Kernel NULL Pointer Dereference while starting rootless container with podman + crun
While doing some tests with podman and user container (through toolbox), I encountered a kernel bug that seems related to apparmor.
For some context, the system is Archlinux with kernel 6.17.8-arch1-1, apparmor 5.0.0.alpha2.r17.g455d50e (i.e commit 455d50ec from master branch), and all profiles moved to abi 5.0. On one of the test VM used for apparmor.d
The bug happens when starting a rootless container using toolbox with podman and crun as runtime (it works fine with runc). After a toolbox create arch to create the container, toolbox enter arch will fail and fail any subsequent attempt to start a namespace on the system.
The general profiles (test) architecture is as-follow (but only the last part matters here):
toolbox -(px)-> podman -(px)-> conmon -(px)-> crun
The crun profile is literally profile crun flags=(attach_disconnected,mediate_deleted) { all, }. Similar tests but with transition to a namespace gave exactly the same result.
The full kernel logs (with also apparmor debug)
Nov 16 17:39:56 aa-archlinux-gnome kernel: conmon
Nov 16 17:39:56 aa-archlinux-gnome kernel: crun
Nov 16 17:39:56 aa-archlinux-gnome kernel: BUG: kernel NULL pointer dereference, address: 0000000000000018
Nov 16 17:39:56 aa-archlinux-gnome kernel: #PF: supervisor read access in kernel mode
Nov 16 17:39:56 aa-archlinux-gnome kernel: #PF: error_code(0x0000) - not-present page
Nov 16 17:39:56 aa-archlinux-gnome kernel: PGD 0 P4D 0
Nov 16 17:39:56 aa-archlinux-gnome kernel: Oops: Oops: 0000 [#1] SMP NOPTI
Nov 16 17:39:56 aa-archlinux-gnome kernel: CPU: 2 UID: 100000 PID: 6919 Comm: crun Not tainted 6.17.8-arch1-1 #1 PREEMPT(full) b229cb54977b6624cce826e2cbd0d8e703fe3921
Nov 16 17:39:56 aa-archlinux-gnome kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.17.0-2-2 04/01/2014
Nov 16 17:39:56 aa-archlinux-gnome kernel: RIP: 0010:aa_file_perm+0xad/0x570
Nov 16 17:39:56 aa-archlinux-gnome kernel: Code: 5e 41 5f c3 cc cc cc cc 49 8b 46 20 41 8b 54 24 10 0f b7 00 66 25 00 f0 66 3d 00 c0 75 1b f7 c5 46 00 10 00 75 13 49 8b 46 18 <48> 8b 40 18 66 83 78 10 01 0f 84 bb 02 00 00 89 d0 f7 d0 21 e8 89
Nov 16 17:39:56 aa-archlinux-gnome kernel: RSP: 0018:ffffce78c250b720 EFLAGS: 00010246
Nov 16 17:39:56 aa-archlinux-gnome kernel: RAX: 0000000000000000 RBX: ffff8c30ea1ef0f8 RCX: ffff8c31abb70a80
Nov 16 17:39:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: ffff8c31b1976c00 RDI: ffffffffb1a564bd
Nov 16 17:39:56 aa-archlinux-gnome kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: R10: ffff8c31db70e6c0 R11: ffffffffb1a564bd R12: ffff8c31aec7a6c8
Nov 16 17:39:56 aa-archlinux-gnome kernel: R13: ffffffffb1a564bd R14: ffff8c31abb70a80 R15: ffff8c30ea1ef0f8
Nov 16 17:39:56 aa-archlinux-gnome kernel: FS: 00007f6232f02200(0000) GS:ffff8c3284b89000(0000) knlGS:0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Nov 16 17:39:56 aa-archlinux-gnome kernel: CR2: 0000000000000018 CR3: 000000010870a000 CR4: 0000000000750ef0
Nov 16 17:39:56 aa-archlinux-gnome kernel: PKRU: 55555554
