------------[ cut here ]------------
======================================================
WARNING: possible circular locking dependency detected
5.15.185-syzkaller #0 Not tainted
------------------------------------------------------
udevd/4163 is trying to acquire lock:
ffffffff8c1109e0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x150/0x350 kernel/printk/printk.c:1879
but task is already holding lock:
ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __run_hrtimer kernel/time/hrtimer.c:1694 [inline]
ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 kernel/time/hrtimer.c:1754
which lock already depends on the new lock.
the existing dependency chain (in reverse order) is:
-> #6 (hrtimer_bases.lock){-.-.}-{2:2}:
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
lock_hrtimer_base kernel/time/hrtimer.c:168 [inline]
hrtimer_start_range_ns+0xff/0xc20 kernel/time/hrtimer.c:1289
hrtimer_start_expires include/linux/hrtimer.h:434 [inline]
do_start_rt_bandwidth kernel/sched/rt.c:69 [inline]
start_rt_bandwidth kernel/sched/rt.c:80 [inline]
inc_rt_group kernel/sched/rt.c:1207 [inline]
inc_rt_tasks kernel/sched/rt.c:1251 [inline]
__enqueue_rt_entity kernel/sched/rt.c:1321 [inline]
enqueue_rt_entity kernel/sched/rt.c:1368 [inline]
enqueue_task_rt+0x60c/0xc00 kernel/sched/rt.c:1398
enqueue_task+0x182/0x2b0 kernel/sched/core.c:1977
activate_task kernel/sched/core.c:2005 [inline]
ttwu_do_activate+0x1b5/0x380 kernel/sched/core.c:3614
sched_ttwu_pending+0x272/0x5d0 kernel/sched/core.c:3689
__sysvec_call_function_single+0x98/0x240 arch/x86/kernel/smp.c:248
instr_sysvec_call_function_single arch/x86/kernel/smp.c:243 [inline]
sysvec_call_function_single+0x98/0xc0 arch/x86/kernel/smp.c:243
asm_sysvec_call_function_single+0x16/0x20 arch/x86/include/asm/idtentry.h:684
native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
default_idle+0xb/0x10 arch/x86/kernel/process.c:722
default_idle_call+0x81/0xc0 kernel/sched/idle.c:112
cpuidle_idle_call kernel/sched/idle.c:194 [inline]
do_idle+0x21b/0x5b0 kernel/sched/idle.c:306
cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
start_kernel+0x486/0x530 init/main.c:1140
secondary_startup_64_no_verify+0xb1/0xbb
-> #5 (&rt_b->rt_runtime_lock){-...}-{2:2}:
__raw_spin_lock include/linux/spinlock_api_smp.h:142 [inline]
_raw_spin_lock+0x2a/0x40 kernel/locking/spinlock.c:154
__enable_runtime kernel/sched/rt.c:840 [inline]
rq_online_rt+0x125/0x310 kernel/sched/rt.c:2331
set_rq_online kernel/sched/core.c:9037 [inline]
sched_cpu_activate+0x4ae/0x650 kernel/sched/core.c:9157
cpuhp_invoke_callback+0x431/0x830 kernel/cpu.c:191
cpuhp_thread_fun+0x39a/0x7d0 kernel/cpu.c:822
smpboot_thread_fn+0x4f6/0x970 kernel/smpboot.c:164
kthread+0x436/0x520 kernel/kthread.c:334
ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:287
-> #4 (&rq->__lock){-.-.}-{2:2}:
_raw_spin_lock_nested+0x2e/0x40 kernel/locking/spinlock.c:368
raw_spin_rq_lock_nested+0x26/0x140 kernel/sched/core.c:475
raw_spin_rq_lock kernel/sched/sched.h:1326 [inline]
rq_lock kernel/sched/sched.h:1621 [inline]
task_fork_fair+0x5c/0x350 kernel/sched/fair.c:11499
sched_cgroup_fork+0x2c6/0x320 kernel/sched/core.c:4466
copy_process+0x22d1/0x3e00 kernel/fork.c:2395
