[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 53.294642] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 57.650577] random: sshd: uninitialized urandom read (32 bytes read) [ 58.088169] random: sshd: uninitialized urandom read (32 bytes read) [ 59.356730] random: sshd: uninitialized urandom read (32 bytes read) [ 59.738267] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.38' (ECDSA) to the list of known hosts. [ 65.619713] random: sshd: uninitialized urandom read (32 bytes read) executing program [ 65.816914] ================================================================== [ 65.824324] BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x33a/0x750 [ 65.831158] CPU: 1 PID: 4666 Comm: syz-executor129 Not tainted 4.19.0-rc4+ #56 [ 65.838504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.847851] Call Trace: [ 65.850436] dump_stack+0x2f6/0x430 [ 65.854093] kmsan_report+0x183/0x2b0 [ 65.857917] __msan_warning+0x70/0xc0 [ 65.861741] aa_fqlookupn_profile+0x33a/0x750 [ 65.866249] aa_label_strn_parse+0x179e/0x1f30 [ 65.870868] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 65.876230] ? strlen+0x51/0xa0 [ 65.879507] aa_label_parse+0x11f/0x130 [ 65.883481] aa_change_profile+0x979/0x41d0 [ 65.887823] ? __kmalloc_track_caller+0xc04/0xe50 [ 65.892669] ? memdup_user+0x7c/0x1e0 [ 65.896463] ? __vfs_write+0x1a8/0xa50 [ 65.900344] ? task_kmsan_context_state+0x5e/0x110 [ 65.905273] ? INIT_INT+0xc/0x30 [ 65.908646] ? _raw_spin_lock_irqsave+0x21a/0x310 [ 65.913508] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 65.918875] ? strcmp+0x83/0x160 [ 65.922255] apparmor_setprocattr+0x121a/0x12f0 [ 65.926955] ? apparmor_getprocattr+0x6c0/0x6c0 [ 65.931632] security_setprocattr+0x139/0x210 [ 65.936132] proc_pid_attr_write+0x3f9/0x4e0 [ 65.940561] ? proc_pid_attr_read+0x4d0/0x4d0 [ 65.945055] __vfs_write+0x1a8/0xa50 [ 65.948772] ? __sb_start_write+0x9f/0x2d0 [ 65.953022] vfs_write+0x495/0x8e0 [ 65.956589] __se_sys_write+0x173/0x350 [ 65.960571] __x64_sys_write+0x4a/0x70 [ 65.964453] do_syscall_64+0xb8/0x100 [ 65.968252] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 65.973433] RIP: 0033:0x440059 [ 65.976613] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.995506] RSP: 002b:00007ffe71b4ffe8 EFLAGS: 00000213 ORIG_RAX: 0000000000000001 [ 66.003209] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440059 [ 66.010481] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 66.017754] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 66.025027] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018e0 [ 66.032285] R13: 0000000000401970 R14: 0000000000000000 R15: 0000000000000000 [ 66.039557] [ 66.041178] Local variable description: ----ns_name@aa_fqlookupn_profile [ 66.048026] Variable was created at: [ 66.051738] aa_fqlookupn_profile+0x81/0x750 [ 66.056171] aa_label_strn_parse+0x179e/0x1f30 [ 66.060740] ================================================================== [ 66.068082] Disabling lock debugging due to kernel taint [ 66.073517] Kernel panic - not syncing: panic_on_warn set ... [ 66.073517] [ 66.080885] CPU: 1 PID: 4666 Comm: syz-executor129 Tainted: G B 4.19.0-rc4+ #56 [ 66.089618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 66.098980] Call Trace: [ 66.101577] dump_stack+0x2f6/0x430 [ 66.105209] panic+0x54c/0xaf7 [ 66.108432] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 66.113884] kmsan_report+0x2a8/0x2b0 [ 66.117699] __msan_warning+0x70/0xc0 [ 66.121509] aa_fqlookupn_profile+0x33a/0x750 [ 66.126027] aa_label_strn_parse+0x179e/0x1f30 [ 66.130647] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 66.136018] ? strlen+0x51/0xa0 [ 66.139302] aa_label_parse+0x11f/0x130 [ 66.143278] aa_change_profile+0x979/0x41d0 [ 66.147607] ? __kmalloc_track_caller+0xc04/0xe50 [ 66.152439] ? memdup_user+0x7c/0x1e0 [ 66.156232] ? __vfs_write+0x1a8/0xa50 [ 66.160112] ? task_kmsan_context_state+0x5e/0x110 [ 66.165043] ? INIT_INT+0xc/0x30 [ 66.168405] ? _raw_spin_lock_irqsave+0x21a/0x310 [ 66.173280] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 66.178636] ? strcmp+0x83/0x160 [ 66.182019] apparmor_setprocattr+0x121a/0x12f0 [ 66.186723] ? apparmor_getprocattr+0x6c0/0x6c0 [ 66.191389] security_setprocattr+0x139/0x210 [ 66.195890] proc_pid_attr_write+0x3f9/0x4e0 [ 66.200305] ? proc_pid_attr_read+0x4d0/0x4d0 [ 66.204808] __vfs_write+0x1a8/0xa50 [ 66.208519] ? __sb_start_write+0x9f/0x2d0 [ 66.212763] vfs_write+0x495/0x8e0 [ 66.216314] __se_sys_write+0x173/0x350 [ 66.220292] __x64_sys_write+0x4a/0x70 [ 66.224175] do_syscall_64+0xb8/0x100 [ 66.227984] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 66.233180] RIP: 0033:0x440059 [ 66.236363] Code: 18 89 d0 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb 13 fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.255269] RSP: 002b:00007ffe71b4ffe8 EFLAGS: 00000213 ORIG_RAX: 0000000000000001 [ 66.262990] RAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 0000000000440059 [ 66.270264] RDX: 0000000000000009 RSI: 0000000020000040 RDI: 0000000000000003 [ 66.277539] RBP: 00000000006ca018 R08: 0000000000000000 R09: 00000000004002c8 [ 66.284826] R10: 0000000000000000 R11: 0000000000000213 R12: 00000000004018e0 [ 66.292111] R13: 0000000000401970 R14: 0000000000000000 R15: 0000000000000000 [ 66.299701] Kernel Offset: disabled [ 66.303340] Rebooting in 86400 seconds..