[ 13.144017][ T1] loop: module loaded [ 13.159008][ T1] scsi host0: ata_piix [ 13.162875][ T1] scsi host1: ata_piix [ 13.164411][ T1] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc080 irq 14 lpm-pol 0 [ 13.164669][ T1] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc088 irq 15 lpm-pol 0 [ 13.191780][ T1] tun: Universal TUN/TAP device driver, 1.6 [ 13.194227][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 13.196124][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 13.196404][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 13.201274][ T1] rtc_cmos 00:04: RTC can wake from S4 [ 13.203852][ T9] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1 [ 13.208086][ T1] rtc_cmos 00:04: registered as rtc0 [ 13.208431][ T1] rtc_cmos 00:04: setting system clock to 2024-03-22T00:16:39 UTC (1711066599) [ 13.209772][ T1] rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 13.215359][ T1] i6300ESB timer 0000:00:03.0: initialized. heartbeat=30 sec (nowayout=0) [ 13.217972][ T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev [ 13.224376][ T9] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 [ 13.233781][ T1] netem: version 1.3 [ 13.234707][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver [ 13.240813][ T1] IPv4 over IPsec tunneling driver [ 13.247100][ T1] NET: Registered PF_INET6 protocol family [ 13.256804][ T1] Segment Routing with IPv6 [ 13.257485][ T1] In-situ OAM (IOAM) with IPv6 [ 13.263484][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 13.274079][ T1] NET: Registered PF_PACKET protocol family [ 13.275430][ T1] 8021q: 802.1Q VLAN Support v1.8 [ 13.275899][ T1] 9pnet: Installing 9P2000 support [ 13.281129][ T1] Key type dns_resolver registered [ 13.289096][ T1] IPI shorthand broadcast: enabled [ 13.319684][ T66] ata2: found unknown device (class 0) [ 13.320707][ T66] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 13.324715][ T44] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 13.340670][ T44] scsi 1:0:0:0: Attached scsi generic sg0 type 5 [ 13.688042][ T1] sched_clock: Marking stable (13677006333, 10461289)->(13696186313, -8718691) [ 13.689306][ T1] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 13.691369][ T1] registered taskstats version 1 [ 13.694297][ T1] Loading compiled-in X.509 certificates [ 13.817350][ T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 14855) [ 13.817382][ T75] kmemleak: Automatic memory scanning thread started [ 13.817796][ T1] page_owner is disabled [ 13.819966][ T1] PM: Magic number: 0:351:254 [ 13.820378][ T1] printk: legacy console [netcon0] enabled [ 13.820734][ T1] netconsole: network logging started [ 13.822935][ T1] ALSA device list: [ 13.823116][ T1] No soundcards found. [ 13.825108][ T1] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 13.826337][ T1] 9pnet_virtio: no channels available for device [ 13.832965][ T1] ================================================================== [ 13.833276][ T1] BUG: KASAN: slab-use-after-free in v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.833589][ T1] Read of size 8 at addr ffff888003eff250 by task swapper/0/1 [ 13.833841][ T1] [ 13.833921][ T1] CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.8.0-virtme #1 [ 13.834218][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 13.834646][ T1] Call Trace: [ 13.834780][ T1] [ 13.834893][ T1] dump_stack_lvl+0x82/0xd0 [ 13.835105][ T1] print_address_description.constprop.0+0x2c/0x3b0 [ 13.835350][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.835553][ T1] print_report+0xb4/0x270 [ 13.835762][ T1] ? kasan_addr_to_slab+0x4e/0x90 [ 13.835893][ T1] kasan_report+0xbd/0xf0 [ 13.835993][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.836134][ T1] v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.836280][ T1] v9fs_fid_iget_dotl+0x18c/0x210 [ 13.836411][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.836511][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.836657][ T1] ? vfs_parse_fs_string+0xdb/0x130 [ 13.836801][ T1] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 13.836949][ T1] ? kasan_save_track+0x14/0x30 [ 13.837093][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.837232][ T1] legacy_get_tree+0x107/0x200 [ 13.837372][ T1] ? alloc_fs_context+0x4b6/0x860 [ 13.837498][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.837627][ T1] do_new_mount+0x27d/0x5e0 [ 13.837756][ T1] ? __pfx_do_new_mount+0x10/0x10 [ 13.837884][ T1] ? __pfx___debug_check_no_obj_freed+0x10/0x10 [ 13.838045][ T1] ? __virt_addr_valid+0x227/0x420 [ 13.838184][ T1] path_mount+0x271/0x14f0 [ 13.838313][ T1] ? __pfx_path_mount+0x10/0x10 [ 13.838442][ T1] ? kmem_cache_free+0xd7/0x220 [ 13.838568][ T1] ? kern_path+0x3d/0x50 [ 13.838673][ T1] init_mount+0x9d/0xf0 [ 13.838770][ T1] ? __pfx_init_mount+0x10/0x10 [ 13.838904][ T1] do_mount_root+0xbc/0x330 [ 13.839033][ T1] mount_root_generic+0x22c/0x470 [ 13.839163][ T1] ? __pfx_mount_root_generic+0x10/0x10 [ 13.839305][ T1] ? mount_root+0x25b/0x2f0 [ 13.839431][ T1] prepare_namespace+0xa5/0x2d0 [ 13.839559][ T1] ? __pfx_prepare_namespace+0x10/0x10 [ 13.839688][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.839819][ T1] kernel_init+0x20/0x200 [ 13.839913][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.840041][ T1] ret_from_fork+0x31/0x70 [ 13.840173][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.840310][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.840443][ T1] [ 13.840539][ T1] [ 13.840606][ T1] Allocated by task 1: [ 13.840699][ T1] kasan_save_stack+0x24/0x50 [ 13.840829][ T1] kasan_save_track+0x14/0x30 [ 13.840959][ T1] __kasan_kmalloc+0x7f/0x90 [ 13.841085][ T1] p9_client_getattr_dotl+0x4c/0x1a0 [ 13.841216][ T1] v9fs_fid_iget_dotl+0xca/0x210 [ 13.841347][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.841445][ T1] legacy_get_tree+0x107/0x200 [ 13.841578][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.841706][ T1] do_new_mount+0x27d/0x5e0 [ 13.841835][ T1] path_mount+0x271/0x14f0 [ 13.841962][ T1] init_mount+0x9d/0xf0 [ 13.842059][ T1] do_mount_root+0xbc/0x330 [ 13.842203][ T1] mount_root_generic+0x22c/0x470 [ 13.842340][ T1] prepare_namespace+0xa5/0x2d0 [ 13.842472][ T1] kernel_init+0x20/0x200 [ 13.842572][ T1] ret_from_fork+0x31/0x70 [ 13.842698][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.842830][ T1] [ 13.842893][ T1] Freed by task 1: [ 13.842988][ T1] kasan_save_stack+0x24/0x50 [ 13.843119][ T1] kasan_save_track+0x14/0x30 [ 13.843275][ T1] kasan_save_free_info+0x3b/0x60 [ 13.843400][ T1] __kasan_slab_free+0xf4/0x180 [ 13.843528][ T1] kfree+0xd3/0x230 [ 13.843643][ T1] v9fs_fid_iget_dotl+0x15e/0x210 [ 13.843769][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.843876][ T1] legacy_get_tree+0x107/0x200 [ 13.844014][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.844143][ T1] do_new_mount+0x27d/0x5e0 [ 13.844278][ T1] path_mount+0x271/0x14f0 [ 13.844422][ T1] init_mount+0x9d/0xf0 [ 13.844524][ T1] do_mount_root+0xbc/0x330 [ 13.844648][ T1] mount_root_generic+0x22c/0x470 [ 13.844775][ T1] prepare_namespace+0xa5/0x2d0 [ 13.844914][ T1] kernel_init+0x20/0x200 [ 13.845008][ T1] ret_from_fork+0x31/0x70 [ 13.845153][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.845288][ T1] [ 13.845357][ T1] The buggy address belongs to the object at ffff888003eff250 [ 13.845357][ T1] which belongs to the cache kmalloc-192 of size 192 [ 13.845676][ T1] The buggy address is located 0 bytes inside of [ 13.845676][ T1] freed 192-byte region [ffff888003eff250, ffff888003eff310) [ 13.846038][ T1] [ 13.846137][ T1] The buggy address belongs to the physical page: [ 13.846384][ T1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888003eff388 pfn:0x3efe [ 13.846789][ T1] head: order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 13.847097][ T1] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1) [ 13.847407][ T1] page_type: 0xffffffff() [ 13.847572][ T1] raw: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.847936][ T1] raw: ffff888003eff388 00000000001a0010 00000001ffffffff 0000000000000000 [ 13.848256][ T1] head: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.848482][ T1] head: ffff888003eff388 00000000001a0010 00000001ffffffff 0000000000000000 [ 13.848708][ T1] head: 0080000000000001 ffffea00000fbf81 ffffea00000fbfc8 00000000ffffffff [ 13.848932][ T1] head: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 13.849152][ T1] page dumped because: kasan: bad access detected [ 13.849310][ T1] [ 13.849375][ T1] Memory state around the buggy address: [ 13.849500][ T1] ffff888003eff100: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 13.849693][ T1] ffff888003eff180: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 13.849872][ T1] >ffff888003eff200: fc fc fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 13.850057][ T1] ^ [ 13.850211][ T1] ffff888003eff280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 13.850391][ T1] ffff888003eff300: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 13.850582][ T1] ================================================================== [ 13.850938][ T1] Disabling lock debugging due to kernel taint [ 13.864676][ T1] VFS: Mounted root (9p filesystem) readonly on device 0:20. [ 13.865788][ T1] devtmpfs: mounted [ 13.897070][ T1] Freeing unused kernel image (initmem) memory: 6660K [ 13.897826][ T1] Write protecting the kernel read-only data: 61440k [ 13.898412][ T1] Freeing unused kernel image (rodata/data gap) memory: 588K [ 13.898646][ T1] Run /home/virtme/virtme-ng/virtme/guest/virtme-init as init process [ 19.783533][ T172] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 19.784136][ T172] kworker/u20:9 (172) used greatest stack depth: 27376 bytes left [ 19.787195][ T160] kworker/u19:10 (160) used greatest stack depth: 26968 bytes left [ 19.828411][ T77] kworker/u20:0 (77) used greatest stack depth: 26872 bytes left [ 19.828568][ T1] Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). [ 19.828573][ T1] CPU: 3 PID: 1 Comm: swapper/0 Tainted: G B 6.8.0-virtme #1 [ 19.828577][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.828579][ T1] Call Trace: [ 19.828581][ T1] [ 19.828584][ T1] panic+0x506/0x5b0 [ 19.828592][ T1] ? __pfx_panic+0x10/0x10 [ 19.828597][ T1] ? kmem_cache_free+0xd7/0x220 [ 19.828601][ T1] ? kernel_execve+0x32a/0x460 [ 19.828608][ T1] kernel_init+0xee/0x200 [ 19.828612][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.828614][ T1] ret_from_fork+0x31/0x70 [ 19.828620][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.828623][ T1] ret_from_fork_asm+0x1a/0x30 [ 19.828630][ T1] [ 19.828728][ T1] Kernel Offset: 0x1be00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 19.830519][ T1] ---[ end Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). ]--- WAIT TIMEOUT stderr