syzbot


BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 09:45
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+246ea4feed277471958a@syzkaller.appspotmail.com
First crash: 648d, last: 10d
Bug presence (3)
Date Name Commit Repro Result
2024/02/27 linux-6.1.y (ToT) 81e1dc2f7001 C [report] BUG: corrupted list in efivar_entry_remove
2023/05/18 upstream (ToT) 4d6d4c7f541d C [report] BUG: corrupted list in efivar_entry_remove
2024/02/27 upstream (ToT) 45ec2f5f6ed3 C Didn't crash
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 BUG: corrupted list in efivar_entry_remove origin:upstream missing-backport C error 65 13d 647d 0/3 upstream: reported C repro on 2023/03/14 23:58
upstream BUG: corrupted list in efivar_entry_remove efi C 104 327d 848d 25/28 fixed on 2024/01/30 15:47
Fix bisection attempts (1)
Created Duration User Patch Repo Result
2024/03/26 06:18 1h27m fix candidate upstream OK (0) job log

Sample crash report:
list_del corruption. prev->next should be ffff0000d86d6828, but was ffff800016216e60. (prev=ffff800016216e60)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4299 Comm: syz-executor237 Not tainted 6.1.119-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
lr : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
sp : ffff800021147890
x29: ffff800021147890 x28: 1ffff00002b4faa9 x27: dfff800000000000
x26: 0000000000000002 x25: 0000000000000002 x24: ffff0000d86d4828
x23: dfff800000000000 x22: dfff800000000000 x21: ffff800016216e60
x20: ffff0000d86d4828 x19: ffff0000d86d6828 x18: 1fffe0003679c376
x17: ffff800015a7d000 x16: ffff800012325074 x15: ffff0001b3ce1bbc
x14: 1ffff00002b500b2 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : 61343651e53ef400
x8 : 61343651e53ef400 x7 : ffff800008277348 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000ab33a2c
x2 : ffff0001b3ce1cd0 x1 : 0000000100000000 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 efivar_entry_remove+0x38/0x110 fs/efivarfs/vars.c:493
 efivarfs_destroy+0x20/0x3c fs/efivarfs/super.c:184
 efivar_entry_iter+0x94/0xdc fs/efivarfs/vars.c:720
 efivarfs_kill_sb+0x58/0x70 fs/efivarfs/super.c:258
 deactivate_locked_super+0xac/0x124 fs/super.c:332
 deactivate_super+0xf0/0x110 fs/super.c:363
 cleanup_mnt+0x394/0x41c fs/namespace.c:1186
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1193
 task_work_run+0x240/0x2f0 kernel/task_work.c:203
 resume_user_mode_work include/linux/resume_user_mode.h:49 [inline]
 do_notify_resume+0x2080/0x2cb8 arch/arm64/kernel/signal.c:1132
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:137 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:142 [inline]
 el0_svc+0x9c/0x168 arch/arm64/kernel/entry-common.c:638
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 910b8000 aa1303e1 aa1503e3 95de0097 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (39):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/12/11 06:06 linux-6.1.y e4d90d63d385 cfc402b4 .config console log report syz / log C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/19 20:17 linux-6.1.y d7543167affd e104824c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 04:29 linux-6.1.y 7d24402875c7 17e6d526 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:12 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 07:43 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 01:31 linux-6.1.y e84a4e368abe 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:44 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/09/05 20:42 linux-6.1.y 699506173494 464ac2ed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/07 00:35 linux-6.1.y 61adba85cc40 f39a7eed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/14 03:20 linux-6.1.y f1bb70486c9c e66542d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/25 19:43 linux-6.1.y 8fd7f4462453 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/22 10:49 linux-6.1.y 8fd7f4462453 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/05 02:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/22 03:04 linux-6.1.y 4aa6747d9352 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/11 18:51 linux-6.1.y e7cddbb41b63 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/25 09:39 linux-6.1.y 69e434a1cb21 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/22 23:36 linux-6.1.y 69e434a1cb21 03e12510 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/19 19:15 linux-6.1.y fb2635ac69ab cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 12:00 linux-6.1.y 4a61839152cc 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:49 linux-6.1.y 32c9cdbe383c 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/12 04:17 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/09 04:31 linux-6.1.y ecda77b46871 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/26 20:49 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/29 00:24 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/23 14:12 linux-6.1.y 6c44e13dc284 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 13:24 linux-6.1.y 0a4a7855302d da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/07 16:53 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/20 14:23 linux-6.1.y a456e1743881 f49af159 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/13 21:11 linux-6.1.y 61fd484b2cf6 55eda22f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/24 23:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/28 04:24 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/27 00:28 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/17 21:54 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/16 17:51 linux-6.1.y 0102425ac76b ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 10:34 linux-6.1.y 543aff194ab6 82d5e53e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/04 07:06 linux-6.1.y 3b29299e5f60 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 21:39 linux-6.1.y e3a87a10f259 47f3aaf1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 07:50 linux-6.1.y e3a87a10f259 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 09:44 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.