[ 26.610414][ T25] audit: type=1400 audit(1581607169.417:37): avc: denied { watch } for pid=7078 comm="restorecond" path="/root/.ssh" dev="sda1" ino=16179 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:object_r:ssh_home_t:s0 tclass=dir permissive=1 [....] Starting [ 26.637300][ T25] audit: type=1400 audit(1581607169.417:38): avc: denied { watch } for pid=7078 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c[ 26.677595][ T25] audit: type=1800 audit(1581607169.487:39): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 . [ 26.700802][ T25] audit: type=1800 audit(1581607169.487:40): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 30.320662][ T25] audit: type=1400 audit(1581607173.127:41): avc: denied { map } for pid=7159 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. [ 65.021780][ T25] audit: type=1400 audit(1581607207.827:42): avc: denied { map } for pid=7174 comm="syz-executor702" path="/root/syz-executor702347671" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 65.048932][ T25] audit: type=1400 audit(1581607207.827:43): avc: denied { integrity } for pid=7174 comm="syz-executor702" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 executing program executing program executing program [ 90.050709][ T7174] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888117650980 (size 32): comm "syz-executor702", pid 7176, jiffies 4294945079 (age 14.000s) hex dump (first 32 bytes): 00 64 6d 61 62 75 66 3a 00 00 00 00 00 00 00 00 .dmabuf:........ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000bbec8b68>] __kmalloc_track_caller+0x165/0x300 [<00000000b89fa841>] memdup_user+0x26/0xc0 [<00000000c27a5539>] strndup_user+0x62/0x80 [<00000000e24b5378>] dma_buf_ioctl+0x60/0x1e0 [<0000000003d1e810>] ksys_ioctl+0xb4/0xe0 [<0000000084005916>] __x64_sys_ioctl+0x1e/0x30 [<0000000083f5541a>] do_syscall_64+0x73/0x220 [<00000000a6af5e17>] entry_SYSCALL_64_after_hwframe+0x44/0xa9