[ 26.384542][ T24] audit: type=1400 audit(1570989226.060:37): avc: denied { watch } for pid=6926 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [ 26.410454][ T24] audit: type=1400 audit(1570989226.060:38): avc: denied { watch } for pid=6926 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.499801][ T24] audit: type=1800 audit(1570989226.180:39): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.523281][ T24] audit: type=1800 audit(1570989226.180:40): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.572251][ T24] audit: type=1400 audit(1570989230.250:41): avc: denied { map } for pid=7018 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts. [ 36.402703][ T24] audit: type=1400 audit(1570989236.080:42): avc: denied { map } for pid=7032 comm="syz-executor236" path="/root/syz-executor236700644" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program executing program [ 49.941299][ T7032] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888119551700 (size 224): comm "syz-executor236", pid 7035, jiffies 4294941617 (age 13.640s) hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 46 2a 81 88 ff ff 00 18 9d 1b 81 88 ff ff ..F*............ backtrace: [<00000000b1a587f1>] kmem_cache_alloc_node+0x163/0x2f0 [<000000002e028be1>] __alloc_skb+0x6e/0x210 [<00000000e9f2a5af>] llc_alloc_frame+0x66/0x110 [<0000000040d73646>] llc_conn_ac_send_sabme_cmd_p_set_x+0x2f/0x140 [<000000006eee3ca1>] llc_conn_state_process+0x1ac/0x640 [<00000000325eea5a>] llc_establish_connection+0x110/0x170 [<00000000c4da2dad>] llc_ui_connect+0x10e/0x370 [<000000008d48e2b9>] __sys_connect+0x11d/0x170 [<000000009d207adf>] __x64_sys_connect+0x1e/0x30 [<0000000097123087>] do_syscall_64+0x73/0x1f0 [<0000000093ada199>] entry_SYSCALL_64_after_hwframe+0x44/0xa9