syzbot


BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 09:45
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+246ea4feed277471958a@syzkaller.appspotmail.com
First crash: 346d, last: 9d21h
Bug presence (1)
Date Name Commit Repro Result
2023/05/18 upstream (ToT) 4d6d4c7f541d C [report] BUG: corrupted list in efivar_entry_remove
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 BUG: corrupted list in efivar_entry_remove origin:upstream C error 54 15d 346d 0/3 upstream: reported C repro on 2023/03/14 23:58
upstream BUG: corrupted list in efivar_entry_remove efi C 104 25d 546d 26/26 fixed on 2024/01/30 15:47

Sample crash report:
list_del corruption. prev->next should be ffff0000d827e828, but was ffff80001602e020. (prev=ffff80001602e020)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 4235 Comm: syz-executor681 Not tainted 6.1.59-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
lr : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
sp : ffff80001de37850
x29: ffff80001de37850 x28: 1ffff00002b15aa9 x27: dfff800000000000
x26: 0000000000000002 x25: 0000000000000002 x24: ffff0000d827c828
x23: dfff800000000000 x22: dfff800000000000 x21: ffff80001602e020
x20: ffff0000d827c828 x19: ffff0000d827e828 x18: 1fffe000368adf76
x17: ffff8000158ad000 x16: ffff800012129cac x15: ffff0001b456fbbc
x14: 1ffff00002b160b0 x13: dfff800000000000 x12: 0000000000000001
x11: ff80800008346800 x10: 0000000000000000 x9 : d80aafdb40c0bf00
x8 : d80aafdb40c0bf00 x7 : ffff80000827db78 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000aa85fcc
x2 : ffff0001b456fcd0 x1 : 0000000100000000 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 efivar_entry_remove+0x38/0x110 fs/efivarfs/vars.c:488
 efivarfs_destroy+0x20/0x3c fs/efivarfs/super.c:183
 efivar_entry_iter+0x94/0xdc fs/efivarfs/vars.c:715
 efivarfs_kill_sb+0x38/0x48 fs/efivarfs/super.c:244
 deactivate_locked_super+0xac/0x124 fs/super.c:332
 deactivate_super+0xf0/0x110 fs/super.c:363
 cleanup_mnt+0x394/0x41c fs/namespace.c:1186
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1193
 task_work_run+0x240/0x2f0 kernel/task_work.c:179
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2148/0x3474 arch/arm64/kernel/signal.c:1132
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 911d8000 aa1303e1 aa1503e3 95d8ca95 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (35):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2023/10/25 04:29 linux-6.1.y 7d24402875c7 17e6d526 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:12 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 07:43 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 01:31 linux-6.1.y e84a4e368abe 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:44 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/14 03:20 linux-6.1.y f1bb70486c9c e66542d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/25 19:43 linux-6.1.y 8fd7f4462453 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/22 10:49 linux-6.1.y 8fd7f4462453 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/05 02:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/22 03:04 linux-6.1.y 4aa6747d9352 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/11 18:51 linux-6.1.y e7cddbb41b63 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/25 09:39 linux-6.1.y 69e434a1cb21 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/22 23:36 linux-6.1.y 69e434a1cb21 03e12510 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/19 19:15 linux-6.1.y fb2635ac69ab cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 12:00 linux-6.1.y 4a61839152cc 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:49 linux-6.1.y 32c9cdbe383c 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/12 04:17 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/09 04:31 linux-6.1.y ecda77b46871 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/26 20:49 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/29 00:24 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/23 14:12 linux-6.1.y 6c44e13dc284 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 13:24 linux-6.1.y 0a4a7855302d da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/07 16:53 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/20 14:23 linux-6.1.y a456e1743881 f49af159 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/13 21:11 linux-6.1.y 61fd484b2cf6 55eda22f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/24 23:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/28 04:24 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/27 00:28 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/17 21:54 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/16 17:51 linux-6.1.y 0102425ac76b ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 10:34 linux-6.1.y 543aff194ab6 82d5e53e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/04 07:06 linux-6.1.y 3b29299e5f60 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 21:39 linux-6.1.y e3a87a10f259 47f3aaf1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 07:50 linux-6.1.y e3a87a10f259 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 09:44 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.