syzbot

 sign-in | mailing list | source | docs
🐞 Open [557] 🐞 Fixed [64] 🐞 Invalid [206] ⬇ Missing Backports [39] 📈 Kernel Health 📈 Bug Lifetimes 📈 Fuzzing 📈 Crashes 💬 Send us feedback

BUG: corrupted list in efivar_entry_remove

Status: upstream: reported C repro on 2023/03/14 09:45
Bug presence: origin:upstream
Labels: missing-backport
[Documentation on labels]
Reported-by: syzbot+246ea4feed277471958a@syzkaller.appspotmail.com
First crash: 406d, last: 35d
▶ ▼ Bug presence (3)
Date Name Commit Repro Result
2024/02/27 linux-6.1.y (ToT) 81e1dc2f7001 C [report] BUG: corrupted list in efivar_entry_remove
2023/05/18 upstream (ToT) 4d6d4c7f541d C [report] BUG: corrupted list in efivar_entry_remove
2024/02/27 upstream (ToT) 45ec2f5f6ed3 C Didn't crash
▶ ▼ Similar bugs (2)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 BUG: corrupted list in efivar_entry_remove origin:upstream missing-backport C error 57 49d 406d 0/3 upstream: reported C repro on 2023/03/14 23:58
upstream BUG: corrupted list in efivar_entry_remove efi C 104 85d 606d 26/26 fixed on 2024/01/30 15:47
▶ ▼ Fix bisection attempts (1)
Created Duration User Patch Repo Result
2024/03/26 06:18 1h27m fix candidate upstream job log (0)

Sample crash report:
list_del corruption. prev->next should be ffff0000d5168828, but was ffff800015fc2c80. (prev=ffff800015fc2c80)
------------[ cut here ]------------
kernel BUG at lib/list_debug.c:61!
Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4235 Comm: syz-executor416 Not tainted 6.1.82-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
lr : __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
sp : ffff80001dd37890
x29: ffff80001dd37890 x28: 1fffe0001925505f x27: 1fffe00019255055
x26: ffff0000c92a82a8 x25: ffff0000c04d1440 x24: ffff0000d8176828
x23: dfff800000000000 x22: dfff800000000000 x21: ffff800015fc2c80
x20: ffff0000d8176828 x19: ffff0000d5168828 x18: 1fffe0003686b776
x17: ffff80001583d000 x16: ffff80001214de8c x15: ffff0001b435bbbc
x14: 1ffff00002b080b0 x13: dfff800000000000 x12: 0000000000000001
x11: 0000000000ff0100 x10: 0000000000000000 x9 : 936bccd849267500
x8 : 936bccd849267500 x7 : ffff80000827c8d4 x6 : 0000000000000000
x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000aa8c1ec
x2 : ffff0001b435bcd0 x1 : 0000000100000000 x0 : 000000000000006d
Call trace:
 __list_del_entry_valid+0x13c/0x158 lib/list_debug.c:59
 __list_del_entry include/linux/list.h:134 [inline]
 list_del include/linux/list.h:148 [inline]
 efivar_entry_remove+0x38/0x110 fs/efivarfs/vars.c:493
 efivarfs_destroy+0x20/0x3c fs/efivarfs/super.c:184
 efivar_entry_iter+0x94/0xdc fs/efivarfs/vars.c:720
 efivarfs_kill_sb+0x58/0x70 fs/efivarfs/super.c:258
 deactivate_locked_super+0xac/0x124 fs/super.c:332
 deactivate_super+0xf0/0x110 fs/super.c:363
 put_fs_context+0x88/0x790 fs/fs_context.c:486
 fscontext_release+0x64/0x84 fs/fsopen.c:73
 __fput+0x30c/0x7bc fs/file_table.c:320
 ____fput+0x20/0x30 fs/file_table.c:348
 task_work_run+0x240/0x2f0 kernel/task_work.c:179
 exit_task_work include/linux/task_work.h:38 [inline]
 do_exit+0x554/0x1a88 kernel/exit.c:869
 do_group_exit+0x194/0x22c kernel/exit.c:1019
 __do_sys_exit_group kernel/exit.c:1030 [inline]
 __se_sys_exit_group kernel/exit.c:1028 [inline]
 __wake_up_parent+0x0/0x60 kernel/exit.c:1028
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2c0 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x64/0x218 arch/arm64/kernel/syscall.c:206
 el0_svc+0x58/0x168 arch/arm64/kernel/entry-common.c:637
 el0t_64_sync_handler+0x84/0xf0 arch/arm64/kernel/entry-common.c:655
 el0t_64_sync+0x18c/0x190 arch/arm64/kernel/entry.S:585
Code: 91390000 aa1303e1 aa1503e3 95d93ec0 (d4210000) 
---[ end trace 0000000000000000 ]---

