Is @gregkh saying #linux kernel is at the point where testing it and reporting more security bugs does not have any value anymore? I am concerned.
"We are drowning in syzkaller reports and just throwing them at us doesn't really help anyone here anymore"
https://lore.kernel.org/dri-devel/20200710103910.GD1203263@kroah.com/ …
-
@dvyukov is there some kind of bisect applied on crashes in syzkaller? Would be interesting to gather 'all' crash-inducing commits, delta-reduced and have a Cyber Grand Challenge for automatic Linux kernel patching ;-)
syzkaller does do some bisection, but it seems to be limited at the moment with a number of false-positives. I'm sure they could use help in making it more robust.
