[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.368656] random: sshd: uninitialized urandom read (32 bytes read) [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 58.406126] random: sshd: uninitialized urandom read (32 bytes read) [ 58.886345] random: sshd: uninitialized urandom read (32 bytes read) [ 60.643305] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. [ 66.476397] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/20 14:09:18 fuzzer started [ 68.343392] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/20 14:09:21 connecting to host at 10.128.0.26:41605 2018/09/20 14:09:21 checking revisions... [ 69.990276] ================================================================== [ 69.997866] BUG: KMSAN: uninit-value in kcov_open+0x4a/0xa0 [ 70.003587] CPU: 1 PID: 4796 Comm: syz-fuzzer Not tainted 4.19.0-rc4+ #52 [ 70.010526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.019884] Call Trace: [ 70.022488] dump_stack+0x2f6/0x430 [ 70.026137] kmsan_report+0x183/0x2b0 [ 70.029957] kmsan_internal_check_memory+0x17e/0x1f0 [ 70.035080] kmsan_check_memory+0xb/0x10 [ 70.039156] kcov_open+0x4a/0xa0 [ 70.042755] ? kcov_mmap+0x120/0x120 [ 70.046504] open_proxy_open+0x545/0x5d0 [ 70.050700] ? debugfs_file_put+0x100/0x100 [ 70.055145] do_dentry_open+0xfb0/0x18b0 [ 70.059225] ? kmsan_memcpy_origins+0x111/0x1b0 [ 70.063921] vfs_open+0xaf/0xe0 [ 70.067329] path_openat+0x1845/0x6e50 [ 70.071249] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.076448] do_filp_open+0x259/0x610 [ 70.080296] do_sys_open+0x630/0x940 [ 70.084039] __se_sys_openat+0xcb/0xe0 [ 70.087948] __x64_sys_openat+0x56/0x70 [ 70.092017] do_syscall_64+0xb8/0x100 [ 70.095846] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 70.101046] RIP: 0033:0x47fcba [ 70.104249] Code: e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 70.123465] RSP: 002b:000000c420061650 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 70.131350] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcba [ 70.138624] RDX: 0000000000080000 RSI: 000000c420094380 RDI: ffffffffffffff9c [ 70.145900] RBP: 000000c4200616d0 R08: 0000000000000000 R09: 0000000000000000 [ 70.153175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.160476] R13: 00000000000000f4 R14: 0000000000000074 R15: 0000000000000108 [ 70.167786] [ 70.169461] Local variable description: ----c.i.i.i.i@generic_permission [ 70.176299] Variable was created at: [ 70.180024] generic_permission+0x4f/0xa90 [ 70.184267] inode_permission+0x11b/0x940 [ 70.188414] [ 70.190076] Byte 7 of 8 is uninitialized [ 70.194141] Memory access starts at ffff8801ae4bf810 [ 70.199242] ================================================================== [ 70.206603] Disabling lock debugging due to kernel taint [ 70.212056] Kernel panic - not syncing: panic_on_warn set ... [ 70.212056] [ 70.219572] CPU: 1 PID: 4796 Comm: syz-fuzzer Tainted: G B 4.19.0-rc4+ #52 [ 70.227888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.237533] Call Trace: [ 70.240144] dump_stack+0x2f6/0x430 [ 70.243822] panic+0x54c/0xaf7 [ 70.247070] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 70.252659] kmsan_report+0x2a8/0x2b0 [ 70.256503] kmsan_internal_check_memory+0x17e/0x1f0 [ 70.261632] kmsan_check_memory+0xb/0x10 [ 70.265804] kcov_open+0x4a/0xa0 [ 70.269362] ? kcov_mmap+0x120/0x120 [ 70.273462] open_proxy_open+0x545/0x5d0 [ 70.277556] ? debugfs_file_put+0x100/0x100 [ 70.281893] do_dentry_open+0xfb0/0x18b0 [ 70.285968] ? kmsan_memcpy_origins+0x111/0x1b0 [ 70.291095] vfs_open+0xaf/0xe0 [ 70.294482] path_openat+0x1845/0x6e50 [ 70.298898] ? kmsan_set_origin_inline+0x6b/0x120 [ 70.303832] do_filp_open+0x259/0x610 [ 70.307686] do_sys_open+0x630/0x940 [ 70.311552] __se_sys_openat+0xcb/0xe0 [ 70.315484] __x64_sys_openat+0x56/0x70 [ 70.319543] do_syscall_64+0xb8/0x100 [ 70.323450] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 70.328711] RIP: 0033:0x47fcba [ 70.331934] Code: e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 70.351060] RSP: 002b:000000c420061650 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 70.358801] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcba [ 70.366093] RDX: 0000000000080000 RSI: 000000c420094380 RDI: ffffffffffffff9c [ 70.373371] RBP: 000000c4200616d0 R08: 0000000000000000 R09: 0000000000000000 [ 70.380649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 70.387925] R13: 00000000000000f4 R14: 0000000000000074 R15: 0000000000000108 [ 70.395802] Kernel Offset: disabled [ 70.399484] Rebooting in 86400 seconds..