Nov 16 17:39:56 aa-archlinux-gnome kernel: Call Trace:
Nov 16 17:39:56 aa-archlinux-gnome kernel: <TASK>
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __slab_free+0xe4/0x310
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __slab_free+0xe4/0x310
Nov 16 17:39:56 aa-archlinux-gnome kernel: security_file_receive+0x41/0x110
Nov 16 17:39:56 aa-archlinux-gnome kernel: receive_fd+0x1e/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: scm_detach_fds+0xa8/0x180
Nov 16 17:39:56 aa-archlinux-gnome kernel: __scm_recv_common.isra.0+0x60/0x170
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __pfx_simple_copy_to_iter+0x10/0x10
Nov 16 17:39:56 aa-archlinux-gnome kernel: scm_recv_unix+0x30/0x130
Nov 16 17:39:56 aa-archlinux-gnome kernel: __unix_dgram_recvmsg+0x2d0/0x460
Nov 16 17:39:56 aa-archlinux-gnome kernel: sock_recvmsg+0xbd/0xd0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ____sys_recvmsg+0x95/0x210
Nov 16 17:39:56 aa-archlinux-gnome kernel: ___sys_recvmsg+0x90/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: __sys_recvmsg+0x87/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: do_syscall_64+0x81/0x970
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? ___sys_recvmsg+0x9e/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __sys_recvmsg+0x87/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? syscall_exit_work+0x143/0x1b0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? do_syscall_64+0x244/0x970
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? syscall_exit_work+0x143/0x1b0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? do_syscall_64+0x244/0x970
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __sys_recvmsg+0x87/0xe0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? syscall_exit_work+0x143/0x1b0
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? do_syscall_64+0x244/0x970
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? exc_page_fault+0x7e/0x1a0
Nov 16 17:39:56 aa-archlinux-gnome kernel: entry_SYSCALL_64_after_hwframe+0x76/0x7e
Nov 16 17:39:56 aa-archlinux-gnome kernel: RIP: 0033:0x7f6232c9318e
Nov 16 17:39:56 aa-archlinux-gnome kernel: Code: 4d 89 d8 e8 64 be 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa
Nov 16 17:39:56 aa-archlinux-gnome kernel: RSP: 002b:00007fff003e70b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
Nov 16 17:39:56 aa-archlinux-gnome kernel: RAX: ffffffffffffffda RBX: 00005594db98e350 RCX: 00007f6232c9318e
Nov 16 17:39:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: 00007fff003e7110 RDI: 0000000000000006
Nov 16 17:39:56 aa-archlinux-gnome kernel: RBP: 00007fff003e70c0 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
Nov 16 17:39:56 aa-archlinux-gnome kernel: R13: 0000000000000006 R14: 00007fff003e7950 R15: 0000000000000084
Nov 16 17:39:56 aa-archlinux-gnome kernel: </TASK>
