[   27.998407][   T26] audit: type=1800 audit(1580525248.342:35): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   28.024399][   T26] audit: type=1800 audit(1580525248.342:36): pid=7070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.71' (ECDSA) to the list of known hosts.
syzkaller login: [   35.182463][   T26] kauditd_printk_skb: 5 callbacks suppressed
[   35.182471][   T26] audit: type=1400 audit(1580525255.572:42): avc:  denied  { map } for  pid=7263 comm="syz-executor248" path="/root/syz-executor248398521" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   35.217691][   T26] audit: type=1400 audit(1580525255.572:43): avc:  denied  { integrity } for  pid=7263 comm="syz-executor248" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1
executing program
[   42.028846][   T26] audit: type=1400 audit(1580525262.422:44): avc:  denied  { create } for  pid=7266 comm="syz-executor248" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[   42.054209][   T26] audit: type=1400 audit(1580525262.422:45): avc:  denied  { write } for  pid=7266 comm="syz-executor248" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
executing program
[   53.957189][ T7263] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff88811a63e980 (size 96):
  comm "syz-executor248", pid 7266, jiffies 4294941474 (age 13.970s)
  hex dump (first 32 bytes):
    40 a0 b6 20 81 88 ff ff 40 a0 b6 20 81 88 ff ff  @.. ....@.. ....
    10 12 c6 82 ff ff ff ff 00 10 7f 25 81 88 ff ff  ...........%....
  backtrace:
    [<00000000a2c63298>] kmem_cache_alloc_trace+0x145/0x2c0
    [<00000000da73f1aa>] nft_netdev_hook_alloc+0x3f/0xd0
    [<00000000fc0e58ea>] nf_tables_parse_netdev_hooks+0xaa/0x220
    [<00000000936c542a>] nf_tables_newflowtable+0x407/0x930
    [<00000000f7d43b83>] nfnetlink_rcv_batch+0x353/0x8c0
    [<00000000fca7d018>] nfnetlink_rcv+0x189/0x1c0
    [<000000008258ae74>] netlink_unicast+0x223/0x310
    [<0000000049111dd2>] netlink_sendmsg+0x2c0/0x570
    [<000000006d2e5a2f>] sock_sendmsg+0x54/0x70
    [<000000005ad73cc5>] ____sys_sendmsg+0x2d0/0x300
    [<00000000ec121e60>] ___sys_sendmsg+0x8a/0xd0
    [<000000005a28fbd9>] __sys_sendmsg+0x80/0xf0
    [<0000000073247a7a>] __x64_sys_sendmsg+0x23/0x30
    [<00000000eccb9a0d>] do_syscall_64+0x73/0x220
    [<00000000daaab575>] entry_SYSCALL_64_after_hwframe+0x44/0xa9