9p: BUG before corrupting memory