Nov 16 17:39:56 aa-archlinux-gnome kernel: Modules linked in: overlay uinput snd_seq_dummy snd_hrtimer snd_seq snd_seq_device vfat fat intel_rapl_msr intel_rapl_common snd_hda_codec_generic kvm_amd snd_hda_intel iTCO_wdt ccp intel_pmc_bxt snd_hda_codec iTCO_vendor_support snd_hda_core kvm snd_intel_dspcfg joydev irqbypass polyval_clmulni ghash_clmulni_intel snd_intel_sdw_acpi mousedev snd_hwdep snd_pcm psmouse aesni_intel pcspkr snd_timer virtio_balloon virtio_gpu snd i2c_i801 soundcore i2c_smbus lpc_ich i2c_mux virtio_dma_buf mac_hid cfg80211 rfkill tun sg crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg virtio_rng ip_tables x_tables virtio_net net_failover intel_agp failover intel_gtt serio_raw
Nov 16 17:39:56 aa-archlinux-gnome kernel: CR2: 0000000000000018
Nov 16 17:39:56 aa-archlinux-gnome kernel: ---[ end trace 0000000000000000 ]---
Nov 16 17:39:56 aa-archlinux-gnome kernel: RIP: 0010:aa_file_perm+0xad/0x570
Nov 16 17:39:56 aa-archlinux-gnome kernel: Code: 5e 41 5f c3 cc cc cc cc 49 8b 46 20 41 8b 54 24 10 0f b7 00 66 25 00 f0 66 3d 00 c0 75 1b f7 c5 46 00 10 00 75 13 49 8b 46 18 <48> 8b 40 18 66 83 78 10 01 0f 84 bb 02 00 00 89 d0 f7 d0 21 e8 89
Nov 16 17:39:56 aa-archlinux-gnome kernel: RSP: 0018:ffffce78c250b720 EFLAGS: 00010246
Nov 16 17:39:56 aa-archlinux-gnome kernel: RAX: 0000000000000000 RBX: ffff8c30ea1ef0f8 RCX: ffff8c31abb70a80
Nov 16 17:39:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: ffff8c31b1976c00 RDI: ffffffffb1a564bd
Nov 16 17:39:56 aa-archlinux-gnome kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: R10: ffff8c31db70e6c0 R11: ffffffffb1a564bd R12: ffff8c31aec7a6c8
Nov 16 17:39:56 aa-archlinux-gnome kernel: R13: ffffffffb1a564bd R14: ffff8c31abb70a80 R15: ffff8c30ea1ef0f8
Nov 16 17:39:56 aa-archlinux-gnome kernel: FS: 00007f6232f02200(0000) GS:ffff8c3284b89000(0000) knlGS:0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Nov 16 17:39:56 aa-archlinux-gnome kernel: CR2: 0000000000000018 CR3: 000000010870a000 CR4: 0000000000750ef0
Nov 16 17:39:56 aa-archlinux-gnome kernel: PKRU: 55555554
Nov 16 17:39:56 aa-archlinux-gnome kernel: note: crun[6919] exited with irqs disabled
Nov 16 17:39:56 aa-archlinux-gnome kernel: ------------[ cut here ]------------
Nov 16 17:39:56 aa-archlinux-gnome kernel: Voluntary context switch within RCU read-side critical section!
Nov 16 17:39:56 aa-archlinux-gnome kernel: WARNING: CPU: 2 PID: 6919 at kernel/rcu/tree_plugin.h:332 rcu_note_context_switch+0x587/0x5f0
Nov 16 17:39:56 aa-archlinux-gnome kernel: Modules linked in: overlay uinput snd_seq_dummy snd_hrtimer snd_seq snd_seq_device vfat fat intel_rapl_msr intel_rapl_common snd_hda_codec_generic kvm_amd snd_hda_intel iTCO_wdt ccp intel_pmc_bxt snd_hda_codec iTCO_vendor_support snd_hda_core kvm snd_intel_dspcfg joydev irqbypass polyval_clmulni ghash_clmulni_intel snd_intel_sdw_acpi mousedev snd_hwdep snd_pcm psmouse aesni_intel pcspkr snd_timer virtio_balloon virtio_gpu snd i2c_i801 soundcore i2c_smbus lpc_ich i2c_mux virtio_dma_buf mac_hid cfg80211 rfkill tun sg crypto_user loop dm_mod nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vsock vmw_vmci qemu_fw_cfg virtio_rng ip_tables x_tables virtio_net net_failover intel_agp failover intel_gtt serio_raw
