From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wr1-f50.google.com (mail-wr1-f50.google.com [209.85.221.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 60A233E2AB0 for ; Wed, 26 Aug 2026 13:33:21 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.221.50 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787751203; cv=none; b=XSon0DdY1ce6i2MXaLCM56Dznc29sm+5c1YG+QnnVJeOLXBdQgLDwhLKPeiLNEjE4tZwtwfoC4uYeGmAQfVnvbD6yxWhX4ShFdbfftWhqm5RJ8FCn9Nvh9o+ps+GqZXNaGIeHddUQTw7MOs/oN7ruUVl6pzN06vGAYFmchNbP+U= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787751203; c=relaxed/simple; bh=skh1J20miHyQI+YX6SjrUI0pPMNxBurFeVoXPbNyAqw=; h=Date:From:To:Cc:Subject:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=rMdFz/pXcX/hcrgg6XlFHm7KxlIqMqAwx7jsjeP61caW30eTMdxFY5c64tE4H8kW4nqMZYIruJCcLJlFJG7Um7OQw/ALlhVZQ0eMqvSDEFdqOgkdoOk+F/wR0rlWk0q28Xl6HuuvL2jWMAXsndJi1EZ4UlcXElvHX7S9MES1y30= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=c3jprUtV; arc=none smtp.client-ip=209.85.221.50 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="c3jprUtV" Received: by mail-wr1-f50.google.com with SMTP id ffacd0b85a97d-47fde295992so750359f8f.0 for ; Wed, 26 Aug 2026 06:33:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1787751200; x=1788356000; darn=vger.kernel.org; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:subject:cc:to:from:date:from:to:cc:subject :date:message-id:reply-to:content-type; bh=eDeYb04JA1wKUlB+4fT7hBu1dYeSHzQSzUnUA5UoiTk=; b=c3jprUtVQbhETdxCm6+ylXMzRdkNb5d8VOq2/82y9Gnsg3XZY9bBpfHfOBKK3nLgLV 3jxszFUSj7uWNo9rdwFjyJr7pX2PII0A9DohLTxTf8b3KT0BCuWUnMqb5Yjn/2zcJEPN en/lU0QsLn7hSUze0FUqtrG7JwN68xGMbZNSQO/YupFlSTN+RWuj5dzrvqSW5DgBp0UA VZSZRHegLfpTO5rPb3EgXN4Fj9ISh+PjEosJp/rcWM1PbuKki1kOhdh+JXu9ub8TTmFS GXghIHP0hcos1PTLWyIGw63Kjxp0n8n3PWjkTnMADzJmmjILNp4eBa6Fex07ZpF0Cz3o Yl6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1787751200; x=1788356000; h=content-transfer-encoding:content-type:mime-version:references :in-reply-to:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=eDeYb04JA1wKUlB+4fT7hBu1dYeSHzQSzUnUA5UoiTk=; b=adP/tSLVN6i13SlfkEBPHcuBERQKID/XJD5sQCSnymtwsZmhPRy2UmFbtU9DU7Aa2g sLSjLi6ZZG/Cm5HKodv4lXjT3yoGdGdhLJNuZM9kpYvyX/PUtEKsrtSXSKLaCqgc/enF fkiOkitmW9T55vjdPPRxu5weK9ZopLnASh1QtL9l5mzM/kVJKvK9YoEu8CmNfwJrpOx2 5fSZPnLseBzIQS30kKvUEHdX/GNzcsPmX79qxfbKmUug/5CkHoFqFnT+fUz0cVmtXuWK enC3zk4yDhmnDcmmYpujm9gZiiyS4dlFWyybRiqZNeQCx2F+OayVuJKEkzhE6CfOmSIU PGVg== X-Forwarded-Encrypted: i=1; AHgh+Ro/h2u8pNQuoXCtPv9BMQu1lpVI/JhzwqKwUUxlaRnB8x9F6swAOBc7NtX3o+0wxhVgT3Av7oo/DC4=@vger.kernel.org X-Gm-Message-State: AFuF++kRdgawAWP4nKZbB/Y6inoERUSlSLDCrNYffsQuXiTnY2DeVQyj QbeERaRSfqiVQttwAQHO1By6UtLzSFKlZwfnUkG/fnGnOJyV37I3oPldA2uL9USe X-Gm-Gg: AR+sD11cYtrvRtNX8SZxjXZlc3U8oGLzDmh9lxg5X6FOv85j7VdOB+J2IZDOEDptVbj 0ZI4sO8xQlNaj1dk8Gb86cjOmnHQgje9BxkYWodIJQEHkaAA53QUgCiDsrAMBzrqAPQvaNVPoBr wpisPvlMRseKqhR4FYa1hMX8Q+0/WDg33pMvG+RJhmzb1n0nXCn5YXi6u4S/f4xLvOF+Hy5v3GB gimDuYOCz+hy2w3HjJKA6n76APpwIN8tW4/D19ttK938or2CnHgzQe+i5sySQrbwaV4ZDWjSaz7 