KASAN: vmalloc-out-of-bounds Read in kcov_remote

ID	Workflow	Result	Correct	Bug	Created	Started	Finished	Revision	Error
a76087d1-d48e-4a2a-990d-fb4762242508	assessment-security	DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌	❓	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop	2026/05/22 00:27	2026/05/22 00:27	2026/05/22 01:29	d57425845dbe663f86e1e54a4997e95bd557b624

Title	Replies (including bot)	Last reply
[PATCH v6] kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct	5 (5)	2026/07/16 09:12
Re: [PATCH v5] kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct	2 (2)	2026/07/10 10:43
[PATCH] kcov: fix potential kcov_mode corruption under CONFIG_PREEMPT_RT	5 (5)	2026/05/21 08:38
[syzbot] [usb?] KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop	0 (1)	2025/10/07 03:33

Title

Replies (including bot)

Last reply

[PATCH v6] kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct

5 (5)

2026/07/16 09:12

Re: [PATCH v5] kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct

2 (2)

2026/07/10 10:43

[PATCH] kcov: fix potential kcov_mode corruption under CONFIG_PREEMPT_RT

5 (5)

2026/05/21 08:38

[syzbot] [usb?] KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop

0 (1)

2025/10/07 03:33

Kernel	Title	Rank 🛈	Repro	Cause bisect	Fix bisect	Count	Last	Reported	Patched	Status
upstream	KMSAN: uninit-value in exit_to_user_mode_loop (3) kernel	7	C			2558	1498d	1756d	0/29	auto-closed as invalid on 2022/09/22 19:06

Rank 🛈

upstream

KMSAN: uninit-value in exit_to_user_mode_loop (3) kernel

2558

1498d

1756d

0/29

auto-closed as invalid on 2022/09/22 19:06

================================================================== BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 lib/list_debug.c:29 Read of size 8 at addr ffffc9001052b008 by task kworker/u8:26/12751 CPU: 0 UID: 0 PID: 12751 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} Tainted: [L]=SOFTLOCKUP Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 Workqueue: events_unbound cfg80211_wiphy_work Call Trace: <TASK> dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 print_address_description+0x55/0x1e0 mm/kasan/report.c:378 print_report+0x58/0x70 mm/kasan/report.c:482 kasan_report+0x117/0x150 mm/kasan/report.c:595 __list_add_valid_or_report+0x4e/0x130 lib/list_debug.c:29 __list_add_valid include/linux/list.h:96 [inline] __list_add include/linux/list.h:158 [inline] list_add include/linux/list.h:177 [inline] kcov_remote_area_put kernel/kcov.c:156 [inline] kcov_remote_stop+0x457/0x680 kernel/kcov.c:1084 ieee80211_iface_work+0x25e/0x1010 net/mac80211/iface.c:1826 cfg80211_wiphy_work+0x29e/0x420 net/wireless/core.c:538 process_one_work kernel/workqueue.c:3322 [inline] process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486 kthread+0x388/0x470 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> The buggy address belongs to a vmalloc virtual mapping Memory state around the buggy address: ffffc9001052af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc9001052af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 >ffffc9001052b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ^ ffffc9001052b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ffffc9001052b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 ==================================================================

Crashes (467):
Time	Kernel	Commit	Syzkaller	Config	Log	Report	VM info	Assets (help?)	Manager	Title
2026/07/21 01:30	upstream	b95f03f04d47	de6a700d	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/20 16:31	upstream	1590cf032971	de6a700d	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/19 06:29	upstream	f2ec6312bf71	72524a66	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/17 12:07	upstream	fce2dfa773ce	7f27c57a	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/15 04:25	upstream	58717b2a1365	2130f682	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/12 10:47	upstream	44696aa3a489	d78ea535	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/12 05:43	upstream	cab9e339cfbc	d78ea535	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/11 17:40	upstream	d96fcfe1b7f9	d78ea535	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/10 02:34	upstream	2c7c88a412aa	4167ee25	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/10 00:20	upstream	2c7c88a412aa	4167ee25	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/08 19:37	upstream	0e35b9b6ec0f	ab40da58	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/07 09:32	upstream	0e35b9b6ec0f	8e71ce95	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/07 06:24	upstream	0e35b9b6ec0f	8e71ce95	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/06 10:59	upstream	8cdeaa50eae8	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/05 15:19	upstream	7404ce516372	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/05 10:56	upstream	7404ce516372	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/04 09:03	upstream	71dfdfb0209b	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/04 00:19	upstream	71dfdfb0209b	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/03 13:42	upstream	87320be9f0d2	58bf2096	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/01 14:10	upstream	665159e24674	00a5cf1c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/01 06:41	upstream	665159e24674	00a5cf1c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/01 00:21	upstream	dc59e4fea9d8	00e8b0fd	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/30 20:21	upstream	dc59e4fea9d8	00e8b0fd	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/30 04:52	upstream	dc59e4fea9d8	fff8d0a0	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/30 00:57	upstream	dc59e4fea9d8	fff8d0a0	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/29 00:13	upstream	8b69c0475871	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/28 21:49	upstream	8b69c0475871	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 22:01	upstream	5a66900afbd6	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 20:56	upstream	5a66900afbd6	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 19:41	upstream	5a66900afbd6	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 17:50	upstream	5a66900afbd6	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 07:49	upstream	51cb1aa1250c	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/27 06:04	upstream	51cb1aa1250c	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/05/21 03:41	upstream	df685633c3db	41b8c833	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/03/10 02:37	upstream	1f318b96cc84	6972f302	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2025/10/06 23:36	upstream	fd94619c4336	91305dbe	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2025/10/03 03:32	upstream	7f7072574127	49379ee0	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/08 14:22	linux-next	5c73cd9f0819	ab40da58	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/08 00:23	linux-next	5c73cd9f0819	88a4b44c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-linux-next-kasan-gce-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/07 19:56	linux-next	5c73cd9f0819	88a4b44c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/07 02:44	linux-next	8e9685d3c41c	8e71ce95	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/05 20:33	linux-next	2b763db0c276	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/04 14:24	linux-next	2b763db0c276	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-linux-next-kasan-gce-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/04 07:18	linux-next	2b763db0c276	fcece630	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/02 18:45	linux-next	7de6ae9e1220	2b70b115	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/02 01:18	linux-next	7de6ae9e1220	27192279	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/01 05:37	linux-next	7de6ae9e1220	00a5cf1c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-linux-next-kasan-gce-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/30 11:53	linux-next	7de6ae9e1220	fff8d0a0	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/29 15:53	linux-next	3d5670d672ae	6a0c72dc	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/29 08:41	linux-next	3d5670d672ae	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/29 05:44	linux-next	3d5670d672ae	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-rust-kasan-gce	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/06/28 05:55	linux-next	3d5670d672ae	fb92f11c	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-linux-next-kasan-gce-root	KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
2026/07/16 13:27	upstream	37e2f878a7a6	8f30cfd7	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	BUG: corrupted list in kcov_remote_stop
2026/07/08 22:04	upstream	0e35b9b6ec0f	ab40da58	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	BUG: corrupted list in kcov_remote_stop
2026/07/01 15:13	upstream	665159e24674	27192279	.config	console log	report	info	[disk image] [vmlinux] [kernel image]	ci-upstream-kasan-gce-smack-root	BUG: corrupted list in kcov_remote_stop

Crashes (467):

Assets (help?)

2026/07/21 01:30

upstream