Received: by 2002:a25:23cc:0:0:0:0:0 with SMTP id j195csp532249ybj;
        Thu, 7 May 2020 01:25:43 -0700 (PDT)
X-Google-Smtp-Source: APiQypIXyOBkuvUUuLt4Db2BxFNEkG4uZhZspnbXC5LvVnpLPi0067D8dMdzg6hJXZABrPXl/DpQ
X-Received: by 2002:a17:906:1690:: with SMTP id s16mr10113086ejd.339.1588839943257;
        Thu, 07 May 2020 01:25:43 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1588839943; cv=none;
        d=google.com; s=arc-20160816;
        b=cSUS1DGZHjq42oUR6zmA2mZaPl+n90iam6aSzkbbJHOeqCSdxuklzTxEUF1uwI9Jwh
         g8gyoAl0IQLwfIwgJrGQikui81Y916je0qkqdz9ESD06A7h2cN339yKqirqijNZy788l
         eWMSE/pJD2xgyt9+eVeohl/svdiqh0o55BvpEAS50U+Y4ygejo9YMU5Q3FMXROwqwqrS
         AOK8k5HoDLSTcgbwSRswNR5gH1ZXIYVqAWl/eK31JrcKatwPxsY3RxZD4w3NmWLWPVPu
         d4qKoGUF16a1y9V8MzwyuTvsumjLRvhtFZO9NWEuCOxtXlUjp205BEvfcr0dEpFWxhj0
         k3uQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=list-id:precedence:sender:in-reply-to:content-disposition
         :mime-version:references:message-id:subject:cc:to:from:date
         :dkim-signature;
        bh=m2oFiBPjNk1INVG7PfHk2CXDY5TUbZdRjhbMiygjNsY=;
        b=qv96otnstgtPsVb1TUrSMsIpzMPJn0x4JGdbZqNxzqcpumKCoI9nDgK0RgktNSkoMd
         TFRKGdTPHOXn6M/uqltUuBsBd9lqBgWoPgZBrEfv5hkFnjQfb3/zuNMVIkq+AcyOpGjt
         t99URAQBz3ApRo0JU6bjP0hNBgU0jeOK4Zf5JMg5ijLb3LSMAGRmK1kkWOCRnNZmIttb
         xGnacZe32w9dIXWf8PBmlToN7Y9efGY2OWJiYiGHVT0PWqTZejSOO6gVAJiOMp47+Kfq
         Qt9SArPNeNhE+vPsR943D0piCYNDzqtNQPMVfPTn4i/i82ZTZ2pDS0pfFU0pz9CMwesc
         74Jw==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@kernel.org header.s=default header.b=EDeTWn3l;
       spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18])
        by mx.google.com with ESMTP id n8si990374edo.572.2020.05.07.01.25.19;
        Thu, 07 May 2020 01:25:43 -0700 (PDT)
Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@kernel.org header.s=default header.b=EDeTWn3l;
       spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1726542AbgEGIXj (ORCPT <rfc822;linuxbirdgao@gmail.com>
        + 99 others); Thu, 7 May 2020 04:23:39 -0400
Received: from mail.kernel.org ([198.145.29.99]:39254 "EHLO mail.kernel.org"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1725862AbgEGIXi (ORCPT <rfc822;linux-kernel@vger.kernel.org>);
        Thu, 7 May 2020 04:23:38 -0400
Received: from localhost (83-86-89-107.cable.dynamic.v4.ziggo.nl [83.86.89.107])
        (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
        (No client certificate requested)
        by mail.kernel.org (Postfix) with ESMTPSA id 009E92073A;
        Thu,  7 May 2020 08:23:37 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;
        s=default; t=1588839818;
        bh=lO99hYKc327tJIds5lglufIkKhv7kNMeB7LuejbJZ3o=;
        h=Date:From:To:Cc:Subject:References:In-Reply-To:From;
        b=EDeTWn3l2J1cfzbkF+ah1A84Sx22VmW7ca5mL79RHkM+xbNdaur8OeBhRdwcVVnRx
         rTt2f4Ng+/Y5wzdve7MG6TZnr7inIu9KD/7M9gvuEKF8onAVODdLLyqOZE62mgRJ3r
         YQHyqd7qYiV4yp2rtUlwRm7x+sMMMjFSZ4s1tFHI=
Date:   Thu, 7 May 2020 10:23:36 +0200
From:   Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To:     butt3rflyh4ck <butterflyhuangxx@gmail.com>
Cc:     security@kernel.org, syzkaller <syzkaller@googlegroups.com>,
        tiwai@suse.com, alsa-devel@alsa-project.org,
        linux-kernel@vger.kernel.org
Subject: Re: KASAN: use-after-free Write in snd_rawmidi_kernel_write1
Message-ID: <20200507082336.GG1024567@kroah.com>
References: <CAFcO6XMWpUVK_yzzCpp8_XP7+=oUpQvuBeCbMffEDkpe8jWrfg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAFcO6XMWpUVK_yzzCpp8_XP7+=oUpQvuBeCbMffEDkpe8jWrfg@mail.gmail.com>
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Thu, May 07, 2020 at 03:54:34PM +0800, butt3rflyh4ck wrote:
> I report a bug (in linux-5.7-rc1) found by syzkaller.
> 
> kernel config:
> https://github.com/butterflyhack/syzkaller-fuzz/blob/master/v5.7.0-rc1.config
> reproducer:
> https://github.com/butterflyhack/syzkaller-fuzz/blob/master/repro.cprog
> 
> I test the reproducer in linux-5.7-rc4 and crash too.

Same as the other email, patches are best, thansk!

greg k-h