syzbot


kernel BUG at drivers/android/binder_alloc.c:LINE! (3)
Status: fixed on 2019/06/14 18:22
Reported-by: syzbot+f9f3f388440283da2965@syzkaller.appspotmail.com
Fix commit: a3c7cd0cdf11 batman-adv: mcast: fix multicast tt/tvlv worker locking
First crash: 1026d, last: 957d

Cause bisection: introduced by (bisect log) :
commit 1a7c3d9bb7a926e88d5f57643e75ad1abfc55013
Author: Todd Kjos <tkjos@android.com>
Date: Fri Feb 8 18:35:14 2019 +0000

  binder: create userspace-to-binder-buffer copy function

Crash: WARNING in batadv_mcast_mla_tt_retract (log)
Repro: C syz .config
duplicates (1):
Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
invalid opcode in binder_alloc_do_buffer_copy 2 1046d 1047d 0/22 closed as dup on 2019/05/17 09:50
similar bugs (6):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream kernel BUG at drivers/android/binder_alloc.c:LINE! C 856 1504d 1508d 4/22 fixed on 2018/02/01 10:32
android-414 kernel BUG at drivers/android/binder_alloc.c:LINE! (2) C 3 945d 945d 0/1 public: reported C repro on 2019/06/17 23:05
upstream kernel BUG at drivers/android/binder_alloc.c:LINE! (2) C 1257 1026d 1068d 12/22 fixed on 2019/03/28 12:00
upstream kernel BUG at drivers/android/binder_alloc.c:LINE! (4) C done 26 937d 945d 13/22 fixed on 2019/08/05 13:45
android-414 kernel BUG at drivers/android/binder_alloc.c:LINE! C 30 1027d 1028d 1/1 fixed on 2019/03/28 03:28
android-49 kernel BUG at drivers/android/binder_alloc.c:LINE! C 44 780d 1028d 1/3 internal: reported C repro on 2019/03/26 19:34
Patch testing requests:
Created Duration User Patch Repo Result
2019/03/29 00:59 20m tkjos@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git master OK
2019/03/29 00:26 19m tkjos@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git master OK
2019/03/28 20:01 11m tkjos@google.com git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git char-misc-linus error
2019/03/28 16:32 1m tkjos@google.com patch git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc.git char-misc-linus error

Sample crash report:

Crashes (24):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-selinux-root 2019/03/28 15:29 upstream 1a9df9e29c2a f94f56fe .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/03/28 15:28 upstream 1a9df9e29c2a f94f56fe .config log report syz C
ci-upstream-kasan-gce 2019/03/28 15:18 upstream 1a9df9e29c2a f94f56fe .config log report syz C
ci-upstream-kasan-gce-root 2019/03/28 15:15 upstream 1a9df9e29c2a f94f56fe .config log report syz C
ci-upstream-kasan-gce-386 2019/03/28 14:53 upstream 1a9df9e29c2a f94f56fe .config log report syz C
ci-upstream-kasan-gce-smack-root 2019/06/05 13:39 upstream 788a024921c4 bfb4a51e .config log report
ci-upstream-kasan-gce-root 2019/06/05 13:21 upstream 788a024921c4 bfb4a51e .config log report
ci-upstream-kasan-gce-root 2019/04/26 01:57 upstream f6f3e747454f f46aabc8 .config log report
ci-upstream-kasan-gce 2019/04/26 01:52 upstream f6f3e747454f f46aabc8 .config log report
ci-upstream-kasan-gce-smack-root 2019/04/26 01:51 upstream f6f3e747454f f46aabc8 .config log report
ci-upstream-kasan-gce 2019/04/16 03:28 upstream 5512320c9f6f 505ab413 .config log report
ci-upstream-kasan-gce 2019/04/14 10:50 upstream b60bc0665e6a c402d8f1 .config log report
ci-upstream-kasan-gce-root 2019/04/13 03:53 upstream 8ee15f324866 c402d8f1 .config log report
ci-upstream-kasan-gce-selinux-root 2019/04/12 10:24 upstream 2d06b235815e 8916f5e1 .config log report
ci-upstream-kasan-gce 2019/04/12 10:19 upstream 2d06b235815e 8916f5e1 .config log report
ci-upstream-kasan-gce-smack-root 2019/03/30 02:23 upstream 0e40da3efeb0 c35ee0ea .config log report
ci-upstream-kasan-gce-386 2019/03/30 15:19 upstream 0e40da3efeb0 c35ee0ea .config log report
ci-upstream-kasan-gce-386 2019/03/30 06:27 upstream 0e40da3efeb0 c35ee0ea .config log report
ci-upstream-kasan-gce-386 2019/03/29 12:44 upstream 9936328b41ce 98c1bf1c .config log report
ci-upstream-kasan-gce-386 2019/03/29 03:04 upstream 8c7ae38d1ce1 14c58f8d .config log report
ci-upstream-kasan-gce-386 2019/03/28 16:20 upstream 1a9df9e29c2a f94f56fe .config log report
ci-upstream-kasan-gce-386 2019/03/28 15:43 upstream 1a9df9e29c2a f94f56fe .config log report
ci-upstream-kasan-gce-386 2019/03/28 15:34 upstream 1a9df9e29c2a f94f56fe .config log report
ci-upstream-kasan-gce-386 2019/03/28 14:17 upstream 1a9df9e29c2a f94f56fe .config log report