kernel_clone+0x219/0x930 kernel/fork.c:2679
kernel_thread+0xc8/0x120 kernel/fork.c:2731
rest_init+0x21/0x330 init/main.c:706
start_kernel+0x486/0x530 init/main.c:1140
secondary_startup_64_no_verify+0xb1/0xbb
-> #3 (&p->pi_lock){-.-.}-{2:2}:
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
try_to_wake_up+0x5c/0x1050 kernel/sched/core.c:4030
__wake_up_common+0x2a4/0x4e0 kernel/sched/wait.c:108
__wake_up_common_lock kernel/sched/wait.c:138 [inline]
__wake_up+0x108/0x180 kernel/sched/wait.c:157
tty_port_default_wakeup+0xa5/0xf0 drivers/tty/tty_port.c:51
serial8250_tx_chars+0x629/0x830 drivers/tty/serial/8250/8250_port.c:1828
serial8250_handle_irq+0x519/0x610 drivers/tty/serial/8250/8250_port.c:1924
serial8250_default_handle_irq+0xb4/0x1a0 drivers/tty/serial/8250/8250_port.c:1941
serial8250_interrupt+0x9b/0x1c0 drivers/tty/serial/8250/8250_core.c:127
__handle_irq_event_percpu+0x291/0x9b0 kernel/irq/handle.c:156
handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
handle_irq_event+0xa5/0x220 kernel/irq/handle.c:213
handle_edge_irq+0x243/0xb20 kernel/irq/chip.c:819
generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
handle_irq arch/x86/kernel/irq.c:233 [inline]
__common_interrupt+0xd7/0x1e0 arch/x86/kernel/irq.c:252
common_interrupt+0xb0/0xd0 arch/x86/kernel/irq.c:242
asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:667
lock_page_memcg+0x20c/0x410 mm/memcontrol.c:2062
page_remove_rmap+0x2a/0x10f0 mm/rmap.c:1351
zap_pte_range mm/memory.c:1384 [inline]
zap_pmd_range mm/memory.c:1505 [inline]
zap_pud_range mm/memory.c:1534 [inline]
zap_p4d_range mm/memory.c:1555 [inline]
unmap_page_range+0xfbc/0x2520 mm/memory.c:1576
unmap_vmas+0x11b/0x230 mm/memory.c:1653
exit_mmap+0x38f/0x5f0 mm/mmap.c:3204
__mmput+0x115/0x3b0 kernel/fork.c:1127
exec_mmap+0x4d1/0x5c0 fs/exec.c:1035
begin_new_exec+0x7e8/0x1160 fs/exec.c:1293
load_elf_binary+0x98e/0x2890 fs/binfmt_elf.c:1001
search_binary_handler fs/exec.c:1742 [inline]
exec_binprm fs/exec.c:1783 [inline]
bprm_execve+0xa92/0x17d0 fs/exec.c:1852
do_execveat_common+0x51e/0x6d0 fs/exec.c:1957
do_execve fs/exec.c:2027 [inline]
__do_sys_execve fs/exec.c:2103 [inline]
__se_sys_execve fs/exec.c:2098 [inline]
__x64_sys_execve+0x8e/0xa0 fs/exec.c:2098
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
-> #2 (&tty->write_wait){-.-.}-{2:2}:
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
__wake_up_common_lock kernel/sched/wait.c:137 [inline]
__wake_up+0xed/0x180 kernel/sched/wait.c:157
tty_port_default_wakeup+0xa5/0xf0 drivers/tty/tty_port.c:51
serial8250_tx_chars+0x629/0x830 drivers/tty/serial/8250/8250_port.c:1828
serial8250_handle_irq+0x519/0x610 drivers/tty/serial/8250/8250_port.c:1924
serial8250_default_handle_irq+0xb4/0x1a0 drivers/tty/serial/8250/8250_port.c:1941
serial8250_interrupt+0x9b/0x1c0 drivers/tty/serial/8250/8250_core.c:127
__handle_irq_event_percpu+0x291/0x9b0 kernel/irq/handle.c:156
handle_irq_event_percpu kernel/irq/handle.c:196 [inline]
handle_irq_event+0xa5/0x220 kernel/irq/handle.c:213
handle_edge_irq+0x243/0xb20 kernel/irq/chip.c:819
generic_handle_irq_desc include/linux/irqdesc.h:158 [inline]
handle_irq arch/x86/kernel/irq.c:233 [inline]
