BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 09:45
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+246ea4feed277471958a@syzkaller.appspotmail.com
First crash: 1266d, last: 8d23h
▶ ▼ Discussions (4)
Title Replies (including bot) Last reply
[PATCH 6.1 v2 2/2] efivarfs: Move efivarfs list into superblock s_fs_info 1 (1) 2025/03/21 19:42
[PATCH 6.1] efivarfs: Move efivarfs list into superblock s_fs_info 2 (2) 2025/03/21 19:00
[PATCH 5.10 2/2] efivarfs: Add efivars_lock to synchronize list operations 1 (1) 2025/03/21 18:21
[PATCH 6.1] efivars: Fix "BUG: corrupted list in efivar_entry_remove" 1 (1) 2025/02/03 15:03
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/02/27 linux-6.1.y (ToT) 81e1dc2f7001 C [report] BUG: corrupted list in efivar_entry_remove
2023/05/18 upstream (ToT) 4d6d4c7f541d C [report] BUG: corrupted list in efivar_entry_remove
2024/02/27 upstream (ToT) 45ec2f5f6ed3 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 BUG: corrupted list in efivar_entry_remove missing-backport origin:upstream 8 syz, C error 78 6d23h 1265d 0/3 upstream: reported C repro on 2023/03/14 23:58
upstream BUG: corrupted list in efivar_entry_remove efi 8 syz, C 104 945d 1466d 25/29 fixed on 2024/01/30 15:47
▶ ▼ Last patch testing requests (1)
Created Duration User Patch Repo Result
2025/02/03 15:38 23m ardb@kernel.org git://git.kernel.org/pub/scm/linux/kernel/git/ardb/linux.git efivarfs-list-corruption-fix-for-v6.6 no crash log
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2024/03/26 06:18 1h27m fix candidate upstream OK (0) job log

Sample crash report:
list_del corruption. prev->next should be ffff0000f1040828, but was ffff800015b573e0. (prev=ffff800015b573e0)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4779 Comm: syz.4.257 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026
pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59
lr : __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59
sp : ffff8000213e78b0
x29: ffff8000213e78b0 x28: 1fffe000196b50a4 x27: dfff800000000000
x26: 0000000000000000 x25: 1fffe000196b50a5 x24: ffff0000dca8e828
x23: ffff0000f1040828 x22: dfff800000000000 x21: ffff800015b573e0
x20: ffff0000dca8e828 x19: ffff0000f1040828 x18: 1fffe00033e6df7e
x17: ffff80001539d000 x16: ffff800011b9ccb8 x15: 0000000040000000
x14: 0000000000000001 x13: 1ffff0000427ce7c x12: 0000000000000000
x11: ff008000083154a0 x10: 0000000000000000 x9 : 40fe14e25621f800
x8 : 40fe14e25621f800 x7 : ffff80000825ab50 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000a928dfc
x2 : ffff00019f36fd10 x1 : 0000000100000000 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x140/0x15c lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 efivar_entry_remove+0x34/0x108 fs/efivarfs/vars.c:493
 efivarfs_destroy+0x20/0x3c fs/efivarfs/super.c:228
 efivar_entry_iter+0x94/0xdc fs/efivarfs/vars.c:720
 efivarfs_kill_sb+0x5c/0x74 fs/efivarfs/super.c:302
 deactivate_locked_super+0xb4/0x128 fs/super.c:332
 deactivate_super+0xe4/0x104 fs/super.c:363
 put_fs_context+0x90/0x794 fs/fs_context.c:486
 fscontext_release+0x64/0x84 fs/fsopen.c:79
 __fput+0x1b4/0x7b0 fs/file_table.c:320
 ____fput+0x20/0x30 fs/file_table.c:348
 task_work_run+0x1f4/0x280 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x20f8/0x2c84 arch/arm64/kernel/signal.c:1151
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x98/0x128 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 91140000 aa1303e1 aa1503e3 95c51620 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (42):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/08/22 22:41 linux-6.1.y 7e6e67054721 1e72964b .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/12/11 06:06 linux-6.1.y e4d90d63d385 cfc402b4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/19 20:17 linux-6.1.y d7543167affd e104824c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 04:29 linux-6.1.y 7d24402875c7 17e6d526 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:12 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 07:43 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 01:31 linux-6.1.y e84a4e368abe 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:44 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2026/03/29 14:52 linux-6.1.y 1989cd3d56e2 b5ceaad2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2026/02/13 23:11 linux-6.1.y 8ce36b2849ef 1e62d198 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/09/05 20:42 linux-6.1.y 699506173494 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/07 00:35 linux-6.1.y 61adba85cc40 f39a7eed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/14 03:20 linux-6.1.y f1bb70486c9c e66542d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/25 19:43 linux-6.1.y 8fd7f4462453 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/22 10:49 linux-6.1.y 8fd7f4462453 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/05 02:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/22 03:04 linux-6.1.y 4aa6747d9352 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/11 18:51 linux-6.1.y e7cddbb41b63 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/25 09:39 linux-6.1.y 69e434a1cb21 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/22 23:36 linux-6.1.y 69e434a1cb21 03e12510 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/19 19:15 linux-6.1.y fb2635ac69ab cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 12:00 linux-6.1.y 4a61839152cc 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:49 linux-6.1.y 32c9cdbe383c 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/12 04:17 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/09 04:31 linux-6.1.y ecda77b46871 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/26 20:49 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/29 00:24 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/23 14:12 linux-6.1.y 6c44e13dc284 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 13:24 linux-6.1.y 0a4a7855302d da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/07 16:53 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/20 14:23 linux-6.1.y a456e1743881 f49af159 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/13 21:11 linux-6.1.y 61fd484b2cf6 55eda22f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/24 23:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/28 04:24 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/27 00:28 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/17 21:54 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/16 17:51 linux-6.1.y 0102425ac76b ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 10:34 linux-6.1.y 543aff194ab6 82d5e53e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/04 07:06 linux-6.1.y 3b29299e5f60 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 21:39 linux-6.1.y e3a87a10f259 47f3aaf1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 07:50 linux-6.1.y e3a87a10f259 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 09:44 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.