BQYqCKz8sPSM6NzliL+9v7uR/ABdlIZtBEGa0O/af2v3T9srrbo5nUJ6kLzldPgq7J6UPK0Iiwc Jjw9nsMK0l7hTjSF1nufn2IMHCXBtidbK1YllgDhqbA6zM8iwSHzUg4E2kcfbkzqo+MD6N3j0yo qLNctiN7+DxOmtH86Uy1gEObbfgGA8Nv9yYsTr6z+WWWbozFa1yjnS49K9MOX4arRbzMU= X-Received: by 2002:a05:6000:29d2:b0:482:dfaa:dfa9 with SMTP id ffacd0b85a97d-482e26b3278mr4456632f8f.7.1787751199354; Wed, 26 Aug 2026 06:33:19 -0700 (PDT) Received: from foxbook (bfk5.neoplus.adsl.tpnet.pl. [83.28.48.5]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-482e28f6119sm2777848f8f.34.2026.08.26.06.33.17 (version=TLS1_2 cipher=AES128-SHA bits=128/128); Wed, 26 Aug 2026 06:33:18 -0700 (PDT) Date: Wed, 26 Aug 2026 15:33:11 +0200 From: Michal Pecio To: Greg Kroah-Hartman Cc: Luis Chamberlain , Petr Pavlu , Daniel Gomez , Sami Tolvanen , Aaron Tomlin , Jonathan Corbet , Shuah Khan , Randy Dunlap , "Rafael J. Wysocki" , Danilo Krummrich , Steven Rostedt , Masami Hiramatsu , Mathieu Desnoyers , linux-modules@vger.kernel.org, linux-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-usb@vger.kernel.org, driver-core@lists.linux.dev, linux-trace-kernel@vger.kernel.org Subject: Re: [PATCH 0/2] driver core: add TAINT_FORCED_BIND for when userspace manually messes with devices and drivers Message-ID: <20260826153311.6340efcd.michal.pecio@gmail.com> In-Reply-To: <20260826-bind_taint-v1-0-52b05f4a965c@linuxfoundation.org> References: <20260826-bind_taint-v1-0-52b05f4a965c@linuxfoundation.org> Precedence: bulk X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Wed, 26 Aug 2026 11:19:31 +0200, Greg Kroah-Hartman wrote: > The ability to add and remove devices from a driver through the sysfs > "bind" and "unbind" files was created all those decades ago as a way > that kernel developers can iterate faster, and provide a debugging way > for users to attempt to add a new device to a driver without having to > rebuild their kernel. > > This api over the years has been abused and recently come under a major > fuzzing "attack" through tools like syzbot which decided that it would > attempt to just randomly bind any driver to any type of device, causing > loads of unneeded errors and pointless kernel patches to be generated by > unsuspecting new developers. Hi Greg, I think you confused 'bind' / 'unbind' with the likes of 'new_id' and 'driver_override'. Try binding xhci_hcd to NVMe, you won't get far. FYI, besides being footguns, the latter are apparently used to assign any random PCI device to some VM drivers for passthrough or whatnot. The former hardly are footguns and have further common uses, such as removing kernel drivers to make VM / USBFS work or "turn it off and on again" when a driver doesn't implement recovery. I've seen a published script which does this automatically when xhci goes belly up... I am also not convinced that fuzzing 'unbind' alone is a bad thing. How is that different from 'rmmod' or pulling out a USB-C plug, which may have a bunch of USB *and* PCI devices behind it, mid-operation? Regards, Michal