Nov 16 17:39:56 aa-archlinux-gnome kernel: CPU: 2 UID: 100000 PID: 6919 Comm: crun Tainted: G D 6.17.8-arch1-1 #1 PREEMPT(full) b229cb54977b6624cce826e2cbd0d8e703fe3921
Nov 16 17:39:56 aa-archlinux-gnome kernel: Tainted: [D]=DIE
Nov 16 17:39:56 aa-archlinux-gnome kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS Arch Linux 1.17.0-2-2 04/01/2014
Nov 16 17:39:56 aa-archlinux-gnome kernel: RIP: 0010:rcu_note_context_switch+0x587/0x5f0
Nov 16 17:39:56 aa-archlinux-gnome kernel: Code: ff 49 89 88 a8 00 00 00 e9 da fc ff ff 45 85 d2 75 ef e9 d0 fc ff ff 48 c7 c7 58 b4 96 b1 c6 05 da 95 26 02 01 e8 59 c6 f2 ff <0f> 0b e9 be fa ff ff 48 8b 7d 20 48 89 3c 24 e8 05 2e f7 00 c6 45
Nov 16 17:39:56 aa-archlinux-gnome kernel: RSP: 0018:ffffce78c250bce8 EFLAGS: 00010046
Nov 16 17:39:56 aa-archlinux-gnome kernel: RAX: 0000000000000000 RBX: ffff8c31b1914280 RCX: 0000000000000027
Nov 16 17:39:56 aa-archlinux-gnome kernel: RDX: ffff8c3237a9cfc8 RSI: 0000000000000001 RDI: ffff8c3237a9cfc0
Nov 16 17:39:56 aa-archlinux-gnome kernel: RBP: ffff8c3237ab3400 R08: 0000000000000000 R09: 00000001000000c4
Nov 16 17:39:56 aa-archlinux-gnome kernel: R10: ffffffffb2260c00 R11: ffffce78c250bb80 R12: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: R13: ffff8c31b1914280 R14: ffffffffb22d2fd0 R15: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: FS: 0000000000000000(0000) GS:ffff8c3284b89000(0000) knlGS:0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Nov 16 17:39:56 aa-archlinux-gnome kernel: CR2: 0000000000000018 CR3: 000000025c824000 CR4: 0000000000750ef0
Nov 16 17:39:56 aa-archlinux-gnome kernel: PKRU: 55555554
Nov 16 17:39:56 aa-archlinux-gnome kernel: Call Trace:
Nov 16 17:39:56 aa-archlinux-gnome kernel: <TASK>
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? kvm_sched_clock_read+0x11/0x20
Nov 16 17:39:56 aa-archlinux-gnome kernel: __schedule+0xc1/0x1330
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? x2apic_send_IPI+0x45/0x50
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? ttwu_queue_wakelist+0xfe/0x120
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? _raw_spin_unlock_irqrestore+0xe/0x40
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? try_to_wake_up+0x35b/0x840
Nov 16 17:39:56 aa-archlinux-gnome kernel: schedule+0x27/0xd0
Nov 16 17:39:56 aa-archlinux-gnome kernel: synchronize_rcu_expedited+0x1b6/0x220
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __pfx_autoremove_wake_function+0x10/0x10
Nov 16 17:39:56 aa-archlinux-gnome kernel: ? __pfx_wait_rcu_exp_gp+0x10/0x10
Nov 16 17:39:56 aa-archlinux-gnome kernel: namespace_unlock+0x247/0x310
Nov 16 17:39:56 aa-archlinux-gnome kernel: free_nsproxy+0x16/0x180
Nov 16 17:39:56 aa-archlinux-gnome kernel: do_exit+0x297/0xa90
Nov 16 17:39:56 aa-archlinux-gnome kernel: make_task_dead+0x8d/0x90
Nov 16 17:39:56 aa-archlinux-gnome kernel: rewind_stack_and_make_dead+0x16/0x20
Nov 16 17:39:56 aa-archlinux-gnome kernel: RIP: 0033:0x7f6232c9318e
Nov 16 17:39:56 aa-archlinux-gnome kernel: Code: Unable to access opcode bytes at 0x7f6232c93164.
