Is Android System [UID] in your list of SU Root Permissions?
I just reloaded the stock rom then installed SuperSU (otherwise blank system)
Upon the next restart, one of the permission request that popped up is Android System [UID]. : system_user_1000
I don't remember seeing this before...
This is normal? Could this be malware?