[   26.430505][   T26] audit: type=1400 audit(1579422872.518:38): avc:  denied  { watch } for  pid=7012 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
Starting mcstransd: 
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   26.571782][   T26] audit: type=1800 audit(1579422872.688:39): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   26.593800][   T26] audit: type=1800 audit(1579422872.688:40): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   31.342573][   T26] audit: type=1400 audit(1579422877.458:41): avc:  denied  { map } for  pid=7098 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.0.98' (ECDSA) to the list of known hosts.
[   43.563536][   T26] audit: type=1400 audit(1579422889.678:42): avc:  denied  { map } for  pid=7113 comm="syz-executor883" path="/root/syz-executor883978762" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
executing program
[   50.348934][   T26] audit: type=1400 audit(1579422896.468:43): avc:  denied  { create } for  pid=7114 comm="syz-executor883" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
[   50.375191][   T26] audit: type=1400 audit(1579422896.468:44): avc:  denied  { write } for  pid=7114 comm="syz-executor883" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
executing program
[   57.183782][ T7113] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff888117294700 (size 96):
  comm "syz-executor883", pid 7114, jiffies 4294942307 (age 13.720s)
  hex dump (first 32 bytes):
    40 2c 9e 17 81 88 ff ff 40 2c 9e 17 81 88 ff ff  @,......@,......
    60 63 c3 82 ff ff ff ff 00 e0 ae 2a 81 88 ff ff  `c.........*....
  backtrace:
    [<000000008020f237>] kmem_cache_alloc_trace+0x145/0x2c0
    [<000000007d55c6f4>] nft_netdev_hook_alloc+0x3f/0xd0
    [<0000000092469f02>] nf_tables_parse_netdev_hooks+0xac/0x230
    [<00000000a1ce2f6e>] nf_tables_newflowtable+0x41e/0x930
    [<0000000014008db9>] nfnetlink_rcv_batch+0x662/0x8c0
    [<00000000f9688c30>] nfnetlink_rcv+0x189/0x1c0
    [<00000000d167c251>] netlink_unicast+0x223/0x310
    [<00000000c60f1dc5>] netlink_sendmsg+0x2c0/0x570
    [<000000007c140c5d>] sock_sendmsg+0x54/0x70
    [<000000006f3b601d>] ____sys_sendmsg+0x2d0/0x300
    [<00000000e12ae7df>] ___sys_sendmsg+0x8a/0xd0
    [<00000000f0a5033c>] __sys_sendmsg+0x80/0xf0
    [<00000000041466f2>] __x64_sys_sendmsg+0x23/0x30
    [<000000005c2df80e>] do_syscall_64+0x73/0x220
    [<000000009982bed6>] entry_SYSCALL_64_after_hwframe+0x44/0xa9