syzbot


BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 23:58
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+75dc11b3aa0369757b7c@syzkaller.appspotmail.com
First crash: 580d, last: 3d17h
Fix bisection: failed (error log, bisect log)
  
Bug presence (3)
Date Name Commit Repro Result
2024/02/26 linux-5.15.y (ToT) 458ce51d0356 C [report] BUG: corrupted list in efivar_entry_remove
2023/05/13 upstream (ToT) d4d58949a6ea C [report] BUG: corrupted list in efivar_entry_remove
2024/02/26 upstream (ToT) d206a76d7d27 C Didn't crash
Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-6.1 BUG: corrupted list in efivar_entry_remove origin:upstream missing-backport C inconclusive 38 39d 580d 0/3 upstream: reported C repro on 2023/03/14 09:45
upstream BUG: corrupted list in efivar_entry_remove efi C 104 260d 780d 25/28 fixed on 2024/01/30 15:47
Last patch testing requests (5)
Created Duration User Patch Repo Result
2024/10/11 14:34 11m retest repro linux-5.15.y report log
2024/10/11 14:34 13m retest repro linux-5.15.y report log
2024/10/11 14:34 15m retest repro linux-5.15.y report log
2024/10/11 14:34 12m retest repro linux-5.15.y report log
2024/10/11 14:34 11m retest repro linux-5.15.y report log
Fix bisection attempts (5)
Created Duration User Patch Repo Result
2024/08/04 03:18 2m fix candidate upstream error job log
2024/05/10 09:11 1m fix candidate upstream error job log
2024/04/01 10:54 1m fix candidate upstream error job log
2024/02/28 13:41 1m fix candidate upstream error job log
2023/10/22 12:38 0m bisect fix linux-5.15.y error job log

Sample crash report:
list_del corruption. prev->next should be ffff0000c87da828, but was ffff80001506aa80
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 PID: 3979 Comm: syz-executor276 Not tainted 5.15.158-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
lr : __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
sp : ffff80001cad78b0
x29: ffff80001cad78b0 x28: 1fffe00019034550 x27: 0000000000000000
x26: dfff800000000000 x25: ffff0000c87d8828 x24: 1fffe0001ab5e316
x23: dfff800000000000 x22: ffff0000c87d8828 x21: dfff800000000000
x20: ffff80001506aa80 x19: ffff0000c87da828 x18: 1fffe0003690198e
x17: 1fffe0003690198e x16: ffff800011998e34 x15: ffff8000149dec00
x14: 1ffff0000292806a x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : b3b3a65ffc28fa00
x8 : b3b3a65ffc28fa00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000a978b80
x2 : ffff0001b480cd10 x1 : 0000000100000000 x0 : 0000000000000054
Call trace:
 __list_del_entry_valid+0x138/0x150 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:132 [inline]
 list_del include/linux/list.h:146 [inline]
 efivar_entry_remove+0x64/0x14c drivers/firmware/efi/vars.c:544
 efivarfs_destroy+0x20/0x5c fs/efivarfs/super.c:186
 __efivar_entry_iter+0x11c/0x19c drivers/firmware/efi/vars.c:1094
 efivarfs_kill_sb+0x3c/0x4c fs/efivarfs/super.c:261
 deactivate_locked_super+0xb8/0x13c fs/super.c:335
 deactivate_super+0x108/0x128 fs/super.c:366
 put_fs_context+0x88/0x7e4 fs/fs_context.c:465
 fscontext_release+0x64/0x84 fs/fsopen.c:73
 __fput+0x30c/0x7f0 fs/file_table.c:280
 ____fput+0x20/0x30 fs/file_table.c:308
 task_work_run+0x130/0x1e4 kernel/task_work.c:164
 exit_task_work include/linux/task_work.h:32 [inline]
 do_exit+0x670/0x20bc kernel/exit.c:872
 do_group_exit+0x110/0x268 kernel/exit.c:994
 __do_sys_exit_group kernel/exit.c:1005 [inline]
 __se_sys_exit_group kernel/exit.c:1003 [inline]
 __wake_up_parent+0x0/0x60 kernel/exit.c:1003
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
Code: d003ae60 91128000 aa1303e1 95beeea8 (d4210000) 
---[ end trace 0b6b4c72b48f81fa ]---

