syzbot


BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 23:58
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+75dc11b3aa0369757b7c@syzkaller.appspotmail.com
First crash: 346d, last: 16d
Fix bisection: failed (error log, bisect log)
  
Bug presence (1)
Date Name Commit Repro Result
2023/05/13 upstream (ToT) d4d58949a6ea C [report] BUG: corrupted list in efivar_entry_remove
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 BUG: corrupted list in efivar_entry_remove origin:upstream C 35 10d 347d 0/3 upstream: reported C repro on 2023/03/14 09:45
upstream BUG: corrupted list in efivar_entry_remove efi C 104 26d 547d 26/26 fixed on 2024/01/30 15:47

Sample crash report:
list_del corruption. prev->next should be ffff0000c8334828, but was ffff80001503f2e0
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 3996 Comm: syz-executor134 Not tainted 5.15.148-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
lr : __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
sp : ffff80001c7078b0
x29: ffff80001c7078b0 x28: 1ffff00002923a9d x27: 0000000000000000
x26: dfff800000000000 x25: ffff0000c8332828 x24: ffff80001491d320
x23: dfff800000000000 x22: ffff0000c8332828 x21: dfff800000000000
x20: ffff80001503f2e0 x19: ffff0000c8334828 x18: 1fffe000368fe78e
x17: 1fffe000368fe78e x16: ffff8000119814b4 x15: ffff8000149bed40
x14: 1ffff0000292406a x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : 9a75cea1f7e07200
x8 : 9a75cea1f7e07200 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a95db80
x2 : ffff0001b47f3d10 x1 : 0000000100000000 x0 : 0000000000000054
Call trace:
 __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:132 [inline]
 list_del include/linux/list.h:146 [inline]
 efivar_entry_remove+0x64/0x14c drivers/firmware/efi/vars.c:539
 efivarfs_destroy+0x20/0x5c fs/efivarfs/super.c:186
 __efivar_entry_iter+0x11c/0x19c drivers/firmware/efi/vars.c:1089
 efivarfs_kill_sb+0x3c/0x4c fs/efivarfs/super.c:261
 deactivate_locked_super+0xb8/0x13c fs/super.c:335
 deactivate_super+0x108/0x128 fs/super.c:366
 cleanup_mnt+0x3c0/0x474 fs/namespace.c:1143
 __cleanup_mnt+0x20/0x30 fs/namespace.c:1150
 task_work_run+0x130/0x1e4 kernel/task_work.c:164
 tracehook_notify_resume include/linux/tracehook.h:189 [inline]
 do_notify_resume+0x262c/0x32b8 arch/arm64/kernel/signal.c:946
 prepare_exit_to_user_mode arch/arm64/kernel/entry-common.c:133 [inline]
 exit_to_user_mode arch/arm64/kernel/entry-common.c:138 [inline]
 el0_svc+0xfc/0x1f0 arch/arm64/kernel/entry-common.c:609
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: f003ae80 91208000 aa1303e1 95befc62 (d4210000) 
---[ end trace 90db5232e5b46461 ]---

Crashes (54):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/01/28 15:02 linux-5.15.y 6139f2a02fe0 cc4a4020 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/10 04:12 linux-5.15.y 80529b4968a8 56230772 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:58 linux-5.15.y 2ddbd0f967b3 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/31 17:49 linux-5.15.y 09996673e313 2a0d0f29 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/27 04:52 linux-5.15.y 5c6a716301d9 41fe1bae .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 07:13 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:56 linux-5.15.y f67653019430 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/08 21:46 linux-5.15.y 6139f2a02fe0 7f07e9b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/23 12:10 linux-5.15.y ddcaf4999061 1c0ecc51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/29 03:40 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/27 09:36 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/19 09:09 linux-5.15.y d0fc081c6241 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/03 01:30 linux-5.15.y a78d278e01b1 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/10 08:57 linux-5.15.y 80529b4968a8 45e9b83e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/09 16:25 linux-5.15.y 80529b4968a8 56230772 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 01:07 linux-5.15.y 12952a23a5da 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/26 23:50 linux-5.15.y 12952a23a5da bf285f0c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:45 linux-5.15.y 12952a23a5da 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/21 06:57 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/27 12:15 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/19 09:17 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 11:14 linux-5.15.y c275eaaaa342 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/16 02:48 linux-5.15.y d54cfc420586 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 22:16 linux-5.15.y d54cfc420586 2f19aa4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/10 10:55 linux-5.15.y d54cfc420586 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/05 21:23 linux-5.15.y d54cfc420586 ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/05 03:25 linux-5.15.y 4af60700a60c 80298b6f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/30 17:35 linux-5.15.y 4af60700a60c af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/30 00:53 linux-5.15.y 4af60700a60c 01298212 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/22 12:37 linux-5.15.y f67653019430 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/18 17:31 linux-5.15.y 471e639e59d1 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/08 12:41 linux-5.15.y d7af3e5ba454 058b3a5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/31 20:49 linux-5.15.y 0ab06468cbd1 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/23 02:36 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/16 01:25 linux-5.15.y b0ece631f84a 71b00cfb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/15 09:34 linux-5.15.y b0ece631f84a c4d362e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/13 07:17 linux-5.15.y b0ece631f84a 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/09 11:14 linux-5.15.y 8a7f2a5c5aa1 30aa2a7e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/28 20:06 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/26 22:42 linux-5.15.y f48aeeaaa64c 19a3dabe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/25 13:07 linux-5.15.y 3299fb36854f 65320f8e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/20 21:37 linux-5.15.y 3299fb36854f a219f34e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/18 14:57 linux-5.15.y 4fdad925aa1a d931e9f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/17 08:04 linux-5.15.y 4fdad925aa1a c6ec7083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 17:26 linux-5.15.y 4fdad925aa1a 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/10 17:41 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/07 10:40 linux-5.15.y d86dfc4d95cd f7ba566d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/02 04:59 linux-5.15.y c957cbb87315 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/29 10:21 linux-5.15.y 115472395b0a f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 09:39 linux-5.15.y 115472395b0a f8f96aa9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/20 03:40 linux-5.15.y 8020ae3c051d 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/16 19:04 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/15 22:26 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/15 11:30 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.