After several tests, I found that the same PoC can cause multiple different crashes for some unknown reason. Thus, I suspect that the bug is capable of performing unintended memory writing without being caught by KASAN. For reproducibility, I've created a GitHub repo at https://github.com/TomAPU/Linux610BugReort, which contains the software versions we used, the QEMU arguments we used to boot up the kernel, the kernel config we used, the pre-compiled kernel image, Dockerfile that can be used to compile the kernel. I hope this repo will be helpful for analyzing the bug. Yours, Juefei On Thu, Aug 29, 2024 at 4:28 PM Xingyu Li <xli399@xxxxxxx> wrote: > > Juefei: Can you give some input on this? > > On Thu, Aug 29, 2024 at 4:24 PM Roman Gushchin <roman.gushchin@xxxxxxxxx> wrote: > > > > On Wed, Aug 28, 2024 at 10:20:04PM -0700, Xingyu Li wrote: > > > Hi, > > > > > > Here is the kernel config file: > > > https://gist.github.com/TomAPU/64f5db0fe976a3e94a6dd2b621887cdd > > > > > > how long does it take to reproduce? > > > Juefei will follow on this, and I just CC'ed him. > > > > I ran the reproducer for several hours in a vm without much success. > > So in order to make any progress I'd really need a help from your side. > > If you can reproduce it consistently, can you, please, try to bisect it? > > > > Thanks! > > > > -- > Yours sincerely, > Xingyu