Nov 16 17:39:56 aa-archlinux-gnome kernel: RSP: 002b:00007fff003e70b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
Nov 16 17:39:56 aa-archlinux-gnome kernel: RAX: ffffffffffffffda RBX: 00005594db98e350 RCX: 00007f6232c9318e
Nov 16 17:39:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: 00007fff003e7110 RDI: 0000000000000006
Nov 16 17:39:56 aa-archlinux-gnome kernel: RBP: 00007fff003e70c0 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:39:56 aa-archlinux-gnome kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
Nov 16 17:39:56 aa-archlinux-gnome kernel: R13: 0000000000000006 R14: 00007fff003e7950 R15: 0000000000000084
Nov 16 17:39:56 aa-archlinux-gnome kernel: </TASK>
Nov 16 17:39:56 aa-archlinux-gnome kernel: ---[ end trace 0000000000000000 ]---
Nov 16 17:39:59 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:39:59 aa-archlinux-gnome kernel: profile_transition: unconfined attached to new label
Nov 16 17:39:59 aa-archlinux-gnome kernel: sudo
Nov 16 17:39:59 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:39:59 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:39:59 aa-archlinux-gnome audit[6928]: AUDIT1101 pid=6928 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="user" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:39:59 aa-archlinux-gnome sudo[6928]: user : TTY=pts/1 ; PWD=/home/user ; USER=root ; COMMAND=/usr/bin/aa-log
Nov 16 17:39:59 aa-archlinux-gnome audit[6928]: AUDIT1110 pid=6928 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:39:59 aa-archlinux-gnome audit[6928]: AUDIT1105 pid=6928 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:session_open grantors=pam_systemd_home,pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:39:59 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:39:59 aa-archlinux-gnome sudo[6928]: pam_unix(sudo:session): session opened for user root(uid=0) by user(uid=1000)
Nov 16 17:39:59 aa-archlinux-gnome sudo[6928]: pam_unix(sudo:session): session closed for user root
Nov 16 17:39:59 aa-archlinux-gnome audit[6928]: AUDIT1106 pid=6928 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:session_close grantors=pam_systemd_home,pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:39:59 aa-archlinux-gnome audit[6928]: AUDIT1104 pid=6928 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:39:59 aa-archlinux-gnome kernel: aa-log
Nov 16 17:40:02 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:02 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:02 aa-archlinux-gnome kernel: profile_transition: unconfined attached to new label
Nov 16 17:40:22 aa-archlinux-gnome kernel: htop
Nov 16 17:40:24 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:24 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:24 aa-archlinux-gnome kernel: profile_transition: unconfined attached to new label
Nov 16 17:40:27 aa-archlinux-gnome kernel: htop
Nov 16 17:40:29 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:29 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:29 aa-archlinux-gnome kernel: profile_transition: unconfined attached to new label
Nov 16 17:40:29 aa-archlinux-gnome kernel: sudo
Nov 16 17:40:29 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:40:29 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:40:29 aa-archlinux-gnome kernel: unix-chkpwd
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: 32 callbacks suppressed
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: aa_label_alloc (00000000023b3da9)
