[   25.172263][   T25] audit: type=1400 audit(1581760976.821:37): avc:  denied  { watch } for  pid=7034 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1
[   25.196216][   T25] audit: type=1400 audit(1581760976.821:38): avc:  denied  { watch } for  pid=7034 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   25.453840][   T25] audit: type=1800 audit(1581760977.101:39): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   25.475691][   T25] audit: type=1800 audit(1581760977.111:40): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   30.176459][   T25] audit: type=1400 audit(1581760981.831:41): avc:  denied  { map } for  pid=7126 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts.
[   89.177222][   T25] audit: type=1400 audit(1581761040.831:42): avc:  denied  { map } for  pid=7141 comm="syz-executor400" path="/root/syz-executor400318304" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   89.204097][   T25] audit: type=1400 audit(1581761040.831:43): avc:  denied  { integrity } for  pid=7141 comm="syz-executor400" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1
executing program
[   96.052241][   T25] audit: type=1400 audit(1581761047.701:44): avc:  denied  { open } for  pid=7142 comm="syz-executor400" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[   96.075919][   T25] audit: type=1400 audit(1581761047.701:45): avc:  denied  { kernel } for  pid=7142 comm="syz-executor400" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1
[   96.099685][   T25] audit: type=1400 audit(1581761047.701:46): avc:  denied  { confidentiality } for  pid=7142 comm="syz-executor400" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1
executing program
[  117.861439][ T7141] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff88811a94aa80 (size 32):
  comm "syz-executor400", pid 7144, jiffies 4294947959 (age 12.900s)
  hex dump (first 32 bytes):
    00 66 73 00 00 00 00 00 00 00 00 00 00 00 00 00  .fs.............
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace:
    [<000000003d70818d>] __kmalloc_track_caller+0x165/0x300
    [<0000000084e29e2f>] kstrdup+0x3a/0x70
    [<00000000a963dd4d>] nfs_fs_context_parse_monolithic+0x5cf/0x8f0
    [<00000000eaad78cd>] parse_monolithic_mount_data+0x37/0x40
    [<00000000fba78015>] do_mount+0x945/0xc80
    [<000000006db36121>] __x64_sys_mount+0xc0/0x140
    [<000000004d122200>] do_syscall_64+0x73/0x220
    [<00000000accfeb7c>] entry_SYSCALL_64_after_hwframe+0x44/0xa9