Received: by 2002:a25:23cc:0:0:0:0:0 with SMTP id j195csp583780ybj; Thu, 7 May 2020 02:52:13 -0700 (PDT) X-Google-Smtp-Source: APiQypIFcKocDRXjCb/mstHFM/egaAmtxhya1XemwJiDAJz6BQWR8zzZk8jPsPvXBjwvlT8EW6qq X-Received: by 2002:a17:906:c44b:: with SMTP id ck11mr11447693ejb.110.1588845133120; Thu, 07 May 2020 02:52:13 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1588845133; cv=none; d=google.com; s=arc-20160816; b=Y0Je6fxvpuiWq+lpBTWx4FIQdmED5d0OxyJ9pFMIYbP4+ADUa7+luM0o/uwdGhbWvi IZQWP334pMjSfvsbxuDY0hiHsBKKIOzHwi8ZnGgD+9xfFGvzhrCzw6EshUVS16kOnk7H vYinF4C9cG48XsOJ3jGTOF3DhqNOMA7OjQ7SmEYHYdsSyJ3l9o1mpkKBA35LIsHj44r4 SO4izYpMqH8PDYjSJofZfMrCE4TSKV1HGVN1WHFTSxOqLJ19p2wP/rqBoG9IqnnsQPHU EszOXpL0KlnQnm3sSRnxH4RqUEQN7sJhv3+hiEfr/Tjc9BL8OMGS+5bAQF6f34QOL0Fh XyZQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :user-agent:references:in-reply-to:subject:cc:to:from:message-id :date; bh=FUX40IXSfXUGvriLyCs4Dahmy+T5ZJIfDhe+JC09INs=; b=dwBvP+rxO/KWnsS7DwtQOFGOp9jtyyT/D3XACzIcldJpHexejMST7Yq14zEXHVTmHx j6Cz5PdQh4LiLPJDEqovgNE3vVf45Wxbzb5eJf1/nwgiYnU/4IOMlTHSD53UbeNmYo8Z FPe1L9XMp4Ec37sRUV7kROfhQlkNOUv2NiT096SuWjcM81wxh0DIXcmdwvY4Fh1beGw6 ylXKM3o4TcttTFzfrDkG82f5zzAXgI9D1GM21fHlexCWocS/gARzFkrIG6yn4tO0MpR9 G7v9l1y//rzbsfBAlCvxmQxdP0yaYXeROC/DmLQe6NfSggNTt7vtvH29moiicj8O1Ygr IkEg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id n7si2819062edt.587.2020.05.07.02.51.48; Thu, 07 May 2020 02:52:13 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726069AbgEGJuT (ORCPT + 99 others); Thu, 7 May 2020 05:50:19 -0400 Received: from mx2.suse.de ([195.135.220.15]:58738 "EHLO mx2.suse.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725848AbgEGJuT (ORCPT ); Thu, 7 May 2020 05:50:19 -0400 X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (unknown [195.135.220.254]) by mx2.suse.de (Postfix) with ESMTP id 27B7DAFF3; Thu, 7 May 2020 09:50:21 +0000 (UTC) Date: Thu, 07 May 2020 11:50:18 +0200 Message-ID: From: Takashi Iwai To: butt3rflyh4ck Cc: security@kernel.org, syzkaller , tiwai@suse.com, Greg Kroah-Hartman , alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org Subject: Re: KASAN: use-after-free Write in snd_rawmidi_kernel_write1 In-Reply-To: References: User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI/1.14.6 (Maruoka) FLIM/1.14.9 (=?UTF-8?B?R29qxY0=?=) APEL/10.8 Emacs/25.3 (x86_64-suse-linux-gnu) MULE/6.0 (HANACHIRUSATO) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 07 May 2020 09:54:34 +0200, butt3rflyh4ck wrote: > > I report a bug (in linux-5.7-rc1) found by syzkaller. > > kernel config:  > https://github.com/butterflyhack/syzkaller-fuzz/blob/master/v5.7.0-rc1.config > reproducer:  > https://github.com/butterflyhack/syzkaller-fuzz/blob/master/repro.cprog Is this report different from your another one? https://lore.kernel.org/r/CAFcO6XMGT42wFBxEa01Ee5Msuecm+WiXnn4rc-VWkC4vTzycPg@mail.gmail.com thanks, Takashi