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: aa_label_alloc (00000000023b3da9)
Nov 16 17:40:29 aa-archlinux-gnome audit[6965]: AUDIT1101 pid=6965 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:accounting grantors=pam_unix,pam_permit,pam_time acct="user" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:40:29 aa-archlinux-gnome sudo[6965]: user : TTY=pts/1 ; PWD=/home/user ; USER=root ; COMMAND=/usr/bin/aa-log
Nov 16 17:40:29 aa-archlinux-gnome audit[6965]: AUDIT1110 pid=6965 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:40:29 aa-archlinux-gnome sudo[6965]: pam_unix(sudo:session): session opened for user root(uid=0) by user(uid=1000)
Nov 16 17:40:29 aa-archlinux-gnome audit[6965]: AUDIT1105 pid=6965 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:session_open grantors=pam_systemd_home,pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa-log
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: aa_label_alloc (00000000be96d2cd)
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: aa_label_alloc (00000000be96d2cd)
Nov 16 17:40:29 aa-archlinux-gnome kernel: aa_label_alloc: aa_label_alloc (00000000be96d2cd)
Nov 16 17:40:29 aa-archlinux-gnome sudo[6965]: pam_unix(sudo:session): session closed for user root
Nov 16 17:40:29 aa-archlinux-gnome audit[6965]: AUDIT1106 pid=6965 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:session_close grantors=pam_systemd_home,pam_limits,pam_unix,pam_permit acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:40:29 aa-archlinux-gnome audit[6965]: AUDIT1104 pid=6965 uid=1000 auid=1000 ses=5 subj=_sudo msg='op=PAM:setcred grantors=pam_faillock,pam_permit,pam_env,pam_faillock acct="root" exe="/usr/bin/sudo" hostname=aa-archlinux-gnome addr=? terminal=/dev/pts/1 res=success'
Nov 16 17:40:56 aa-archlinux-gnome kernel: profile_transition: unconfined exec no attachment
Nov 16 17:40:56 aa-archlinux-gnome kernel: rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
Nov 16 17:40:56 aa-archlinux-gnome kernel: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-11): P6919/1:b..l
Nov 16 17:40:56 aa-archlinux-gnome kernel: rcu: (detected by 8, t=60002 jiffies, g=55045, q=14087 ncpus=12)
Nov 16 17:40:56 aa-archlinux-gnome kernel: task:crun state:D stack:0 pid:6919 tgid:6919 ppid:6918 task_flags:0x40014c flags:0x00004002
Nov 16 17:40:56 aa-archlinux-gnome kernel: Call Trace:
Nov 16 17:40:56 aa-archlinux-gnome kernel: <TASK>
Nov 16 17:40:56 aa-archlinux-gnome kernel: __schedule+0x418/0x1330
Nov 16 17:40:56 aa-archlinux-gnome kernel: ? x2apic_send_IPI+0x45/0x50
Nov 16 17:40:56 aa-archlinux-gnome kernel: ? _raw_spin_unlock_irqrestore+0xe/0x40
Nov 16 17:40:56 aa-archlinux-gnome kernel: ? try_to_wake_up+0x35b/0x840
Nov 16 17:40:56 aa-archlinux-gnome kernel: schedule+0x27/0xd0
Nov 16 17:40:56 aa-archlinux-gnome kernel: synchronize_rcu_expedited+0x1b6/0x220
Nov 16 17:40:56 aa-archlinux-gnome kernel: ? __pfx_autoremove_wake_function+0x10/0x10
Nov 16 17:40:56 aa-archlinux-gnome kernel: ? __pfx_wait_rcu_exp_gp+0x10/0x10
Nov 16 17:40:56 aa-archlinux-gnome kernel: namespace_unlock+0x247/0x310
Nov 16 17:40:56 aa-archlinux-gnome kernel: free_nsproxy+0x16/0x180
Nov 16 17:40:56 aa-archlinux-gnome kernel: do_exit+0x297/0xa90
Nov 16 17:40:56 aa-archlinux-gnome kernel: make_task_dead+0x8d/0x90
Nov 16 17:40:56 aa-archlinux-gnome kernel: rewind_stack_and_make_dead+0x16/0x20
Nov 16 17:40:56 aa-archlinux-gnome kernel: RIP: 0033:0x7f6232c9318e
Nov 16 17:40:56 aa-archlinux-gnome kernel: RSP: 002b:00007fff003e70b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
