[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 52.285955] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 54.317953] random: sshd: uninitialized urandom read (32 bytes read) [ 54.659375] random: sshd: uninitialized urandom read (32 bytes read) [ 56.468230] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.73' (ECDSA) to the list of known hosts. [ 62.208804] random: sshd: uninitialized urandom read (32 bytes read) 2018/09/20 17:30:31 fuzzer started [ 63.433347] random: cc1: uninitialized urandom read (8 bytes read) 2018/09/20 17:30:33 connecting to host at 10.128.0.26:36479 2018/09/20 17:30:33 checking revisions... [ 64.943246] ================================================================== [ 64.950645] BUG: KMSAN: uninit-value in kcov_open+0x4a/0xa0 [ 64.956350] CPU: 0 PID: 4681 Comm: syz-fuzzer Not tainted 4.19.0-rc4+ #53 [ 64.963262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 64.972611] Call Trace: [ 64.975196] dump_stack+0x2f6/0x430 [ 64.978828] kmsan_report+0x183/0x2b0 [ 64.982634] kmsan_internal_check_memory+0x17e/0x1f0 [ 64.987742] kmsan_check_memory+0xb/0x10 [ 64.991796] kcov_open+0x4a/0xa0 [ 64.995155] ? kcov_mmap+0x120/0x120 [ 64.998868] open_proxy_open+0x545/0x5d0 [ 65.002939] ? debugfs_file_put+0x100/0x100 [ 65.007266] do_dentry_open+0xfb0/0x18b0 [ 65.011319] ? kmsan_memcpy_origins+0x111/0x1b0 [ 65.015994] vfs_open+0xaf/0xe0 [ 65.019271] path_openat+0x1845/0x6e50 [ 65.023184] ? kmsan_set_origin_inline+0x6b/0x120 [ 65.028074] do_filp_open+0x259/0x610 [ 65.031901] do_sys_open+0x630/0x940 [ 65.035632] __se_sys_openat+0xcb/0xe0 [ 65.039537] __x64_sys_openat+0x56/0x70 [ 65.043527] do_syscall_64+0xb8/0x100 [ 65.047335] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 65.052539] RIP: 0033:0x47fcba [ 65.055741] Code: e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 65.074653] RSP: 002b:000000c42013d650 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 65.082361] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcba [ 65.089622] RDX: 0000000000080000 RSI: 000000c420084320 RDI: ffffffffffffff9c [ 65.096884] RBP: 000000c42013d6d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.104144] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.111406] R13: 00000000000000f4 R14: 0000000000000074 R15: 0000000000000001 [ 65.118679] [ 65.120295] Local variable description: ----c.i.i.i.i@generic_permission [ 65.127118] Variable was created at: [ 65.130841] generic_permission+0x4f/0xa90 [ 65.135069] inode_permission+0x11b/0x940 [ 65.139213] [ 65.140829] Byte 7 of 8 is uninitialized [ 65.144875] Memory access starts at ffff8801aed9f810 [ 65.149961] ================================================================== [ 65.157304] Disabling lock debugging due to kernel taint [ 65.162739] Kernel panic - not syncing: panic_on_warn set ... [ 65.162739] [ 65.170111] CPU: 0 PID: 4681 Comm: syz-fuzzer Tainted: G B 4.19.0-rc4+ #53 [ 65.178411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.187752] Call Trace: [ 65.190339] dump_stack+0x2f6/0x430 [ 65.193969] panic+0x54c/0xaf7 [ 65.197186] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 65.202639] kmsan_report+0x2a8/0x2b0 [ 65.206443] kmsan_internal_check_memory+0x17e/0x1f0 [ 65.211573] kmsan_check_memory+0xb/0x10 [ 65.215650] kcov_open+0x4a/0xa0 [ 65.219011] ? kcov_mmap+0x120/0x120 [ 65.222734] open_proxy_open+0x545/0x5d0 [ 65.226809] ? debugfs_file_put+0x100/0x100 [ 65.231137] do_dentry_open+0xfb0/0x18b0 [ 65.235198] ? kmsan_memcpy_origins+0x111/0x1b0 [ 65.239881] vfs_open+0xaf/0xe0 [ 65.243160] path_openat+0x1845/0x6e50 [ 65.247070] ? kmsan_set_origin_inline+0x6b/0x120 [ 65.251950] do_filp_open+0x259/0x610 [ 65.255791] do_sys_open+0x630/0x940 [ 65.259527] __se_sys_openat+0xcb/0xe0 [ 65.263427] __x64_sys_openat+0x56/0x70 [ 65.267396] do_syscall_64+0xb8/0x100 [ 65.271191] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 65.276370] RIP: 0033:0x47fcba [ 65.279567] Code: e8 2b 41 fb ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48 [ 65.298483] RSP: 002b:000000c42013d650 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 65.306197] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000047fcba [ 65.313468] RDX: 0000000000080000 RSI: 000000c420084320 RDI: ffffffffffffff9c [ 65.320732] RBP: 000000c42013d6d0 R08: 0000000000000000 R09: 0000000000000000 [ 65.327988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 65.335246] R13: 00000000000000f4 R14: 0000000000000074 R15: 0000000000000001 [ 65.342972] Kernel Offset: disabled [ 65.346603] Rebooting in 86400 seconds..