[ 13.078202][ T1] loop: module loaded [ 13.103656][ T1] scsi host0: ata_piix [ 13.107264][ T1] scsi host1: ata_piix [ 13.109209][ T1] ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc080 irq 14 lpm-pol 0 [ 13.109434][ T1] ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc088 irq 15 lpm-pol 0 [ 13.120967][ T1] tun: Universal TUN/TAP device driver, 1.6 [ 13.123149][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 13.124944][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 13.125291][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 13.128692][ T1] rtc_cmos 00:04: RTC can wake from S4 [ 13.134702][ T49] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input2 [ 13.135496][ T1] rtc_cmos 00:04: registered as rtc0 [ 13.135786][ T1] rtc_cmos 00:04: setting system clock to 2024-03-22T00:15:34 UTC (1711066534) [ 13.136765][ T1] rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs [ 13.137874][ T49] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input3 [ 13.141062][ T1] i6300ESB timer 0000:00:03.0: initialized. heartbeat=30 sec (nowayout=0) [ 13.142829][ T1] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@lists.linux.dev [ 13.153929][ T1] netem: version 1.3 [ 13.154592][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver [ 13.171814][ T1] IPv4 over IPsec tunneling driver [ 13.175652][ T1] NET: Registered PF_INET6 protocol family [ 13.183539][ T1] Segment Routing with IPv6 [ 13.184099][ T1] In-situ OAM (IOAM) with IPv6 [ 13.188514][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 13.196099][ T1] NET: Registered PF_PACKET protocol family [ 13.197223][ T1] 8021q: 802.1Q VLAN Support v1.8 [ 13.197525][ T1] 9pnet: Installing 9P2000 support [ 13.200941][ T1] Key type dns_resolver registered [ 13.206319][ T1] IPI shorthand broadcast: enabled [ 13.270229][ T65] ata2: found unknown device (class 0) [ 13.271604][ T65] ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 [ 13.275612][ T57] scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 [ 13.290860][ T57] scsi 1:0:0:0: Attached scsi generic sg0 type 5 [ 13.501951][ T1] sched_clock: Marking stable (13490011581, 11022366)->(13514873645, -13839698) [ 13.503830][ T1] Timer migration: 1 hierarchy levels; 8 children per group; 1 crossnode level [ 13.505587][ T1] registered taskstats version 1 [ 13.509599][ T1] Loading compiled-in X.509 certificates [ 13.629449][ T1] kmemleak: Kernel memory leak detector initialized (mem pool available: 14343) [ 13.629461][ T77] kmemleak: Automatic memory scanning thread started [ 13.629746][ T1] page_owner is disabled [ 13.631107][ T1] PM: Magic number: 0:351:254 [ 13.631446][ T1] printk: legacy console [netcon0] enabled [ 13.631692][ T1] netconsole: network logging started [ 13.632987][ T1] ALSA device list: [ 13.633142][ T1] No soundcards found. [ 13.634466][ T1] md: Skipping autodetection of RAID arrays. (raid=autodetect will force) [ 13.635307][ T1] 9pnet_virtio: no channels available for device [ 13.639520][ T1] ================================================================== [ 13.639754][ T1] BUG: KASAN: slab-use-after-free in v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.639984][ T1] Read of size 8 at addr ffff888004dcb4c0 by task swapper/0/1 [ 13.640213][ T1] [ 13.640290][ T1] CPU: 2 PID: 1 Comm: swapper/0 Not tainted 6.8.0-virtme #1 [ 13.640538][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 13.640880][ T1] Call Trace: [ 13.640997][ T1] [ 13.641080][ T1] dump_stack_lvl+0x82/0xd0 [ 13.641239][ T1] print_address_description.constprop.0+0x2c/0x3b0 [ 13.641442][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.641603][ T1] print_report+0xb4/0x270 [ 13.641761][ T1] ? kasan_addr_to_slab+0x4e/0x90 [ 13.641918][ T1] kasan_report+0xbd/0xf0 [ 13.642036][ T1] ? v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.642179][ T1] v9fs_stat2inode_dotl+0x9d6/0xb80 [ 13.642319][ T1] v9fs_fid_iget_dotl+0x18c/0x210 [ 13.642468][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.642578][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.642722][ T1] ? vfs_parse_fs_string+0xdb/0x130 [ 13.642866][ T1] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 13.643011][ T1] ? kasan_save_track+0x14/0x30 [ 13.643164][ T1] ? __pfx_v9fs_mount+0x10/0x10 [ 13.643313][ T1] legacy_get_tree+0x107/0x200 [ 13.643462][ T1] ? alloc_fs_context+0x4b6/0x860 [ 13.643605][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.643752][ T1] do_new_mount+0x27d/0x5e0 [ 13.643897][ T1] ? __pfx_do_new_mount+0x10/0x10 [ 13.644040][ T1] ? __pfx___debug_check_no_obj_freed+0x10/0x10 [ 13.644216][ T1] ? __virt_addr_valid+0x227/0x420 [ 13.644362][ T1] path_mount+0x271/0x14f0 [ 13.644516][ T1] ? __pfx_path_mount+0x10/0x10 [ 13.644655][ T1] ? kmem_cache_free+0xd7/0x220 [ 13.644794][ T1] ? kern_path+0x3d/0x50 [ 13.644906][ T1] init_mount+0x9d/0xf0 [ 13.645014][ T1] ? __pfx_init_mount+0x10/0x10 [ 13.645154][ T1] do_mount_root+0xbc/0x330 [ 13.645300][ T1] mount_root_generic+0x22c/0x470 [ 13.645446][ T1] ? __pfx_mount_root_generic+0x10/0x10 [ 13.645591][ T1] ? mount_root+0x25b/0x2f0 [ 13.645732][ T1] prepare_namespace+0xa5/0x2d0 [ 13.645873][ T1] ? __pfx_prepare_namespace+0x10/0x10 [ 13.646016][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.646160][ T1] kernel_init+0x20/0x200 [ 13.646270][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.646411][ T1] ret_from_fork+0x31/0x70 [ 13.646559][ T1] ? __pfx_kernel_init+0x10/0x10 [ 13.646712][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.646859][ T1] [ 13.646969][ T1] [ 13.647039][ T1] Allocated by task 1: [ 13.647144][ T1] kasan_save_stack+0x24/0x50 [ 13.647289][ T1] kasan_save_track+0x14/0x30 [ 13.647430][ T1] __kasan_kmalloc+0x7f/0x90 [ 13.647581][ T1] p9_client_getattr_dotl+0x4c/0x1a0 [ 13.647724][ T1] v9fs_fid_iget_dotl+0xca/0x210 [ 13.647864][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.647975][ T1] legacy_get_tree+0x107/0x200 [ 13.648124][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.648265][ T1] do_new_mount+0x27d/0x5e0 [ 13.648406][ T1] path_mount+0x271/0x14f0 [ 13.648552][ T1] init_mount+0x9d/0xf0 [ 13.648661][ T1] do_mount_root+0xbc/0x330 [ 13.648799][ T1] mount_root_generic+0x22c/0x470 [ 13.648944][ T1] prepare_namespace+0xa5/0x2d0 [ 13.649120][ T1] kernel_init+0x20/0x200 [ 13.649236][ T1] ret_from_fork+0x31/0x70 [ 13.649386][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.649534][ T1] [ 13.649605][ T1] Freed by task 1: [ 13.649711][ T1] kasan_save_stack+0x24/0x50 [ 13.649853][ T1] kasan_save_track+0x14/0x30 [ 13.649998][ T1] kasan_save_free_info+0x3b/0x60 [ 13.650145][ T1] __kasan_slab_free+0xf4/0x180 [ 13.650302][ T1] kfree+0xd3/0x230 [ 13.650408][ T1] v9fs_fid_iget_dotl+0x15e/0x210 [ 13.650562][ T1] v9fs_mount+0x3fe/0x7d0 [ 13.650668][ T1] legacy_get_tree+0x107/0x200 [ 13.650809][ T1] vfs_get_tree+0x8a/0x2e0 [ 13.650952][ T1] do_new_mount+0x27d/0x5e0 [ 13.651092][ T1] path_mount+0x271/0x14f0 [ 13.651233][ T1] init_mount+0x9d/0xf0 [ 13.651340][ T1] do_mount_root+0xbc/0x330 [ 13.651480][ T1] mount_root_generic+0x22c/0x470 [ 13.651631][ T1] prepare_namespace+0xa5/0x2d0 [ 13.651776][ T1] kernel_init+0x20/0x200 [ 13.651883][ T1] ret_from_fork+0x31/0x70 [ 13.652023][ T1] ret_from_fork_asm+0x1a/0x30 [ 13.652164][ T1] [ 13.652236][ T1] The buggy address