Nov 16 17:40:56 aa-archlinux-gnome kernel: RAX: ffffffffffffffda RBX: 00005594db98e350 RCX: 00007f6232c9318e
Nov 16 17:40:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: 00007fff003e7110 RDI: 0000000000000006
Nov 16 17:40:56 aa-archlinux-gnome kernel: RBP: 00007fff003e70c0 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:40:56 aa-archlinux-gnome kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
Nov 16 17:40:56 aa-archlinux-gnome kernel: R13: 0000000000000006 R14: 00007fff003e7950 R15: 0000000000000084
Nov 16 17:40:56 aa-archlinux-gnome kernel: </TASK>
Nov 16 17:40:57 aa-archlinux-gnome kernel: rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P6919 } 61173 jiffies s: 1565 root: 0x0/T
Nov 16 17:40:57 aa-archlinux-gnome kernel: rcu: blocking rcu_node structures (internal RCU debug):
Nov 16 17:43:56 aa-archlinux-gnome kernel: unconfined
Nov 16 17:43:56 aa-archlinux-gnome kernel: profile_transition: name lookup ix on error
Nov 16 17:43:56 aa-archlinux-gnome kernel: rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
Nov 16 17:43:56 aa-archlinux-gnome kernel: rcu: Tasks blocked on level-0 rcu_node (CPUs 0-11): P6919/1:b..l
Nov 16 17:43:56 aa-archlinux-gnome kernel: rcu: (detected by 9, t=240018 jiffies, g=55045, q=18681 ncpus=12)
Nov 16 17:43:56 aa-archlinux-gnome kernel: task:crun state:D stack:0 pid:6919 tgid:6919 ppid:6918 task_flags:0x40014c flags:0x00004002
Nov 16 17:43:56 aa-archlinux-gnome kernel: Call Trace:
Nov 16 17:43:56 aa-archlinux-gnome kernel: <TASK>
Nov 16 17:43:56 aa-archlinux-gnome kernel: __schedule+0x418/0x1330
Nov 16 17:43:56 aa-archlinux-gnome kernel: ? x2apic_send_IPI+0x45/0x50
Nov 16 17:43:56 aa-archlinux-gnome kernel: ? _raw_spin_unlock_irqrestore+0xe/0x40
Nov 16 17:43:56 aa-archlinux-gnome kernel: ? try_to_wake_up+0x35b/0x840
Nov 16 17:43:56 aa-archlinux-gnome kernel: schedule+0x27/0xd0
Nov 16 17:43:56 aa-archlinux-gnome kernel: synchronize_rcu_expedited+0x1b6/0x220
Nov 16 17:43:56 aa-archlinux-gnome kernel: ? __pfx_autoremove_wake_function+0x10/0x10
Nov 16 17:43:56 aa-archlinux-gnome kernel: ? __pfx_wait_rcu_exp_gp+0x10/0x10
Nov 16 17:43:56 aa-archlinux-gnome kernel: namespace_unlock+0x247/0x310
Nov 16 17:43:56 aa-archlinux-gnome kernel: free_nsproxy+0x16/0x180
Nov 16 17:43:56 aa-archlinux-gnome kernel: do_exit+0x297/0xa90
Nov 16 17:43:56 aa-archlinux-gnome kernel: make_task_dead+0x8d/0x90
Nov 16 17:43:56 aa-archlinux-gnome kernel: rewind_stack_and_make_dead+0x16/0x20
Nov 16 17:43:56 aa-archlinux-gnome kernel: RIP: 0033:0x7f6232c9318e
Nov 16 17:43:56 aa-archlinux-gnome kernel: RSP: 002b:00007fff003e70b0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f
Nov 16 17:43:56 aa-archlinux-gnome kernel: RAX: ffffffffffffffda RBX: 00005594db98e350 RCX: 00007f6232c9318e
Nov 16 17:43:56 aa-archlinux-gnome kernel: RDX: 0000000000000000 RSI: 00007fff003e7110 RDI: 0000000000000006
Nov 16 17:43:56 aa-archlinux-gnome kernel: RBP: 00007fff003e70c0 R08: 0000000000000000 R09: 0000000000000000
Nov 16 17:43:56 aa-archlinux-gnome kernel: R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
Nov 16 17:43:56 aa-archlinux-gnome kernel: R13: 0000000000000006 R14: 00007fff003e7950 R15: 0000000000000084
Nov 16 17:43:56 aa-archlinux-gnome kernel: </TASK>
Nov 16 17:43:57 aa-archlinux-gnome kernel: rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P6919 } 241398 jiffies s: 1565 root: 0x0/T
Nov 16 17:43:57 aa-archlinux-gnome kernel: rcu: blocking rcu_node structures (internal RCU debug):