__common_interrupt+0xd7/0x1e0 arch/x86/kernel/irq.c:252
common_interrupt+0xb0/0xd0 arch/x86/kernel/irq.c:242
asm_common_interrupt+0x22/0x40 arch/x86/include/asm/idtentry.h:667
native_safe_halt arch/x86/include/asm/irqflags.h:51 [inline]
arch_safe_halt arch/x86/include/asm/irqflags.h:89 [inline]
default_idle+0xb/0x10 arch/x86/kernel/process.c:722
default_idle_call+0x81/0xc0 kernel/sched/idle.c:112
cpuidle_idle_call kernel/sched/idle.c:194 [inline]
do_idle+0x21b/0x5b0 kernel/sched/idle.c:306
cpu_startup_entry+0x14/0x20 kernel/sched/idle.c:403
start_kernel+0x486/0x530 init/main.c:1140
secondary_startup_64_no_verify+0xb1/0xbb
-> #1 (&port_lock_key){-.-.}-{2:2}:
__raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]
_raw_spin_lock_irqsave+0xa4/0xf0 kernel/locking/spinlock.c:162
serial8250_console_write+0x170/0xf80 drivers/tty/serial/8250/8250_port.c:3363
call_console_drivers kernel/printk/printk.c:-1 [inline]
console_unlock+0xc86/0x1200 kernel/printk/printk.c:2744
vprintk_emit+0xc0/0x150 kernel/printk/printk.c:2274
_printk+0xcc/0x110 kernel/printk/printk.c:2299
register_console+0x682/0x960 kernel/printk/printk.c:3107
univ8250_console_init+0x41/0x50 drivers/tty/serial/8250/8250_core.c:690
console_init+0x177/0x5d0 kernel/printk/printk.c:3207
start_kernel+0x2f9/0x530 init/main.c:1076
secondary_startup_64_no_verify+0xb1/0xbb
-> #0 (console_owner){-...}-{0:0}:
check_prev_add kernel/locking/lockdep.c:3053 [inline]
check_prevs_add kernel/locking/lockdep.c:3172 [inline]
validate_chain kernel/locking/lockdep.c:3788 [inline]
__lock_acquire+0x2c33/0x7c60 kernel/locking/lockdep.c:5012
lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623
console_trylock_spinning+0x170/0x350 kernel/printk/printk.c:1896
vprintk_emit+0xa7/0x150 kernel/printk/printk.c:2273
_printk+0xcc/0x110 kernel/printk/printk.c:2299
report_bug+0x1e5/0x2e0 lib/bug.c:195
handle_bug+0x3a/0x70 arch/x86/kernel/traps.c:239
exc_invalid_op+0x16/0x40 arch/x86/kernel/traps.c:259
asm_exc_invalid_op+0x16/0x20 arch/x86/include/asm/idtentry.h:604
copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226
bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline]
____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline]
bpf_probe_read_compat+0xdd/0x170 kernel/trace/bpf_trace.c:277
bpf_prog_63d51858d7cca270+0x3d/0x140
bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:1878 [inline]
bpf_trace_run2+0x15b/0x2d0 kernel/trace/bpf_trace.c:1915
trace_hrtimer_start include/trace/events/timer.h:199 [inline]
debug_activate kernel/time/hrtimer.c:466 [inline]
enqueue_hrtimer+0x314/0x370 kernel/time/hrtimer.c:1074
__run_hrtimer kernel/time/hrtimer.c:1707 [inline]
__hrtimer_run_queues+0x65a/0xc40 kernel/time/hrtimer.c:1754
hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1816
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
__sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
variable_test_bit arch/x86/include/asm/bitops.h:214 [inline]
test_bit include/asm-generic/bitops/instrumented-non-atomic.h:135 [inline]
tomoyo_check_acl+0x2e6/0x3f0 security/tomoyo/domain.c:184
tomoyo_path_permission+0x1b4/0x380 security/tomoyo/file.c:586
tomoyo_check_open_permission+0x216/0x360 security/tomoyo/file.c:777
security_file_open+0x5e/0xa0 security/security.c:1668