belongs to the object at ffff888004dcb4c0 [ 13.652236][ T1] which belongs to the cache kmalloc-192 of size 192 [ 13.652584][ T1] The buggy address is located 0 bytes inside of [ 13.652584][ T1] freed 192-byte region [ffff888004dcb4c0, ffff888004dcb580) [ 13.652931][ T1] [ 13.653004][ T1] The buggy address belongs to the physical page: [ 13.653174][ T1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888004dcb5f8 pfn:0x4dca [ 13.653453][ T1] head: order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 13.653673][ T1] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1) [ 13.653888][ T1] page_type: 0xffffffff() [ 13.654001][ T1] raw: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.654252][ T1] raw: ffff888004dcb5f8 00000000001a0012 00000001ffffffff 0000000000000000 [ 13.654528][ T1] head: 0080000000000a40 ffff888001042c40 ffff888001040a88 ffff888001040a88 [ 13.654790][ T1] head: ffff888004dcb5f8 00000000001a0012 00000001ffffffff 0000000000000000 [ 13.655044][ T1] head: 0080000000000001 ffffea0000137281 dead000000000122 00000000ffffffff [ 13.655291][ T1] head: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000 [ 13.655542][ T1] page dumped because: kasan: bad access detected [ 13.655723][ T1] [ 13.655793][ T1] Memory state around the buggy address: [ 13.655934][ T1] ffff888004dcb380: fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 13.656142][ T1] ffff888004dcb400: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 13.656345][ T1] >ffff888004dcb480: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 13.656547][ T1] ^ [ 13.656863][ T1] ffff888004dcb500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 13.657070][ T1] ffff888004dcb580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 13.657276][ T1] ================================================================== [ 13.657576][ T1] Disabling lock debugging due to kernel taint [ 13.657937][ T1] VFS: Mounted root (9p filesystem) readonly on device 0:20. [ 13.659018][ T1] devtmpfs: mounted [ 13.718932][ T1] Freeing unused kernel image (initmem) memory: 6660K [ 13.719227][ T1] Write protecting the kernel read-only data: 61440k [ 13.720105][ T1] Freeing unused kernel image (rodata/data gap) memory: 588K [ 13.720402][ T1] Run /home/virtme/virtme-ng/virtme/guest/virtme-init as init process [ 19.269108][ T172] request_module: modprobe binfmt-0000 cannot be processed, kmod busy with 50 threads for more than 5 seconds now [ 19.269711][ T172] kworker/u17:12 (172) used greatest stack depth: 27376 bytes left [ 19.284809][ T104] kworker/u18:3 (104) used greatest stack depth: 27160 bytes left [ 19.302672][ T91] kworker/u20:2 (91) used greatest stack depth: 27080 bytes left [ 19.314767][ T1] Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). [ 19.315061][ T1] CPU: 1 PID: 1 Comm: swapper/0 Tainted: G B 6.8.0-virtme #1 [ 19.315269][ T1] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 19.315524][ T1] Call Trace: [ 19.315613][ T1] [ 19.315675][ T1] panic+0x506/0x5b0 [ 19.315770][ T1] ? __pfx_panic+0x10/0x10 [ 19.315890][ T1] ? kmem_cache_free+0xd7/0x220 [ 19.316008][ T1] ? kernel_execve+0x32a/0x460 [ 19.316135][ T1] kernel_init+0xee/0x200 [ 19.316223][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.316335][ T1] ret_from_fork+0x31/0x70 [ 19.316452][ T1] ? __pfx_kernel_init+0x10/0x10 [ 19.316570][ T1] ret_from_fork_asm+0x1a/0x30 [ 19.316793][ T1] [ 19.316957][ T1] Kernel Offset: 0x2f400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 19.317229][ T1] ---[ end Kernel panic - not syncing: Requested init /home/virtme/virtme-ng/virtme/guest/virtme-init failed (error -8). ]--- WAIT TIMEOUT stderr