0x200 [ 14.093731][ T1] vfs_get_tree+0x8a/0x2e0 [ 14.093858][ T1] do_new_mount+0x27d/0x5e0 [ 14.093985][ T1] path_mount+0x271/0x14f0 [ 14.094111][ T1] init_mount+0x9d/0xf0 [ 14.094206][ T1] do_mount_root+0xbc/0x330 [ 14.094331][ T1] mount_root_generic+0x22c/0x470 [ 14.094457][ T1] prepare_namespace+0xa5/0x2d0 [ 14.094595][ T1] kernel_init+0x20/0x200 [ 14.094693][ T1] ret_from_fork+0x31/0x70 [ 14.094819][ T1] ret_from_fork_asm+0x1a/0x30 [ 14.094946][ T1] [ 14.095010][ T1] Freed by task 1: [ 14.095104][ T1] kasan_save_stack+0x24/0x50 [ 14.095233][ T1] kasan_save_track+0x14/0x30 [ 14.095362][ T1] kasan_save_free_info+0x3b/0x60 [ 14.095495][ T1] __kasan_slab_free+0xf4/0x180 [ 14.095625][ T1] kfree+0xd3/0x230 [ 14.095722][ T1] v9fs_fid_iget_dotl+0x15e/0x210 [ 14.095863][ T1] v9fs_mount+0x3fe/0x7d0 [ 14.095957][ T1] legacy_get_tree+0x107/0x200 [ 14.096085][ T1] vfs_get_tree+0x8a/0x2e0 [ 14.096211][ T1] do_new_mount+0x27d/0x5e0 [ 14.096335][ T1] path_mount+0x271/0x14f0 [ 14.096458][ T1] init_mount+0x9d/0xf0 [ 14.096554][ T1] do_mount_root+0xbc/0x330 [ 14.096678][ T1] mount_root_generic+0x22c/0x470 [ 14.096808][ T1] prepare_namespace+0xa5/0x2d0 [ 14.096932][ T1] kernel_init+0x20/0x200 [ 14.097026][ T1] ret_from_fork+0x31/0x70 [ 14.097150][ T1] ret_from_fork_asm+0x1a/0x30 [ 14.097275][ T1] [ 14.097339][ T1] The buggy address belongs to the object at ffff8880030db4c0 [ 14.097339][ T1] which belongs to the cache kmalloc-192 of size 192 [ 14.097666][ T1] The buggy address is located 0 bytes inside of [ 14.097666][ T1] freed 192-byte region [ffff8880030db4c0, ffff8880030db580) [ 14.097971][ T1] [ 14.098034][ T1] The buggy address belongs to the physical page: [ 14.098187][ T1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880030db5f8 pfn:0x30da [ 14.098441][ T1] head: order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 14.098630][ T1] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1) [ 14.098826][ T1] page_type: 0xffffffff() [ 14.098926][ T1] raw: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 14.099154][ T1] raw: ffff8880030db5f8 00000000001a0012 00000001ffffffff 0000000000000000 [ 14.099375][ T1] head: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 14.099603][ T1] head: ffff8880030db5f8 00000000001a0012 00000001ffffffff 0000000000000000 [ 14.099826][ T1] head: 0080000000000001 ffffea00000c3681 dead000000000122 00000000ffffffff [ 14.100049][ T1] head: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 14.100267][ T1] page dumped because: kasan: bad access detected [ 14.100422][ T1] [ 14.100486][ T1] Memory state around the buggy address: [ 14.100606][ T1] ffff8880030db380: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 14.100794][ T1] ffff8880030db400: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 14.100975][ T1] >ffff8880030db480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 14.101159][ T1] ^ [ 14.101309][ T1] ffff8880030db500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 14.101494][ T1] ffff8880030db580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 14.101710][ T1] ================================================================== [ 14.101971][ T1] Disabling lock debugging due to kernel taint [ 14.102306][ T1] VFS: Mounted root (9p filesystem) readonly on device 0:20. [ 14.103263][ T1] devtmpfs: mounted [ 14.142732][ T1] Freeing unused kernel image (initmem) memory: 6660K [ 14.142954][ T1] Write protecting the kernel read-only data: 61440k [ 14.143850][ T1] Freeing unused kernel image (rodata/data gap) memory: 588K [ 14.144359][ T1] Run /home/virtme/virtme-ng/virtme/guest/virtme-init as init process [ 19.775110][ T171] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 19.775955][ T171] kworker/u20:12 (171) used greatest stack depth: 27376 bytes left [ 19.790825][ T147] kworker/u19:9 (147) used greatest stack depth: 27272 bytes left [ 19.839138][ T78] kworker/u20:0 (78) used greatest stack depth: 27160 bytes left [ 19.839165][ T1] Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). [ 19.839171][ T1] CPU: 3 PID: 1 Comm: swapper/0 Tainted: G B 6.8.0-virtme #1 [ 19.839175][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.839178][ T1] Call Trace: [ 19.839180][ T1] [ 19.839184][ T1] panic+0x506/0x5b0 [ 19.839195][ T1] ? __pfx_panic+0x10/0x10 [ 19.839200][ T1] ? kmem_cache_free+0xd7/0x220 [ 19.839206][ T1] ? kernel_execve+0x32a/0x460 [ 19.839214][ T1] kernel_init+0xee/0x200 [ 19.839219][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.839222][ T1] ret_from_fork+0x31/0x70 [ 19.839229][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.839232][ T1] ret_from_fork_asm+0x1a/0x30 [ 19.839241][ T1] [ 19.839403][ T1] Kernel Offset: 0x21200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 19.841226][ T1] ---[ end Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). ]--- WAIT TIMEOUT stderr