From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.6 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 6E6E7C5B578 for ; Wed, 3 Jul 2019 05:02:34 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 3C58020989 for ; Wed, 3 Jul 2019 05:02:34 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1562130154; bh=hPTJr/4Fckifjcsd2u8POjGCFLOUJufQKl8YwN15Dp4=; h=Date:From:To:Cc:Subject:List-ID:From; b=hQGhkJXIlD+EmhUvjFe2kMrfJJGAQF0nexd4iWFXaGHDGSocdqHbMYIGuaGbOpAHX IPT1hxML55pdqMG5tY8hX6AEh0kc4CEIrCyEiG2PoLDIRGPBsOoX8sJz63gmYo5nqI VCPmlm/EfQbgusd4TbWhTlqBCdXta5xYyxs+XiAo= Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726684AbfGCFCc (ORCPT ); Wed, 3 Jul 2019 01:02:32 -0400 Received: from mail.kernel.org ([198.145.29.99]:47760 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725848AbfGCFCc (ORCPT ); Wed, 3 Jul 2019 01:02:32 -0400 Received: from sol.localdomain (c-24-5-143-220.hsd1.ca.comcast.net [24.5.143.220]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id E00BD20989; Wed, 3 Jul 2019 05:02:30 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1562130151; bh=hPTJr/4Fckifjcsd2u8POjGCFLOUJufQKl8YwN15Dp4=; h=Date:From:To:Cc:Subject:From; b=gccmNSbBIeCgwTzD3fj8WdT0xTR1/6Uw6PZu7sk91BTtsMbL0o+9zuTLnyFaFGWNY NLLVrgFxp01FQhfZrHfqB5h/Fsgu+heOXYe0k0vH2m9+NuYLll75ZWocmUGiBg2WSz pXVU/FaxkcT3DbjwzduAu+a+HjhHOQyydG/pQM2Q= Date: Tue, 2 Jul 2019 22:02:29 -0700 From: Eric Biggers To: devel@driverdev.osuosl.org, Greg Kroah-Hartman , Arve =?iso-8859-1?B?SGr4bm5lduVn?= , Todd Kjos , Martijn Coenen , Joel Fernandes , Christian Brauner Cc: linux-kernel@vger.kernel.org, syzkaller-bugs@googlegroups.com Subject: Reminder: 3 open syzbot bugs in "android/binder" subsystem Message-ID: <20190703050229.GC633@sol.localdomain> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.12.1 (2019-06-15) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org [This email was generated by a script. Let me know if you have any suggestions to make it better, or if you want it re-generated with the latest status.] Of the currently open syzbot reports against the upstream kernel, I've manually marked 3 of them as possibly being bugs in the "android/binder" subsystem. I've listed these reports below, sorted by an algorithm that tries to list first the reports most likely to be still valid, important, and actionable. Of these 3 bugs, 1 was seen in mainline in the last week. Of these 3 bugs, 1 was bisected to a commit from the following person: Todd Kjos If you believe a bug is no longer valid, please close the syzbot report by sending a '#syz fix', '#syz dup', or '#syz invalid' command in reply to the original thread, as explained at https://goo.gl/tpsmEJ#status If you believe I misattributed a bug to the "android/binder" subsystem, please let me know, and if possible forward the report to the correct people or mailing list. Here are the bugs: -------------------------------------------------------------------------------- Title: kernel BUG at drivers/android/binder_alloc.c:LINE! (4) Last occurred: 6 days ago Reported: 14 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=bbf40136a49ffaa8ac60906edcbe77f825b2c406 Original thread: https://lkml.kernel.org/lkml/000000000000b6b25b058b96d5c3@google.com/T/#u This bug has a C reproducer. This bug was bisected to: commit bde4a19fc04f5f46298c86b1acb7a4af1d5f138d Author: Todd Kjos Date: Fri Feb 8 18:35:20 2019 +0000   binder: use userspace pointer as base of buffer space The original thread for this bug has received 3 replies; the last was 4 days ago. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+3ae18325f96190606754@syzkaller.appspotmail.com If you send any email or patch for this bug, please reply to the original thread, which had activity only 4 days ago. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/000000000000b6b25b058b96d5c3@google.com -------------------------------------------------------------------------------- Title: WARNING in binder_transaction_buffer_release Last occurred: 0 days ago Reported: 43 days ago Branches: Mainline and others Dashboard link: https://syzkaller.appspot.com/bug?id=4e0a6a529aef923a8d61c5d20b8fc0605c730138 Original thread: https://lkml.kernel.org/lkml/000000000000afe2c70589526668@google.com/T/#u This bug has a syzkaller reproducer only. The original thread for this bug has received 2 replies; the last was 20 days ago. If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+8b3c354d33c4ac78bfad@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/000000000000afe2c70589526668@google.com -------------------------------------------------------------------------------- Title: possible deadlock in uprobe_clear_state Last occurred: 165 days ago Reported: 202 days ago Branches: Mainline Dashboard link: https://syzkaller.appspot.com/bug?id=a1ce9b3da349209c5085bb8c4fee753d68c3697f Original thread: https://lkml.kernel.org/lkml/00000000000010a9fb057cd14174@google.com/T/#u Unfortunately, this bug does not have a reproducer. [Note: the uprobe developers think this is a bug in binder, not uprobes. See https://marc.info/?l=linux-kernel&m=155119805728815&w=2 for a suggested fix for this bug.] If you fix this bug, please add the following tag to the commit: Reported-by: syzbot+1068f09c44d151250c33@syzkaller.appspotmail.com If you send any email or patch for this bug, please consider replying to the original thread. For the git send-email command to use, or tips on how to reply if the thread isn't in your mailbox, see the "Reply instructions" at https://lkml.kernel.org/r/00000000000010a9fb057cd14174@google.com