program: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104808, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00000002"], 0x11) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x7, 0x4, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x80000000, 0x0, 0x5]}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104808, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00000002"], 0x11) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x7, 0x4, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x80000, 0x1, 0x8, 0x1e, 0x1, 0x0, 0x1a449, 0x3, 0x6, 0x81, 0xcaa7, 0x4, 0x1e58, 0xb, 0x3, 0x3c, 0x8, 0x80000000, 0x0, 0x5]}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) [ 85.974904][ T4670] Bluetooth: Frame is too long (len 12, expected len 4) [ 86.075872][ T4670] Bluetooth: hci0: command tx timeout [ 86.120095][ T5301] ================================================================== [ 86.124403][ T5301] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xb1/0x840 [ 86.127862][ T5301] Read of size 8 at addr ffff8880383f8618 by task udevd/5301 [ 86.132276][ T5301] [ 86.133781][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 86.133800][ T5301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.133807][ T5301] Call Trace: [ 86.133817][ T5301] [ 86.133826][ T5301] dump_stack_lvl+0xe8/0x150 [ 86.133851][ T5301] print_report+0xba/0x230 [ 86.133867][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.133885][ T5301] kasan_report+0x117/0x150 [ 86.133901][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.133917][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134013][ T5301] bpf_trace_run2+0xb1/0x840 [ 86.134027][ T5301] ? bpf_trace_run2+0x1c9/0x840 [ 86.134038][ T5301] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.134049][ T5301] ? trace_kmalloc+0x2a/0x110 [ 86.134062][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134073][ T5301] ? __kmalloc_noprof+0x37d/0x760 [ 86.134085][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134094][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134104][ T5301] __traceiter_kfree+0x2e/0x50 [ 86.134114][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134126][ T5301] kfree+0x5b2/0x630 [ 86.134137][ T5301] ? tomoyo_encode+0x511/0x550 [ 86.134152][ T5301] tomoyo_realpath_from_path+0x598/0x5d0 [ 86.134169][ T5301] tomoyo_path_perm+0x283/0x560 [ 86.134181][ T5301] ? tomoyo_path_perm+0x251/0x560 [ 86.134192][ T5301] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 86.134203][ T5301] ? __x64_sys_openat+0x138/0x170 [ 86.134229][ T5301] security_inode_getattr+0x12b/0x310 [ 86.134248][ T5301] __x64_sys_newfstat+0x13b/0x270 [ 86.134264][ T5301] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 86.134282][ T5301] ? kmem_cache_free+0x187/0x630 [ 86.134294][ T5301] ? __se_sys_rename+0x185/0x2c0 [ 86.134313][ T5301] do_syscall_64+0x14d/0xf80 [ 86.134388][ T5301] ? trace_irq_disable+0x3b/0x150 [ 86.134407][ T5301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.134420][ T5301] ? clear_bhb_loop+0x40/0x90 [ 86.134433][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.134442][ T5301] RIP: 0033:0x7f3301911ad7 [ 86.134453][ T5301] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 86.134460][ T5301] RSP: 002b:00007ffd733d6568 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 86.134471][ T5301] RAX: ffffffffffffffda RBX: 000055c2dc06af20 RCX: 00007f3301911ad7 [ 86.134477][ T5301] RDX: 00007f33019efea0 RSI: 00007ffd733d6570 RDI: 0000000000000008 [ 86.134483][ T5301] RBP: 00007f33019efff0 R08: 0000000000000001 R09: 0000000000000000 [ 86.134488][ T5301] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 86.134493][ T5301] R13: 0000000000003fff R14: 0000000000000000 R15: 000055c2dc06af20 [ 86.134502][ T5301] [ 86.134505][ T5301] [ 86.271702][ T5301] Allocated by task 5327: [ 86.273865][ T5301] kasan_save_track+0x3e/0x80 [ 86.276227][ T5301] __kasan_kmalloc+0x93/0xb0 [ 86.278756][ T5301] __kmalloc_cache_noprof+0x31c/0x660 [ 86.281667][ T5301] bpf_raw_tp_link_attach+0x278/0x700 [ 86.284177][ T5301] bpf_raw_tracepoint_open+0x1b2/0x220 [ 86.286578][ T5301] __sys_bpf+0x846/0x950 [ 86.288613][ T5301] __x64_sys_bpf+0x7c/0x90 [ 86.291197][ T5301] do_syscall_64+0x14d/0xf80 [ 86.293489][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.297005][ T5301] [ 86.298555][ T5301] Freed by task 18: [ 86.300998][ T5301] kasan_save_track+0x3e/0x80 [ 86.303261][ T5301] kasan_save_free_info+0x46/0x50 [ 86.305384][ T5301] __kasan_slab_free+0x5c/0x80 [ 86.307565][ T5301] kfree+0x1c1/0x630 [ 86.309543][ T5301] rcu_core+0x7cd/0x1070 [ 86.311514][ T5301] handle_softirqs+0x22a/0x870 [ 86.314070][ T5301] __irq_exit_rcu+0x5f/0x150 [ 86.317255][ T5301] irq_exit_rcu+0x9/0x30 [ 86.319285][ T5301] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 86.322437][ T5301] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 86.325013][ T5301] [ 86.326050][ T5301] Last potentially related work creation: [ 86.328648][ T5301] kasan_save_stack+0x3e/0x60 [ 86.330890][ T5301] kasan_record_aux_stack+0xbd/0xd0 [ 86.333365][ T5301] call_rcu+0xee/0x890 [ 86.335753][ T5301] bpf_link_release+0x6b/0x80 [ 86.338659][ T5301] __fput+0x44f/0xa70 [ 86.340512][ T5301] task_work_run+0x1d9/0x270 [ 86.342686][ T5301] do_exit+0x70f/0x23c0 [ 86.344540][ T5301] do_group_exit+0x21b/0x2d0 [ 86.346551][ T5301] get_signal+0x1284/0x1330 [ 86.348795][ T5301] arch_do_signal_or_restart+0xbc/0x830 [ 86.352156][ T5301] exit_to_user_mode_loop+0x86/0x480 [ 86.354815][ T5301] do_syscall_64+0x32d/0xf80 [ 86.357024][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.359579][ T5301] [ 86.360791][ T5301] The buggy address belongs to the object at ffff8880383f8600 [ 86.360791][ T5301] which belongs to the cache kmalloc-192 of size 192 [ 86.368250][ T5301] The buggy address is located 24 bytes inside of [ 86.368250][ T5301] freed 192-byte region [ffff8880383f8600, ffff8880383f86c0) [ 86.374385][ T5301] [ 86.375533][ T5301] The buggy address belongs to the physical page: [ 86.378363][ T5301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x383f8 [ 86.382372][ T5301] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 86.385839][ T5301] page_type: f5(slab) [ 86.387694][ T5301] raw: 04fff00000000000 ffff88801ac413c0 dead000000000100 dead000000000122 [ 86.391708][ T5301] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 86.396327][ T5301] page dumped because: kasan: bad access detected [ 86.400206][ T5301] page_owner tracks the page as allocated [ 86.402595][ T5301] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 922, tgid 922 (kworker/0:3), ts 22261794676, free_ts 22260687877 [ 86.411501][ T5301] post_alloc_hook+0x231/0x280 [ 86.414073][ T5301] get_page_from_freelist+0x24dc/0x2580 [ 86.417328][ T5301] __alloc_frozen_pages_noprof+0x18d/0x380 [ 86.420215][ T5301] allocate_slab+0x77/0x660 [ 86.422051][ T5301] refill_objects+0x331/0x3c0 [ 86.424491][ T5301] __pcs_replace_empty_main+0x2f9/0x5e0 [ 86.427209][ T5301] __kmalloc_noprof+0x474/0x760 [ 86.429530][ T5301] usb_alloc_urb+0x46/0x150 [ 86.431850][ T5301] usb_control_msg+0x118/0x3e0 [ 86.434037][ T5301] hub_ext_port_status+0x116/0x820 [ 86.436415][ T5301] hub_activate+0x6eb/0x1a80 [ 86.438609][ T5301] process_scheduled_works+0xb02/0x1830 [ 86.441141][ T5301] worker_thread+0xa50/0xfc0 [ 86.443305][ T5301] kthread+0x388/0x470 [ 86.445362][ T5301] ret_from_fork+0x51e/0xb90 [ 86.447394][ T5301] ret_from_fork_asm+0x1a/0x30 [ 86.449652][ T5301] page last free pid 12 tgid 12 stack trace: [ 86.452761][ T5301] __free_frozen_pages+0xc2b/0xdb0 [ 86.455918][ T5301] __kasan_populate_vmalloc+0x137/0x1d0 [ 86.459058][ T5301] alloc_vmap_area+0xd73/0x14b0 [ 86.462179][ T5301] __get_vm_area_node+0x1f8/0x300 [ 86.465129][ T5301] __vmalloc_node_range_noprof+0x372/0x1730 [ 86.467926][ T5301] __vmalloc_node_noprof+0xc2/0x100 [ 86.470465][ T5301] dup_task_struct+0x228/0x9a0 [ 86.473760][ T5301] copy_process+0x508/0x3cf0 [ 86.477069][ T5301] kernel_clone+0x248/0x8e0 [ 86.479720][ T5301] user_mode_thread+0x110/0x180 [ 86.481964][ T5301] call_usermodehelper_exec_work+0x5c/0x230 [ 86.484543][ T5301] process_scheduled_works+0xb02/0x1830 [ 86.487304][ T5301] worker_thread+0xa50/0xfc0 [ 86.489377][ T5301] kthread+0x388/0x470 [ 86.491232][ T5301] ret_from_fork+0x51e/0xb90 [ 86.493471][ T5301] ret_from_fork_asm+0x1a/0x30 [ 86.495932][ T5301] [ 86.497086][ T5301] Memory state around the buggy address: [ 86.501149][ T5301] ffff8880383f8500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.504987][ T5301] ffff8880383f8580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.508450][ T5301] >ffff8880383f8600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.512249][ T5301] ^ [ 86.514605][ T5301] ffff8880383f8680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.518684][ T5301] ffff8880383f8700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.522182][ T5301] ================================================================== [ 86.548554][ T5301] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.552825][ T5301] CPU: 0 UID: 0 PID: 5301 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 86.557192][ T5301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.561551][ T5301] Call Trace: [ 86.562934][ T5301] [ 86.564386][ T5301] vpanic+0x56c/0xa60 [ 86.566232][ T5301] ? __pfx_vpanic+0x10/0x10 [ 86.568260][ T5301] panic+0xc5/0xd0 [ 86.570364][ T5301] ? __pfx_panic+0x10/0x10 [ 86.573355][ T5301] ? preempt_schedule_thunk+0x16/0x30 [ 86.576608][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.578998][ T5301] ? preempt_schedule_thunk+0x16/0x30 [ 86.581568][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.583628][ T5301] check_panic_on_warn+0x89/0xb0 [ 86.585795][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.588116][ T5301] end_report+0x73/0x180 [ 86.590545][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.593193][ T5301] kasan_report+0x128/0x150 [ 86.595913][ T5301] ? bpf_trace_run2+0xb1/0x840 [ 86.598854][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.601672][ T5301] bpf_trace_run2+0xb1/0x840 [ 86.603878][ T5301] ? bpf_trace_run2+0x1c9/0x840 [ 86.606205][ T5301] ? __pfx_bpf_trace_run2+0x10/0x10 [ 86.608672][ T5301] ? trace_kmalloc+0x2a/0x110 [ 86.610887][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.614139][ T5301] ? __kmalloc_noprof+0x37d/0x760 [ 86.616797][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.619363][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.621767][ T5301] __traceiter_kfree+0x2e/0x50 [ 86.624273][ T5301] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 86.627515][ T5301] kfree+0x5b2/0x630 [ 86.629683][ T5301] ? tomoyo_encode+0x511/0x550 [ 86.632188][ T5301] tomoyo_realpath_from_path+0x598/0x5d0 [ 86.634788][ T5301] tomoyo_path_perm+0x283/0x560 [ 86.637093][ T5301] ? tomoyo_path_perm+0x251/0x560 [ 86.639514][ T5301] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 86.641935][ T5301] ? __x64_sys_openat+0x138/0x170 [ 86.644215][ T5301] security_inode_getattr+0x12b/0x310 [ 86.646882][ T5301] __x64_sys_newfstat+0x13b/0x270 [ 86.649656][ T5301] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 86.653089][ T5301] ? kmem_cache_free+0x187/0x630 [ 86.655403][ T5301] ? __se_sys_rename+0x185/0x2c0 [ 86.657809][ T5301] do_syscall_64+0x14d/0xf80 [ 86.660015][ T5301] ? trace_irq_disable+0x3b/0x150 [ 86.662527][ T5301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.665653][ T5301] ? clear_bhb_loop+0x40/0x90 [ 86.668524][ T5301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.672012][ T5301] RIP: 0033:0x7f3301911ad7 [ 86.674430][ T5301] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 86.683436][ T5301] RSP: 002b:00007ffd733d6568 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 86.687996][ T5301] RAX: ffffffffffffffda RBX: 000055c2dc06af20 RCX: 00007f3301911ad7 [ 86.691842][ T5301] RDX: 00007f33019efea0 RSI: 00007ffd733d6570 RDI: 0000000000000008 [ 86.695110][ T5301] RBP: 00007f33019efff0 R08: 0000000000000001 R09: 0000000000000000 [ 86.698706][ T5301] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 86.703056][ T5301] R13: 0000000000003fff R14: 0000000000000000 R15: 000055c2dc06af20 [ 86.707650][ T5301] [ 86.709722][ T5301] Kernel Offset: disabled [ 86.711824][ T5301] Rebooting in 86400 seconds..