[ 26.773401][ T26] audit: type=1400 audit(1579150110.969:38): avc: denied { watch } for pid=7026 comm="restorecond" path="/etc/selinux/restorecond.conf" dev="sda1" ino=2232 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.876870][ T26] audit: type=1800 audit(1579150111.099:39): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.898321][ T26] audit: type=1800 audit(1579150111.099:40): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [ 27.952178][ T26] audit: type=1400 audit(1579150112.169:41): avc: denied { map } for pid=7112 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.19' (ECDSA) to the list of known hosts. syzkaller login: [ 46.935585][ T26] audit: type=1400 audit(1579150131.149:42): avc: denied { map } for pid=7128 comm="syz-executor052" path="/root/syz-executor052874164" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 executing program [ 53.620462][ T26] audit: type=1400 audit(1579150137.839:43): avc: denied { create } for pid=7129 comm="syz-executor052" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 53.645346][ T26] audit: type=1400 audit(1579150137.839:44): avc: denied { write } for pid=7129 comm="syz-executor052" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 executing program [ 60.345799][ T7128] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff8881292d4580 (size 96): comm "syz-executor052", pid 7129, jiffies 4294942632 (age 13.530s) hex dump (first 32 bytes): 40 d2 15 1c 81 88 ff ff 40 d2 15 1c 81 88 ff ff @.......@....... 60 53 c3 82 ff ff ff ff 00 a0 2c 2a 81 88 ff ff `S........,*.... backtrace: [<0000000059912bf5>] kmem_cache_alloc_trace+0x145/0x2c0 [<00000000ab9f7d85>] nft_netdev_hook_alloc+0x3f/0xd0 [<0000000074e6bb65>] nf_tables_parse_netdev_hooks+0xac/0x230 [<00000000cd387efd>] nf_tables_newflowtable+0x41e/0x930 [<00000000526e3994>] nfnetlink_rcv_batch+0x662/0x8c0 [<000000006c5402bf>] nfnetlink_rcv+0x189/0x1c0 [<00000000b752f9f7>] netlink_unicast+0x223/0x310 [<00000000a0e23793>] netlink_sendmsg+0x2c0/0x570 [<000000006e0aea94>] sock_sendmsg+0x54/0x70 [<00000000a60c26dd>] ____sys_sendmsg+0x2d0/0x300 [<00000000d412f616>] ___sys_sendmsg+0x8a/0xd0 [<000000001179a6b0>] __sys_sendmsg+0x80/0xf0 [<000000004a6699d1>] __x64_sys_sendmsg+0x23/0x30 [<00000000a05aa7d1>] do_syscall_64+0x73/0x220 [<00000000bad17b52>] entry_SYSCALL_64_after_hwframe+0x44/0xa9