Crashes (60):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/05/14 19:35 linux-5.15.y 284087d4f7d5 fdb4c10c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/28 15:02 linux-5.15.y 6139f2a02fe0 cc4a4020 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/10 04:12 linux-5.15.y 80529b4968a8 56230772 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/31 17:49 linux-5.15.y 09996673e313 2a0d0f29 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:58 linux-5.15.y 2ddbd0f967b3 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/27 04:52 linux-5.15.y 5c6a716301d9 41fe1bae .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 07:13 linux-5.15.y f67653019430 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:56 linux-5.15.y f67653019430 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/05/21 17:22 linux-5.15.y 83655231580b 4c0d3ee3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/05/17 11:26 linux-5.15.y 83655231580b c2e07261 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/05 04:52 linux-5.15.y 80efc6265290 5fc53669 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/02 15:28 linux-5.15.y 80efc6265290 25905f5d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/28 12:26 linux-5.15.y 458ce51d0356 55d6f11d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/08 21:46 linux-5.15.y 6139f2a02fe0 7f07e9b0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/23 12:10 linux-5.15.y ddcaf4999061 1c0ecc51 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/29 03:40 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/27 09:36 linux-5.15.y d93fa2c78854 fb427a07 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/19 09:09 linux-5.15.y d0fc081c6241 3ad490ea .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/03 01:30 linux-5.15.y a78d278e01b1 f819d6f7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/10 08:57 linux-5.15.y 80529b4968a8 45e9b83e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/09 16:25 linux-5.15.y 80529b4968a8 56230772 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 01:07 linux-5.15.y 12952a23a5da 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/26 23:50 linux-5.15.y 12952a23a5da bf285f0c .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:45 linux-5.15.y 12952a23a5da 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/21 06:57 linux-5.15.y 35ecaa3632bf 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/27 12:15 linux-5.15.y 5ddfe5cc8716 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/19 09:17 linux-5.15.y f6f7927ac664 d216d8a0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 11:14 linux-5.15.y c275eaaaa342 13ca4cd6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/16 02:48 linux-5.15.y d54cfc420586 35d9ecc5 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 22:16 linux-5.15.y d54cfc420586 2f19aa4f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/10 10:55 linux-5.15.y d54cfc420586 668cb1fa .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/05 21:23 linux-5.15.y d54cfc420586 ba5dba36 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/05 03:25 linux-5.15.y 4af60700a60c 80298b6f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/30 17:35 linux-5.15.y 4af60700a60c af3053d2 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/30 00:53 linux-5.15.y 4af60700a60c 01298212 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/22 12:37 linux-5.15.y f67653019430 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/18 17:31 linux-5.15.y 471e639e59d1 f3921d4d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/08 12:41 linux-5.15.y d7af3e5ba454 058b3a5a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/31 20:49 linux-5.15.y 0ab06468cbd1 babc4389 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/23 02:36 linux-5.15.y 9d6bde853685 4bce1a3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/16 01:25 linux-5.15.y b0ece631f84a 71b00cfb .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/15 09:34 linux-5.15.y b0ece631f84a c4d362e7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/13 07:17 linux-5.15.y b0ece631f84a 2b9ba477 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/09 11:14 linux-5.15.y 8a7f2a5c5aa1 30aa2a7e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/28 20:06 linux-5.15.y f48aeeaaa64c 62df2017 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/26 22:42 linux-5.15.y f48aeeaaa64c 19a3dabe .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/25 13:07 linux-5.15.y 3299fb36854f 65320f8e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/20 21:37 linux-5.15.y 3299fb36854f a219f34e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/18 14:57 linux-5.15.y 4fdad925aa1a d931e9f0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/17 08:04 linux-5.15.y 4fdad925aa1a c6ec7083 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 17:26 linux-5.15.y 4fdad925aa1a 3cfcaa1b .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/10 17:41 linux-5.15.y d86dfc4d95cd 71147e29 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/07 10:40 linux-5.15.y d86dfc4d95cd f7ba566d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/02 04:59 linux-5.15.y c957cbb87315 f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/29 10:21 linux-5.15.y 115472395b0a f325deb0 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 09:39 linux-5.15.y 115472395b0a f8f96aa9 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/20 03:40 linux-5.15.y 8020ae3c051d 7939252e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/16 19:04 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/15 22:26 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/15 11:30 linux-5.15.y 2ddbd0f967b3 18b58603 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-5-15-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.