Crashes (37):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2024/03/19 20:17 linux-6.1.y d7543167affd e104824c .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 04:29 linux-6.1.y 7d24402875c7 17e6d526 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 23:12 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/11 07:43 linux-6.1.y 61fd484b2cf6 52ae002a .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/28 01:31 linux-6.1.y e84a4e368abe 4cd5bb25 .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/23 18:44 linux-6.1.y e84a4e368abe 79782afc .config console log report syz C [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/03/07 00:35 linux-6.1.y 61adba85cc40 f39a7eed .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/02/14 03:20 linux-6.1.y f1bb70486c9c e66542d7 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/25 19:43 linux-6.1.y 8fd7f4462453 cc4a4020 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/22 10:49 linux-6.1.y 8fd7f4462453 9bd8dcda .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2024/01/05 02:01 linux-6.1.y a507f147e6f0 28c42cff .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/22 03:04 linux-6.1.y 4aa6747d9352 4f9530a3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/12/11 18:51 linux-6.1.y e7cddbb41b63 28b24332 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/25 09:39 linux-6.1.y 69e434a1cb21 5b429f39 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/22 23:36 linux-6.1.y 69e434a1cb21 03e12510 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/19 19:15 linux-6.1.y fb2635ac69ab cb976f63 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/11/08 12:00 linux-6.1.y 4a61839152cc 83211397 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/25 16:49 linux-6.1.y 32c9cdbe383c 72e794c4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/12 04:17 linux-6.1.y 082280fe94a0 83165b57 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/10/09 04:31 linux-6.1.y ecda77b46871 5e837c76 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/09/26 20:49 linux-6.1.y d23900f974e0 0b6a67ac .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/29 00:24 linux-6.1.y 024f76bca9d0 7ba13a15 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/23 14:12 linux-6.1.y 6c44e13dc284 b81ca3f6 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/10 13:24 linux-6.1.y 0a4a7855302d da3c3ef8 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/08/07 16:53 linux-6.1.y 52a953d0934b b1b6ae3d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/20 14:23 linux-6.1.y a456e1743881 f49af159 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/07/13 21:11 linux-6.1.y 61fd484b2cf6 55eda22f .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/06/24 23:17 linux-6.1.y e84a4e368abe 79782afc .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/28 04:24 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/27 00:28 linux-6.1.y a343b0dd87b4 cf184559 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/05/17 21:54 linux-6.1.y fa74641fb6b9 3bb7af1d .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/16 17:51 linux-6.1.y 0102425ac76b ec410564 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/13 10:34 linux-6.1.y 543aff194ab6 82d5e53e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/04/04 07:06 linux-6.1.y 3b29299e5f60 41147e3e .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 21:39 linux-6.1.y e3a87a10f259 47f3aaf1 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/27 07:50 linux-6.1.y e3a87a10f259 fbf0499a .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
2023/03/14 09:44 linux-6.1.y 6449a0ba6843 0d5c4377 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-1-kasan-arm64 BUG: corrupted list in efivar_entry_remove
* Struck through repros no longer work on HEAD.