do_dentry_open+0x322/0xf80 fs/open.c:813
do_open fs/namei.c:3608 [inline]
path_openat+0x2682/0x2f30 fs/namei.c:3742
do_filp_open+0x1b3/0x3e0 fs/namei.c:3769
do_sys_openat2+0x142/0x4a0 fs/open.c:1253
do_sys_open fs/open.c:1269 [inline]
__do_sys_openat fs/open.c:1285 [inline]
__se_sys_openat fs/open.c:1280 [inline]
__x64_sys_openat+0x135/0x160 fs/open.c:1280
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
other info that might help us debug this:
Chain exists of:
console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock
Possible unsafe locking scenario:
CPU0 CPU1
---- ----
lock(hrtimer_bases.lock);
lock(&rt_b->rt_runtime_lock);
lock(hrtimer_bases.lock);
lock(console_owner);
*** DEADLOCK ***
3 locks held by udevd/4163:
#0: ffffffff8c6ad6f8 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:311
#1: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __run_hrtimer kernel/time/hrtimer.c:1694 [inline]
#1: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 kernel/time/hrtimer.c:1754
#2: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 include/linux/rcupdate.h:311
stack backtrace:
CPU: 0 PID: 4163 Comm: udevd Not tainted 5.15.185-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
Call Trace:
dump_stack_lvl+0x168/0x230 lib/dump_stack.c:106
check_noncircular+0x274/0x310 kernel/locking/lockdep.c:2133
check_prev_add kernel/locking/lockdep.c:3053 [inline]
check_prevs_add kernel/locking/lockdep.c:3172 [inline]
validate_chain kernel/locking/lockdep.c:3788 [inline]
__lock_acquire+0x2c33/0x7c60 kernel/locking/lockdep.c:5012
lock_acquire+0x197/0x3f0 kernel/locking/lockdep.c:5623
console_trylock_spinning+0x170/0x350 kernel/printk/printk.c:1896
vprintk_emit+0xa7/0x150 kernel/printk/printk.c:2273
_printk+0xcc/0x110 kernel/printk/printk.c:2299
report_bug+0x1e5/0x2e0 lib/bug.c:195
handle_bug+0x3a/0x70 arch/x86/kernel/traps.c:239
exc_invalid_op+0x16/0x40 arch/x86/kernel/traps.c:259
asm_exc_invalid_op+0x16/0x20 arch/x86/include/asm/idtentry.h:604
RIP: 0010:copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226
Code: 24 45 31 f6 31 ff 89 de e8 ad e2 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 df d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
RSP: 0018:ffffc90000007b98 EFLAGS: 00010006
RAX: ffffffff819fe2f0 RBX: 0000000000000008 RCX: ffff88807a8bbb80
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f517771
R10: ffffed100f517771 R11: 1ffff1100f517770 R12: ffff88807a8bd308
R13: 00007ffffffff000 R14: ffffc90000007c08 R15: 0000000020000000
bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline]
____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline]
bpf_probe_read_compat+0xdd/0x170 kernel/trace/bpf_trace.c:277
bpf_prog_63d51858d7cca270+0x3d/0x140
bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:1878 [inline]
bpf_trace_run2+0x15b/0x2d0 kernel/trace/bpf_trace.c:1915
trace_hrtimer_start include/trace/events/timer.h:199 [inline]
debug_activate kernel/time/hrtimer.c:466 [inline]
enqueue_hrtimer+0x314/0x370 kernel/time/hrtimer.c:1074
__run_hrtimer kernel/time/hrtimer.c:1707 [inline]
__hrtimer_run_queues+0x65a/0xc40 kernel/time/hrtimer.c:1754
hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1816
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
__sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:214 [inline]
RIP: 0010:test_bit include/asm-generic/bitops/instrumented-non-atomic.h:135 [inline]
RIP: 0010:tomoyo_check_acl+0x2e6/0x3f0 security/tomoyo/domain.c:184
Code: 00 4d 8d 74 24 ff 44 89 f7 c1 ef 03 81 e7 f8 1f 00 00 4c 8b 7c 24 28 4c 01 ff be 08 00 00 00 e8 90 16 21 fe 31 f6 4d 0f a3 37 <40> 0f 93 c5 40 0f 92 c6 bf 02 00 00 00 e8 38 9f db fd 40 84 ed 74
RSP: 0018:ffffc900021a75f0 EFLAGS: 00000246
RAX: ffffffff839c2501 RBX: dffffc0000000000 RCX: ffffffff839c2530
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d81c3b0
RBP: ffff88807d81c301 R08: dffffc0000000000 R09: ffffed100fb03877
R10: ffffed100fb03877 R11: 1ffff1100fb03876 R12: 0000000000000027
R13: 0000000000000b40 R14: 0000000000000026 R15: ffff88807d81c3b0
tomoyo_path_permission+0x1b4/0x380 security/tomoyo/file.c:586
tomoyo_check_open_permission+0x216/0x360 security/tomoyo/file.c:777
security_file_open+0x5e/0xa0 security/security.c:1668
do_dentry_open+0x322/0xf80 fs/open.c:813
do_open fs/namei.c:3608 [inline]
path_openat+0x2682/0x2f30 fs/namei.c:3742
do_filp_open+0x1b3/0x3e0 fs/namei.c:3769
do_sys_openat2+0x142/0x4a0 fs/open.c:1253
do_sys_open fs/open.c:1269 [inline]
__do_sys_openat fs/open.c:1285 [inline]
__se_sys_openat fs/open.c:1280 [inline]
__x64_sys_openat+0x135/0x160 fs/open.c:1280
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fc7aa68ac3a
Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24
RSP: 002b:00007ffc0a2a31f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc0a2a3230 RCX: 00007fc7aa68ac3a
RDX: 0000000000090800 RSI: 00007ffc0a2a3630 RDI: 00000000ffffff9c
RBP: 0000000000000007 R08: 000055f237660dc0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 000055f23765f750
R13: 00007ffc0a2a3e30 R14: 00007ffc0a2a3a30 R15: 00007ffc0a2a3630
WARNING: CPU: 0 PID: 4163 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226
Modules linked in:
CPU: 0 PID: 4163 Comm: udevd Not tainted 5.15.185-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
RIP: 0010:copy_from_user_nofault+0x160/0x1c0 mm/maccess.c:226
Code: 24 45 31 f6 31 ff 89 de e8 ad e2 d7 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 30 df d7 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe
RSP: 0018:ffffc90000007b98 EFLAGS: 00010006
RAX: ffffffff819fe2f0 RBX: 0000000000000008 RCX: ffff88807a8bbb80
RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f517771
R10: ffffed100f517771 R11: 1ffff1100f517770 R12: ffff88807a8bd308
R13: 00007ffffffff000 R14: ffffc90000007c08 R15: 0000000020000000
FS: 00007fc7aa52e880(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ffc0a29dff8 CR3: 000000001e348000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
bpf_probe_read_user_common kernel/trace/bpf_trace.c:157 [inline]
____bpf_probe_read_compat kernel/trace/bpf_trace.c:281 [inline]
bpf_probe_read_compat+0xdd/0x170 kernel/trace/bpf_trace.c:277
bpf_prog_63d51858d7cca270+0x3d/0x140
bpf_dispatcher_nop_func include/linux/bpf.h:790 [inline]
__bpf_prog_run include/linux/filter.h:628 [inline]
bpf_prog_run include/linux/filter.h:635 [inline]
__bpf_trace_run kernel/trace/bpf_trace.c:1878 [inline]
bpf_trace_run2+0x15b/0x2d0 kernel/trace/bpf_trace.c:1915
