[ 24.998220][ T22] audit: type=1400 audit(1573643686.086:37): avc: denied { watch } for pid=6860 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting [ 25.029525][ T22] audit: type=1400 audit(1573643686.086:38): avc: denied { watch } for pid=6860 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [ 25.076252][ T22] audit: type=1800 audit(1573643686.166:39): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 25.098346][ T22] audit: type=1800 audit(1573643686.166:40): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.041079][ T22] audit: type=1400 audit(1573643691.126:41): avc: denied { map } for pid=6927 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.211' (ECDSA) to the list of known hosts. [ 59.809583][ T22] audit: type=1400 audit(1573643720.896:42): avc: denied { map } for pid=6942 comm="syz-executor790" path="/root/syz-executor790625272" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program [ 73.365844][ T6942] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88812a4e9640 (size 1376): comm "syz-executor790", pid 6943, jiffies 4294943935 (age 13.630s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2b 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00 +..@............ backtrace: [<0000000034dd5ef3>] kmem_cache_alloc+0x13f/0x2c0 [<00000000f6e5704b>] sk_prot_alloc+0x41/0x170 [<00000000363dd1fe>] sk_alloc+0x35/0x2f0 [<00000000021193f5>] smc_sock_alloc+0x4a/0x1a0 [<00000000bbea2d38>] smc_create+0x6b/0x160 [<000000007e6809d7>] __sock_create+0x164/0x250 [<0000000055edf19a>] __sys_socket+0x69/0x110 [<000000001995c18e>] __x64_sys_socket+0x1e/0x30 [<000000007adce8e7>] do_syscall_64+0x73/0x1f0 [<0000000051e8d84e>] entry_SYSCALL_64_after_hwframe+0x44/0xa9