[ 27.998407][ T26] audit: type=1800 audit(1580525248.342:35): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 28.024399][ T26] audit: type=1800 audit(1580525248.342:36): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. Starting mcstransd: [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts. syzkaller login: [ 35.182463][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 35.182471][ T26] audit: type=1400 audit(1580525255.572:42): avc: denied { map } for pid=7263 comm="syz-executor248" path="/root/syz-executor248398521" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 35.217691][ T26] audit: type=1400 audit(1580525255.572:43): avc: denied { integrity } for pid=7263 comm="syz-executor248" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 executing program [ 42.028846][ T26] audit: type=1400 audit(1580525262.422:44): avc: denied { create } for pid=7266 comm="syz-executor248" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 42.054209][ T26] audit: type=1400 audit(1580525262.422:45): avc: denied { write } for pid=7266 comm="syz-executor248" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 executing program [ 53.957189][ T7263] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88811a63e980 (size 96): comm "syz-executor248", pid 7266, jiffies 4294941474 (age 13.970s) hex dump (first 32 bytes): 40 a0 b6 20 81 88 ff ff 40 a0 b6 20 81 88 ff ff @.. ....@.. .... 10 12 c6 82 ff ff ff ff 00 10 7f 25 81 88 ff ff ...........%.... backtrace: [<00000000a2c63298>] kmem_cache_alloc_trace+0x145/0x2c0 [<00000000da73f1aa>] nft_netdev_hook_alloc+0x3f/0xd0 [<00000000fc0e58ea>] nf_tables_parse_netdev_hooks+0xaa/0x220 [<00000000936c542a>] nf_tables_newflowtable+0x407/0x930 [<00000000f7d43b83>] nfnetlink_rcv_batch+0x353/0x8c0 [<00000000fca7d018>] nfnetlink_rcv+0x189/0x1c0 [<000000008258ae74>] netlink_unicast+0x223/0x310 [<0000000049111dd2>] netlink_sendmsg+0x2c0/0x570 [<000000006d2e5a2f>] sock_sendmsg+0x54/0x70 [<000000005ad73cc5>] ____sys_sendmsg+0x2d0/0x300 [<00000000ec121e60>] ___sys_sendmsg+0x8a/0xd0 [<000000005a28fbd9>] __sys_sendmsg+0x80/0xf0 [<0000000073247a7a>] __x64_sys_sendmsg+0x23/0x30 [<00000000eccb9a0d>] do_syscall_64+0x73/0x220 [<00000000daaab575>] entry_SYSCALL_64_after_hwframe+0x44/0xa9