------------[ cut here ]------------
WARNING: ./include/linux/ns_common.h:255 at __ns_ref_put include/linux/ns_common.h:255 [inline], CPU#0: udevd/5874
WARNING: ./include/linux/ns_common.h:255 at put_user_ns include/linux/user_namespace.h:189 [inline], CPU#0: udevd/5874
WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150 kernel/pid_namespace.c:145, CPU#0: udevd/5874
Modules linked in:
CPU: 0 UID: 0 PID: 5874 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
RIP: 0010:__ns_ref_put include/linux/ns_common.h:255 [inline]
RIP: 0010:put_user_ns include/linux/user_namespace.h:189 [inline]
RIP: 0010:delayed_free_pidns+0x118/0x150 kernel/pid_namespace.c:145
Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2
RSP: 0018:ffffc90000007bb0 EFLAGS: 00010246
RAX: ffffffff81bde0b7 RBX: ffff888026fec868 RCX: ffff88802eecdb80
RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000
RBP: 0000000000000002 R08: ffff8880568dc193 R09: 1ffff1100ad1b832
R10: dffffc0000000000 R11: ffffed100ad1b833 R12: dffffc0000000000
R13: ffffffff81a903d7 R14: ffff8880568dc000 R15: ffff8880568dc190
FS:  00007f0316b8b880(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00005555937e4808 CR3: 0000000060b02000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 rcu_do_batch kernel/rcu/tree.c:2605 [inline]
 rcu_core+0xcab/0x1770 kernel/rcu/tree.c:2861
 handle_softirqs+0x286/0x870 kernel/softirq.c:626
 __do_softirq kernel/softirq.c:660 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:727
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:743
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:697
RIP: 0010:__kasan_check_read+0xa/0x20 mm/kasan/shadow.c:31
Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
RSP: 0018:ffffc90003fbfa20 EFLAGS: 00000203
RAX: 0000000000000002 RBX: dffffc0000000000 RCX: ffffffff8445cf7f
RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888026f30340
RBP: ffff888026f30310 R08: ffff888026f30347 R09: 1ffff11004de6068
R10: dffffc0000000000 R11: ffffed1004de6069 R12: ffff888026f30330
R13: 00000000000000a7 R14: 00000000000000a6 R15: 0000000000000001
 instrument_atomic_read include/linux/instrumented.h:68 [inline]
 _test_bit include/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]
 tomoyo_check_acl+0x2df/0x400 security/tomoyo/domain.c:184
 tomoyo_path_permission+0x1b4/0x380 security/tomoyo/file.c:586
 tomoyo_path_perm+0x392/0x4b0 security/tomoyo/file.c:838
 security_inode_getattr+0x12f/0x330 security/security.c:1869
 vfs_getattr fs/stat.c:259 [inline]
 vfs_fstat fs/stat.c:281 [inline]
 __do_sys_newfstat fs/stat.c:555 [inline]
 __se_sys_newfstat fs/stat.c:550 [inline]
 __x64_sys_newfstat+0xfc/0x200 fs/stat.c:550
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f0316511ad7
Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8
RSP: 002b:00007ffed7e54498 EFLAGS: 00000297 ORIG_RAX: 0000000000000005
RAX: ffffffffffffffda RBX: 000055ccc7729280 RCX: 00007f0316511ad7
RDX: 00007f03165efea0 RSI: 00007ffed7e544a0 RDI: 0000000000000009
RBP: 00007f03165efff0 R08: 0000000000000073 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000297 R12: 00007ffed7e54670
R13: 00007f03165efff0 R14: 0000000000000015 R15: 000055cc8c9ca9dd
 </TASK>
----------------
Code disassembly (best guess):
   0:	31 ed                	xor    %ebp,%ebp
   2:	eb cf                	jmp    0xffffffd3
   4:	cc                   	int3
   5:	cc                   	int3
   6:	cc                   	int3
   7:	cc                   	int3
   8:	cc                   	int3
   9:	cc                   	int3
   a:	cc                   	int3
   b:	cc                   	int3
   c:	cc                   	int3
   d:	cc                   	int3
   e:	cc                   	int3
   f:	cc                   	int3
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	90                   	nop
  1c:	90                   	nop
  1d:	90                   	nop
  1e:	90                   	nop
  1f:	90                   	nop
  20:	f3 0f 1e fa          	endbr64
  24:	89 f6                	mov    %esi,%esi
  26:	48 8b 0c 24          	mov    (%rsp),%rcx
* 2a:	31 d2                	xor    %edx,%edx <-- trapping instruction
  2c:	e9 ef e4 ff ff       	jmp    0xffffe520
  31:	66 66 66 66 66 66 2e 	data16 data16 data16 data16 data16 cs nopw 0x0(%rax,%rax,1)
  38:	0f 1f 84 00 00 00 00
  3f:	00