trace_hrtimer_start include/trace/events/timer.h:199 [inline]
debug_activate kernel/time/hrtimer.c:466 [inline]
enqueue_hrtimer+0x314/0x370 kernel/time/hrtimer.c:1074
__run_hrtimer kernel/time/hrtimer.c:1707 [inline]
__hrtimer_run_queues+0x65a/0xc40 kernel/time/hrtimer.c:1754
hrtimer_interrupt+0x3bb/0x8d0 kernel/time/hrtimer.c:1816
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1097 [inline]
__sysvec_apic_timer_interrupt+0x137/0x4a0 arch/x86/kernel/apic/apic.c:1114
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1108 [inline]
sysvec_apic_timer_interrupt+0x9b/0xc0 arch/x86/kernel/apic/apic.c:1108
asm_sysvec_apic_timer_interrupt+0x16/0x20 arch/x86/include/asm/idtentry.h:676
RIP: 0010:variable_test_bit arch/x86/include/asm/bitops.h:214 [inline]
RIP: 0010:test_bit include/asm-generic/bitops/instrumented-non-atomic.h:135 [inline]
RIP: 0010:tomoyo_check_acl+0x2e6/0x3f0 security/tomoyo/domain.c:184
Code: 00 4d 8d 74 24 ff 44 89 f7 c1 ef 03 81 e7 f8 1f 00 00 4c 8b 7c 24 28 4c 01 ff be 08 00 00 00 e8 90 16 21 fe 31 f6 4d 0f a3 37 <40> 0f 93 c5 40 0f 92 c6 bf 02 00 00 00 e8 38 9f db fd 40 84 ed 74
RSP: 0018:ffffc900021a75f0 EFLAGS: 00000246
RAX: ffffffff839c2501 RBX: dffffc0000000000 RCX: ffffffff839c2530
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88807d81c3b0
RBP: ffff88807d81c301 R08: dffffc0000000000 R09: ffffed100fb03877
R10: ffffed100fb03877 R11: 1ffff1100fb03876 R12: 0000000000000027
R13: 0000000000000b40 R14: 0000000000000026 R15: ffff88807d81c3b0
tomoyo_path_permission+0x1b4/0x380 security/tomoyo/file.c:586
tomoyo_check_open_permission+0x216/0x360 security/tomoyo/file.c:777
security_file_open+0x5e/0xa0 security/security.c:1668
do_dentry_open+0x322/0xf80 fs/open.c:813
do_open fs/namei.c:3608 [inline]
path_openat+0x2682/0x2f30 fs/namei.c:3742
do_filp_open+0x1b3/0x3e0 fs/namei.c:3769
do_sys_openat2+0x142/0x4a0 fs/open.c:1253
do_sys_open fs/open.c:1269 [inline]
__do_sys_openat fs/open.c:1285 [inline]
__se_sys_openat fs/open.c:1280 [inline]
__x64_sys_openat+0x135/0x160 fs/open.c:1280
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x4c/0xa0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x66/0xd0
RIP: 0033:0x7fc7aa68ac3a
Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24
RSP: 002b:00007ffc0a2a31f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00007ffc0a2a3230 RCX: 00007fc7aa68ac3a
RDX: 0000000000090800 RSI: 00007ffc0a2a3630 RDI: 00000000ffffff9c
RBP: 0000000000000007 R08: 000055f237660dc0 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000206 R12: 000055f23765f750
R13: 00007ffc0a2a3e30 R14: 00007ffc0a2a3a30 R15: 00007ffc0a2a3630
----------------
Code disassembly (best guess):
0: 00 4d 8d add %cl,-0x73(%rbp)
3: 74 24 je 0x29
5: ff 44 89 f7 incl -0x9(%rcx,%rcx,4)
9: c1 ef 03 shr $0x3,%edi
c: 81 e7 f8 1f 00 00 and $0x1ff8,%edi
12: 4c 8b 7c 24 28 mov 0x28(%rsp),%r15
17: 4c 01 ff add %r15,%rdi
1a: be 08 00 00 00 mov $0x8,%esi
1f: e8 90 16 21 fe call 0xfe2116b4
24: 31 f6 xor %esi,%esi
26: 4d 0f a3 37 bt %r14,(%r15)
* 2a: 40 0f 93 c5 setae %bpl <-- trapping instruction
2e: 40 0f 92 c6 setb %sil
32: bf 02 00 00 00 mov $0x2,%edi
37: e8 38 9f db fd call 0xfddb9f74
3c: 40 84 ed test %bpl,%bpl
3f: 74 .byte 0x74