> 2. after it stops learning mode in this situation, which mode will be started?
It is a safeguard to avoid memory consumption.
Entries are no longer appended to that domain automatically.
That domain behaves as if a profile for permissive mode is assigned
although that domain is assigned a profile for learning mode.
Pathnames for file_pattern directive must contain patterns.
But some of automatically generated entries don't contain patterns, and the kernel complains that 'This is not a valid file_pattern entry'.
Run 'savepolicy e' to exclude these invalid entries from /etc/tomoyo/exception_policy.conf .